This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft
File: 25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft (raw, json)
Hash identifier: Cx455ISx0l76TuEwZlpKtFfEYXYzDDdti4sjTWT714s=
Subject key identifier: 01:74:37:AE:A1:60:F6:A4:2F:57:CB:E2:A9:62:EA:3A:C9:43:61:13
Authority key identifier: 25:BB:54:20:55:39:8C:AC:21:DB:24:07:FD:8E:7D:79:5A:10:F5:ED
Certificate issuer: /CN=25bb542055398cac21db2407fd8e7d795a10f5ed
Certificate serial: 1E410EED1A4BF087633ACD7746F767F0A211C6D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JbtUIFU5jKwh2yQH_Y59eVoQ9e0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft
Manifest number: 015E
Signing time: Mon 09 Feb 2026 17:03:04 +0000
Manifest this update: Mon 09 Feb 2026 16:58:04 +0000
Manifest next update: Tue 10 Feb 2026 20:38:04 +0000
Files and hashes: 1: 25BB542055398CAC21DB2407FD8E7D795A10F5ED.crl (hash: eItlWbG/FWQoDg2O4jTiKlNuP3No3cGMzJblF8GZ44k=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.crl
rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft
rsync://rpki.ripe.net/repository/DEFAULT/JbtUIFU5jKwh2yQH_Y59eVoQ9e0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 20:38:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:41:0e:ed:1a:4b:f0:87:63:3a:cd:77:46:f7:67:f0:a2:11:c6:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25bb542055398cac21db2407fd8e7d795a10f5ed
Validity
Not Before: Feb 9 16:58:04 2026 GMT
Not After : Feb 10 20:38:04 2026 GMT
Subject: CN=017437AEA160F6A42F57CBE2A962EA3AC9436113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:88:66:c1:cd:03:64:a0:eb:50:82:5a:64:25:
8c:3b:a4:9f:75:5c:31:91:96:c6:0d:da:5d:df:6b:
88:0c:ce:da:ab:e3:1b:a1:a5:36:e6:34:47:09:3d:
3a:5f:35:15:3f:ca:22:b0:c5:f8:54:78:96:f5:3d:
6c:e3:05:05:0b:d6:bf:2c:a3:33:8f:db:94:f4:41:
7d:30:05:53:2a:41:b1:c2:ee:1f:c5:28:9b:8e:39:
4f:09:97:c5:6e:16:6e:05:6c:46:dd:81:81:1e:6f:
3a:26:75:27:d6:a9:f9:21:12:83:b9:d5:5f:52:5b:
c4:cf:d6:a0:a2:2a:44:4b:ed:cb:23:9a:66:9c:0d:
cf:8c:a1:f7:23:e4:ee:ce:f3:a9:bc:37:ac:2c:6b:
ab:12:4c:82:fa:25:ae:28:de:b4:8a:cc:d4:c1:0b:
61:7f:94:3d:2f:f6:d9:8a:c5:71:77:b7:92:9c:94:
88:20:4b:6e:96:2d:21:84:5b:06:38:d7:b5:15:fc:
a6:52:8d:45:ea:eb:09:54:64:16:bb:ed:1d:21:bc:
34:09:08:7c:a3:78:2b:c3:aa:8e:c3:f7:08:84:aa:
81:05:7c:f2:61:69:d7:9d:2b:ff:f9:7f:23:e3:31:
20:69:44:85:10:2e:e9:8c:d6:33:e8:ee:e5:a0:41:
16:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:74:37:AE:A1:60:F6:A4:2F:57:CB:E2:A9:62:EA:3A:C9:43:61:13
X509v3 Authority Key Identifier:
keyid:25:BB:54:20:55:39:8C:AC:21:DB:24:07:FD:8E:7D:79:5A:10:F5:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbtUIFU5jKwh2yQH_Y59eVoQ9e0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:8e:70:31:b8:27:88:3a:b1:8a:3c:24:00:77:67:7d:88:0a:
fd:b7:dc:ea:d2:6a:b6:76:17:df:cd:16:8e:d3:af:65:8b:8f:
5f:26:8f:90:2f:a7:f9:06:c7:56:6c:84:b8:3c:57:6d:a6:51:
21:0c:e9:e6:35:5f:78:0f:4f:d1:d4:61:e5:dc:54:47:e0:9d:
12:c4:f2:2e:21:6d:44:3a:9c:41:55:b4:78:f0:23:37:6c:ee:
8d:47:05:f9:46:b5:da:dc:7c:98:62:ce:f1:24:8f:9b:2e:7b:
09:12:2a:45:2c:44:ef:50:8a:5c:f0:49:aa:cb:71:fd:4d:ed:
24:1a:cf:c0:30:f2:b2:87:3e:82:31:43:d7:6f:ce:31:d5:c0:
16:8b:48:4b:d2:1f:23:ba:db:46:82:dc:c1:71:cd:56:b8:2b:
d6:4f:2f:bc:0b:19:72:30:28:f5:f3:79:80:b3:d4:bc:66:59:
51:24:7e:46:fd:d6:25:10:cb:c4:3e:48:56:fd:58:ba:cf:ad:
bb:b5:66:3f:be:5c:ca:35:ec:94:e3:54:5a:54:f3:17:59:ec:
64:2e:6d:93:c3:13:93:9b:e8:a9:77:b7:de:c8:c0:6d:2d:86:
ce:92:6d:6a:5f:1b:55:19:be:9e:1b:92:fc:19:9f:94:c9:3d:
3f:b1:3f:96
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUHkEO7RpL8IdjOs13Rvdn8KIRxtYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjViYjU0MjA1NTM5OGNhYzIxZGIyNDA3ZmQ4ZTdkNzk1
YTEwZjVlZDAeFw0yNjAyMDkxNjU4MDRaFw0yNjAyMTAyMDM4MDRaMDMxMTAvBgNV
BAMTKDAxNzQzN0FFQTE2MEY2QTQyRjU3Q0JFMkE5NjJFQTNBQzk0MzYxMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRiGbBzQNkoOtQglpkJYw7pJ91
XDGRlsYN2l3fa4gMztqr4xuhpTbmNEcJPTpfNRU/yiKwxfhUeJb1PWzjBQUL1r8s
ozOP25T0QX0wBVMqQbHC7h/FKJuOOU8Jl8VuFm4FbEbdgYEebzomdSfWqfkhEoO5
1V9SW8TP1qCiKkRL7csjmmacDc+Mofcj5O7O86m8N6wsa6sSTIL6Ja4o3rSKzNTB
C2F/lD0v9tmKxXF3t5KclIggS26WLSGEWwY417UV/KZSjUXq6wlUZBa77R0hvDQJ
CHyjeCvDqo7D9wiEqoEFfPJhadedK//5fyPjMSBpRIUQLumM1jPo7uWgQRbPAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUAXQ3rqFg9qQvV8viqWLqOslDYRMwHwYDVR0j
BBgwFoAUJbtUIFU5jKwh2yQH/Y59eVoQ9e0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWJkMzA2YjQtZTVjMy00OGY5LWIyZWUtMzZhOWJkZGVk
OGM0LzEvMjVCQjU0MjA1NTM5OENBQzIxREIyNDA3RkQ4RTdENzk1QTEwRjVFRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0pidFVJRlU1akt3aDJ5UUhfWTU5ZVZv
UTllMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYmQzMDZiNC1l
NWMzLTQ4ZjktYjJlZS0zNmE5YmRkZWQ4YzQvMS8yNUJCNTQyMDU1Mzk4Q0FDMjFE
QjI0MDdGRDhFN0Q3OTVBMTBGNUVELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAso5wMbgniDqxijwkAHdn
fYgK/bfc6tJqtnYX380WjtOvZYuPXyaPkC+n+QbHVmyEuDxXbaZRIQzp5jVfeA9P
0dRh5dxUR+CdEsTyLiFtRDqcQVW0ePAjN2zujUcF+Ua12tx8mGLO8SSPmy57CRIq
RSxE71CKXPBJqstx/U3tJBrPwDDysoc+gjFD12/OMdXAFotIS9IfI7rbRoLcwXHN
Vrgr1k8vvAsZcjAo9fN5gLPUvGZZUSR+Rv3WJRDLxD5IVv1Yus+tu7VmP75cyjXs
lONUWlTzF1nsZC5tk8MTk5voqXe33sjAbS2GzpJtal8bVRm+nhuS/BmflMk9P7E/
lg==
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:45:16 2026 by rpki-client