This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/2/0452A7B37267CE42DC95A34621BC7026A222B005.mft File: 0452A7B37267CE42DC95A34621BC7026A222B005.mft (raw, json) Hash identifier: z4PYGZ7/kFmJQrmBTx2p+pkxS2PTNcNIRjaY5n0NYSM= Subject key identifier: FC:BE:04:0C:0E:49:8D:D5:10:C6:D3:A0:C3:41:69:21:05:74:CA:8A Authority key identifier: 04:52:A7:B3:72:67:CE:42:DC:95:A3:46:21:BC:70:26:A2:22:B0:05 Certificate issuer: /CN=0452a7b37267ce42dc95a34621bc7026a222b005 Certificate serial: 11063C90BE5D429BC21FF96686FBAAA108E2CEFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BFKns3JnzkLclaNGIbxwJqIisAU.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/2/0452A7B37267CE42DC95A34621BC7026A222B005.mft Manifest number: 74 Signing time: Sun 21 Dec 2025 00:16:58 +0000 Manifest this update: Sun 21 Dec 2025 00:11:58 +0000 Manifest next update: Mon 22 Dec 2025 03:12:58 +0000 Files and hashes: 1: 0452A7B37267CE42DC95A34621BC7026A222B005.crl (hash: Tl5xy9nmX/tX5XsLKOrsYXG6zo+Zltsj4k3hM3xrZr4=) 2: AS204518.asa (hash: 6ZPueaHQ51DeRfsY/NQlxbJfSs8ftM3igYNB7N59JcA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/2/0452A7B37267CE42DC95A34621BC7026A222B005.crl rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/2/0452A7B37267CE42DC95A34621BC7026A222B005.mft rsync://rpki.ripe.net/repository/DEFAULT/BFKns3JnzkLclaNGIbxwJqIisAU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:06:3c:90:be:5d:42:9b:c2:1f:f9:66:86:fb:aa:a1:08:e2:ce:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0452a7b37267ce42dc95a34621bc7026a222b005 Validity Not Before: Dec 21 00:11:58 2025 GMT Not After : Dec 22 03:12:58 2025 GMT Subject: CN=FCBE040C0E498DD510C6D3A0C34169210574CA8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c9:cf:c2:d4:f4:f6:b1:16:91:f7:a1:11:d0: 62:37:59:6d:df:71:32:34:a1:7d:a7:09:6e:92:9f: 43:09:d1:df:a6:3d:d4:79:71:a4:45:68:2f:e7:c2: 42:d9:20:eb:11:8f:5a:26:f5:30:a4:74:a1:40:b4: b7:4d:83:a1:15:c2:b0:16:84:78:19:d7:81:88:f8: 92:e6:7c:ea:2d:10:bf:ac:8d:77:56:29:ef:3e:cf: 1b:e5:b2:21:17:74:b9:ef:c6:cd:ba:c4:ba:60:c3: b5:03:a3:5a:db:eb:b3:ba:78:df:7a:3a:13:3c:73: 76:da:74:2e:35:07:41:43:74:e5:05:46:b6:ca:4d: 25:b1:63:ac:29:f6:1d:85:c1:6b:f1:69:b9:fa:e8: 79:8c:18:1a:ef:56:6e:d1:86:2c:a7:07:79:98:69: e8:c0:ea:61:60:90:df:f9:a8:d5:90:f4:da:7c:f0: 99:fc:07:ca:b8:24:1e:7e:64:c5:62:17:d5:2e:07: 1d:1f:81:4e:b4:05:50:6e:c7:7e:e3:98:bd:5f:13: e0:71:49:18:75:31:0a:ec:91:c5:49:80:66:74:04: 63:96:ee:f7:f0:bc:04:96:fe:b4:ee:0a:4e:36:2a: 60:e3:f5:f8:de:1f:27:77:29:ef:d4:f7:40:1e:cc: 15:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:BE:04:0C:0E:49:8D:D5:10:C6:D3:A0:C3:41:69:21:05:74:CA:8A X509v3 Authority Key Identifier: keyid:04:52:A7:B3:72:67:CE:42:DC:95:A3:46:21:BC:70:26:A2:22:B0:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/2/0452A7B37267CE42DC95A34621BC7026A222B005.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFKns3JnzkLclaNGIbxwJqIisAU.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/2/0452A7B37267CE42DC95A34621BC7026A222B005.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:d6:37:0e:3f:1d:e5:fb:44:03:da:42:0e:50:91:c1:e1:4e: b8:54:a3:84:65:26:d8:da:a7:9a:72:64:2f:13:00:85:c9:0e: 14:d5:75:4a:67:1a:2a:9d:70:7c:3a:fb:ad:0a:ee:6b:08:31: 7c:95:77:f0:e2:90:7c:90:db:05:cb:88:d9:75:65:1a:14:c7: 22:a9:88:df:51:92:04:82:3c:74:23:1f:ad:53:4e:c0:2a:ec: 94:ac:f5:a0:91:47:fb:50:87:f3:b3:be:0c:07:66:b7:3d:c9: f5:6e:31:1a:4c:7a:9f:8a:5d:95:84:bc:01:19:a0:ad:46:da: 31:b4:52:d9:3b:74:1d:68:8b:ec:14:13:5e:e9:5a:8f:6d:3e: 8c:d2:27:31:13:2d:f8:54:35:e1:a5:5a:95:33:6e:b7:ad:88: 00:f7:0a:07:04:6f:a2:64:01:2f:f5:b9:d2:0d:ff:02:ac:a1: 6c:54:fb:db:f7:4e:53:98:7e:c4:e1:8f:b3:43:b4:15:16:99: 14:f3:9c:77:39:8d:48:dd:bc:ca:30:e3:c3:19:37:49:6d:9a: 9b:a1:6b:3e:6d:eb:46:be:45:27:0f:4f:a2:23:d2:06:bb:53: 9c:b1:b6:32:2f:93:05:a2:fc:5c:2e:e2:4d:f6:60:a2:11:ee: 79:5d:d3:d1 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUEQY8kL5dQpvCH/lmhvuqoQjizv0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ1MmE3YjM3MjY3Y2U0MmRjOTVhMzQ2MjFiYzcwMjZh MjIyYjAwNTAeFw0yNTEyMjEwMDExNThaFw0yNTEyMjIwMzEyNThaMDMxMTAvBgNV BAMTKEZDQkUwNDBDMEU0OThERDUxMEM2RDNBMEMzNDE2OTIxMDU3NENBOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDByc/C1PT2sRaR96ER0GI3WW3f cTI0oX2nCW6Sn0MJ0d+mPdR5caRFaC/nwkLZIOsRj1om9TCkdKFAtLdNg6EVwrAW hHgZ14GI+JLmfOotEL+sjXdWKe8+zxvlsiEXdLnvxs26xLpgw7UDo1rb67O6eN96 OhM8c3badC41B0FDdOUFRrbKTSWxY6wp9h2FwWvxabn66HmMGBrvVm7RhiynB3mY aejA6mFgkN/5qNWQ9Np88Jn8B8q4JB5+ZMViF9UuBx0fgU60BVBux37jmL1fE+Bx SRh1MQrskcVJgGZ0BGOW7vfwvASW/rTuCk42KmDj9fjeHyd3Ke/U90AezBXTAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU/L4EDA5JjdUQxtOgw0FpIQV0yoowHwYDVR0j BBgwFoAUBFKns3JnzkLclaNGIbxwJqIisAUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTI2ZWIxMzYtNGZlNS00ZTYxLWE0ZDgtZjM0NWY1MmJj MjVkLzIvMDQ1MkE3QjM3MjY3Q0U0MkRDOTVBMzQ2MjFCQzcwMjZBMjIyQjAwNS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JGS25zM0puemtMY2xhTkdJYnh3SnFJ aXNBVS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMjZlYjEzNi00 ZmU1LTRlNjEtYTRkOC1mMzQ1ZjUyYmMyNWQvMi8wNDUyQTdCMzcyNjdDRTQyREM5 NUEzNDYyMUJDNzAyNkEyMjJCMDA1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACdY3Dj8d5ftEA9pCDlCR weFOuFSjhGUm2NqnmnJkLxMAhckOFNV1SmcaKp1wfDr7rQruawgxfJV38OKQfJDb BcuI2XVlGhTHIqmI31GSBII8dCMfrVNOwCrslKz1oJFH+1CH87O+DAdmtz3J9W4x Gkx6n4pdlYS8ARmgrUbaMbRS2Tt0HWiL7BQTXulaj20+jNInMRMt+FQ14aValTNu t62IAPcKBwRvomQBL/W50g3/AqyhbFT72/dOU5h+xOGPs0O0FRaZFPOcdzmNSN28 yjDjwxk3SW2am6FrPm3rRr5FJw9PoiPSBrtTnLG2Mi+TBaL8XC7iTfZgohHueV3T 0Q== -----END CERTIFICATE-----Generated at Sun Dec 21 10:16:09 2025 by rpki-client