This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/0/59906C43E7E7D104C7C84232EF2B9CDDBD7290A4.mft File: 59906C43E7E7D104C7C84232EF2B9CDDBD7290A4.mft (raw, json) Hash identifier: gRWkLtkteazaO7fKQsRKnCzqY7FyNGWGAolk6rg3Ydw= Subject key identifier: 26:BB:A5:C6:C7:89:59:EF:DF:EB:2F:AC:9C:11:25:F0:EB:08:38:3C Authority key identifier: 59:90:6C:43:E7:E7:D1:04:C7:C8:42:32:EF:2B:9C:DD:BD:72:90:A4 Certificate issuer: /CN=59906c43e7e7d104c7c84232ef2b9cddbd7290a4 Certificate serial: 2B6D5EA662587ACB425CBBE0B6797656FC8FCBD4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WZBsQ-fn0QTHyEIy7yuc3b1ykKQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/0/59906C43E7E7D104C7C84232EF2B9CDDBD7290A4.mft Manifest number: 56 Signing time: Fri 26 Dec 2025 12:44:48 +0000 Manifest this update: Fri 26 Dec 2025 12:39:48 +0000 Manifest next update: Sat 27 Dec 2025 14:56:48 +0000 Files and hashes: 1: 59906C43E7E7D104C7C84232EF2B9CDDBD7290A4.crl (hash: 8WsnHohj+s6o7kxls+XszVKZC9FGjtD5YOjk3omBxaI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/0/59906C43E7E7D104C7C84232EF2B9CDDBD7290A4.crl rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/0/59906C43E7E7D104C7C84232EF2B9CDDBD7290A4.mft rsync://rpki.ripe.net/repository/DEFAULT/WZBsQ-fn0QTHyEIy7yuc3b1ykKQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:6d:5e:a6:62:58:7a:cb:42:5c:bb:e0:b6:79:76:56:fc:8f:cb:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59906c43e7e7d104c7c84232ef2b9cddbd7290a4 Validity Not Before: Dec 26 12:39:48 2025 GMT Not After : Dec 27 14:56:48 2025 GMT Subject: CN=26BBA5C6C78959EFDFEB2FAC9C1125F0EB08383C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4f:13:1e:00:04:2a:e9:10:c3:2b:60:12:e3: 16:94:17:d2:00:8c:40:28:ea:be:23:8b:01:cf:e3: c7:67:45:f6:77:ea:10:7c:23:bd:2d:ed:78:6b:bd: 01:8e:d4:d4:a1:e6:ae:54:63:75:c7:8a:53:0e:f4: 4b:25:76:d7:07:5f:02:5d:3e:70:d4:e7:22:e5:99: e2:01:2d:eb:14:54:79:48:07:74:d8:95:a3:ae:b5: d4:d4:1e:e6:45:80:53:5c:7d:50:5b:4a:8e:e6:75: 7a:74:50:c1:ba:ee:91:ac:73:46:4c:c7:b9:41:9b: 14:c8:b9:41:ee:ca:bd:48:3a:fe:f9:3e:95:c5:d7: d1:f9:1a:ac:fe:c4:20:39:4c:66:80:1b:17:fd:24: cd:b2:34:c3:51:41:ed:0e:79:ed:76:4d:de:5f:5f: 26:30:4a:22:57:10:cc:f4:93:c2:b0:8d:b4:3d:64: a6:ab:d3:dc:b9:76:c2:9e:1f:50:d3:c1:02:38:aa: 6a:65:7d:3b:5a:8e:18:7f:06:b7:54:80:26:2b:2e: fe:d6:a3:25:af:94:97:43:f3:6a:eb:e9:2c:e5:71: 79:cc:2a:14:79:6c:9e:2d:07:17:ea:24:78:cc:b3: 3e:2d:1e:43:06:4a:45:23:8c:f0:34:ee:9b:d5:73: 4d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:BB:A5:C6:C7:89:59:EF:DF:EB:2F:AC:9C:11:25:F0:EB:08:38:3C X509v3 Authority Key Identifier: keyid:59:90:6C:43:E7:E7:D1:04:C7:C8:42:32:EF:2B:9C:DD:BD:72:90:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/0/59906C43E7E7D104C7C84232EF2B9CDDBD7290A4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZBsQ-fn0QTHyEIy7yuc3b1ykKQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/0/59906C43E7E7D104C7C84232EF2B9CDDBD7290A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:6f:c8:ce:5e:b1:d2:e8:9a:16:0b:6b:18:1a:51:ce:b4:d7: 96:9b:3f:09:2b:4c:bc:4f:21:49:5a:3a:2e:df:8d:7a:db:41: 04:24:40:e4:93:a4:45:0d:a2:a7:d8:66:a2:ce:85:96:b4:28: 86:11:95:80:0d:5d:fa:9f:30:7f:88:92:d7:fb:d6:ec:ff:06: 52:37:e6:d0:c6:19:38:d9:1c:37:20:16:ce:4e:a4:2d:14:a0: 11:2b:dc:b5:4d:a0:22:1e:46:cc:e3:6b:87:c4:88:4e:c5:13: d0:6c:82:4f:66:9a:5f:2f:c5:ce:3a:6f:73:8b:3d:4c:9f:28: fa:90:91:70:be:57:ce:2f:a8:ab:32:3f:76:40:86:cd:d0:99: 49:cb:c2:7e:ba:10:fa:88:54:31:69:b3:f5:be:23:c8:80:ea: fd:08:42:d5:8e:42:b4:5c:4b:de:8e:b7:24:e7:dd:ba:9c:3a: 00:43:ae:19:9f:8d:b7:10:9c:68:f6:f1:3c:b2:9b:df:ac:ed: 71:2c:b2:e3:32:0e:2c:a3:36:e1:92:ad:f5:7e:95:ec:25:2b: 5a:ae:a9:80:bc:96:be:21:5d:82:5d:15:63:ba:43:83:1e:90: 9d:b2:29:19:78:a2:72:32:2e:c7:55:d6:7e:73:90:83:ce:df: 07:a5:bc:fd -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUK21epmJYestCXLvgtnl2VvyPy9QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTk5MDZjNDNlN2U3ZDEwNGM3Yzg0MjMyZWYyYjljZGRi ZDcyOTBhNDAeFw0yNTEyMjYxMjM5NDhaFw0yNTEyMjcxNDU2NDhaMDMxMTAvBgNV BAMTKDI2QkJBNUM2Qzc4OTU5RUZERkVCMkZBQzlDMTEyNUYwRUIwODM4M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjTxMeAAQq6RDDK2AS4xaUF9IA jEAo6r4jiwHP48dnRfZ36hB8I70t7XhrvQGO1NSh5q5UY3XHilMO9EsldtcHXwJd PnDU5yLlmeIBLesUVHlIB3TYlaOutdTUHuZFgFNcfVBbSo7mdXp0UMG67pGsc0ZM x7lBmxTIuUHuyr1IOv75PpXF19H5Gqz+xCA5TGaAGxf9JM2yNMNRQe0Oee12Td5f XyYwSiJXEMz0k8KwjbQ9ZKar09y5dsKeH1DTwQI4qmplfTtajhh/BrdUgCYrLv7W oyWvlJdD82rr6SzlcXnMKhR5bJ4tBxfqJHjMsz4tHkMGSkUjjPA07pvVc03ZAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUJrulxseJWe/f6y+snBEl8OsIODwwHwYDVR0j BBgwFoAUWZBsQ+fn0QTHyEIy7yuc3b1ykKQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDNmZDBiNzYtNzI0My00YjI2LTk3NjAtY2MwN2I5NGJm ZTIzLzAvNTk5MDZDNDNFN0U3RDEwNEM3Qzg0MjMyRUYyQjlDRERCRDcyOTBBNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1daQnNRLWZuMFFUSHlFSXk3eXVjM2Ix eWtLUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wM2ZkMGI3Ni03 MjQzLTRiMjYtOTc2MC1jYzA3Yjk0YmZlMjMvMC81OTkwNkM0M0U3RTdEMTA0QzdD ODQyMzJFRjJCOUNEREJENzI5MEE0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlW/Izl6x0uiaFgtrGBpR zrTXlps/CStMvE8hSVo6Lt+NettBBCRA5JOkRQ2ip9hmos6FlrQohhGVgA1d+p8w f4iS1/vW7P8GUjfm0MYZONkcNyAWzk6kLRSgESvctU2gIh5GzONrh8SITsUT0GyC T2aaXy/Fzjpvc4s9TJ8o+pCRcL5Xzi+oqzI/dkCGzdCZScvCfroQ+ohUMWmz9b4j yIDq/QhC1Y5CtFxL3o63JOfdupw6AEOuGZ+NtxCcaPbxPLKb36ztcSyy4zIOLKM2 4ZKt9X6V7CUrWq6pgLyWviFdgl0VY7pDgx6QnbIpGXiicjIux1XWfnOQg87fB6W8 /Q== -----END CERTIFICATE-----Generated at Fri Dec 26 16:00:32 2025 by rpki-client