This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft File: DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft (raw, json) Hash identifier: Xz+tmc+Y6md1VkMfXVYfY31/2Df+c+DdYXst9QqdE/Y= Subject key identifier: 6B:7B:34:58:DE:2D:5D:FF:63:2D:AA:74:D3:8B:A6:09:22:5C:93:31 Authority key identifier: DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18 Certificate issuer: /CN=DDC25AD2F1A489247713EE39B1C03EA2FDDA4118 Certificate serial: 5068B261D4938F6E33568DEABD2780938B69B225 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft Manifest number: 01B1 Signing time: Sat 20 Dec 2025 18:44:11 +0000 Manifest this update: Sat 20 Dec 2025 18:39:11 +0000 Manifest next update: Mon 22 Dec 2025 10:25:11 +0000 Files and hashes: 1: DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl (hash: K+jnpjYebE6Ivdl7O9ZAHT5CTtZbpEHVoh6yiLv+MfQ=) 2: 326130623a346530373a363030303a3a2f34302d3438203d3e20323134373031.roa (hash: mhaYla+UsHdOX7ijGa8kmFH/Ey3jwcszbuWBzNvxxRw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:68:b2:61:d4:93:8f:6e:33:56:8d:ea:bd:27:80:93:8b:69:b2:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDC25AD2F1A489247713EE39B1C03EA2FDDA4118 Validity Not Before: Dec 20 18:39:11 2025 GMT Not After : Dec 22 10:25:11 2025 GMT Subject: CN=6B7B3458DE2D5DFF632DAA74D38BA609225C9331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:0a:26:8b:1d:9b:62:26:80:0f:70:42:85:6f: 3a:2e:d9:8b:53:7f:67:ab:4b:fc:d6:24:61:26:24: 42:22:98:7a:0b:4c:c7:66:10:d2:44:ec:0e:42:a3: 68:e5:f2:a0:1e:6e:30:0a:e1:43:39:7f:71:3a:38: d7:30:53:58:12:57:53:19:25:5e:41:2c:08:cb:29: 61:6d:45:41:8a:d5:7d:cf:bb:8d:51:60:8c:9f:b7: 33:87:69:fa:ef:da:70:f3:74:66:ac:ed:a3:a5:b8: 0b:10:0f:5a:cb:1e:6d:7c:37:62:39:b9:90:d7:d7: 57:0c:0c:05:12:53:0e:44:0f:28:42:c7:85:d7:99: 6a:0a:6a:65:43:e7:bb:14:96:6d:23:31:bb:d5:00: e0:04:14:ef:27:bb:e2:ce:d1:6f:72:f6:83:cf:e8: 6f:8d:f5:61:94:4b:e9:2b:81:49:a7:c9:81:d9:8a: 12:f4:0b:38:a0:1a:46:02:24:c5:d9:f2:82:95:ce: cc:05:67:6d:d5:0f:87:6a:e7:bb:9a:73:d3:f9:b7: e5:f1:69:e4:c1:6d:0c:9e:7c:c1:01:b1:ad:c5:c9: 68:f6:7f:a9:5e:72:10:93:a4:fc:8e:24:81:e4:0c: 7c:55:0d:a5:2a:a0:e3:38:ea:f8:ab:d4:8d:3c:32: 8d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:7B:34:58:DE:2D:5D:FF:63:2D:AA:74:D3:8B:A6:09:22:5C:93:31 X509v3 Authority Key Identifier: keyid:DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:8c:06:df:4a:7b:8c:19:e2:a0:0d:3c:39:19:31:56:c6:85: d4:29:b8:5a:fe:56:33:26:18:9b:25:8c:28:35:da:c9:cc:c8: bb:fc:92:78:43:1c:0f:29:b1:46:2d:61:05:7f:33:8d:29:16: 39:83:6b:64:72:68:45:3a:5b:a2:1e:9e:6f:b8:72:93:68:2e: 5d:54:97:1d:a6:81:b1:21:94:cf:e8:9e:81:fb:57:2b:55:89: e0:19:ea:d2:cb:62:04:a8:ec:aa:14:f9:92:8a:14:7d:25:e8: c3:e7:0f:6e:ab:f0:77:cd:16:2c:76:52:27:a4:76:3f:f9:37: f4:ff:02:eb:49:71:9c:6c:06:eb:0e:0a:20:a9:d2:28:45:93: d2:8d:ce:4a:88:c1:18:45:69:26:f6:e3:00:2c:a7:9a:ba:3d: 8e:67:30:29:ac:12:99:14:b8:53:a4:93:d2:9b:1e:15:38:d7: 5f:1d:13:ca:93:26:d8:ad:23:0d:f0:63:8e:19:bf:91:b5:2d: 4e:3f:de:9a:23:69:f5:df:2f:fe:35:31:30:09:d5:4c:9e:c6: e3:8d:97:28:49:a5:46:47:a5:5a:b2:f8:f9:b7:47:f9:be:cd: c3:aa:30:70:16:a5:84:ce:40:f0:5d:8b:2b:b0:ad:23:ab:eb: 6e:67:a1:27 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUUGiyYdSTj24zVo3qvSeAk4tpsiUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJG RERBNDExODAeFw0yNTEyMjAxODM5MTFaFw0yNTEyMjIxMDI1MTFaMDMxMTAvBgNV BAMTKDZCN0IzNDU4REUyRDVERkY2MzJEQUE3NEQzOEJBNjA5MjI1QzkzMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKCiaLHZtiJoAPcEKFbzou2YtT f2erS/zWJGEmJEIimHoLTMdmENJE7A5Co2jl8qAebjAK4UM5f3E6ONcwU1gSV1MZ JV5BLAjLKWFtRUGK1X3Pu41RYIyftzOHafrv2nDzdGas7aOluAsQD1rLHm18N2I5 uZDX11cMDAUSUw5EDyhCx4XXmWoKamVD57sUlm0jMbvVAOAEFO8nu+LO0W9y9oPP 6G+N9WGUS+krgUmnyYHZihL0CzigGkYCJMXZ8oKVzswFZ23VD4dq57uac9P5t+Xx aeTBbQyefMEBsa3FyWj2f6lechCTpPyOJIHkDHxVDaUqoOM46vir1I08Mo3lAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUa3s0WN4tXf9jLap004umCSJckzEwHwYDVR0j BBgwFoAU3cJa0vGkiSR3E+45scA+ov3aQRgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmVhZDJkY2YtZWFkNS00OTU0LWFkODQtNjU4MGNkMmE5 YzUwLzMvRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJGRERBNDExOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJGRERB NDExOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZWFkMmRjZi1l YWQ1LTQ5NTQtYWQ4NC02NTgwY2QyYTljNTAvMy9EREMyNUFEMkYxQTQ4OTI0Nzcx M0VFMzlCMUMwM0VBMkZEREE0MTE4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd4wG30p7jBnioA08ORkx VsaF1Cm4Wv5WMyYYmyWMKDXayczIu/ySeEMcDymxRi1hBX8zjSkWOYNrZHJoRTpb oh6eb7hyk2guXVSXHaaBsSGUz+iegftXK1WJ4Bnq0stiBKjsqhT5kooUfSXow+cP bqvwd80WLHZSJ6R2P/k39P8C60lxnGwG6w4KIKnSKEWT0o3OSojBGEVpJvbjACyn mro9jmcwKawSmRS4U6ST0pseFTjXXx0TypMm2K0jDfBjjhm/kbUtTj/emiNp9d8v /jUxMAnVTJ7G442XKEmlRkelWrL4+bdH+b7Nw6owcBalhM5A8F2LK7CtI6vrbmeh Jw== -----END CERTIFICATE-----Generated at Sat Dec 20 20:49:19 2025 by rpki-client