This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.mft File: C678CC0A7BAA95891441AD80954491DFED87D33A.mft (raw, json) Hash identifier: nMChmKjPg2nMbXchhBZhT3y4XTeQpWReW2RCZGxqYf8= Subject key identifier: C9:F5:DD:7B:37:EA:CB:12:16:8E:1A:5C:E3:57:6C:D5:B1:67:07:78 Authority key identifier: C6:78:CC:0A:7B:AA:95:89:14:41:AD:80:95:44:91:DF:ED:87:D3:3A Certificate issuer: /CN=c678cc0a7baa95891441ad80954491dfed87d33a Certificate serial: 1D15C94C672889A0E48B1CAD74437B4720EF67F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xnjMCnuqlYkUQa2AlUSR3-2H0zo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.mft Manifest number: 0329 Signing time: Sat 20 Dec 2025 03:06:19 +0000 Manifest this update: Sat 20 Dec 2025 03:01:19 +0000 Manifest next update: Sun 21 Dec 2025 03:28:19 +0000 Files and hashes: 1: C678CC0A7BAA95891441AD80954491DFED87D33A.crl (hash: JScpw/a5HYFpMmtwOvzoMwM/cPoZdRtUfwqF4ay6vbU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.crl rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.mft rsync://rpki.ripe.net/repository/DEFAULT/xnjMCnuqlYkUQa2AlUSR3-2H0zo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 03:28:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:15:c9:4c:67:28:89:a0:e4:8b:1c:ad:74:43:7b:47:20:ef:67:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c678cc0a7baa95891441ad80954491dfed87d33a Validity Not Before: Dec 20 03:01:19 2025 GMT Not After : Dec 21 03:28:19 2025 GMT Subject: CN=C9F5DD7B37EACB12168E1A5CE3576CD5B1670778 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:2a:59:16:ee:a5:95:3a:69:15:47:60:ca:03: a8:f7:53:33:81:a2:1b:e8:e7:76:e0:76:f2:b3:ab: f3:cc:f5:3c:85:6d:b3:e5:b8:0a:3c:85:c7:ed:e4: 48:a1:16:43:d6:8e:97:80:0a:aa:4e:1f:36:24:04: 1b:86:a6:22:e9:0e:26:11:0e:5f:62:0a:e3:dd:20: d6:08:9b:6e:93:26:35:ce:86:89:70:2d:3f:9f:8d: 82:0b:bc:14:dc:28:6c:51:35:37:8c:68:fe:67:c8: 62:83:de:2a:60:05:d0:06:4e:ee:46:78:44:9c:e4: ef:37:7c:90:3e:1c:4a:5c:b6:db:28:a3:fd:4f:fb: d8:fe:13:72:6a:dd:3b:2a:2c:ed:e7:4d:26:ef:1f: e5:9a:4d:26:9d:dd:64:99:0e:40:24:8c:9f:c6:44: 53:81:ad:af:98:07:48:83:d1:5b:d7:4c:09:06:46: 5d:17:61:64:1a:32:98:c7:8e:ad:6c:d3:df:3e:de: 6a:3f:4b:5d:cf:91:27:a8:e1:ff:4d:07:d4:b8:a6: c4:4c:92:ce:26:06:71:93:62:4b:e5:d6:fb:81:c8: 6b:80:4d:b6:ea:d0:07:04:e0:54:7f:6c:2e:b4:82: 60:a2:a9:c0:56:ea:9d:a9:6f:bd:f5:ea:c6:38:4d: 41:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:F5:DD:7B:37:EA:CB:12:16:8E:1A:5C:E3:57:6C:D5:B1:67:07:78 X509v3 Authority Key Identifier: keyid:C6:78:CC:0A:7B:AA:95:89:14:41:AD:80:95:44:91:DF:ED:87:D3:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnjMCnuqlYkUQa2AlUSR3-2H0zo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:1e:33:1b:94:2c:d0:54:8a:df:fb:44:02:a0:65:18:f6:3d: 48:46:30:08:b6:b9:d7:ae:4d:77:ba:74:68:95:16:b9:bb:84: bc:09:7e:78:ae:df:c4:33:ce:20:3a:6e:19:a5:2a:25:53:11: 8d:72:3b:ed:52:8d:77:f8:d9:75:80:90:49:8e:61:da:55:41: 23:87:32:6d:8b:b6:37:1e:23:cb:b5:4e:ca:ed:10:da:ec:0a: 9b:46:24:98:bd:92:8d:19:ff:ad:b9:30:0d:62:10:54:c4:1c: dc:e5:75:df:64:14:2a:f2:62:60:b4:44:8d:13:b9:12:7d:bf: 14:b6:5a:ad:41:ad:db:fb:a3:f3:36:6e:ba:f2:e7:95:2e:4c: 6f:72:7e:6b:18:47:9f:35:f5:45:0f:63:a2:b4:0b:27:29:e0: 69:bf:f3:c6:ea:7d:bf:67:bd:b7:1b:7b:fd:4f:a8:76:c8:56: c7:d9:53:70:1f:ed:58:a5:4f:61:84:02:51:ce:26:2d:5c:04: 9e:6b:35:2d:80:70:4c:23:86:c5:18:8d:f4:ce:9d:68:45:c8: ec:e7:dc:04:d8:fc:fc:3b:b3:d4:2e:09:db:2f:10:82:c6:a5: 32:e4:0e:da:d8:35:fc:48:18:8a:4c:8f:e4:5b:ba:11:a8:7a: 5d:8f:3a:6c -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUHRXJTGcoiaDkixytdEN7RyDvZ/kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzY3OGNjMGE3YmFhOTU4OTE0NDFhZDgwOTU0NDkxZGZl ZDg3ZDMzYTAeFw0yNTEyMjAwMzAxMTlaFw0yNTEyMjEwMzI4MTlaMDMxMTAvBgNV BAMTKEM5RjVERDdCMzdFQUNCMTIxNjhFMUE1Q0UzNTc2Q0Q1QjE2NzA3NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRKlkW7qWVOmkVR2DKA6j3UzOB ohvo53bgdvKzq/PM9TyFbbPluAo8hcft5EihFkPWjpeACqpOHzYkBBuGpiLpDiYR Dl9iCuPdINYIm26TJjXOholwLT+fjYILvBTcKGxRNTeMaP5nyGKD3ipgBdAGTu5G eESc5O83fJA+HEpcttsoo/1P+9j+E3Jq3TsqLO3nTSbvH+WaTSad3WSZDkAkjJ/G RFOBra+YB0iD0VvXTAkGRl0XYWQaMpjHjq1s098+3mo/S13PkSeo4f9NB9S4psRM ks4mBnGTYkvl1vuByGuATbbq0AcE4FR/bC60gmCiqcBW6p2pb7316sY4TUGpAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUyfXdezfqyxIWjhpc41ds1bFnB3gwHwYDVR0j BBgwFoAUxnjMCnuqlYkUQa2AlUSR3+2H0zowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDA2MzMzYzYtOTQ2ZC00YjBiLTk1ZWYtZGFiYTI2MmE0 MmUxLzAvQzY3OENDMEE3QkFBOTU4OTE0NDFBRDgwOTU0NDkxREZFRDg3RDMzQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3huak1DbnVxbFlrVVFhMkFsVVNSMy0y SDB6by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kMDYzMzNjNi05 NDZkLTRiMGItOTVlZi1kYWJhMjYyYTQyZTEvMC9DNjc4Q0MwQTdCQUE5NTg5MTQ0 MUFEODA5NTQ0OTFERkVEODdEMzNBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALR4zG5Qs0FSK3/tEAqBl GPY9SEYwCLa5165Nd7p0aJUWubuEvAl+eK7fxDPOIDpuGaUqJVMRjXI77VKNd/jZ dYCQSY5h2lVBI4cybYu2Nx4jy7VOyu0Q2uwKm0YkmL2SjRn/rbkwDWIQVMQc3OV1 32QUKvJiYLREjRO5En2/FLZarUGt2/uj8zZuuvLnlS5Mb3J+axhHnzX1RQ9jorQL Jyngab/zxup9v2e9txt7/U+odshWx9lTcB/tWKVPYYQCUc4mLVwEnms1LYBwTCOG xRiN9M6daEXI7OfcBNj8/Duz1C4J2y8QgsalMuQO2tg1/EgYikyP5Fu6Eah6XY86 bA== -----END CERTIFICATE-----Generated at Sat Dec 20 16:44:21 2025 by rpki-client