This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/2/90E57142D4347C73111C714D4AC1199136EFCEF2.mft File: 90E57142D4347C73111C714D4AC1199136EFCEF2.mft (raw, json) Hash identifier: ByrxCy1WIeqreFBR5PP5QXnnUV9XmXiOvKQr4ioVtbc= Subject key identifier: 5C:D6:12:BE:79:FE:1B:8D:DE:62:12:13:09:54:A3:08:2D:D8:36:02 Authority key identifier: 90:E5:71:42:D4:34:7C:73:11:1C:71:4D:4A:C1:19:91:36:EF:CE:F2 Certificate issuer: /CN=90E57142D4347C73111C714D4AC1199136EFCEF2 Certificate serial: 20870C60F3B846CAE39917740569A6C738575265 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/90E57142D4347C73111C714D4AC1199136EFCEF2.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/2/90E57142D4347C73111C714D4AC1199136EFCEF2.mft Manifest number: 1B Signing time: Thu 18 Dec 2025 15:55:32 +0000 Manifest this update: Thu 18 Dec 2025 15:50:32 +0000 Manifest next update: Fri 19 Dec 2025 16:56:32 +0000 Files and hashes: 1: 90E57142D4347C73111C714D4AC1199136EFCEF2.crl (hash: lKJqJOas1+Ua6lAWVehT+78flnoJ74aBSLGQIlmXD4M=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/2/90E57142D4347C73111C714D4AC1199136EFCEF2.crl rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/2/90E57142D4347C73111C714D4AC1199136EFCEF2.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/90E57142D4347C73111C714D4AC1199136EFCEF2.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:87:0c:60:f3:b8:46:ca:e3:99:17:74:05:69:a6:c7:38:57:52:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90E57142D4347C73111C714D4AC1199136EFCEF2 Validity Not Before: Dec 18 15:50:32 2025 GMT Not After : Dec 19 16:56:32 2025 GMT Subject: CN=5CD612BE79FE1B8DDE6212130954A3082DD83602 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3d:1f:2e:b0:db:fc:7f:3f:ab:34:7b:58:fc: ad:83:51:48:45:7e:ea:f6:6f:ce:71:9d:ef:a0:4a: 28:8c:34:88:44:fb:c0:7b:45:fc:17:52:4d:42:29: 5b:22:82:72:2e:9d:dc:70:57:0e:a1:ac:82:a3:41: 04:fe:56:2e:17:69:e5:b1:f6:e3:0e:16:01:49:cb: 95:eb:13:81:ae:32:9f:ca:ac:84:3a:6c:41:32:90: 16:4a:58:c2:46:0e:78:21:f5:a0:06:86:96:14:c8: e6:5d:84:dc:c4:6b:42:86:db:cb:34:50:92:08:5a: b1:af:88:92:5c:70:e5:9e:a3:3a:47:dd:4c:dd:bd: 37:9c:c7:96:c3:52:c9:47:a3:1f:3f:87:10:a1:1a: 76:d5:98:d2:5d:47:8d:59:e7:9c:83:11:93:e7:c0: c7:5c:13:c1:fd:15:47:c3:ee:e2:62:f7:57:4c:a0: 75:32:ac:83:25:be:5a:47:92:31:1b:a0:7c:99:f8: 52:51:64:99:67:3d:ba:46:56:af:3b:0b:03:e0:2d: f7:a5:7e:69:57:39:61:4a:45:fd:d6:f2:9a:5b:03: 24:20:c6:47:6e:e4:91:1f:0c:62:8c:ac:52:87:21: db:13:b3:83:05:13:f2:c7:16:17:28:25:e1:c3:38: c7:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:D6:12:BE:79:FE:1B:8D:DE:62:12:13:09:54:A3:08:2D:D8:36:02 X509v3 Authority Key Identifier: keyid:90:E5:71:42:D4:34:7C:73:11:1C:71:4D:4A:C1:19:91:36:EF:CE:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/2/90E57142D4347C73111C714D4AC1199136EFCEF2.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/90E57142D4347C73111C714D4AC1199136EFCEF2.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/2/90E57142D4347C73111C714D4AC1199136EFCEF2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:62:ae:58:9a:7a:d5:c5:7b:e9:6d:51:88:e9:3f:58:e2:37: 7c:4d:41:30:7e:88:55:29:7d:44:56:9d:40:3a:2f:9a:61:2d: 04:59:65:ad:05:f8:4c:6e:a4:ee:9a:e4:36:58:0e:a6:f2:38: e9:04:29:a1:33:1f:41:60:c8:b2:25:95:9a:9f:ae:28:81:fd: 9e:fa:0e:b5:ae:fb:41:87:67:9e:88:29:8e:45:7f:f9:d3:31: 2b:32:8b:92:35:1c:62:19:07:43:8e:54:b9:a5:f4:a4:e5:71: 53:35:af:9b:51:bd:4c:44:c1:8f:ce:6a:2b:25:ca:a0:78:f0: 9f:74:19:13:e1:09:b1:26:be:21:d1:7a:b3:18:02:26:64:45: f3:5f:c4:1e:76:c6:f5:e1:f7:28:3c:bb:4d:26:e3:3b:d8:21: 4d:91:2b:35:da:18:2c:0e:aa:21:a4:54:67:60:39:f8:f2:2b: 66:a8:2d:64:e3:80:b7:6b:1b:45:cc:9d:f0:10:46:59:f7:66: 98:c0:e3:29:f4:ac:35:30:eb:dd:3a:a3:f0:75:f6:d5:4f:7a: 28:27:51:17:04:a9:88:07:e1:a2:f8:62:d8:18:df:71:a3:d9: 5e:49:45:5c:7c:ce:fd:24:63:5f:70:c0:0e:11:b4:c7:9c:1c: 5c:ea:ed:b2 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUIIcMYPO4RsrjmRd0BWmmxzhXUmUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTBFNTcxNDJENDM0N0M3MzExMUM3MTRENEFDMTE5OTEz NkVGQ0VGMjAeFw0yNTEyMTgxNTUwMzJaFw0yNTEyMTkxNjU2MzJaMDMxMTAvBgNV BAMTKDVDRDYxMkJFNzlGRTFCOERERTYyMTIxMzA5NTRBMzA4MkREODM2MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcPR8usNv8fz+rNHtY/K2DUUhF fur2b85xne+gSiiMNIhE+8B7RfwXUk1CKVsignIundxwVw6hrIKjQQT+Vi4XaeWx 9uMOFgFJy5XrE4GuMp/KrIQ6bEEykBZKWMJGDngh9aAGhpYUyOZdhNzEa0KG28s0 UJIIWrGviJJccOWeozpH3UzdvTecx5bDUslHox8/hxChGnbVmNJdR41Z55yDEZPn wMdcE8H9FUfD7uJi91dMoHUyrIMlvlpHkjEboHyZ+FJRZJlnPbpGVq87CwPgLfel fmlXOWFKRf3W8ppbAyQgxkdu5JEfDGKMrFKHIdsTs4MFE/LHFhcoJeHDOMd5AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUXNYSvnn+G43eYhITCVSjCC3YNgIwHwYDVR0j BBgwFoAUkOVxQtQ0fHMRHHFNSsEZkTbvzvIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTVkNGMwMGItZDEwNS00OTA2LWI5ODEtMWQwMzQzZTMw MWRhLzIvOTBFNTcxNDJENDM0N0M3MzExMUM3MTRENEFDMTE5OTEzNkVGQ0VGMi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC85MEU1NzE0MkQ0MzQ3QzczMTExQzcxNEQ0 QUMxMTk5MTM2RUZDRUYyLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2E1ZDRjMDBiLWQxMDUtNDkwNi1iOTgxLTFkMDM0M2UzMDFkYS8yLzkwRTU3MTQy RDQzNDdDNzMxMTFDNzE0RDRBQzExOTkxMzZFRkNFRjIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBpYq5Y mnrVxXvpbVGI6T9Y4jd8TUEwfohVKX1EVp1AOi+aYS0EWWWtBfhMbqTumuQ2WA6m 8jjpBCmhMx9BYMiyJZWan64ogf2e+g61rvtBh2eeiCmORX/50zErMouSNRxiGQdD jlS5pfSk5XFTNa+bUb1MRMGPzmorJcqgePCfdBkT4QmxJr4h0XqzGAImZEXzX8Qe dsb14fcoPLtNJuM72CFNkSs12hgsDqohpFRnYDn48itmqC1k44C3axtFzJ3wEEZZ 92aYwOMp9Kw1MOvdOqPwdfbVT3ooJ1EXBKmIB+Gi+GLYGN9xo9leSUVcfM79JGNf cMAOEbTHnBxc6u2y -----END CERTIFICATE-----Generated at Thu Dec 18 21:03:19 2025 by rpki-client