This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/02a9e8a5-c8f4-47b3-80c9-f1e02a8aaa89/0/FA9B54C77884D87579E661822CB46BEDD39FA5D3.mft File: FA9B54C77884D87579E661822CB46BEDD39FA5D3.mft (raw, json) Hash identifier: 2vUzq+381F4aVZ1+07CVHl1ril+okL9sgv7jJqriG9Y= Subject key identifier: CA:61:22:D2:23:07:AB:64:29:C0:DF:6D:A6:4E:58:1F:B1:F3:68:A9 Authority key identifier: FA:9B:54:C7:78:84:D8:75:79:E6:61:82:2C:B4:6B:ED:D3:9F:A5:D3 Certificate issuer: /CN=FA9B54C77884D87579E661822CB46BEDD39FA5D3 Certificate serial: 05CDB4D6EF9E9951D347FE675A9238CCFF6C2CC6 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/FA9B54C77884D87579E661822CB46BEDD39FA5D3.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/02a9e8a5-c8f4-47b3-80c9-f1e02a8aaa89/0/FA9B54C77884D87579E661822CB46BEDD39FA5D3.mft Manifest number: 10 Signing time: Wed 10 Dec 2025 01:21:02 +0000 Manifest this update: Wed 10 Dec 2025 01:16:02 +0000 Manifest next update: Thu 11 Dec 2025 02:53:02 +0000 Files and hashes: 1: FA9B54C77884D87579E661822CB46BEDD39FA5D3.crl (hash: h0N+F/dlfd42y3kkmPqjTvUahVWlCbboEgvUjTz1piI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/02a9e8a5-c8f4-47b3-80c9-f1e02a8aaa89/0/FA9B54C77884D87579E661822CB46BEDD39FA5D3.crl rsync://rsync.paas.rpki.ripe.net/repository/02a9e8a5-c8f4-47b3-80c9-f1e02a8aaa89/0/FA9B54C77884D87579E661822CB46BEDD39FA5D3.mft rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/FA9B54C77884D87579E661822CB46BEDD39FA5D3.cer rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.mft rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 00:58:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:cd:b4:d6:ef:9e:99:51:d3:47:fe:67:5a:92:38:cc:ff:6c:2c:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA9B54C77884D87579E661822CB46BEDD39FA5D3 Validity Not Before: Dec 10 01:16:02 2025 GMT Not After : Dec 11 02:53:02 2025 GMT Subject: CN=CA6122D22307AB6429C0DF6DA64E581FB1F368A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c4:11:d8:ce:da:51:fc:43:47:c9:c2:30:44: c1:09:d9:a1:41:b4:60:1f:52:00:56:39:5e:bd:84: 84:a7:09:59:7e:b7:cd:e3:e7:b3:9f:8d:4a:f5:fa: c9:4e:23:24:e1:3c:24:a9:9c:b2:56:95:a2:da:0a: f0:d0:db:e9:7e:9b:d0:6f:3f:5c:86:70:c2:09:4d: d4:76:cb:a7:5b:8e:3c:cb:51:46:cb:ef:70:70:d1: b0:a5:88:33:fb:9e:ec:51:ad:b3:0f:68:20:5b:e4: 08:ed:e9:69:4f:d8:4e:32:fd:22:23:b8:62:76:96: 66:ed:60:08:0e:3d:15:bc:0f:9b:a5:d9:8d:36:80: de:48:75:99:4e:12:4f:20:c8:95:90:2c:4b:a7:4c: 7a:be:6c:f6:3a:50:8a:d2:3c:1a:de:c0:c8:b2:dd: d0:16:0e:da:04:98:bc:54:29:7e:cd:85:f1:8d:33: 69:bf:8b:b1:91:a8:b3:c1:a7:7f:c3:58:5b:0d:a5: fd:0b:07:d3:b4:8d:6e:57:30:19:ea:dd:ea:eb:e3: ea:05:30:db:09:c3:c4:9e:12:0f:5b:73:cc:0a:4f: 9b:d2:c5:ce:ee:b4:67:dc:9a:52:a3:67:cd:b8:c5: 8f:1a:02:04:16:aa:4a:05:b5:7e:73:a9:04:77:83: 4b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:61:22:D2:23:07:AB:64:29:C0:DF:6D:A6:4E:58:1F:B1:F3:68:A9 X509v3 Authority Key Identifier: keyid:FA:9B:54:C7:78:84:D8:75:79:E6:61:82:2C:B4:6B:ED:D3:9F:A5:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/02a9e8a5-c8f4-47b3-80c9-f1e02a8aaa89/0/FA9B54C77884D87579E661822CB46BEDD39FA5D3.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/FA9B54C77884D87579E661822CB46BEDD39FA5D3.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/02a9e8a5-c8f4-47b3-80c9-f1e02a8aaa89/0/FA9B54C77884D87579E661822CB46BEDD39FA5D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:87:88:63:8f:49:b2:8c:37:26:60:5f:28:82:07:26:fd:e9: 08:e8:a4:0e:f2:68:90:1c:9d:bb:2c:9b:66:e5:5e:f9:59:f2: 90:d3:3b:aa:bf:36:70:38:f0:80:9d:96:74:af:25:3d:30:16: b6:24:31:f8:86:b0:f5:60:5a:a6:ba:0d:6c:4e:b1:90:38:85: 74:7c:0f:ce:02:df:f1:4c:88:20:b6:dc:7d:f7:0d:9f:2c:74: a6:41:5f:34:74:9c:ed:f0:90:6a:c9:8e:a4:22:65:af:51:1f: 49:e9:ad:e5:aa:2f:76:1a:d1:de:36:7d:45:8e:3e:b1:65:38: a2:5e:1c:3b:e5:48:84:1e:b5:44:37:d7:66:ea:73:58:23:74: dd:51:d5:d3:81:de:a2:a3:09:20:44:d6:bd:35:b5:a1:42:2f: 8c:20:6e:26:f9:9d:a7:04:4e:9f:75:71:bd:58:df:d2:95:c4: c0:a5:e1:27:26:05:ba:ef:de:33:4d:c7:51:73:4e:5a:c6:11: 29:97:a6:09:1e:1c:b8:bc:f7:7c:97:4b:0f:36:90:5f:7e:00: 18:d1:bc:b1:f7:16:f8:d7:01:57:45:9f:61:2a:38:1d:d1:b1: d4:03:10:2e:cb:65:04:92:99:df:e1:5d:8c:ec:24:45:32:ad: 24:8d:bc:5b -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUBc201u+emVHTR/5nWpI4zP9sLMYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE5QjU0Qzc3ODg0RDg3NTc5RTY2MTgyMkNCNDZCRURE MzlGQTVEMzAeFw0yNTEyMTAwMTE2MDJaFw0yNTEyMTEwMjUzMDJaMDMxMTAvBgNV BAMTKENBNjEyMkQyMjMwN0FCNjQyOUMwREY2REE2NEU1ODFGQjFGMzY4QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTxBHYztpR/ENHycIwRMEJ2aFB tGAfUgBWOV69hISnCVl+t83j57OfjUr1+slOIyThPCSpnLJWlaLaCvDQ2+l+m9Bv P1yGcMIJTdR2y6dbjjzLUUbL73Bw0bCliDP7nuxRrbMPaCBb5Ajt6WlP2E4y/SIj uGJ2lmbtYAgOPRW8D5ul2Y02gN5IdZlOEk8gyJWQLEunTHq+bPY6UIrSPBrewMiy 3dAWDtoEmLxUKX7NhfGNM2m/i7GRqLPBp3/DWFsNpf0LB9O0jW5XMBnq3err4+oF MNsJw8SeEg9bc8wKT5vSxc7utGfcmlKjZ824xY8aAgQWqkoFtX5zqQR3g0srAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUymEi0iMHq2QpwN9tpk5YH7HzaKkwHwYDVR0j BBgwFoAU+ptUx3iE2HV55mGCLLRr7dOfpdMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDJhOWU4YTUtYzhmNC00N2IzLTgwYzktZjFlMDJhOGFh YTg5LzAvRkE5QjU0Qzc3ODg0RDg3NTc5RTY2MTgyMkNCNDZCRUREMzlGQTVEMy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMjZlYjEzNi00ZmU1LTRl NjEtYTRkOC1mMzQ1ZjUyYmMyNWQvMC9GQTlCNTRDNzc4ODREODc1NzlFNjYxODIy Q0I0NkJFREQzOUZBNUQzLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzAyYTllOGE1LWM4ZjQtNDdiMy04MGM5LWYxZTAyYThhYWE4OS8wL0ZBOUI1NEM3 Nzg4NEQ4NzU3OUU2NjE4MjJDQjQ2QkVERDM5RkE1RDMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA1h4hj j0myjDcmYF8oggcm/ekI6KQO8miQHJ27LJtm5V75WfKQ0zuqvzZwOPCAnZZ0ryU9 MBa2JDH4hrD1YFqmug1sTrGQOIV0fA/OAt/xTIggttx99w2fLHSmQV80dJzt8JBq yY6kImWvUR9J6a3lqi92GtHeNn1Fjj6xZTiiXhw75UiEHrVEN9dm6nNYI3TdUdXT gd6iowkgRNa9NbWhQi+MIG4m+Z2nBE6fdXG9WN/SlcTApeEnJgW6794zTcdRc05a xhEpl6YJHhy4vPd8l0sPNpBffgAY0byx9xb41wFXRZ9hKjgd0bHUAxAuy2UEkpnf 4V2M7CRFMq0kjbxb -----END CERTIFICATE-----Generated at Wed Dec 10 08:48:32 2025 by rpki-client