This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft File: D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft (raw, json) Hash identifier: 0RyaEIiWz52ciU1tYasBAHrvzZYQC83t8an2NNE5Ass= Subject key identifier: 7D:CD:AF:12:39:B5:6B:D8:94:B8:7F:B0:E7:A5:0C:B4:45:C0:C9:AF Authority key identifier: D0:2B:BB:44:0B:9D:D4:40:88:DB:68:4E:E8:2F:A2:A7:DA:06:FC:F6 Certificate issuer: /CN=d02bbb440b9dd44088db684ee82fa2a7da06fcf6 Certificate serial: 24558C523A539B80BFBB61E33CA153E8F57A7905 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft Manifest number: 0430 Signing time: Mon 15 Dec 2025 12:00:16 +0000 Manifest this update: Mon 15 Dec 2025 11:55:16 +0000 Manifest next update: Tue 16 Dec 2025 15:35:16 +0000 Files and hashes: 1: AS203843.asa (hash: GVjcEElWVcaHaV2bppgVpXszuN2GI++jaQIYET3p6Tg=) 2: D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl (hash: 23zjKJtNE0mukLoJ87zkqAHg+kU+Yzz3CIZEOjjqyg4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:55:8c:52:3a:53:9b:80:bf:bb:61:e3:3c:a1:53:e8:f5:7a:79:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d02bbb440b9dd44088db684ee82fa2a7da06fcf6 Validity Not Before: Dec 15 11:55:16 2025 GMT Not After : Dec 16 15:35:16 2025 GMT Subject: CN=7DCDAF1239B56BD894B87FB0E7A50CB445C0C9AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4d:3e:c0:bc:2e:f0:87:59:94:57:04:84:24: 1e:a9:c3:8d:d3:39:0b:e2:a0:56:90:88:af:0f:a1: d0:29:9e:3b:e3:92:0f:c5:d1:b3:79:43:8b:5e:c0: 9e:46:5d:c1:de:35:1c:ec:4f:3b:c3:d1:a7:bc:45: da:01:93:05:55:e3:2b:39:2c:48:a2:cd:06:94:13: 2b:62:8c:30:fe:fe:1b:dd:36:17:80:9f:33:34:87: 77:6f:08:d2:c2:3e:8d:6e:1f:24:bb:c4:98:5b:83: fe:e0:39:06:03:4c:9d:95:03:52:6d:c6:00:78:50: e8:01:01:b3:93:a9:10:cc:6a:22:a7:27:8d:ed:14: cc:70:41:19:09:19:26:02:38:35:68:a6:2d:7f:d8: 1d:ff:04:cb:ad:da:90:4e:db:7c:6d:73:29:2d:bb: 62:22:e9:10:90:87:ca:a3:67:7b:a4:c0:33:f6:6e: be:75:ef:d1:b3:c5:27:68:26:a8:72:75:01:39:d2: 46:ab:d8:b0:24:3d:1d:02:87:57:28:41:a9:9a:69: 3a:f3:63:6b:13:75:d6:74:7b:41:48:ea:7e:d4:a0: 26:23:87:73:fb:a9:03:a9:41:bc:77:c8:2b:da:7e: 98:10:a7:20:1c:fb:79:1d:b0:54:23:05:27:b9:1d: 71:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:CD:AF:12:39:B5:6B:D8:94:B8:7F:B0:E7:A5:0C:B4:45:C0:C9:AF X509v3 Authority Key Identifier: keyid:D0:2B:BB:44:0B:9D:D4:40:88:DB:68:4E:E8:2F:A2:A7:DA:06:FC:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:8e:8d:7a:35:13:95:08:60:86:6f:9c:94:4a:29:37:94:e2: 6c:54:97:00:58:f7:13:9b:8c:65:fa:81:24:54:95:74:5d:ca: e0:4a:2c:e1:fc:40:d0:b5:42:c2:1f:03:78:c6:f2:8b:20:37: 28:d0:4c:a2:cf:87:6e:1c:60:62:3e:53:22:27:6e:13:23:e1: 00:47:a3:6c:1d:4c:28:5f:f5:ef:f8:ec:0a:d8:12:9b:13:c9: bf:75:29:0b:03:ff:eb:49:84:0a:e6:4e:66:af:88:f4:3a:64: 4f:33:ed:20:f6:f6:85:c6:52:7a:f9:2f:72:47:eb:1c:8e:11: e4:71:5f:33:60:e4:b6:46:4b:5e:93:25:b1:52:5c:3d:46:63: 55:56:b5:bd:23:87:03:e6:cb:e9:f1:90:c7:db:b0:91:f8:7a: 2e:96:eb:c4:51:9d:64:0c:d2:d6:74:94:ab:5d:3b:7e:cb:9c: d1:ff:b3:d9:e0:f4:59:be:60:0f:46:a9:8f:97:60:19:47:37: 64:05:7b:11:e7:20:bd:08:79:68:84:fc:47:29:0e:b4:4b:46: be:59:8f:9d:ed:bf:e5:dd:f0:8e:46:0e:23:c7:b3:60:69:c5: 45:88:10:e6:3a:dd:fd:af:1a:b5:3b:16:db:a6:48:1e:81:05: 0f:7a:4f:19 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUJFWMUjpTm4C/u2HjPKFT6PV6eQUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDAyYmJiNDQwYjlkZDQ0MDg4ZGI2ODRlZTgyZmEyYTdk YTA2ZmNmNjAeFw0yNTEyMTUxMTU1MTZaFw0yNTEyMTYxNTM1MTZaMDMxMTAvBgNV BAMTKDdEQ0RBRjEyMzlCNTZCRDg5NEI4N0ZCMEU3QTUwQ0I0NDVDMEM5QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkTT7AvC7wh1mUVwSEJB6pw43T OQvioFaQiK8PodApnjvjkg/F0bN5Q4tewJ5GXcHeNRzsTzvD0ae8RdoBkwVV4ys5 LEiizQaUEytijDD+/hvdNheAnzM0h3dvCNLCPo1uHyS7xJhbg/7gOQYDTJ2VA1Jt xgB4UOgBAbOTqRDMaiKnJ43tFMxwQRkJGSYCODVopi1/2B3/BMut2pBO23xtcykt u2Ii6RCQh8qjZ3ukwDP2br5179GzxSdoJqhydQE50kar2LAkPR0Ch1coQamaaTrz Y2sTddZ0e0FI6n7UoCYjh3P7qQOpQbx3yCvafpgQpyAc+3kdsFQjBSe5HXGxAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUfc2vEjm1a9iUuH+w56UMtEXAya8wHwYDVR0j BBgwFoAU0Cu7RAud1ECI22hO6C+ip9oG/PYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTNmNjg1NjEtMGE3NC00Y2NhLWJmOGYtMTJmYWFhZmM4 ZWI4LzEvRDAyQkJCNDQwQjlERDQ0MDg4REI2ODRFRTgyRkEyQTdEQTA2RkNGNi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBDdTdSQXVkMUVDSTIyaE82Qy1pcDlv R19QWS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xM2Y2ODU2MS0w YTc0LTRjY2EtYmY4Zi0xMmZhYWFmYzhlYjgvMS9EMDJCQkI0NDBCOURENDQwODhE QjY4NEVFODJGQTJBN0RBMDZGQ0Y2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAY6NejUTlQhghm+clEop N5TibFSXAFj3E5uMZfqBJFSVdF3K4Eos4fxA0LVCwh8DeMbyiyA3KNBMos+Hbhxg Yj5TIiduEyPhAEejbB1MKF/17/jsCtgSmxPJv3UpCwP/60mECuZOZq+I9DpkTzPt IPb2hcZSevkvckfrHI4R5HFfM2DktkZLXpMlsVJcPUZjVVa1vSOHA+bL6fGQx9uw kfh6LpbrxFGdZAzS1nSUq107fsuc0f+z2eD0Wb5gD0apj5dgGUc3ZAV7EecgvQh5 aIT8RykOtEtGvlmPne2/5d3wjkYOI8ezYGnFRYgQ5jrd/a8atTsW26ZIHoEFD3pP GQ== -----END CERTIFICATE-----Generated at Tue Dec 16 00:22:38 2025 by rpki-client