This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/4/2BDAC6477E49E86DFA1B7DC4F8DF3A43E1AC6666.mft File: 2BDAC6477E49E86DFA1B7DC4F8DF3A43E1AC6666.mft (raw, json) Hash identifier: cnIwa5ylQJymx8rY4ne2n3y2d7Jc2PmZ8IXFqc7fhcs= Subject key identifier: 0D:AD:F8:75:C5:FF:84:99:1A:41:ED:66:7C:99:5A:FB:E1:D3:6A:9B Authority key identifier: 2B:DA:C6:47:7E:49:E8:6D:FA:1B:7D:C4:F8:DF:3A:43:E1:AC:66:66 Certificate issuer: /CN=2bdac6477e49e86dfa1b7dc4f8df3a43e1ac6666 Certificate serial: 66D8CEEA5EA30632C4191ED7398C455CCEAFC1DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K9rGR35J6G36G33E-N86Q-GsZmY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/4/2BDAC6477E49E86DFA1B7DC4F8DF3A43E1AC6666.mft Manifest number: 51 Signing time: Thu 25 Dec 2025 23:36:26 +0000 Manifest this update: Thu 25 Dec 2025 23:31:26 +0000 Manifest next update: Sat 27 Dec 2025 02:47:26 +0000 Files and hashes: 1: 2BDAC6477E49E86DFA1B7DC4F8DF3A43E1AC6666.crl (hash: OGplcFe4KPI7L3GGwZnJBc14cF2puvuSchvDbYTOns4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/4/2BDAC6477E49E86DFA1B7DC4F8DF3A43E1AC6666.crl rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/4/2BDAC6477E49E86DFA1B7DC4F8DF3A43E1AC6666.mft rsync://rpki.ripe.net/repository/DEFAULT/K9rGR35J6G36G33E-N86Q-GsZmY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 02:47:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:d8:ce:ea:5e:a3:06:32:c4:19:1e:d7:39:8c:45:5c:ce:af:c1:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bdac6477e49e86dfa1b7dc4f8df3a43e1ac6666 Validity Not Before: Dec 25 23:31:26 2025 GMT Not After : Dec 27 02:47:26 2025 GMT Subject: CN=0DADF875C5FF84991A41ED667C995AFBE1D36A9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:db:99:80:30:67:16:49:43:61:26:9a:31:4c: ef:75:29:27:83:a3:0c:bb:83:fc:b0:de:c7:fe:c4: 46:dd:48:a5:8f:6b:fa:5a:9b:cd:c0:a7:3c:bb:ca: 9e:1b:0c:d0:22:19:b2:b7:56:b5:a4:55:c2:10:5a: c5:5c:38:5d:ec:02:43:4a:db:ad:44:c8:0e:5b:12: 62:67:08:63:8b:e5:18:55:ce:32:58:4f:aa:d3:f9: 6a:1f:c4:47:4a:d3:2c:71:ca:a4:38:39:d7:a5:69: 77:56:35:6a:6b:ec:a3:33:d9:31:b9:63:67:6f:2f: b0:45:2a:03:00:22:c7:fe:3c:0c:32:69:e8:5b:18: d4:7a:a7:8d:38:fb:2f:31:80:6a:9b:61:c3:2f:f2: 2a:3d:31:24:62:0f:d1:47:29:bf:18:0a:38:d2:b0: d3:65:af:3f:3c:16:4d:b8:00:9a:0c:fa:9d:a6:68: 53:b4:c9:51:53:7c:e1:ba:9c:a1:c5:77:3e:7f:db: e8:d5:af:c3:58:6f:00:74:41:a5:07:47:91:97:75: bd:cd:5f:27:31:4f:9b:0c:f4:a6:e0:e7:78:d3:92: d2:20:9b:37:e4:5d:fd:45:ec:a0:5f:5f:45:54:a2: b5:03:ba:69:60:17:9f:c7:c9:66:1c:a6:2a:3b:12: 74:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:AD:F8:75:C5:FF:84:99:1A:41:ED:66:7C:99:5A:FB:E1:D3:6A:9B X509v3 Authority Key Identifier: keyid:2B:DA:C6:47:7E:49:E8:6D:FA:1B:7D:C4:F8:DF:3A:43:E1:AC:66:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/4/2BDAC6477E49E86DFA1B7DC4F8DF3A43E1AC6666.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K9rGR35J6G36G33E-N86Q-GsZmY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/4/2BDAC6477E49E86DFA1B7DC4F8DF3A43E1AC6666.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:cc:4b:3b:d5:2f:16:ce:94:90:2a:64:42:bb:7e:89:e4:4e: 3a:ca:71:26:7c:f7:00:60:3e:19:7e:44:c3:78:ba:4e:48:25: 15:c1:3f:dd:09:56:b3:06:51:2e:53:4e:87:86:cb:d2:41:53: 69:75:45:d6:e0:59:a5:4d:d3:d8:ea:dc:0e:2e:56:80:f7:23: d0:ed:5a:eb:78:6a:13:81:ea:f8:83:4e:79:82:c4:6a:2a:10: ec:49:b8:a0:b3:d1:2f:60:9f:db:a1:a7:85:83:52:47:cd:d6: 43:c0:0a:a1:07:32:51:2d:db:55:aa:ab:36:73:45:eb:38:c4: 93:4c:0c:46:b4:b6:c5:c1:f5:83:01:40:ff:43:96:d5:f7:c3: 20:7f:0a:68:db:c9:4c:d3:4a:9c:ce:e6:e9:fe:74:97:5a:c4: dd:75:e3:1f:4b:08:de:73:dd:e7:92:38:1e:77:1e:d2:b5:37: 7a:da:87:29:e3:75:19:96:32:5d:ac:e0:47:40:9c:a8:d8:e5: 09:d6:a3:a8:e0:80:39:3f:fb:dc:f7:77:cc:54:ed:ff:b7:32: 78:92:41:f7:18:77:b1:49:b8:52:42:58:52:d7:47:5c:f1:f7: 51:a1:43:cd:03:62:5f:ec:76:6f:93:9e:79:fe:6e:d1:31:ff: 0d:ba:7c:b8 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUZtjO6l6jBjLEGR7XOYxFXM6vwdowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMmJkYWM2NDc3ZTQ5ZTg2ZGZhMWI3ZGM0ZjhkZjNhNDNl MWFjNjY2NjAeFw0yNTEyMjUyMzMxMjZaFw0yNTEyMjcwMjQ3MjZaMDMxMTAvBgNV BAMTKDBEQURGODc1QzVGRjg0OTkxQTQxRUQ2NjdDOTk1QUZCRTFEMzZBOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC025mAMGcWSUNhJpoxTO91KSeD owy7g/yw3sf+xEbdSKWPa/pam83Apzy7yp4bDNAiGbK3VrWkVcIQWsVcOF3sAkNK 261EyA5bEmJnCGOL5RhVzjJYT6rT+WofxEdK0yxxyqQ4OdelaXdWNWpr7KMz2TG5 Y2dvL7BFKgMAIsf+PAwyaehbGNR6p404+y8xgGqbYcMv8io9MSRiD9FHKb8YCjjS sNNlrz88Fk24AJoM+p2maFO0yVFTfOG6nKHFdz5/2+jVr8NYbwB0QaUHR5GXdb3N XycxT5sM9Kbg53jTktIgmzfkXf1F7KBfX0VUorUDumlgF5/HyWYcpio7EnTtAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUDa34dcX/hJkaQe1mfJla++HTapswHwYDVR0j BBgwFoAUK9rGR35J6G36G33E+N86Q+GsZmYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTlhYTlkYTctZjFlNC00ZDk4LWJmOTUtOWZkZmNmNDQ4 Zjc3LzQvMkJEQUM2NDc3RTQ5RTg2REZBMUI3REM0RjhERjNBNDNFMUFDNjY2Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0s5ckdSMzVKNkczNkczM0UtTjg2US1H c1ptWS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xOWFhOWRhNy1m MWU0LTRkOTgtYmY5NS05ZmRmY2Y0NDhmNzcvNC8yQkRBQzY0NzdFNDlFODZERkEx QjdEQzRGOERGM0E0M0UxQUM2NjY2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdsxLO9UvFs6UkCpkQrt+ ieROOspxJnz3AGA+GX5Ew3i6TkglFcE/3QlWswZRLlNOh4bL0kFTaXVF1uBZpU3T 2OrcDi5WgPcj0O1a63hqE4Hq+INOeYLEaioQ7Em4oLPRL2Cf26GnhYNSR83WQ8AK oQcyUS3bVaqrNnNF6zjEk0wMRrS2xcH1gwFA/0OW1ffDIH8KaNvJTNNKnM7m6f50 l1rE3XXjH0sI3nPd55I4Hnce0rU3etqHKeN1GZYyXazgR0CcqNjlCdajqOCAOT/7 3Pd3zFTt/7cyeJJB9xh3sUm4UkJYUtdHXPH3UaFDzQNiX+x2b5Oeef5u0TH/Dbp8 uA== -----END CERTIFICATE-----Generated at Fri Dec 26 16:00:31 2025 by rpki-client