This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft File: DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft (raw, json) Hash identifier: TUm77NH+qBFy9+qIQjyKasFZofaml0XtlIWajZ2QP6M= Subject key identifier: FD:EE:F8:05:89:BA:12:F2:77:10:62:72:8D:67:99:E5:A1:DA:A5:D8 Authority key identifier: DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18 Certificate issuer: /CN=DDC25AD2F1A489247713EE39B1C03EA2FDDA4118 Certificate serial: 0E84EA429614C14D4D00BDE4412888E265A03876 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft Manifest number: 01B6 Signing time: Tue 23 Dec 2025 17:31:17 +0000 Manifest this update: Tue 23 Dec 2025 17:26:17 +0000 Manifest next update: Thu 25 Dec 2025 09:29:17 +0000 Files and hashes: 1: DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl (hash: FXjh+tEoEatTeWgac4fIMwZ1X1aYteLWXPb48Tn1dt8=) 2: 326130623a346530373a363030303a3a2f34302d3438203d3e20323134373031.roa (hash: mhaYla+UsHdOX7ijGa8kmFH/Ey3jwcszbuWBzNvxxRw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 20:56:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:84:ea:42:96:14:c1:4d:4d:00:bd:e4:41:28:88:e2:65:a0:38:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDC25AD2F1A489247713EE39B1C03EA2FDDA4118 Validity Not Before: Dec 23 17:26:17 2025 GMT Not After : Dec 25 09:29:17 2025 GMT Subject: CN=FDEEF80589BA12F2771062728D6799E5A1DAA5D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ad:e8:52:52:10:56:ef:5e:02:2c:27:90:52: fe:c5:c6:c6:23:3c:f7:70:23:8e:d6:92:45:d8:55: 70:2e:29:ee:5d:94:ad:b6:02:8d:73:85:90:14:13: 1d:e2:fd:13:ac:e3:76:49:1d:f9:8d:c0:11:85:78: d1:ed:d5:f2:f7:6e:50:1f:f9:a5:aa:93:a0:01:46: a4:fd:94:cd:87:2c:fb:27:a9:33:68:e8:c2:a3:70: 39:f0:a5:8b:37:3e:a5:c2:7e:4e:7f:6e:4a:ae:cd: f2:80:10:85:ec:f8:d9:9e:85:ac:02:2c:5b:cd:28: 84:18:73:09:30:ea:1e:80:53:4a:d7:ed:67:88:39: d5:fd:1e:d9:4c:14:47:4e:c2:69:44:e4:94:e2:33: 40:02:56:c1:50:f1:b8:8b:87:d2:b8:64:3e:4a:ff: b4:be:2f:a1:9a:e9:95:70:ec:13:76:c8:98:7f:89: 0d:6d:b3:11:87:30:62:0d:b4:47:19:fc:49:61:79: 7d:ad:84:d3:e7:d0:cc:7e:fb:db:74:27:be:3f:56: e8:cb:92:69:44:08:6a:ce:87:cb:34:23:ca:2c:04: 5d:32:aa:94:10:ab:82:0f:30:53:3a:cb:a1:0b:52: 7a:37:f6:19:f4:2b:41:25:8a:51:dd:1b:15:4d:af: 35:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:EE:F8:05:89:BA:12:F2:77:10:62:72:8D:67:99:E5:A1:DA:A5:D8 X509v3 Authority Key Identifier: keyid:DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:92:0e:77:a9:52:4f:5c:f6:cf:5d:ad:d1:04:ad:20:d6:cf: b0:a5:eb:87:dd:64:53:4f:1f:e9:1d:6b:be:d8:7a:35:e8:ce: e1:97:a1:89:0b:47:62:9e:ee:8b:51:9f:d2:a2:ac:74:9f:45: aa:2a:2b:f0:ce:5b:b5:97:7c:54:19:88:c8:21:ff:a7:cc:2d: bf:33:9d:c0:ba:23:ac:08:92:fc:e6:f0:a7:c5:6a:9f:31:8e: 56:1e:40:c0:da:c2:68:77:f9:bd:7b:50:19:ab:a9:68:80:e2: 78:29:61:8a:3e:1f:43:23:13:d6:84:fb:40:e7:d6:2a:95:5f: 5e:ab:5a:d9:d5:8f:a3:ac:5c:d7:57:f6:c9:f4:2f:ec:8e:93: aa:2c:03:fc:bf:13:dd:51:5c:10:e5:7e:e8:61:5c:72:1b:2c: 8f:7d:b2:14:a2:bf:3b:0a:e2:cb:56:39:ef:f6:71:31:4b:5a: 93:45:d1:4e:ec:19:64:cc:2f:07:13:47:f1:58:b2:9d:f2:4d: 3e:63:32:ca:52:99:d5:9f:26:35:25:07:8e:75:6d:32:b3:62: ba:0d:f0:5a:42:99:5c:15:ab:5e:2c:7e:12:00:c9:5e:d1:c2: e0:ef:53:fc:9b:9a:f7:b6:39:eb:01:8e:f1:6d:9b:d6:a8:ea: 23:1d:a7:2a -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUDoTqQpYUwU1NAL3kQSiI4mWgOHYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJG RERBNDExODAeFw0yNTEyMjMxNzI2MTdaFw0yNTEyMjUwOTI5MTdaMDMxMTAvBgNV BAMTKEZERUVGODA1ODlCQTEyRjI3NzEwNjI3MjhENjc5OUU1QTFEQUE1RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDarehSUhBW714CLCeQUv7FxsYj PPdwI47WkkXYVXAuKe5dlK22Ao1zhZAUEx3i/ROs43ZJHfmNwBGFeNHt1fL3blAf +aWqk6ABRqT9lM2HLPsnqTNo6MKjcDnwpYs3PqXCfk5/bkquzfKAEIXs+NmehawC LFvNKIQYcwkw6h6AU0rX7WeIOdX9HtlMFEdOwmlE5JTiM0ACVsFQ8biLh9K4ZD5K /7S+L6Ga6ZVw7BN2yJh/iQ1tsxGHMGINtEcZ/ElheX2thNPn0Mx++9t0J74/VujL kmlECGrOh8s0I8osBF0yqpQQq4IPMFM6y6ELUno39hn0K0ElilHdGxVNrzX1AgMB AAGjggJ3MIICczAdBgNVHQ4EFgQU/e74BYm6EvJ3EGJyjWeZ5aHapdgwHwYDVR0j BBgwFoAU3cJa0vGkiSR3E+45scA+ov3aQRgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmVhZDJkY2YtZWFkNS00OTU0LWFkODQtNjU4MGNkMmE5 YzUwLzMvRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJGRERBNDExOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJGRERB NDExOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZWFkMmRjZi1l YWQ1LTQ5NTQtYWQ4NC02NTgwY2QyYTljNTAvMy9EREMyNUFEMkYxQTQ4OTI0Nzcx M0VFMzlCMUMwM0VBMkZEREE0MTE4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqJIOd6lST1z2z12t0QSt INbPsKXrh91kU08f6R1rvth6NejO4ZehiQtHYp7ui1Gf0qKsdJ9Fqior8M5btZd8 VBmIyCH/p8wtvzOdwLojrAiS/Obwp8VqnzGOVh5AwNrCaHf5vXtQGaupaIDieClh ij4fQyMT1oT7QOfWKpVfXqta2dWPo6xc11f2yfQv7I6TqiwD/L8T3VFcEOV+6GFc chssj32yFKK/Owriy1Y57/ZxMUtak0XRTuwZZMwvBxNH8ViynfJNPmMyylKZ1Z8m NSUHjnVtMrNiug3wWkKZXBWrXix+EgDJXtHC4O9T/Jua97Y56wGO8W2b1qjqIx2n Kg== -----END CERTIFICATE-----Generated at Wed Dec 24 08:45:35 2025 by rpki-client