This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft File: 94521D5EA7B7900080F6E66836D4DEDA347054FD.mft (raw, json) Hash identifier: QXeYII8uWUZ0/3vDnLNiW4rYXb+IbtIAoXeeC+ai9zE= Subject key identifier: 9C:BB:6E:25:75:04:AD:DA:93:6B:26:99:0D:9D:AB:7D:70:8A:57:8E Authority key identifier: 94:52:1D:5E:A7:B7:90:00:80:F6:E6:68:36:D4:DE:DA:34:70:54:FD Certificate issuer: /CN=94521d5ea7b7900080f6e66836d4deda347054fd Certificate serial: 05B8B80ACB0F33E3D0FDC5B513110E553871CBAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft Manifest number: 020B Signing time: Tue 23 Dec 2025 02:06:56 +0000 Manifest this update: Tue 23 Dec 2025 02:01:56 +0000 Manifest next update: Wed 24 Dec 2025 15:11:56 +0000 Files and hashes: 1: AS214701.asa (hash: EwiuTDTlJzzW3BaZbT2OcjZ0BGKln2twmg9+cBCEmTw=) 2: 94521D5EA7B7900080F6E66836D4DEDA347054FD.crl (hash: Hyy5t5esif11P5JwrTXG9JpmJ+P52IppNqJfxbCqSiQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.crl rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:b8:b8:0a:cb:0f:33:e3:d0:fd:c5:b5:13:11:0e:55:38:71:cb:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94521d5ea7b7900080f6e66836d4deda347054fd Validity Not Before: Dec 23 02:01:56 2025 GMT Not After : Dec 24 15:11:56 2025 GMT Subject: CN=9CBB6E257504ADDA936B26990D9DAB7D708A578E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:62:cc:82:16:5d:83:87:25:07:62:12:33:5e: 0b:ec:66:49:61:e4:1e:74:1b:c1:ee:dc:d3:98:84: 6a:bf:d2:0c:e4:2b:79:4d:b6:55:7e:a0:25:f5:57: f0:c5:d8:56:b2:03:bb:71:7c:c2:e5:ef:44:bd:8d: 88:d2:ba:a3:ee:86:c3:27:2e:5a:f1:17:95:8e:5a: e5:fb:8c:9e:5a:76:34:ee:0b:db:b1:e1:da:5d:41: 6f:b8:cd:cd:4e:67:03:12:4b:16:e2:b3:e6:d7:b4: 2c:50:2c:5d:f1:1f:de:0a:30:7c:12:2d:b7:9d:76: 96:2a:a4:a0:4a:ce:e3:3e:db:3b:6c:5b:59:7c:25: 54:88:d5:eb:d7:43:5f:f5:27:b2:a9:43:39:1a:e2: 2b:37:e2:13:96:af:23:da:88:d9:ce:11:d6:d0:21: 75:bf:af:f3:95:e4:e2:25:0f:6c:f6:15:b4:47:80: 86:2f:36:bd:98:81:ba:35:d3:fc:e4:78:df:3a:25: 17:d7:4f:c3:ea:b4:62:f6:17:54:9d:98:fc:84:d3: ab:ca:ba:b2:c2:99:66:10:78:da:17:a5:29:72:30: 57:26:a6:d6:da:af:ab:0f:7e:0b:6a:1e:1d:4e:3b: 27:90:71:91:77:a8:e0:72:81:47:fd:7b:9b:76:50: ed:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:BB:6E:25:75:04:AD:DA:93:6B:26:99:0D:9D:AB:7D:70:8A:57:8E X509v3 Authority Key Identifier: keyid:94:52:1D:5E:A7:B7:90:00:80:F6:E6:68:36:D4:DE:DA:34:70:54:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:69:3a:5e:06:91:a9:8c:f3:77:05:70:0c:f7:e4:44:52:0b: 70:eb:eb:77:73:68:16:7b:27:52:06:25:01:a0:0c:b5:5d:6b: b4:b8:99:18:ac:66:62:97:79:33:9e:76:a9:14:d7:e1:17:d8: 0c:83:5b:05:74:26:a5:f2:22:92:f6:41:1d:ed:83:f5:14:2d: fa:18:a8:f6:63:03:d6:5e:81:ba:ac:fe:1d:12:78:6a:35:d2: f4:1d:b3:b8:27:aa:f1:97:b8:8a:ee:bf:2d:90:f9:c0:e2:d7: 3e:43:16:d3:89:99:2d:30:57:5d:b1:48:d5:e2:bc:02:66:fc: 33:d2:cf:e6:28:5d:6b:f8:37:f4:bd:6c:3e:73:ed:70:26:ac: 61:44:23:9d:c8:b2:97:42:c8:6c:f6:2a:10:d5:52:59:74:17: 6c:d8:3b:01:7e:64:a3:66:92:06:b7:db:7f:b1:6d:c4:a0:f6: d3:4e:e6:46:a4:ea:31:4f:55:be:0d:52:2d:0c:70:86:97:b7: 99:99:1e:71:8b:a7:a6:40:b9:42:64:12:a5:2f:3f:bb:40:e7: cf:5b:2c:8d:b3:7b:2a:ca:f6:a9:a2:b8:0e:b3:7b:e1:02:a0: 43:fe:2b:d8:da:56:a0:6c:bb:38:42:c4:8e:42:0c:89:81:6c: 0d:92:83:a5 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUBbi4CssPM+PQ/cW1ExEOVThxy64wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQ1MjFkNWVhN2I3OTAwMDgwZjZlNjY4MzZkNGRlZGEz NDcwNTRmZDAeFw0yNTEyMjMwMjAxNTZaFw0yNTEyMjQxNTExNTZaMDMxMTAvBgNV BAMTKDlDQkI2RTI1NzUwNEFEREE5MzZCMjY5OTBEOURBQjdENzA4QTU3OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHYsyCFl2DhyUHYhIzXgvsZklh 5B50G8Hu3NOYhGq/0gzkK3lNtlV+oCX1V/DF2FayA7txfMLl70S9jYjSuqPuhsMn LlrxF5WOWuX7jJ5adjTuC9ux4dpdQW+4zc1OZwMSSxbis+bXtCxQLF3xH94KMHwS LbeddpYqpKBKzuM+2ztsW1l8JVSI1evXQ1/1J7KpQzka4is34hOWryPaiNnOEdbQ IXW/r/OV5OIlD2z2FbRHgIYvNr2Ygbo10/zkeN86JRfXT8PqtGL2F1SdmPyE06vK urLCmWYQeNoXpSlyMFcmptbar6sPfgtqHh1OOyeQcZF3qOBygUf9e5t2UO2jAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUnLtuJXUErdqTayaZDZ2rfXCKV44wHwYDVR0j BBgwFoAUlFIdXqe3kACA9uZoNtTe2jRwVP0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmVhZDJkY2YtZWFkNS00OTU0LWFkODQtNjU4MGNkMmE5 YzUwLzAvOTQ1MjFENUVBN0I3OTAwMDgwRjZFNjY4MzZENERFREEzNDcwNTRGRC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2xGSWRYcWUza0FDQTl1Wm9OdFRlMmpS d1ZQMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZWFkMmRjZi1l YWQ1LTQ5NTQtYWQ4NC02NTgwY2QyYTljNTAvMC85NDUyMUQ1RUE3Qjc5MDAwODBG NkU2NjgzNkQ0REVEQTM0NzA1NEZELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfGk6XgaRqYzzdwVwDPfk RFILcOvrd3NoFnsnUgYlAaAMtV1rtLiZGKxmYpd5M552qRTX4RfYDINbBXQmpfIi kvZBHe2D9RQt+hio9mMD1l6Buqz+HRJ4ajXS9B2zuCeq8Ze4iu6/LZD5wOLXPkMW 04mZLTBXXbFI1eK8Amb8M9LP5ihda/g39L1sPnPtcCasYUQjnciyl0LIbPYqENVS WXQXbNg7AX5ko2aSBrfbf7FtxKD2007mRqTqMU9Vvg1SLQxwhpe3mZkecYunpkC5 QmQSpS8/u0Dnz1ssjbN7Ksr2qaK4DrN74QKgQ/4r2NpWoGy7OELEjkIMiYFsDZKD pQ== -----END CERTIFICATE-----Generated at Tue Dec 23 09:18:50 2025 by rpki-client