This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.mft File: 922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.mft (raw, json) Hash identifier: O8cNm6AaiO+JWFmZe3yLtCGajtkBOtGjOQVyHSRlkoc= Subject key identifier: BC:AD:47:E1:96:64:38:DE:A1:AE:A0:70:86:E8:6F:60:22:D4:FF:9D Authority key identifier: 92:20:85:CF:F3:65:7F:A2:AE:C6:F9:1D:91:BB:F0:CD:4D:D2:44:18 Certificate issuer: /CN=922085cff3657fa2aec6f91d91bbf0cd4dd24418 Certificate serial: 52EDDD87841E79AEBADF4D832550DB2A316E1EFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiCFz_Nlf6KuxvkdkbvwzU3SRBg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.mft Manifest number: 037A Signing time: Thu 18 Dec 2025 08:37:32 +0000 Manifest this update: Thu 18 Dec 2025 08:32:32 +0000 Manifest next update: Fri 19 Dec 2025 10:46:32 +0000 Files and hashes: 1: 922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.crl (hash: j9ZmfqTSu2AuR33IkMVnp/B8FaKJz24d+DYz0n5HbDM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.crl rsync://rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.mft rsync://rpki.ripe.net/repository/DEFAULT/kiCFz_Nlf6KuxvkdkbvwzU3SRBg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:ed:dd:87:84:1e:79:ae:ba:df:4d:83:25:50:db:2a:31:6e:1e:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=922085cff3657fa2aec6f91d91bbf0cd4dd24418 Validity Not Before: Dec 18 08:32:32 2025 GMT Not After : Dec 19 10:46:32 2025 GMT Subject: CN=BCAD47E1966438DEA1AEA07086E86F6022D4FF9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5c:ec:aa:0e:84:c2:06:a8:92:c0:32:9b:c2: 85:74:b7:f1:8c:97:05:8f:d3:64:6b:e7:89:7a:8b: 04:f1:57:bc:f7:49:4b:2d:ab:f2:78:21:76:da:5f: 54:f1:28:bf:bf:de:21:dc:85:e2:88:9e:88:79:34: 17:6b:c5:ab:d2:a0:57:6c:21:52:db:78:79:56:3c: e2:27:3e:08:f4:fb:af:c1:d7:13:86:31:ec:5d:c9: a7:ac:b6:84:7f:2d:98:33:d7:f1:73:a9:78:bd:24: bf:f9:d2:f0:13:b7:14:c4:58:bb:55:70:f5:50:33: e1:f9:3a:c1:da:d9:01:50:23:57:a1:af:0a:56:43: b6:f6:cc:77:58:de:ac:f4:46:1e:5b:25:07:32:c2: 3c:6f:a0:d7:c2:89:b6:0d:ec:d5:d2:4c:91:2d:13: 21:09:55:aa:e5:20:ea:e7:6d:ac:d8:b3:79:0f:34: da:94:31:36:0b:f4:f4:85:b4:a3:f7:3e:80:60:03: 36:fe:0d:11:51:f2:6d:6a:5b:21:25:f7:69:a1:7e: 82:2b:ac:50:f2:8f:cd:e8:f3:0f:a2:a3:da:75:5c: ce:84:91:b7:6f:82:72:95:4e:15:3d:d5:15:54:c4: 21:57:9a:df:f7:70:0c:1c:fb:7a:0f:a0:7d:49:ee: 73:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:AD:47:E1:96:64:38:DE:A1:AE:A0:70:86:E8:6F:60:22:D4:FF:9D X509v3 Authority Key Identifier: keyid:92:20:85:CF:F3:65:7F:A2:AE:C6:F9:1D:91:BB:F0:CD:4D:D2:44:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiCFz_Nlf6KuxvkdkbvwzU3SRBg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:4d:93:4a:f2:07:39:7a:35:bc:50:0f:00:79:66:13:af:52: 90:f7:5a:63:31:4d:2e:01:b9:f7:ce:dd:ad:de:7a:06:e4:6d: 37:ec:1a:20:44:4c:c6:ab:08:25:d7:75:86:fa:17:76:40:11: 1c:d1:02:f6:39:b1:29:12:53:d6:ff:ce:01:68:4e:5c:15:df: 81:79:49:6b:f9:25:f8:9e:84:ca:5f:d8:ee:84:61:c7:57:c8: e0:2d:18:2e:76:0b:1c:3b:99:c7:4d:0b:1a:bf:fa:18:86:5c: b1:68:a7:52:0d:c5:bc:dc:47:fd:ba:d6:ea:5c:97:6a:6f:74: 58:5b:55:38:a6:ed:9b:c9:4c:9c:96:fa:f2:c7:70:c9:a7:84: d5:7f:9c:89:36:57:1d:ed:aa:2b:b9:5f:0b:62:cf:71:90:96: a1:e3:60:b4:eb:31:27:98:a3:9e:c6:b0:c3:3b:a2:b6:84:e3: e3:d2:c3:bc:5c:22:1f:79:de:04:f8:23:76:f6:55:6d:35:69: fc:4f:49:2d:dd:74:c3:91:31:d1:71:6e:85:86:2d:20:71:d5: a3:c1:6f:8b:4f:1e:a1:9d:59:04:ca:e5:ec:e6:88:58:1c:a5: 27:87:81:13:63:26:ef:0a:1a:8b:b4:f9:e2:b4:5e:57:1a:87: 46:f9:0f:33 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUUu3dh4Qeea66302DJVDbKjFuHv0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIyMDg1Y2ZmMzY1N2ZhMmFlYzZmOTFkOTFiYmYwY2Q0 ZGQyNDQxODAeFw0yNTEyMTgwODMyMzJaFw0yNTEyMTkxMDQ2MzJaMDMxMTAvBgNV BAMTKEJDQUQ0N0UxOTY2NDM4REVBMUFFQTA3MDg2RTg2RjYwMjJENEZGOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkXOyqDoTCBqiSwDKbwoV0t/GM lwWP02Rr54l6iwTxV7z3SUstq/J4IXbaX1TxKL+/3iHcheKInoh5NBdrxavSoFds IVLbeHlWPOInPgj0+6/B1xOGMexdyaestoR/LZgz1/FzqXi9JL/50vATtxTEWLtV cPVQM+H5OsHa2QFQI1ehrwpWQ7b2zHdY3qz0Rh5bJQcywjxvoNfCibYN7NXSTJEt EyEJVarlIOrnbazYs3kPNNqUMTYL9PSFtKP3PoBgAzb+DRFR8m1qWyEl92mhfoIr rFDyj83o8w+io9p1XM6EkbdvgnKVThU91RVUxCFXmt/3cAwc+3oPoH1J7nNxAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUvK1H4ZZkON6hrqBwhuhvYCLU/50wHwYDVR0j BBgwFoAUkiCFz/Nlf6KuxvkdkbvwzU3SRBgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWQ4MTQ3N2UtNTEwYi00ZDM3LWEyMjktZWQ0ZTg4ZmJl NjVhLzAvOTIyMDg1Q0ZGMzY1N0ZBMkFFQzZGOTFEOTFCQkYwQ0Q0REQyNDQxOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2tpQ0Z6X05sZjZLdXh2a2RrYnZ3elUz U1JCZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lZDgxNDc3ZS01 MTBiLTRkMzctYTIyOS1lZDRlODhmYmU2NWEvMC85MjIwODVDRkYzNjU3RkEyQUVD NkY5MUQ5MUJCRjBDRDRERDI0NDE4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAME2TSvIHOXo1vFAPAHlm E69SkPdaYzFNLgG5987drd56BuRtN+waIERMxqsIJdd1hvoXdkARHNEC9jmxKRJT 1v/OAWhOXBXfgXlJa/kl+J6Eyl/Y7oRhx1fI4C0YLnYLHDuZx00LGr/6GIZcsWin Ug3FvNxH/brW6lyXam90WFtVOKbtm8lMnJb68sdwyaeE1X+ciTZXHe2qK7lfC2LP cZCWoeNgtOsxJ5ijnsawwzuitoTj49LDvFwiH3neBPgjdvZVbTVp/E9JLd10w5Ex 0XFuhYYtIHHVo8Fvi08eoZ1ZBMrl7OaIWBylJ4eBE2Mm7woai7T54rReVxqHRvkP Mw== -----END CERTIFICATE-----Generated at Thu Dec 18 14:06:00 2025 by rpki-client