This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/1/42EA91E83AEA0A647DA82C5C13866CDFB6893917.mft File: 42EA91E83AEA0A647DA82C5C13866CDFB6893917.mft (raw, json) Hash identifier: UGcJoi8T+C9Mjv+Iazsj63VhMZLJlADRX8KNDG+U4AQ= Subject key identifier: 6A:65:2B:B6:3B:53:C6:E4:DE:FC:BC:A2:9D:04:BE:8B:7C:0A:82:F5 Authority key identifier: 42:EA:91:E8:3A:EA:0A:64:7D:A8:2C:5C:13:86:6C:DF:B6:89:39:17 Certificate issuer: /CN=42ea91e83aea0a647da82c5c13866cdfb6893917 Certificate serial: 5AB9D6BE3C687963320F233F41264BC27BDCC155 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QuqR6DrqCmR9qCxcE4Zs37aJORc.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/1/42EA91E83AEA0A647DA82C5C13866CDFB6893917.mft Manifest number: 1B Signing time: Fri 26 Dec 2025 10:10:02 +0000 Manifest this update: Fri 26 Dec 2025 10:05:02 +0000 Manifest next update: Sat 27 Dec 2025 10:58:02 +0000 Files and hashes: 1: 42EA91E83AEA0A647DA82C5C13866CDFB6893917.crl (hash: 2YLUzvfRQgUMG/vKLeXot43PIWJ07iN/sUY2rzBWN0o=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/1/42EA91E83AEA0A647DA82C5C13866CDFB6893917.crl rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/1/42EA91E83AEA0A647DA82C5C13866CDFB6893917.mft rsync://rpki.ripe.net/repository/DEFAULT/QuqR6DrqCmR9qCxcE4Zs37aJORc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:b9:d6:be:3c:68:79:63:32:0f:23:3f:41:26:4b:c2:7b:dc:c1:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42ea91e83aea0a647da82c5c13866cdfb6893917 Validity Not Before: Dec 26 10:05:02 2025 GMT Not After : Dec 27 10:58:02 2025 GMT Subject: CN=6A652BB63B53C6E4DEFCBCA29D04BE8B7C0A82F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7b:0d:62:98:cb:c9:5f:07:ae:09:e1:3c:72: a0:57:f4:d9:c2:d5:4a:a9:04:af:02:78:fe:5f:8e: a3:92:5b:ec:07:de:fa:ee:f4:1f:80:9e:b9:cc:bd: 56:a6:02:27:8b:57:e3:97:55:77:ba:35:90:72:ab: 21:fc:f6:51:07:5d:c5:af:9a:7b:55:02:b1:db:1f: eb:0a:22:1e:0f:2c:00:e0:ee:28:0a:61:c2:49:4a: 67:3f:2f:bd:5c:39:fe:06:e5:ec:0a:bf:f0:e2:26: be:4e:4d:4f:0f:dd:9c:eb:91:11:18:f6:b2:b8:15: 01:db:22:7b:76:24:73:a3:d3:b7:a5:d4:8e:86:8c: 44:e8:7b:44:89:e9:99:c7:7b:84:87:34:06:b2:8b: 68:a4:77:ca:bb:dc:a2:85:e2:44:b0:40:e5:82:07: cd:9a:93:b2:c4:ee:31:5e:13:e1:2f:65:f1:de:4c: 12:45:c0:4a:58:70:64:2a:5d:2f:0f:a0:93:93:32: 2a:db:6e:bd:4a:d0:ac:86:46:76:b3:f1:24:73:d4: cf:1e:9d:0f:5a:0a:05:28:9e:5f:12:70:af:eb:2a: f2:eb:fa:c5:d4:66:fc:ac:96:bf:da:ec:21:57:49: 8e:d7:7d:f3:4c:10:db:2c:06:0b:46:f4:a8:b1:9d: 45:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:65:2B:B6:3B:53:C6:E4:DE:FC:BC:A2:9D:04:BE:8B:7C:0A:82:F5 X509v3 Authority Key Identifier: keyid:42:EA:91:E8:3A:EA:0A:64:7D:A8:2C:5C:13:86:6C:DF:B6:89:39:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/1/42EA91E83AEA0A647DA82C5C13866CDFB6893917.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QuqR6DrqCmR9qCxcE4Zs37aJORc.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/1/42EA91E83AEA0A647DA82C5C13866CDFB6893917.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:04:03:e8:5b:f5:7e:62:cd:c4:81:d0:6d:3c:3d:14:e7:17: b8:85:c1:fc:af:35:47:e5:87:43:1c:ba:ef:3c:07:80:5a:8e: 74:2e:86:8d:06:dd:66:87:1c:a3:91:b3:21:d5:72:11:e2:2e: db:06:86:53:82:db:d4:ae:2a:b8:ef:32:f6:1d:4f:88:6d:86: 26:ce:1f:21:ac:4c:67:3a:ba:0a:c7:6e:08:74:78:3a:44:6f: d5:40:3b:c8:fb:ae:94:6f:a2:30:44:36:46:88:84:d3:70:6d: 15:01:4c:cc:9f:e6:b8:2a:2d:9c:76:6c:b2:ae:0b:2e:1c:b4: 75:db:2c:12:36:59:b1:4b:b8:47:76:96:25:4b:86:26:ad:6c: 49:09:a8:29:14:04:ef:83:dc:c2:36:d8:6c:99:4e:5c:5e:e4: 90:bb:5a:ab:c7:86:b7:d8:73:39:d1:06:7b:53:85:42:eb:64: f3:73:d3:a2:c0:57:ec:7d:e4:a3:0a:e3:87:bd:c5:77:a1:24: 0f:04:c1:bf:6f:5c:28:54:5c:12:6f:11:bb:5d:12:60:7c:1c: 23:73:ed:52:07:45:14:09:ae:66:18:cd:69:56:1f:f0:dd:05: 2c:23:75:cf:f2:a2:21:3d:71:33:d2:db:93:66:c9:08:cf:44: c9:a6:1f:c6 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUWrnWvjxoeWMyDyM/QSZLwnvcwVUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDJlYTkxZTgzYWVhMGE2NDdkYTgyYzVjMTM4NjZjZGZi Njg5MzkxNzAeFw0yNTEyMjYxMDA1MDJaFw0yNTEyMjcxMDU4MDJaMDMxMTAvBgNV BAMTKDZBNjUyQkI2M0I1M0M2RTRERUZDQkNBMjlEMDRCRThCN0MwQTgyRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmew1imMvJXweuCeE8cqBX9NnC 1UqpBK8CeP5fjqOSW+wH3vru9B+AnrnMvVamAieLV+OXVXe6NZByqyH89lEHXcWv mntVArHbH+sKIh4PLADg7igKYcJJSmc/L71cOf4G5ewKv/DiJr5OTU8P3ZzrkREY 9rK4FQHbInt2JHOj07el1I6GjEToe0SJ6ZnHe4SHNAayi2ikd8q73KKF4kSwQOWC B82ak7LE7jFeE+EvZfHeTBJFwEpYcGQqXS8PoJOTMirbbr1K0KyGRnaz8SRz1M8e nQ9aCgUonl8ScK/rKvLr+sXUZvyslr/a7CFXSY7XffNMENssBgtG9KixnUVXAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUamUrtjtTxuTe/LyinQS+i3wKgvUwHwYDVR0j BBgwFoAUQuqR6DrqCmR9qCxcE4Zs37aJORcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDk3MThmMDgtYmIzOS00YTA5LWE0YzAtMWY0MDI0OGE2 ZDE1LzEvNDJFQTkxRTgzQUVBMEE2NDdEQTgyQzVDMTM4NjZDREZCNjg5MzkxNy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1F1cVI2RHJxQ21SOXFDeGNFNFpzMzdh Sk9SYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wOTcxOGYwOC1i YjM5LTRhMDktYTRjMC0xZjQwMjQ4YTZkMTUvMS80MkVBOTFFODNBRUEwQTY0N0RB ODJDNUMxMzg2NkNERkI2ODkzOTE3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArgQD6Fv1fmLNxIHQbTw9 FOcXuIXB/K81R+WHQxy67zwHgFqOdC6GjQbdZocco5GzIdVyEeIu2waGU4Lb1K4q uO8y9h1PiG2GJs4fIaxMZzq6CsduCHR4OkRv1UA7yPuulG+iMEQ2RoiE03BtFQFM zJ/muCotnHZssq4LLhy0ddssEjZZsUu4R3aWJUuGJq1sSQmoKRQE74PcwjbYbJlO XF7kkLtaq8eGt9hzOdEGe1OFQutk83PTosBX7H3kowrjh73Fd6EkDwTBv29cKFRc Em8Ru10SYHwcI3PtUgdFFAmuZhjNaVYf8N0FLCN1z/KiIT1xM9Lbk2bJCM9EyaYf xg== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:12 2025 by rpki-client