This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft File: 94521D5EA7B7900080F6E66836D4DEDA347054FD.mft (raw, json) Hash identifier: TslujIQjbAyBNmauTjTLlMF8gqd6rFfdKXx/BoZUfMM= Subject key identifier: F4:99:84:CF:A9:97:A0:16:B2:44:36:76:FB:E5:DE:D2:3D:07:00:F5 Authority key identifier: 94:52:1D:5E:A7:B7:90:00:80:F6:E6:68:36:D4:DE:DA:34:70:54:FD Certificate issuer: /CN=94521d5ea7b7900080f6e66836d4deda347054fd Certificate serial: 7084DEC99289FF45A5B8F10FEA329085BD972D0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft Manifest number: 020E Signing time: Wed 24 Dec 2025 19:49:05 +0000 Manifest this update: Wed 24 Dec 2025 19:44:05 +0000 Manifest next update: Fri 26 Dec 2025 08:59:05 +0000 Files and hashes: 1: 94521D5EA7B7900080F6E66836D4DEDA347054FD.crl (hash: WCb+kCWKOBQSKzS/fNPBinEMC28npxBvuyq1kxp8tEY=) 2: AS214701.asa (hash: EwiuTDTlJzzW3BaZbT2OcjZ0BGKln2twmg9+cBCEmTw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.crl rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:84:de:c9:92:89:ff:45:a5:b8:f1:0f:ea:32:90:85:bd:97:2d:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94521d5ea7b7900080f6e66836d4deda347054fd Validity Not Before: Dec 24 19:44:05 2025 GMT Not After : Dec 26 08:59:05 2025 GMT Subject: CN=F49984CFA997A016B2443676FBE5DED23D0700F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:17:82:88:8e:b7:3f:64:74:b3:c3:f8:ba:af: b8:0a:29:bf:59:a3:f9:85:09:e5:4b:05:de:98:8e: fe:a4:b5:cf:5f:2d:46:02:1b:43:fa:5e:b6:3c:c8: fa:5b:db:bd:3c:b5:5e:55:c2:5a:e6:b5:6d:27:59: 51:92:62:4e:75:0d:88:93:bd:68:e8:67:42:df:f8: 73:ee:93:ef:84:9c:4f:1f:02:d0:5b:7e:96:09:74: ab:83:59:57:08:d8:75:52:9e:fc:26:6b:b1:72:25: f8:98:78:c0:d3:9d:a4:ae:80:0b:2d:8b:55:72:34: 6a:98:55:b3:0d:d4:62:d3:65:43:6f:d5:bf:bd:84: 29:bf:f1:2b:9a:c3:f0:7a:25:83:06:02:0b:e5:13: 28:83:a2:33:dd:97:99:63:96:6d:67:c8:91:dc:d2: ea:9b:e9:76:f0:04:7d:2f:ff:2e:b1:00:4e:f7:ef: 2b:61:4b:a6:57:d1:88:63:df:43:3b:71:8b:ab:c8: 01:55:b0:ed:e5:81:ed:69:48:98:7c:06:ca:79:de: 62:8b:e2:64:10:68:c9:e6:b3:78:df:2d:94:55:6a: 2e:b9:68:93:09:82:b7:8b:cd:43:e5:d9:96:b1:f4: 42:d5:c0:4c:28:6e:e1:af:e5:89:49:22:79:e1:a7: 01:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:99:84:CF:A9:97:A0:16:B2:44:36:76:FB:E5:DE:D2:3D:07:00:F5 X509v3 Authority Key Identifier: keyid:94:52:1D:5E:A7:B7:90:00:80:F6:E6:68:36:D4:DE:DA:34:70:54:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:ea:60:91:e6:fb:76:7f:0c:32:62:e6:b0:47:54:e2:ef:bf: 48:74:4e:98:92:f4:42:7f:0a:f5:aa:54:a4:27:cf:a0:66:ed: b3:28:29:30:18:82:96:02:da:dc:82:5e:3c:8b:4e:b3:9a:19: fd:5b:33:57:29:fc:f7:87:93:8c:31:43:c6:34:37:79:2d:50: 4f:14:43:5c:08:8f:72:45:58:0c:f4:a2:d5:fa:21:fe:c6:ef: 0b:c3:2e:9c:54:4f:7a:34:a5:a0:c9:2e:8a:c8:2d:1d:cf:0f: 50:e5:0e:7a:af:3e:63:e6:2b:07:28:a3:b0:db:e2:5a:e8:59: 53:6f:3c:19:d4:ee:6d:0f:9a:ae:f7:10:5f:b3:70:a1:07:52: 98:a2:e2:29:9b:84:b9:f5:59:4a:40:e2:d1:65:1a:27:08:4a: cd:38:0f:40:3b:d0:cf:99:3c:b3:57:a8:a8:c3:23:dd:e0:50: 38:67:51:aa:14:92:56:9c:92:52:fd:cc:56:93:c0:ba:98:c8: bc:e1:9a:b2:7f:69:47:c0:f2:9c:4d:5f:e2:46:a5:b3:f7:c6: cc:01:ec:06:88:8d:54:09:b1:1b:77:27:bf:b4:ec:a6:a4:1d: 39:c5:a4:54:6c:4b:5d:b9:dc:27:b9:52:8b:2d:26:35:24:08: 1a:1a:9d:61 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUcITeyZKJ/0WluPEP6jKQhb2XLQswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQ1MjFkNWVhN2I3OTAwMDgwZjZlNjY4MzZkNGRlZGEz NDcwNTRmZDAeFw0yNTEyMjQxOTQ0MDVaFw0yNTEyMjYwODU5MDVaMDMxMTAvBgNV BAMTKEY0OTk4NENGQTk5N0EwMTZCMjQ0MzY3NkZCRTVERUQyM0QwNzAwRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbF4KIjrc/ZHSzw/i6r7gKKb9Z o/mFCeVLBd6Yjv6ktc9fLUYCG0P6XrY8yPpb2708tV5VwlrmtW0nWVGSYk51DYiT vWjoZ0Lf+HPuk++EnE8fAtBbfpYJdKuDWVcI2HVSnvwma7FyJfiYeMDTnaSugAst i1VyNGqYVbMN1GLTZUNv1b+9hCm/8Suaw/B6JYMGAgvlEyiDojPdl5ljlm1nyJHc 0uqb6XbwBH0v/y6xAE737ythS6ZX0Yhj30M7cYuryAFVsO3lge1pSJh8Bsp53mKL 4mQQaMnms3jfLZRVai65aJMJgreLzUPl2Zax9ELVwEwobuGv5YlJInnhpwFTAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU9JmEz6mXoBayRDZ2++Xe0j0HAPUwHwYDVR0j BBgwFoAUlFIdXqe3kACA9uZoNtTe2jRwVP0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmVhZDJkY2YtZWFkNS00OTU0LWFkODQtNjU4MGNkMmE5 YzUwLzAvOTQ1MjFENUVBN0I3OTAwMDgwRjZFNjY4MzZENERFREEzNDcwNTRGRC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2xGSWRYcWUza0FDQTl1Wm9OdFRlMmpS d1ZQMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZWFkMmRjZi1l YWQ1LTQ5NTQtYWQ4NC02NTgwY2QyYTljNTAvMC85NDUyMUQ1RUE3Qjc5MDAwODBG NkU2NjgzNkQ0REVEQTM0NzA1NEZELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJepgkeb7dn8MMmLmsEdU 4u+/SHROmJL0Qn8K9apUpCfPoGbtsygpMBiClgLa3IJePItOs5oZ/VszVyn894eT jDFDxjQ3eS1QTxRDXAiPckVYDPSi1foh/sbvC8MunFRPejSloMkuisgtHc8PUOUO eq8+Y+YrByijsNviWuhZU288GdTubQ+arvcQX7NwoQdSmKLiKZuEufVZSkDi0WUa JwhKzTgPQDvQz5k8s1eoqMMj3eBQOGdRqhSSVpySUv3MVpPAupjIvOGasn9pR8Dy nE1f4kals/fGzAHsBoiNVAmxG3cnv7TspqQdOcWkVGxLXbncJ7lSiy0mNSQIGhqd YQ== -----END CERTIFICATE-----Generated at Wed Dec 24 23:27:18 2025 by rpki-client