This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft File: 94521D5EA7B7900080F6E66836D4DEDA347054FD.mft (raw, json) Hash identifier: X4s5EjGkGj8iJIJQbgeSgnYqJ5EoI4kQ8q6Fnr/jLcM= Subject key identifier: 0D:58:86:26:43:1E:84:BA:D5:7A:F2:90:BB:D9:D4:F0:D8:D2:0C:64 Authority key identifier: 94:52:1D:5E:A7:B7:90:00:80:F6:E6:68:36:D4:DE:DA:34:70:54:FD Certificate issuer: /CN=94521d5ea7b7900080f6e66836d4deda347054fd Certificate serial: 2A9165DEEA7E6FF7A6801BBE26A505244AE5D257 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft Manifest number: 0208 Signing time: Sun 21 Dec 2025 06:39:11 +0000 Manifest this update: Sun 21 Dec 2025 06:34:11 +0000 Manifest next update: Mon 22 Dec 2025 20:30:11 +0000 Files and hashes: 1: AS214701.asa (hash: EwiuTDTlJzzW3BaZbT2OcjZ0BGKln2twmg9+cBCEmTw=) 2: 94521D5EA7B7900080F6E66836D4DEDA347054FD.crl (hash: YtStQiAFUUzuFjxH0Z08J1vN67o+n5cAmXNGz654xL4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.crl rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:91:65:de:ea:7e:6f:f7:a6:80:1b:be:26:a5:05:24:4a:e5:d2:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94521d5ea7b7900080f6e66836d4deda347054fd Validity Not Before: Dec 21 06:34:11 2025 GMT Not After : Dec 22 20:30:11 2025 GMT Subject: CN=0D588626431E84BAD57AF290BBD9D4F0D8D20C64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:3c:6f:ec:a2:b0:a1:de:16:84:11:0d:7a:c7: 14:87:ca:5b:c7:94:3b:a9:b5:25:0d:db:9a:b0:dc: 75:db:ff:48:45:af:e3:99:c5:4a:03:12:38:91:6d: 03:dc:03:3a:3d:e4:a1:e2:6e:c2:bd:43:3b:2c:07: 4d:55:32:db:52:dc:3d:23:97:18:84:6c:5b:3e:02: 50:a5:f6:47:3e:a3:57:1a:1e:57:94:02:00:e3:01: 94:33:2d:9a:fb:ae:06:2d:f4:74:2f:58:93:03:44: 8c:fa:ef:4f:4c:f1:72:3d:aa:eb:1c:de:04:da:cf: 7b:17:5b:0d:b5:c2:96:52:4e:ce:2a:b9:0b:fa:2d: 4c:fb:3d:d5:bd:d6:e5:f0:63:d3:6e:37:4b:1d:56: 48:bc:cc:b5:2b:14:42:01:bb:6c:2a:dd:3a:0b:b2: 8b:bf:14:ca:67:3d:98:b4:7f:d7:8f:a8:bb:7c:89: 36:df:25:d9:60:7b:05:5f:7a:db:aa:c1:19:7a:42: e1:f8:2c:e7:3c:c9:ab:dd:f5:d7:97:53:df:26:9d: 90:ec:c1:a9:20:73:fe:fd:b0:09:77:38:0c:cf:27: f2:a8:7e:e5:42:21:9c:b1:0e:32:46:68:27:05:33: 1c:3b:21:5b:3e:9e:92:75:ad:cb:82:e1:a2:55:21: ed:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:58:86:26:43:1E:84:BA:D5:7A:F2:90:BB:D9:D4:F0:D8:D2:0C:64 X509v3 Authority Key Identifier: keyid:94:52:1D:5E:A7:B7:90:00:80:F6:E6:68:36:D4:DE:DA:34:70:54:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ee:91:f4:2b:48:f0:92:04:0f:89:bb:82:0e:07:e0:b3:40:a8: bf:49:ac:d5:61:78:e5:7d:6e:6a:0c:e7:cf:94:e4:8b:e6:04: b9:32:c4:38:b1:a2:07:2b:97:5a:0b:e7:da:1d:4a:2e:60:71: 2d:8f:dc:7c:f4:92:5d:1a:8f:b5:93:d1:13:f1:3a:2d:5b:fb: 18:8e:01:15:f5:15:cc:93:c7:48:92:bc:3b:53:01:d2:29:1e: 2d:7b:8b:10:9d:6d:45:ff:34:f1:f0:89:d1:f4:1a:f5:d4:4c: 94:cd:a5:a8:38:f9:d2:64:f4:d5:4c:9c:b5:85:a6:0c:b9:91: 10:a9:5d:bc:6d:86:b2:32:9b:c4:28:27:86:5b:06:24:ed:b8: e3:57:ca:7a:95:33:1d:d9:bb:bf:37:06:2e:13:bf:19:fd:d0: 75:e5:c3:9d:d7:a2:22:e0:e0:9f:f3:2b:5c:8c:c4:18:19:ec: 84:a1:c3:fa:b1:92:61:8e:b5:fa:25:8a:ee:54:c5:ae:2d:a1: 15:fa:8d:47:3c:0d:71:ed:d1:a7:a4:ad:0b:45:09:1d:f7:48: e0:3a:16:ba:44:19:30:7b:78:2a:86:74:45:5e:dc:eb:8d:38: a9:9f:c9:fd:6b:de:22:ce:d6:87:dd:db:2e:58:be:aa:92:d3: a0:70:9f:d0 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUKpFl3up+b/emgBu+JqUFJErl0lcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQ1MjFkNWVhN2I3OTAwMDgwZjZlNjY4MzZkNGRlZGEz NDcwNTRmZDAeFw0yNTEyMjEwNjM0MTFaFw0yNTEyMjIyMDMwMTFaMDMxMTAvBgNV BAMTKDBENTg4NjI2NDMxRTg0QkFENTdBRjI5MEJCRDlENEYwRDhEMjBDNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGPG/sorCh3haEEQ16xxSHylvH lDuptSUN25qw3HXb/0hFr+OZxUoDEjiRbQPcAzo95KHibsK9QzssB01VMttS3D0j lxiEbFs+AlCl9kc+o1caHleUAgDjAZQzLZr7rgYt9HQvWJMDRIz6709M8XI9qusc 3gTaz3sXWw21wpZSTs4quQv6LUz7PdW91uXwY9NuN0sdVki8zLUrFEIBu2wq3ToL sou/FMpnPZi0f9ePqLt8iTbfJdlgewVfetuqwRl6QuH4LOc8yavd9deXU98mnZDs wakgc/79sAl3OAzPJ/KofuVCIZyxDjJGaCcFMxw7IVs+npJ1rcuC4aJVIe0RAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUDViGJkMehLrVevKQu9nU8NjSDGQwHwYDVR0j BBgwFoAUlFIdXqe3kACA9uZoNtTe2jRwVP0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmVhZDJkY2YtZWFkNS00OTU0LWFkODQtNjU4MGNkMmE5 YzUwLzAvOTQ1MjFENUVBN0I3OTAwMDgwRjZFNjY4MzZENERFREEzNDcwNTRGRC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2xGSWRYcWUza0FDQTl1Wm9OdFRlMmpS d1ZQMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZWFkMmRjZi1l YWQ1LTQ5NTQtYWQ4NC02NTgwY2QyYTljNTAvMC85NDUyMUQ1RUE3Qjc5MDAwODBG NkU2NjgzNkQ0REVEQTM0NzA1NEZELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA7pH0K0jwkgQPibuCDgfg s0Cov0ms1WF45X1uagznz5Tki+YEuTLEOLGiByuXWgvn2h1KLmBxLY/cfPSSXRqP tZPRE/E6LVv7GI4BFfUVzJPHSJK8O1MB0ikeLXuLEJ1tRf808fCJ0fQa9dRMlM2l qDj50mT01UyctYWmDLmREKldvG2GsjKbxCgnhlsGJO2441fKepUzHdm7vzcGLhO/ Gf3QdeXDndeiIuDgn/MrXIzEGBnshKHD+rGSYY61+iWK7lTFri2hFfqNRzwNce3R p6StC0UJHfdI4DoWukQZMHt4KoZ0RV7c6404qZ/J/WveIs7Wh93bLli+qpLToHCf 0A== -----END CERTIFICATE-----Generated at Sun Dec 21 13:03:38 2025 by rpki-client