This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.mft File: C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.mft (raw, json) Hash identifier: avdTOySZc8NNKOKQ4vYHJKgLdG94RwDyAtQ+XchfoMo= Subject key identifier: 0D:FF:F1:E4:F7:5C:EB:8D:CB:52:66:04:E0:C0:55:10:98:59:60:8B Authority key identifier: C1:80:20:BD:C5:E6:BA:4A:54:74:D3:AA:0D:A4:A9:62:A6:8D:98:AB Certificate issuer: /CN=c18020bdc5e6ba4a5474d3aa0da4a962a68d98ab Certificate serial: 4F54C79C1196EE71B2F2158DC0FA41DBB455A5FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wYAgvcXmukpUdNOqDaSpYqaNmKs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.mft Manifest number: 4C Signing time: Mon 15 Dec 2025 18:54:38 +0000 Manifest this update: Mon 15 Dec 2025 18:49:38 +0000 Manifest next update: Tue 16 Dec 2025 21:28:38 +0000 Files and hashes: 1: C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.crl (hash: 0PkqoS5YBKM9AahuuraGC2p9eHsCWhgrvfE4FH48cnU=) 2: AS204211.asa (hash: yt11FQmMZ8P9UMbvCIMjnEDEe7PkUl2NP7ay9+7hSTo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.mft rsync://rpki.ripe.net/repository/DEFAULT/wYAgvcXmukpUdNOqDaSpYqaNmKs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 21:28:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:54:c7:9c:11:96:ee:71:b2:f2:15:8d:c0:fa:41:db:b4:55:a5:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c18020bdc5e6ba4a5474d3aa0da4a962a68d98ab Validity Not Before: Dec 15 18:49:38 2025 GMT Not After : Dec 16 21:28:38 2025 GMT Subject: CN=0DFFF1E4F75CEB8DCB526604E0C055109859608B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b1:5c:54:62:f4:66:e8:c4:c3:d2:22:3d:e9: 24:a6:e1:c2:52:fb:55:fb:8e:35:79:fd:06:06:6e: 60:f9:d5:f8:9f:f0:6f:e1:e0:11:ad:77:c2:ee:1e: 07:fc:ad:f9:ee:88:97:39:d3:86:fa:f5:24:52:4e: ab:82:2d:34:bc:b6:4d:f9:90:ce:d1:82:34:69:b7: bc:e9:c8:fc:9f:97:c3:a1:9d:0b:15:f6:cc:33:c9: c2:a9:b6:b9:09:0d:f0:3f:1b:51:0c:04:6e:74:32: 55:a3:63:ce:f7:7a:ce:ae:2d:17:f2:3b:26:14:6d: 9f:0e:8e:cf:b1:c1:27:d4:9e:82:4d:8e:21:5c:98: d2:0d:53:73:50:d8:22:82:f1:01:4c:58:b6:a7:e3: 6d:4c:4c:14:f3:e8:8d:4e:06:8b:b3:79:cd:3c:90: d4:35:ad:a9:ed:d7:57:4e:92:5d:df:35:ed:8e:37: 94:70:6e:8d:81:dd:c9:44:85:21:5f:4b:47:34:4b: 95:9a:da:46:1d:54:bb:7b:cf:74:2e:e1:6c:41:6d: 58:aa:f4:ff:46:d1:78:29:5f:17:4a:bc:b9:bd:30: fd:45:0a:a9:fb:a9:16:4f:bd:a3:c0:8b:36:ff:fb: 30:b3:62:ad:d1:02:52:a0:e9:28:c9:23:ad:2e:92: 49:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:FF:F1:E4:F7:5C:EB:8D:CB:52:66:04:E0:C0:55:10:98:59:60:8B X509v3 Authority Key Identifier: keyid:C1:80:20:BD:C5:E6:BA:4A:54:74:D3:AA:0D:A4:A9:62:A6:8D:98:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wYAgvcXmukpUdNOqDaSpYqaNmKs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/1/C18020BDC5E6BA4A5474D3AA0DA4A962A68D98AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:0d:67:f6:b4:14:ac:4b:51:6d:61:3b:f7:7a:cf:53:4b:2e: 31:5f:71:72:85:2b:01:ed:5f:bd:09:72:86:54:52:ee:ac:e5: e9:c7:42:54:aa:99:9f:d5:0f:a9:a4:db:4d:2a:2a:50:23:98: 85:69:3e:3e:b8:a6:08:b3:eb:62:c6:4c:2b:4e:bc:61:e4:57: e3:d8:72:dc:9d:bc:4b:52:b6:fc:82:ac:76:a9:04:c7:be:10: 07:52:d3:9d:22:2b:f9:7b:0f:14:46:02:b7:4a:03:5a:99:fe: 6d:09:02:bc:bc:89:e3:61:c7:ab:54:d7:fd:38:25:95:c3:29: 78:05:4e:8b:f0:99:99:e8:ff:58:6d:bc:85:5b:10:32:42:3d: fc:dc:96:24:31:fe:64:08:67:0a:e1:84:36:92:2e:02:50:f2: c3:95:b9:50:50:d3:d5:20:28:d0:25:0e:d5:c9:f2:8f:0b:03: a4:ae:ad:4a:10:7a:f5:aa:bf:8d:a1:d8:f1:4d:9f:10:c0:12: 89:39:8a:c9:8c:aa:5d:a8:81:ba:55:d1:2a:aa:17:72:e0:10: fa:82:fc:3f:c6:e9:eb:5d:c6:a3:11:dd:d1:ad:4d:30:72:05: e5:d6:26:b1:ff:e5:d1:df:7b:4a:89:5a:0d:17:fb:17:45:f4: d9:07:74:22 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUT1THnBGW7nGy8hWNwPpB27RVpf4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzE4MDIwYmRjNWU2YmE0YTU0NzRkM2FhMGRhNGE5NjJh NjhkOThhYjAeFw0yNTEyMTUxODQ5MzhaFw0yNTEyMTYyMTI4MzhaMDMxMTAvBgNV BAMTKDBERkZGMUU0Rjc1Q0VCOERDQjUyNjYwNEUwQzA1NTEwOTg1OTYwOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3sVxUYvRm6MTD0iI96SSm4cJS +1X7jjV5/QYGbmD51fif8G/h4BGtd8LuHgf8rfnuiJc504b69SRSTquCLTS8tk35 kM7RgjRpt7zpyPyfl8OhnQsV9swzycKptrkJDfA/G1EMBG50MlWjY873es6uLRfy OyYUbZ8Ojs+xwSfUnoJNjiFcmNINU3NQ2CKC8QFMWLan421MTBTz6I1OBouzec08 kNQ1rant11dOkl3fNe2ON5Rwbo2B3clEhSFfS0c0S5Wa2kYdVLt7z3Qu4WxBbViq 9P9G0XgpXxdKvLm9MP1FCqn7qRZPvaPAizb/+zCzYq3RAlKg6SjJI60ukkk1AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUDf/x5Pdc643LUmYE4MBVEJhZYIswHwYDVR0j BBgwFoAUwYAgvcXmukpUdNOqDaSpYqaNmKswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjUzMmI5ZWItMmZhZS00OGE4LTk3OTMtMzNlZWMwNjdj ZTM5LzEvQzE4MDIwQkRDNUU2QkE0QTU0NzREM0FBMERBNEE5NjJBNjhEOThBQi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dZQWd2Y1htdWtwVWROT3FEYVNwWXFh Tm1Lcy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNTMyYjllYi0y ZmFlLTQ4YTgtOTc5My0zM2VlYzA2N2NlMzkvMS9DMTgwMjBCREM1RTZCQTRBNTQ3 NEQzQUEwREE0QTk2MkE2OEQ5OEFCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkg1n9rQUrEtRbWE793rP U0suMV9xcoUrAe1fvQlyhlRS7qzl6cdCVKqZn9UPqaTbTSoqUCOYhWk+PrimCLPr YsZMK068YeRX49hy3J28S1K2/IKsdqkEx74QB1LTnSIr+XsPFEYCt0oDWpn+bQkC vLyJ42HHq1TX/TgllcMpeAVOi/CZmej/WG28hVsQMkI9/NyWJDH+ZAhnCuGENpIu AlDyw5W5UFDT1SAo0CUO1cnyjwsDpK6tShB69aq/jaHY8U2fEMASiTmKyYyqXaiB ulXRKqoXcuAQ+oL8P8bp613GoxHd0a1NMHIF5dYmsf/l0d97SolaDRf7F0X02Qd0 Ig== -----END CERTIFICATE-----Generated at Tue Dec 16 12:36:21 2025 by rpki-client