This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/0/8C5B75AEE1ED7E37D44BFA69536FBDF20E6D3785.mft File: 8C5B75AEE1ED7E37D44BFA69536FBDF20E6D3785.mft (raw, json) Hash identifier: /6PcSPBgB/wC7FZKZJTvpwfNNisBDRvOf8NT9yyFGo0= Subject key identifier: A5:7A:81:1D:0B:3A:90:56:06:B3:E9:EC:2D:2A:C5:92:3D:02:83:EA Authority key identifier: 8C:5B:75:AE:E1:ED:7E:37:D4:4B:FA:69:53:6F:BD:F2:0E:6D:37:85 Certificate issuer: /CN=8c5b75aee1ed7e37d44bfa69536fbdf20e6d3785 Certificate serial: 418BC4B043950B1F6E2BDD73687909E5C9DD1762 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jFt1ruHtfjfUS_ppU2-98g5tN4U.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/0/8C5B75AEE1ED7E37D44BFA69536FBDF20E6D3785.mft Manifest number: 1A Signing time: Mon 15 Dec 2025 15:34:56 +0000 Manifest this update: Mon 15 Dec 2025 15:29:56 +0000 Manifest next update: Tue 16 Dec 2025 19:32:56 +0000 Files and hashes: 1: AS206604.asa (hash: zpxAtBgjiRFEGbUqrc4N3vetnbfhkNMO9p+EhtBGacA=) 2: 8C5B75AEE1ED7E37D44BFA69536FBDF20E6D3785.crl (hash: +hx2ATzJJp4r4sZn9Ie2FNFdddp7+KAb0gIyMOVyCiE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/0/8C5B75AEE1ED7E37D44BFA69536FBDF20E6D3785.crl rsync://rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/0/8C5B75AEE1ED7E37D44BFA69536FBDF20E6D3785.mft rsync://rpki.ripe.net/repository/DEFAULT/jFt1ruHtfjfUS_ppU2-98g5tN4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 19:32:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:8b:c4:b0:43:95:0b:1f:6e:2b:dd:73:68:79:09:e5:c9:dd:17:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c5b75aee1ed7e37d44bfa69536fbdf20e6d3785 Validity Not Before: Dec 15 15:29:56 2025 GMT Not After : Dec 16 19:32:56 2025 GMT Subject: CN=A57A811D0B3A905606B3E9EC2D2AC5923D0283EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:29:f7:12:7f:36:52:c6:bd:8a:07:91:63:9a: 1e:94:c3:a4:0e:6c:bb:76:18:69:7a:1d:7e:12:43: 49:8e:ce:f9:e3:93:ce:13:7c:8f:29:bf:2f:2a:16: 2e:54:3d:d6:60:bd:ce:e7:d9:7d:91:a9:e3:58:52: bb:82:84:78:d1:68:34:a7:a6:15:72:4e:3e:63:4a: 2a:48:fb:88:e4:26:20:21:22:36:4b:45:8b:72:22: f3:3a:d8:15:4f:65:2c:56:ad:f5:8b:2d:a3:b7:c6: 4e:7d:46:13:ed:1f:22:7a:7e:64:3e:0d:24:c6:d1: 1e:ce:69:88:3d:71:3f:67:be:c7:3a:48:10:e0:de: 55:31:0d:95:2a:ea:0d:7c:44:85:d1:8b:00:62:88: aa:c9:ad:0f:f9:18:a8:70:9f:68:1d:87:15:22:94: fe:83:e4:53:92:69:b2:89:b9:dc:44:56:e3:5f:2b: cc:90:03:4b:a8:54:d7:ea:b9:b2:a3:c4:eb:44:c5: 35:71:59:10:2a:a1:36:f3:1e:f0:b7:18:87:a5:0f: 39:c7:ab:05:56:83:33:d0:3e:eb:f3:2d:ce:97:cd: f9:0d:9a:7b:a4:8a:76:7b:75:24:e3:ba:ba:38:6f: 07:b5:3a:d3:1c:ad:f4:75:c4:3a:9b:17:42:8a:bd: a4:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:7A:81:1D:0B:3A:90:56:06:B3:E9:EC:2D:2A:C5:92:3D:02:83:EA X509v3 Authority Key Identifier: keyid:8C:5B:75:AE:E1:ED:7E:37:D4:4B:FA:69:53:6F:BD:F2:0E:6D:37:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/0/8C5B75AEE1ED7E37D44BFA69536FBDF20E6D3785.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jFt1ruHtfjfUS_ppU2-98g5tN4U.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/0/8C5B75AEE1ED7E37D44BFA69536FBDF20E6D3785.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:3a:cf:0e:86:b9:00:5a:19:9e:7f:15:dc:b8:10:44:ac:9e: ef:a3:9e:0b:2c:af:38:65:ce:35:39:e2:bd:c4:f4:0e:a4:bc: be:32:24:11:7c:26:69:cd:00:7c:db:2f:f6:bc:be:bd:72:f2: 77:4d:98:30:73:46:b6:19:bd:c7:b2:c1:1d:d9:81:a6:34:04: 84:d3:13:d1:31:0e:da:6e:aa:26:bf:b4:17:20:0d:2f:a9:50: d5:6f:6d:9e:1e:2f:71:61:e4:99:4a:59:14:c0:b9:e2:10:93: 2a:cc:34:72:87:0f:02:ba:02:65:a5:6d:08:fb:99:1c:c4:54: c6:94:e3:61:11:fb:3e:c2:ab:bc:9d:03:b1:2a:82:8d:1e:63: e7:0f:58:44:fc:39:5a:55:6c:59:28:f4:14:6d:48:62:1e:41: e8:32:5a:75:9d:29:3a:cc:14:96:a4:66:be:71:55:2e:90:06: f7:67:2f:29:fc:dc:42:dc:4e:b3:fd:1e:92:03:e9:74:5d:bf: 82:cd:5b:a2:df:ce:a9:ef:b6:f2:fe:58:92:29:7b:cc:ba:2b: a3:33:cf:64:8d:47:3a:b4:c0:35:d2:53:61:da:97:f2:17:a2: 9b:af:dd:03:25:b0:cf:22:cf:73:68:21:37:76:b5:43:8c:9c: 91:22:59:69 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUQYvEsEOVCx9uK91zaHkJ5cndF2IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGM1Yjc1YWVlMWVkN2UzN2Q0NGJmYTY5NTM2ZmJkZjIw ZTZkMzc4NTAeFw0yNTEyMTUxNTI5NTZaFw0yNTEyMTYxOTMyNTZaMDMxMTAvBgNV BAMTKEE1N0E4MTFEMEIzQTkwNTYwNkIzRTlFQzJEMkFDNTkyM0QwMjgzRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNKfcSfzZSxr2KB5Fjmh6Uw6QO bLt2GGl6HX4SQ0mOzvnjk84TfI8pvy8qFi5UPdZgvc7n2X2RqeNYUruChHjRaDSn phVyTj5jSipI+4jkJiAhIjZLRYtyIvM62BVPZSxWrfWLLaO3xk59RhPtHyJ6fmQ+ DSTG0R7OaYg9cT9nvsc6SBDg3lUxDZUq6g18RIXRiwBiiKrJrQ/5GKhwn2gdhxUi lP6D5FOSabKJudxEVuNfK8yQA0uoVNfqubKjxOtExTVxWRAqoTbzHvC3GIelDznH qwVWgzPQPuvzLc6XzfkNmnukinZ7dSTjuro4bwe1OtMcrfR1xDqbF0KKvaQjAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUpXqBHQs6kFYGs+nsLSrFkj0Cg+owHwYDVR0j BBgwFoAUjFt1ruHtfjfUS/ppU2+98g5tN4UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjkwZTY4NjAtMzcyMS00OGM0LWEzZmUtMTFiMWYyYzBk ZjVmLzAvOEM1Qjc1QUVFMUVEN0UzN0Q0NEJGQTY5NTM2RkJERjIwRTZEMzc4NS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2pGdDFydUh0ZmpmVVNfcHBVMi05OGc1 dE40VS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iOTBlNjg2MC0z NzIxLTQ4YzQtYTNmZS0xMWIxZjJjMGRmNWYvMC84QzVCNzVBRUUxRUQ3RTM3RDQ0 QkZBNjk1MzZGQkRGMjBFNkQzNzg1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvDrPDoa5AFoZnn8V3LgQ RKye76OeCyyvOGXONTnivcT0DqS8vjIkEXwmac0AfNsv9ry+vXLyd02YMHNGthm9 x7LBHdmBpjQEhNMT0TEO2m6qJr+0FyANL6lQ1W9tnh4vcWHkmUpZFMC54hCTKsw0 cocPAroCZaVtCPuZHMRUxpTjYRH7PsKrvJ0DsSqCjR5j5w9YRPw5WlVsWSj0FG1I Yh5B6DJadZ0pOswUlqRmvnFVLpAG92cvKfzcQtxOs/0ekgPpdF2/gs1bot/Oqe+2 8v5Ykil7zLorozPPZI1HOrTANdJTYdqX8heim6/dAyWwzyLPc2ghN3a1Q4yckSJZ aQ== -----END CERTIFICATE-----Generated at Tue Dec 16 12:37:21 2025 by rpki-client