This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft File: 7D7059638411E3231E759E74A813BF9376209E77.mft (raw, json) Hash identifier: DDrAlu9f4lbv6Fj0VMqY2rQO4qzOyDSHLGrhYlgd5E8= Subject key identifier: E3:B3:8F:FE:CC:E0:51:A6:BC:26:0B:8E:EA:D6:70:36:A7:11:5E:CC Authority key identifier: 7D:70:59:63:84:11:E3:23:1E:75:9E:74:A8:13:BF:93:76:20:9E:77 Certificate issuer: /CN=7d7059638411e3231e759e74a813bf9376209e77 Certificate serial: 10812ADE053FE975D4A6C12EE0A352563AF893AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft Manifest number: 0295 Signing time: Tue 23 Dec 2025 17:15:33 +0000 Manifest this update: Tue 23 Dec 2025 17:10:33 +0000 Manifest next update: Wed 24 Dec 2025 18:37:33 +0000 Files and hashes: 1: 7D7059638411E3231E759E74A813BF9376209E77.crl (hash: TMeNoZQmvmo9JczNJdwYw3ZzHvx1hjhkVaPXOpZfOx0=) 2: AS215849.asa (hash: zDqRf1CmpsA1KFLVwsUM6m+4OIs88BLCSJXXlOwSvmc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.crl rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 18:37:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:81:2a:de:05:3f:e9:75:d4:a6:c1:2e:e0:a3:52:56:3a:f8:93:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d7059638411e3231e759e74a813bf9376209e77 Validity Not Before: Dec 23 17:10:33 2025 GMT Not After : Dec 24 18:37:33 2025 GMT Subject: CN=E3B38FFECCE051A6BC260B8EEAD67036A7115ECC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0f:9c:4d:b5:7b:dd:e0:4e:85:af:32:d1:be: 2f:80:d2:44:9e:d8:52:a4:af:7a:67:89:e5:df:aa: 76:31:fd:5f:6e:e7:73:3b:94:f9:2d:d6:2d:36:cb: 04:50:db:7e:7e:a9:e7:fc:b8:8c:bb:c2:24:4a:b2: 93:e5:19:24:46:20:5a:0b:bf:60:f9:2c:2e:ee:c0: 52:14:d0:5a:96:76:59:e8:6e:2f:a6:ef:c7:81:da: b7:cd:51:0c:28:0e:70:3a:97:59:a4:da:34:5b:50: 55:f0:80:52:87:ed:94:6a:74:39:78:4c:a0:16:dd: 3d:d4:54:06:c2:cc:e8:13:69:ec:34:f8:37:f7:b8: 44:73:d2:64:15:1e:86:a8:5a:80:53:03:bf:60:f9: df:40:43:00:07:59:ac:ed:0f:4b:6c:84:b0:c8:08: 63:c2:82:20:df:2e:8e:17:8b:51:4d:19:9e:c7:8d: 0f:56:c7:a3:97:6a:89:ef:b7:e5:d8:cd:19:2f:72: 57:64:5e:c0:3f:52:39:65:3b:5c:55:15:de:b8:7b: ba:de:e8:a7:36:a8:fd:ae:95:6d:95:0e:fb:51:a7: 43:3d:a4:ca:a6:38:50:ba:73:c5:f7:f2:4d:6d:20: 51:7b:4d:78:d7:6a:21:47:18:50:a2:4e:f9:d6:aa: 71:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:B3:8F:FE:CC:E0:51:A6:BC:26:0B:8E:EA:D6:70:36:A7:11:5E:CC X509v3 Authority Key Identifier: keyid:7D:70:59:63:84:11:E3:23:1E:75:9E:74:A8:13:BF:93:76:20:9E:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:86:c3:64:2b:20:4a:d6:6e:ea:db:a6:2e:4b:4c:40:0e:19: b9:13:43:c0:e1:00:48:1e:d0:39:2d:32:81:db:b7:bb:bb:db: 15:13:64:ef:42:b6:0c:94:9e:c4:fe:4c:fa:4e:83:cb:48:15: ae:b9:f3:04:86:f7:b4:c8:8a:8f:b7:fa:73:50:b5:6c:99:75: 23:90:be:6b:1e:24:6d:66:f5:34:3b:f7:f6:d6:8e:b4:7c:cd: cf:ea:e2:99:8d:f3:e1:32:69:75:c2:ce:20:1f:f1:3d:ed:81: cd:55:99:ca:5c:3d:53:34:2f:e0:19:78:92:5d:dd:c9:b0:f2: 30:61:0f:3c:aa:0e:ba:8a:48:ff:78:8a:74:1b:9c:c0:a0:74: 34:04:40:44:55:ac:88:8c:7e:b9:d9:91:b9:16:90:08:ea:87: 44:6b:84:a7:43:39:1a:78:d6:67:76:b0:de:e2:bc:7e:fa:94: 36:12:c3:c0:6b:1f:6e:27:7f:d4:a5:b4:cb:8c:6a:d4:b5:fc: fd:8f:c1:f1:73:02:f8:29:dd:19:2f:d9:57:b0:1a:f1:0b:af: 4d:eb:44:21:99:1e:cf:82:67:b7:53:65:7a:12:fd:38:80:18: 99:51:8d:8f:71:73:e6:a7:24:50:37:be:14:4a:83:c3:f3:ff: d6:06:b8:ef -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUEIEq3gU/6XXUpsEu4KNSVjr4k68wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2Q3MDU5NjM4NDExZTMyMzFlNzU5ZTc0YTgxM2JmOTM3 NjIwOWU3NzAeFw0yNTEyMjMxNzEwMzNaFw0yNTEyMjQxODM3MzNaMDMxMTAvBgNV BAMTKEUzQjM4RkZFQ0NFMDUxQTZCQzI2MEI4RUVBRDY3MDM2QTcxMTVFQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuD5xNtXvd4E6FrzLRvi+A0kSe 2FKkr3pnieXfqnYx/V9u53M7lPkt1i02ywRQ235+qef8uIy7wiRKspPlGSRGIFoL v2D5LC7uwFIU0FqWdlnobi+m78eB2rfNUQwoDnA6l1mk2jRbUFXwgFKH7ZRqdDl4 TKAW3T3UVAbCzOgTaew0+Df3uERz0mQVHoaoWoBTA79g+d9AQwAHWaztD0tshLDI CGPCgiDfLo4Xi1FNGZ7HjQ9Wx6OXaonvt+XYzRkvcldkXsA/UjllO1xVFd64e7re 6Kc2qP2ulW2VDvtRp0M9pMqmOFC6c8X38k1tIFF7TXjXaiFHGFCiTvnWqnHPAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU47OP/szgUaa8JguO6tZwNqcRXswwHwYDVR0j BBgwFoAUfXBZY4QR4yMedZ50qBO/k3YgnncwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWMwZWQwNDYtZmE5NS00NWMzLTkxNDYtOTcxZGI4YTll OGJiLzYvN0Q3MDU5NjM4NDExRTMyMzFFNzU5RTc0QTgxM0JGOTM3NjIwOUU3Ny5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZYQlpZNFFSNHlNZWRaNTBxQk9fazNZ Z25uYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85YzBlZDA0Ni1m YTk1LTQ1YzMtOTE0Ni05NzFkYjhhOWU4YmIvNi83RDcwNTk2Mzg0MTFFMzIzMUU3 NTlFNzRBODEzQkY5Mzc2MjA5RTc3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsIbDZCsgStZu6tumLktM QA4ZuRNDwOEASB7QOS0ygdu3u7vbFRNk70K2DJSexP5M+k6Dy0gVrrnzBIb3tMiK j7f6c1C1bJl1I5C+ax4kbWb1NDv39taOtHzNz+rimY3z4TJpdcLOIB/xPe2BzVWZ ylw9UzQv4Bl4kl3dybDyMGEPPKoOuopI/3iKdBucwKB0NARARFWsiIx+udmRuRaQ COqHRGuEp0M5GnjWZ3aw3uK8fvqUNhLDwGsfbid/1KW0y4xq1LX8/Y/B8XMC+Cnd GS/ZV7Aa8QuvTetEIZkez4Jnt1NlehL9OIAYmVGNj3Fz5qckUDe+FEqDw/P/1ga4 7w== -----END CERTIFICATE-----Generated at Wed Dec 24 08:46:38 2025 by rpki-client