This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1b22759c-d097-4faa-9dce-dd46c1d30ec8/0/C456BB1AEAE2E7345F13EB23CF8DF80F31246F67.mft File: C456BB1AEAE2E7345F13EB23CF8DF80F31246F67.mft (raw, json) Hash identifier: N6QFMtuPh9fqYa94nSFgqyf5ESmxsE7xgB8MJEq/CSo= Subject key identifier: FC:7D:5E:79:BE:89:03:C1:87:61:BD:69:56:C5:55:C3:6E:77:67:FB Authority key identifier: C4:56:BB:1A:EA:E2:E7:34:5F:13:EB:23:CF:8D:F8:0F:31:24:6F:67 Certificate issuer: /CN=c456bb1aeae2e7345f13eb23cf8df80f31246f67 Certificate serial: 65FFAC14DF61C0AE3E0FC90DBC30AF965EF66DC8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFa7Guri5zRfE-sjz434DzEkb2c.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1b22759c-d097-4faa-9dce-dd46c1d30ec8/0/C456BB1AEAE2E7345F13EB23CF8DF80F31246F67.mft Manifest number: 09 Signing time: Tue 16 Dec 2025 12:50:05 +0000 Manifest this update: Tue 16 Dec 2025 12:45:05 +0000 Manifest next update: Wed 17 Dec 2025 15:20:05 +0000 Files and hashes: 1: AS210352.asa (hash: uZtezO2yBf6zKpBoUYQIzx5W0PuLJVpNKT+VEu9tmM8=) 2: C456BB1AEAE2E7345F13EB23CF8DF80F31246F67.crl (hash: fHV67P7qtnEUl8uO7CMBoJl4xCBY990sTat/73MyvAA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1b22759c-d097-4faa-9dce-dd46c1d30ec8/0/C456BB1AEAE2E7345F13EB23CF8DF80F31246F67.crl rsync://rsync.paas.rpki.ripe.net/repository/1b22759c-d097-4faa-9dce-dd46c1d30ec8/0/C456BB1AEAE2E7345F13EB23CF8DF80F31246F67.mft rsync://rpki.ripe.net/repository/DEFAULT/xFa7Guri5zRfE-sjz434DzEkb2c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 15:20:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:ff:ac:14:df:61:c0:ae:3e:0f:c9:0d:bc:30:af:96:5e:f6:6d:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c456bb1aeae2e7345f13eb23cf8df80f31246f67 Validity Not Before: Dec 16 12:45:05 2025 GMT Not After : Dec 17 15:20:05 2025 GMT Subject: CN=FC7D5E79BE8903C18761BD6956C555C36E7767FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:0b:67:42:a1:58:e0:bf:c9:ed:ef:38:fc:aa: 86:59:60:db:1b:70:8c:98:a6:11:7a:2e:dc:fb:52: 32:57:56:96:00:13:30:24:13:7a:4b:56:c5:ca:c9: f9:4e:4f:1d:4b:71:a6:fd:cc:81:53:b3:82:d8:01: 24:28:1d:29:59:f9:1d:ba:c4:d5:f3:a5:7b:ae:c8: 96:a0:e6:cc:ce:20:06:5d:cf:50:e2:96:7b:3f:dd: ad:16:96:43:33:ce:d1:3c:50:b9:72:6f:a3:e9:09: 28:89:b1:ab:bd:67:80:40:1c:f5:3a:96:f2:46:82: d6:fb:43:93:a4:0e:75:63:96:e0:34:ed:c2:28:e6: 78:23:3c:83:fe:44:23:e4:a7:13:e4:95:0a:f2:d3: 11:bd:78:9f:c1:c0:97:9d:68:fe:45:45:1e:0a:62: ef:ff:31:60:08:57:92:14:37:47:76:33:7f:d3:7a: 4f:0e:6e:30:db:47:fe:3b:67:74:c1:e2:6a:31:ca: 62:fb:78:dd:03:f4:4f:a5:c0:ec:33:d2:0f:6f:3e: e3:3f:76:be:e6:1d:ca:e9:dc:0a:a8:b6:e6:38:48: 55:0b:e1:88:21:72:cd:d3:93:62:d7:1a:d0:7b:48: a7:f1:29:62:54:4f:da:7a:42:c8:02:98:83:44:a3: c5:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:7D:5E:79:BE:89:03:C1:87:61:BD:69:56:C5:55:C3:6E:77:67:FB X509v3 Authority Key Identifier: keyid:C4:56:BB:1A:EA:E2:E7:34:5F:13:EB:23:CF:8D:F8:0F:31:24:6F:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1b22759c-d097-4faa-9dce-dd46c1d30ec8/0/C456BB1AEAE2E7345F13EB23CF8DF80F31246F67.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFa7Guri5zRfE-sjz434DzEkb2c.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1b22759c-d097-4faa-9dce-dd46c1d30ec8/0/C456BB1AEAE2E7345F13EB23CF8DF80F31246F67.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:05:1f:e5:56:1d:f6:3c:27:74:95:04:bf:92:1c:f2:bb:8f: b8:70:89:8d:c6:e6:1f:09:c1:65:43:22:32:03:a9:3a:f8:dd: 9b:e3:c7:d3:72:88:d7:f3:c4:99:f1:61:02:c7:7d:b3:06:48: dd:e7:96:17:32:d3:ee:21:1f:59:dc:23:b0:cf:0e:c2:5e:70: b9:7c:32:cb:23:51:de:d8:6f:21:15:c7:41:e7:f5:4b:68:ab: 76:ec:4a:81:74:c1:39:f3:d5:63:d3:10:03:88:fe:07:51:47: f6:ae:2a:70:d8:e5:3d:b7:d6:0d:f2:27:51:3f:63:fe:e9:e7: f1:8d:d4:cf:d8:3a:6a:cd:6c:a7:7f:56:a7:24:34:9e:3d:19: 15:57:24:ed:a0:98:09:4b:83:03:a4:57:77:f7:6b:e8:85:65: 6e:e3:e9:a4:53:f1:84:f2:73:f9:1f:69:bc:63:82:52:49:19: da:06:cd:3a:77:5b:d4:05:9b:97:6c:f3:cc:6e:79:b0:b0:8c: 6d:6a:c7:7a:8f:1e:e6:7e:4b:b6:1d:3d:d3:d7:f0:97:52:82: 1a:3a:ad:cf:1c:e9:b5:1a:b9:39:dc:c3:e2:bb:dd:20:a9:ea: be:95:87:71:16:61:bc:a0:99:42:d4:1e:a0:4d:6c:1b:86:49: 51:6d:5c:d3 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUZf+sFN9hwK4+D8kNvDCvll72bcgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzQ1NmJiMWFlYWUyZTczNDVmMTNlYjIzY2Y4ZGY4MGYz MTI0NmY2NzAeFw0yNTEyMTYxMjQ1MDVaFw0yNTEyMTcxNTIwMDVaMDMxMTAvBgNV BAMTKEZDN0Q1RTc5QkU4OTAzQzE4NzYxQkQ2OTU2QzU1NUMzNkU3NzY3RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQC2dCoVjgv8nt7zj8qoZZYNsb cIyYphF6Ltz7UjJXVpYAEzAkE3pLVsXKyflOTx1Lcab9zIFTs4LYASQoHSlZ+R26 xNXzpXuuyJag5szOIAZdz1Dilns/3a0WlkMzztE8ULlyb6PpCSiJsau9Z4BAHPU6 lvJGgtb7Q5OkDnVjluA07cIo5ngjPIP+RCPkpxPklQry0xG9eJ/BwJedaP5FRR4K Yu//MWAIV5IUN0d2M3/Tek8ObjDbR/47Z3TB4moxymL7eN0D9E+lwOwz0g9vPuM/ dr7mHcrp3AqotuY4SFUL4Yghcs3Tk2LXGtB7SKfxKWJUT9p6QsgCmINEo8WFAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU/H1eeb6JA8GHYb1pVsVVw253Z/swHwYDVR0j BBgwFoAUxFa7Guri5zRfE+sjz434DzEkb2cwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWIyMjc1OWMtZDA5Ny00ZmFhLTlkY2UtZGQ0NmMxZDMw ZWM4LzAvQzQ1NkJCMUFFQUUyRTczNDVGMTNFQjIzQ0Y4REY4MEYzMTI0NkY2Ny5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hGYTdHdXJpNXpSZkUtc2p6NDM0RHpF a2IyYy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYjIyNzU5Yy1k MDk3LTRmYWEtOWRjZS1kZDQ2YzFkMzBlYzgvMC9DNDU2QkIxQUVBRTJFNzM0NUYx M0VCMjNDRjhERjgwRjMxMjQ2RjY3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYAUf5VYd9jwndJUEv5Ic 8ruPuHCJjcbmHwnBZUMiMgOpOvjdm+PH03KI1/PEmfFhAsd9swZI3eeWFzLT7iEf WdwjsM8Owl5wuXwyyyNR3thvIRXHQef1S2irduxKgXTBOfPVY9MQA4j+B1FH9q4q cNjlPbfWDfInUT9j/unn8Y3Uz9g6as1sp39WpyQ0nj0ZFVck7aCYCUuDA6RXd/dr 6IVlbuPppFPxhPJz+R9pvGOCUkkZ2gbNOndb1AWbl2zzzG55sLCMbWrHeo8e5n5L th0909fwl1KCGjqtzxzptRq5OdzD4rvdIKnqvpWHcRZhvKCZQtQeoE1sG4ZJUW1c 0w== -----END CERTIFICATE-----Generated at Wed Dec 17 06:43:38 2025 by rpki-client