This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft File: 4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft (raw, json) Hash identifier: u4otRo1/gtTFeypwiDsPTSypMiUw8ZhMN7zSABMY33A= Subject key identifier: 50:D6:14:D0:9E:F3:7C:31:EC:70:91:18:01:67:98:32:6B:4B:BE:3C Authority key identifier: 40:50:A1:7B:AE:1C:5F:37:63:D4:5A:38:DC:FE:AC:E0:FE:22:2B:D6 Certificate issuer: /CN=4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6 Certificate serial: 2DD10DF5247B8FFF9DF329BB9A7E154F26CCB3EA Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft Manifest number: 020A Signing time: Tue 23 Dec 2025 06:48:03 +0000 Manifest this update: Tue 23 Dec 2025 06:43:03 +0000 Manifest next update: Wed 24 Dec 2025 08:29:03 +0000 Files and hashes: 1: 4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.crl (hash: q9q03EEWkrrEe06uDfA7amcD04C6t/QShT8ohmApZs0=) 2: 326131343a373538313a396632303a3a2f34342d3434203d3e20323135323838.roa (hash: Si3nvIvR6vlJSP9N899TEpLNTv8CH8Xf9C307NCghTQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.crl rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 04:13:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:d1:0d:f5:24:7b:8f:ff:9d:f3:29:bb:9a:7e:15:4f:26:cc:b3:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6 Validity Not Before: Dec 23 06:43:03 2025 GMT Not After : Dec 24 08:29:03 2025 GMT Subject: CN=50D614D09EF37C31EC709118016798326B4BBE3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:a1:4d:ff:13:17:04:2c:ae:46:0d:f4:1f:d4: f2:d5:6d:61:16:e9:df:a6:11:ee:7f:23:af:7b:ae: c7:8c:dd:be:f1:77:80:ac:5e:a7:48:dd:a3:97:a5: 87:a0:29:e5:29:3e:e2:04:ce:cc:7f:94:52:18:ef: 9a:6d:ca:94:2c:da:ca:68:6a:16:76:72:1c:ea:7c: 8d:ab:8d:74:e5:4b:d2:96:07:c5:6d:0a:e1:e7:12: af:00:7e:91:a4:f1:ce:bc:93:4f:6a:6a:16:1c:56: 98:50:d0:6b:d8:50:32:a7:12:d8:02:6b:2e:47:ae: c4:ae:ec:9b:0f:53:e4:14:de:4b:d1:9b:24:fd:a3: f7:22:8b:52:a0:ff:6b:b7:a3:c3:71:09:2d:eb:0b: b2:b5:9f:f2:31:05:00:ad:23:e1:bc:61:dc:22:a8: e1:19:3d:09:90:74:b6:8e:73:7a:a4:74:b5:06:06: 98:6c:88:4e:85:38:91:fc:c2:f1:97:e0:c3:38:6a: c1:86:3f:f7:d8:71:cd:63:15:42:e7:81:5d:98:36: df:ce:a8:b4:68:bf:70:e3:35:6d:16:05:e8:d5:f6: 08:32:0b:37:7c:ab:4d:3e:51:a1:a1:4e:93:0e:1c: 95:8a:8b:92:4f:33:55:bd:be:1f:86:83:f5:a3:a8: 43:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:D6:14:D0:9E:F3:7C:31:EC:70:91:18:01:67:98:32:6B:4B:BE:3C X509v3 Authority Key Identifier: keyid:40:50:A1:7B:AE:1C:5F:37:63:D4:5A:38:DC:FE:AC:E0:FE:22:2B:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:22:09:d8:11:47:bb:a7:c2:87:8f:bd:13:06:19:b1:18:14: 53:b5:e5:ff:94:6e:5e:50:75:af:f4:f1:eb:6c:05:e1:32:d5: d5:59:94:61:5e:03:c0:21:bb:31:86:3a:36:ab:f2:f0:b5:28: d3:7a:62:81:d2:1d:2c:77:29:4d:4a:bb:74:79:8c:01:a4:e6: ff:d0:44:06:8b:93:15:8c:88:14:59:16:a6:98:6d:8d:92:34: 03:15:4a:a7:0a:35:d2:3c:80:98:54:27:52:71:86:2a:90:94: 8d:e3:b5:ba:5f:a9:22:ac:a0:96:37:7c:c7:85:6c:85:65:47: 49:77:2f:c7:e6:bc:43:75:e8:38:a0:9e:3c:a6:83:14:56:07: 31:de:2b:be:14:6b:55:2d:ef:88:7f:a3:b9:82:81:d7:8a:09: 3f:4d:94:2f:24:7d:13:44:bc:6e:6e:c4:7f:7c:8f:63:04:56: 94:6a:30:ed:12:0b:49:d6:ae:43:5b:8f:ac:e7:14:0c:d9:92: eb:d4:c9:3f:15:af:cd:02:c7:d3:bd:43:85:92:a6:35:43:ba: 66:0e:03:30:f8:bf:1a:78:e8:70:15:aa:2b:5a:5e:1d:d0:a8: 71:b5:a1:83:46:ab:f8:44:62:eb:3b:c6:f2:7e:df:83:82:b4: d6:a9:8a:29 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIULdEN9SR7j/+d8ym7mn4VTybMs+owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA1MEExN0JBRTFDNUYzNzYzRDQ1QTM4RENGRUFDRTBG RTIyMkJENjAeFw0yNTEyMjMwNjQzMDNaFw0yNTEyMjQwODI5MDNaMDMxMTAvBgNV BAMTKDUwRDYxNEQwOUVGMzdDMzFFQzcwOTExODAxNjc5ODMyNkI0QkJFM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDloU3/ExcELK5GDfQf1PLVbWEW 6d+mEe5/I697rseM3b7xd4CsXqdI3aOXpYegKeUpPuIEzsx/lFIY75ptypQs2spo ahZ2chzqfI2rjXTlS9KWB8VtCuHnEq8AfpGk8c68k09qahYcVphQ0GvYUDKnEtgC ay5HrsSu7JsPU+QU3kvRmyT9o/cii1Kg/2u3o8NxCS3rC7K1n/IxBQCtI+G8Ydwi qOEZPQmQdLaOc3qkdLUGBphsiE6FOJH8wvGX4MM4asGGP/fYcc1jFULngV2YNt/O qLRov3DjNW0WBejV9ggyCzd8q00+UaGhTpMOHJWKi5JPM1W9vh+Gg/WjqEO3AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUUNYU0J7zfDHscJEYAWeYMmtLvjwwHwYDVR0j BBgwFoAUQFChe64cXzdj1Fo43P6s4P4iK9YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzg2YjY1YjEtNDVlOS00ZmIyLWFkYzUtODdiYTcxMWUy MWI3LzEvNDA1MEExN0JBRTFDNUYzNzYzRDQ1QTM4RENGRUFDRTBGRTIyMkJENi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC80MDUwQTE3QkFFMUM1RjM3NjNENDVBMzhE Q0ZFQUNFMEZFMjIyQkQ2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2M4NmI2NWIxLTQ1ZTktNGZiMi1hZGM1LTg3YmE3MTFlMjFiNy8xLzQwNTBBMTdC QUUxQzVGMzc2M0Q0NUEzOERDRkVBQ0UwRkUyMjJCRDYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBBIgnY EUe7p8KHj70TBhmxGBRTteX/lG5eUHWv9PHrbAXhMtXVWZRhXgPAIbsxhjo2q/Lw tSjTemKB0h0sdylNSrt0eYwBpOb/0EQGi5MVjIgUWRammG2NkjQDFUqnCjXSPICY VCdScYYqkJSN47W6X6kirKCWN3zHhWyFZUdJdy/H5rxDdeg4oJ48poMUVgcx3iu+ FGtVLe+If6O5goHXigk/TZQvJH0TRLxubsR/fI9jBFaUajDtEgtJ1q5DW4+s5xQM 2ZLr1Mk/Fa/NAsfTvUOFkqY1Q7pmDgMw+L8aeOhwFaorWl4d0KhxtaGDRqv4RGLr O8byft+DgrTWqYop -----END CERTIFICATE-----Generated at Tue Dec 23 12:26:25 2025 by rpki-client