This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/5/A93D2179411EB094DADFB0F4142A34F686FC9979.mft File: A93D2179411EB094DADFB0F4142A34F686FC9979.mft (raw, json) Hash identifier: EW58W208dV2OvqYaJmZV/v05/0u6bNenVY//h6M8DA4= Subject key identifier: C1:09:C6:ED:26:9A:B0:3A:DB:F7:1C:B8:4B:0B:DD:1C:95:56:90:FC Authority key identifier: A9:3D:21:79:41:1E:B0:94:DA:DF:B0:F4:14:2A:34:F6:86:FC:99:79 Certificate issuer: /CN=a93d2179411eb094dadfb0f4142a34f686fc9979 Certificate serial: 3A37AD522D73CD498A14A50CA74F633DF8EB6748 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qT0heUEesJTa37D0FCo09ob8mXk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/5/A93D2179411EB094DADFB0F4142A34F686FC9979.mft Manifest number: 50 Signing time: Thu 25 Dec 2025 22:26:26 +0000 Manifest this update: Thu 25 Dec 2025 22:21:26 +0000 Manifest next update: Fri 26 Dec 2025 23:50:26 +0000 Files and hashes: 1: A93D2179411EB094DADFB0F4142A34F686FC9979.crl (hash: cxhNxgbr3CZ4a+TQMbOPq6iKbDyVNqFrMU1C0CHs1zQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/5/A93D2179411EB094DADFB0F4142A34F686FC9979.crl rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/5/A93D2179411EB094DADFB0F4142A34F686FC9979.mft rsync://rpki.ripe.net/repository/DEFAULT/qT0heUEesJTa37D0FCo09ob8mXk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 23:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:37:ad:52:2d:73:cd:49:8a:14:a5:0c:a7:4f:63:3d:f8:eb:67:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a93d2179411eb094dadfb0f4142a34f686fc9979 Validity Not Before: Dec 25 22:21:26 2025 GMT Not After : Dec 26 23:50:26 2025 GMT Subject: CN=C109C6ED269AB03ADBF71CB84B0BDD1C955690FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:64:8b:32:4e:a8:0b:a5:5c:39:05:44:3a:09: 73:7a:01:d7:55:02:26:b1:3a:0a:9e:d8:9b:3c:12: 0b:d0:2d:9e:52:82:f5:d7:cb:06:11:80:3b:4f:60: d4:a8:5c:b5:49:25:78:b2:db:99:d9:06:17:ba:80: de:28:02:ef:cd:ea:6e:2c:bf:6a:aa:e3:ed:54:9e: d2:9d:b8:cf:79:cb:d8:53:32:a9:24:3c:2e:6b:67: 21:b8:b5:d2:86:81:02:1d:51:d3:08:90:f3:19:39: 9d:8c:8c:ae:08:8e:77:30:70:9a:7b:5e:ad:35:ea: 61:9f:48:56:ce:94:73:e0:c5:bb:29:d7:c0:4b:bd: 85:7b:a8:8e:58:8c:e2:0d:5e:d1:4a:7c:a7:49:b1: 8e:79:e0:72:cd:9e:ca:e3:86:b2:ef:94:9f:d3:2f: 42:bc:dc:f6:8c:9e:e1:83:b3:16:b7:cc:13:9d:65: bc:d7:9c:6d:2e:ae:72:16:c4:f9:b9:17:b1:5b:4a: 97:a4:14:71:1e:ef:4f:7d:6a:fd:14:7d:e1:91:80: 32:45:c8:a2:37:39:e6:45:f8:d0:63:89:e9:49:d7: 2c:3e:44:03:bd:0d:23:a3:0e:7b:07:fe:b7:dc:85: 23:a1:77:24:53:63:0e:19:8f:70:bd:d6:8d:7f:ac: 3c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:09:C6:ED:26:9A:B0:3A:DB:F7:1C:B8:4B:0B:DD:1C:95:56:90:FC X509v3 Authority Key Identifier: keyid:A9:3D:21:79:41:1E:B0:94:DA:DF:B0:F4:14:2A:34:F6:86:FC:99:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/5/A93D2179411EB094DADFB0F4142A34F686FC9979.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qT0heUEesJTa37D0FCo09ob8mXk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/5/A93D2179411EB094DADFB0F4142A34F686FC9979.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:42:c6:4c:e7:d6:c2:ff:64:e8:a2:a9:a7:c1:1e:37:3a:ca: 3f:69:5c:16:b5:03:07:95:66:7d:35:e4:86:92:6c:47:a4:c3: bb:88:c6:0b:97:76:a8:ce:a3:20:d8:4a:e8:e6:dc:a6:55:ac: bd:40:46:48:9c:9e:86:2b:d5:a7:68:21:7d:46:ef:a0:f9:fd: ad:e1:a2:7b:c6:bc:02:bf:26:8d:0a:f9:ed:0c:46:82:ec:7a: 48:71:71:8d:0a:12:85:a3:4d:b8:63:94:74:65:18:41:b0:01: ac:d6:7e:22:7a:5e:f7:07:7d:04:a1:4e:12:ce:6e:b8:d8:43: c8:bc:ff:0e:51:de:ca:52:22:32:d7:8e:9c:4d:00:61:41:3b: b1:14:97:1a:62:28:f7:f4:e5:c7:e2:11:a6:4f:29:38:b4:5b: 92:49:4e:06:d5:5c:a6:29:aa:18:f8:d8:ea:3b:c4:26:70:35: a7:ac:4f:52:ff:4d:fc:a7:00:90:a0:9a:25:05:91:6e:06:63: 22:bf:e1:45:0b:a3:7b:08:c0:e8:2d:e8:eb:59:bd:9b:63:56: 24:66:6f:8b:39:d2:32:73:ee:7f:67:89:37:04:03:8b:74:84: 85:c0:af:56:08:ce:3f:d2:11:5b:17:a2:c4:36:f1:ed:8b:17: 14:a2:4c:81 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUOjetUi1zzUmKFKUMp09jPfjrZ0gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTkzZDIxNzk0MTFlYjA5NGRhZGZiMGY0MTQyYTM0ZjY4 NmZjOTk3OTAeFw0yNTEyMjUyMjIxMjZaFw0yNTEyMjYyMzUwMjZaMDMxMTAvBgNV BAMTKEMxMDlDNkVEMjY5QUIwM0FEQkY3MUNCODRCMEJERDFDOTU1NjkwRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1ZIsyTqgLpVw5BUQ6CXN6AddV AiaxOgqe2Js8EgvQLZ5SgvXXywYRgDtPYNSoXLVJJXiy25nZBhe6gN4oAu/N6m4s v2qq4+1UntKduM95y9hTMqkkPC5rZyG4tdKGgQIdUdMIkPMZOZ2MjK4IjncwcJp7 Xq016mGfSFbOlHPgxbsp18BLvYV7qI5YjOINXtFKfKdJsY554HLNnsrjhrLvlJ/T L0K83PaMnuGDsxa3zBOdZbzXnG0urnIWxPm5F7FbSpekFHEe7099av0UfeGRgDJF yKI3OeZF+NBjielJ1yw+RAO9DSOjDnsH/rfchSOhdyRTYw4Zj3C91o1/rDxPAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUwQnG7SaasDrb9xy4SwvdHJVWkPwwHwYDVR0j BBgwFoAUqT0heUEesJTa37D0FCo09ob8mXkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTlhYTlkYTctZjFlNC00ZDk4LWJmOTUtOWZkZmNmNDQ4 Zjc3LzUvQTkzRDIxNzk0MTFFQjA5NERBREZCMEY0MTQyQTM0RjY4NkZDOTk3OS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FUMGhlVUVlc0pUYTM3RDBGQ28wOW9i OG1Yay5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xOWFhOWRhNy1m MWU0LTRkOTgtYmY5NS05ZmRmY2Y0NDhmNzcvNS9BOTNEMjE3OTQxMUVCMDk0REFE RkIwRjQxNDJBMzRGNjg2RkM5OTc5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhULGTOfWwv9k6KKpp8Ee NzrKP2lcFrUDB5VmfTXkhpJsR6TDu4jGC5d2qM6jINhK6ObcplWsvUBGSJyehivV p2ghfUbvoPn9reGie8a8Ar8mjQr57QxGgux6SHFxjQoShaNNuGOUdGUYQbABrNZ+ Inpe9wd9BKFOEs5uuNhDyLz/DlHeylIiMteOnE0AYUE7sRSXGmIo9/Tlx+IRpk8p OLRbkklOBtVcpimqGPjY6jvEJnA1p6xPUv9N/KcAkKCaJQWRbgZjIr/hRQujewjA 6C3o61m9m2NWJGZviznSMnPuf2eJNwQDi3SEhcCvVgjOP9IRWxeixDbx7YsXFKJM gQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:45:18 2025 by rpki-client