This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft File: D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft (raw, json) Hash identifier: weMSe4cUFe7IhjBrSflMEZNtpiwHTsfS4xCSGutZ9uU= Subject key identifier: DA:38:2B:63:3C:55:7D:77:25:A6:76:47:DA:B7:F7:EC:F7:5D:A1:D2 Authority key identifier: D0:2B:BB:44:0B:9D:D4:40:88:DB:68:4E:E8:2F:A2:A7:DA:06:FC:F6 Certificate issuer: /CN=d02bbb440b9dd44088db684ee82fa2a7da06fcf6 Certificate serial: 6B8BDEE2B2956FA7A9A9958E3B34FCCCB9130733 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft Manifest number: 042F Signing time: Sun 14 Dec 2025 16:20:16 +0000 Manifest this update: Sun 14 Dec 2025 16:15:16 +0000 Manifest next update: Mon 15 Dec 2025 19:56:16 +0000 Files and hashes: 1: AS203843.asa (hash: GVjcEElWVcaHaV2bppgVpXszuN2GI++jaQIYET3p6Tg=) 2: D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl (hash: NGpFenrPwb9eHTXOyNJRpvWI4hLALBdR70OfIfrSw3w=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 19:56:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:8b:de:e2:b2:95:6f:a7:a9:a9:95:8e:3b:34:fc:cc:b9:13:07:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d02bbb440b9dd44088db684ee82fa2a7da06fcf6 Validity Not Before: Dec 14 16:15:16 2025 GMT Not After : Dec 15 19:56:16 2025 GMT Subject: CN=DA382B633C557D7725A67647DAB7F7ECF75DA1D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8e:82:35:0d:b8:a8:ae:ed:e8:38:8e:49:19: bf:66:24:eb:f9:45:2c:45:89:78:78:f7:f4:e3:76: d9:4e:1a:59:45:e8:4b:e6:a4:4f:32:13:73:ed:21: 9c:8d:bf:fe:df:b9:00:69:89:dc:55:c7:28:0f:be: 2d:32:57:82:ce:03:84:9f:64:1a:2e:7e:a1:97:9f: 99:bc:86:91:56:35:9b:b4:6c:d3:a7:44:b0:52:65: 1f:f5:96:bb:1b:4c:f3:d3:17:e8:6a:9f:71:23:67: a2:f9:af:41:cf:79:b5:f0:85:86:a0:2a:d4:09:4c: 17:c9:06:e6:9f:5d:53:e0:87:d6:46:0b:c8:bb:de: d7:79:92:84:b7:6b:c0:1b:56:13:b5:46:a5:59:b8: 32:58:30:70:f1:49:bc:a9:5e:50:10:e7:b6:07:73: d5:25:15:af:47:d6:c8:03:c9:2e:07:66:5d:31:e9: db:ff:74:56:64:2f:b0:2a:c0:c0:87:41:ec:e0:ea: 25:a8:54:03:16:52:50:f8:40:3d:34:20:81:a7:07: b1:88:87:1d:c5:2c:05:40:fd:58:8a:36:f8:55:5d: 91:9a:8a:f9:65:93:dc:bf:d1:d5:93:a3:d5:38:46: 1c:2d:8d:69:06:d3:57:6b:24:f5:cc:71:b3:6f:ec: 49:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:38:2B:63:3C:55:7D:77:25:A6:76:47:DA:B7:F7:EC:F7:5D:A1:D2 X509v3 Authority Key Identifier: keyid:D0:2B:BB:44:0B:9D:D4:40:88:DB:68:4E:E8:2F:A2:A7:DA:06:FC:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:3e:5b:a7:8b:fe:d6:77:48:59:78:2d:57:53:75:b4:53:9f: 20:f5:6f:27:cc:82:bc:bf:2c:3a:c8:59:b6:9f:e6:7d:c5:85: 73:f6:ae:0a:5c:aa:49:04:b7:33:82:4a:43:97:d1:92:56:72: 17:fd:97:58:6f:79:0f:a8:b8:cc:93:d1:eb:e8:9d:d3:a9:a4: e5:5e:75:3f:98:52:28:c8:6c:ad:e8:78:0a:ce:22:18:40:33: 8c:0b:53:39:4d:5f:ca:88:7e:f4:80:e8:3b:49:3e:b3:88:67: 8c:95:70:d8:d0:c3:16:44:3a:94:29:0d:f1:bf:3b:e0:ee:5c: 44:d4:0c:1d:e4:cb:24:29:6c:78:00:61:25:3a:f7:f8:c2:34: 8a:be:6d:05:90:65:27:a3:d5:b7:2b:e1:9a:fc:a9:a1:46:8d: d7:b9:e3:64:b8:0d:99:9e:c1:32:78:c7:63:d5:d3:df:cc:b0: f8:c3:68:b2:6c:77:aa:e2:b1:ed:c1:67:4e:23:d5:65:1e:63: 44:1b:6b:ff:f5:7c:e9:29:1b:47:67:91:3a:09:62:08:67:0e: 75:33:d3:44:c8:c3:8b:0c:9b:7b:b5:77:9e:26:a1:ca:5a:8f: 54:8c:01:ec:05:96:89:6e:68:bf:ea:eb:6b:2c:18:fa:40:88: 8c:44:e4:79 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUa4ve4rKVb6epqZWOOzT8zLkTBzMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDAyYmJiNDQwYjlkZDQ0MDg4ZGI2ODRlZTgyZmEyYTdk YTA2ZmNmNjAeFw0yNTEyMTQxNjE1MTZaFw0yNTEyMTUxOTU2MTZaMDMxMTAvBgNV BAMTKERBMzgyQjYzM0M1NTdENzcyNUE2NzY0N0RBQjdGN0VDRjc1REExRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5joI1Dbioru3oOI5JGb9mJOv5 RSxFiXh49/TjdtlOGllF6EvmpE8yE3PtIZyNv/7fuQBpidxVxygPvi0yV4LOA4Sf ZBoufqGXn5m8hpFWNZu0bNOnRLBSZR/1lrsbTPPTF+hqn3EjZ6L5r0HPebXwhYag KtQJTBfJBuafXVPgh9ZGC8i73td5koS3a8AbVhO1RqVZuDJYMHDxSbypXlAQ57YH c9UlFa9H1sgDyS4HZl0x6dv/dFZkL7AqwMCHQezg6iWoVAMWUlD4QD00IIGnB7GI hx3FLAVA/ViKNvhVXZGaivllk9y/0dWTo9U4RhwtjWkG01drJPXMcbNv7EnLAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU2jgrYzxVfXclpnZH2rf37PddodIwHwYDVR0j BBgwFoAU0Cu7RAud1ECI22hO6C+ip9oG/PYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTNmNjg1NjEtMGE3NC00Y2NhLWJmOGYtMTJmYWFhZmM4 ZWI4LzEvRDAyQkJCNDQwQjlERDQ0MDg4REI2ODRFRTgyRkEyQTdEQTA2RkNGNi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBDdTdSQXVkMUVDSTIyaE82Qy1pcDlv R19QWS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xM2Y2ODU2MS0w YTc0LTRjY2EtYmY4Zi0xMmZhYWFmYzhlYjgvMS9EMDJCQkI0NDBCOURENDQwODhE QjY4NEVFODJGQTJBN0RBMDZGQ0Y2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGz5bp4v+1ndIWXgtV1N1 tFOfIPVvJ8yCvL8sOshZtp/mfcWFc/auClyqSQS3M4JKQ5fRklZyF/2XWG95D6i4 zJPR6+id06mk5V51P5hSKMhsreh4Cs4iGEAzjAtTOU1fyoh+9IDoO0k+s4hnjJVw 2NDDFkQ6lCkN8b874O5cRNQMHeTLJClseABhJTr3+MI0ir5tBZBlJ6PVtyvhmvyp oUaN17njZLgNmZ7BMnjHY9XT38yw+MNosmx3quKx7cFnTiPVZR5jRBtr//V86Skb R2eROgliCGcOdTPTRMjDiwybe7V3niahylqPVIwB7AWWiW5ov+rraywY+kCIjETk eQ== -----END CERTIFICATE-----Generated at Mon Dec 15 09:10:49 2025 by rpki-client