This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.mft File: 946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.mft (raw, json) Hash identifier: YLDPMbpLipnl8qpGKNppQa+THjOOeN3xhcfrzSj639Y= Subject key identifier: 52:6E:70:FA:39:AC:19:48:98:10:DA:5D:7D:5A:62:CF:1C:13:D6:E1 Authority key identifier: 94:6D:E1:5D:34:BE:AE:24:E2:9E:A1:6A:3F:E1:E6:59:1B:27:AD:9C Certificate issuer: /CN=946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C Certificate serial: 5BA1EA963B27F982005AABB3F8F58D8D67D1D1F9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.mft Manifest number: FF Signing time: Sat 13 Dec 2025 02:15:03 +0000 Manifest this update: Sat 13 Dec 2025 02:10:03 +0000 Manifest next update: Sun 14 Dec 2025 02:59:03 +0000 Files and hashes: 1: 946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.crl (hash: V7APKF+Z6JEWjHsWsQBgqeFMWG6H7G453VMjvgPK2kw=) 2: 326131343a373538343a333030303a3a2f34382d3438203d3e20313532333638.roa (hash: MnToG5/hHH9Scp/i63sn6+7U3FU6WhprF2dCg9QmzZ4=) 3: 326131343a373538343a333030323a3a2f34382d3438203d3e203530313034.roa (hash: Crxg8Afd9H4uvcM/AEMgGkuEVpajXoOdPvRiA2PLFc4=) 4: 326131343a373538343a333030313a3a2f34382d3438203d3e20313532333638.roa (hash: RycjpThYIZhrgAMUdYbKLisjcTcczyRyV0B6ob/yXcs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.crl rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:a1:ea:96:3b:27:f9:82:00:5a:ab:b3:f8:f5:8d:8d:67:d1:d1:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C Validity Not Before: Dec 13 02:10:03 2025 GMT Not After : Dec 14 02:59:03 2025 GMT Subject: CN=526E70FA39AC19489810DA5D7D5A62CF1C13D6E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f6:70:51:10:0f:ba:75:d8:e2:91:92:58:4a: c7:29:9e:0a:56:c0:75:3a:2e:d4:b2:44:1f:b0:3c: e8:5b:8d:45:3d:59:2a:33:bb:37:d4:40:66:95:aa: a4:e5:7b:c5:8c:0d:aa:3b:e9:06:2a:ac:a6:17:b3: e6:58:34:a1:f2:76:55:63:f8:f8:2c:b1:1c:40:5f: ce:68:85:e0:fe:5c:a4:f6:a8:62:d6:41:09:46:b7: ed:08:32:a8:b7:f4:68:4e:fd:d9:f7:bc:be:51:16: 78:e5:3e:ed:de:b0:58:8f:83:ac:7b:03:d9:ee:4d: ae:57:dc:f6:1c:63:4c:b1:c2:46:13:a0:95:f8:bb: 39:c7:7b:38:36:a6:be:1e:c9:49:9d:5a:5d:ce:f6: 08:21:15:77:6f:23:c2:30:1f:c6:2f:7e:b3:bd:be: 87:96:44:b2:c5:6d:5b:77:b6:53:6d:e8:b6:c5:50: 14:f4:74:ef:17:55:8a:ed:b6:17:b3:a2:04:16:c7: 4e:83:fb:4f:46:11:ab:bf:ae:f1:fb:ef:a6:eb:06: 9a:0b:b3:01:b1:5b:14:81:81:76:2c:ef:2c:20:20: be:56:4a:93:8b:3f:11:c7:37:8e:38:ac:be:64:bb: fa:71:e8:f9:9b:9c:72:ea:fe:2e:92:2f:e8:89:97: bb:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:6E:70:FA:39:AC:19:48:98:10:DA:5D:7D:5A:62:CF:1C:13:D6:E1 X509v3 Authority Key Identifier: keyid:94:6D:E1:5D:34:BE:AE:24:E2:9E:A1:6A:3F:E1:E6:59:1B:27:AD:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:2b:4b:66:c8:c8:1b:b0:0b:ee:9b:8a:b4:4e:c4:07:74:a5: 63:8a:60:e9:b4:f7:e2:fa:fe:fa:bb:6e:c1:e7:fb:89:02:e6: c7:96:20:c7:24:7b:6f:c2:37:56:10:e5:d0:4e:1a:f2:21:2e: f8:35:ad:99:f0:5d:9b:3b:14:c5:fe:4a:c3:9d:40:fe:8c:03: 19:c9:94:7e:8e:f5:5d:38:e7:21:2a:03:49:69:3c:50:63:72: 51:4d:30:03:ae:68:09:e3:98:e1:44:1d:80:fb:05:b2:32:9f: 99:94:37:d8:1e:99:5a:7e:94:aa:05:4e:99:a1:91:74:94:35: 51:b2:dc:4d:1f:09:2e:a5:3a:f8:57:c3:a4:07:2f:d9:b1:f2: 72:10:9a:0e:d6:f7:20:27:bc:7f:34:05:c4:7f:1a:0c:7b:96: c6:56:a5:7a:dc:63:b6:94:ea:02:43:45:d8:0e:c8:76:0b:0b: 51:04:16:65:f0:4f:1f:c7:5e:ba:cf:92:61:21:7c:fd:b3:2a: fb:ac:f7:cc:fb:c5:8d:a7:d8:d3:31:0f:d0:aa:07:c5:57:7d: b4:a1:00:4d:d8:19:6a:64:65:e2:89:7d:8c:9d:9f:28:71:1e: e7:ae:4a:6a:9b:ec:03:1b:7f:15:e8:26:18:c2:f1:f9:42:04: 00:46:fa:95 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUW6Hqljsn+YIAWquz+PWNjWfR0fkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQ2REUxNUQzNEJFQUUyNEUyOUVBMTZBM0ZFMUU2NTkx QjI3QUQ5QzAeFw0yNTEyMTMwMjEwMDNaFw0yNTEyMTQwMjU5MDNaMDMxMTAvBgNV BAMTKDUyNkU3MEZBMzlBQzE5NDg5ODEwREE1RDdENUE2MkNGMUMxM0Q2RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb9nBREA+6ddjikZJYSscpngpW wHU6LtSyRB+wPOhbjUU9WSozuzfUQGaVqqTle8WMDao76QYqrKYXs+ZYNKHydlVj +PgssRxAX85oheD+XKT2qGLWQQlGt+0IMqi39GhO/dn3vL5RFnjlPu3esFiPg6x7 A9nuTa5X3PYcY0yxwkYToJX4uznHezg2pr4eyUmdWl3O9gghFXdvI8IwH8YvfrO9 voeWRLLFbVt3tlNt6LbFUBT0dO8XVYrtthezogQWx06D+09GEau/rvH776brBpoL swGxWxSBgXYs7ywgIL5WSpOLPxHHN444rL5ku/px6PmbnHLq/i6SL+iJl7u1AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUUm5w+jmsGUiYENpdfVpizxwT1uEwHwYDVR0j BBgwFoAUlG3hXTS+riTinqFqP+HmWRsnrZwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJkMzA2YjQtZTVjMy00OGY5LWIyZWUtMzZhOWJkZGVk OGM0LzcvOTQ2REUxNUQzNEJFQUUyNEUyOUVBMTZBM0ZFMUU2NTkxQjI3QUQ5Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC85NDZERTE1RDM0QkVBRTI0RTI5RUExNkEz RkUxRTY1OTFCMjdBRDlDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzFiZDMwNmI0LWU1YzMtNDhmOS1iMmVlLTM2YTliZGRlZDhjNC83Lzk0NkRFMTVE MzRCRUFFMjRFMjlFQTE2QTNGRTFFNjU5MUIyN0FEOUMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAWK0tm yMgbsAvum4q0TsQHdKVjimDptPfi+v76u27B5/uJAubHliDHJHtvwjdWEOXQThry IS74Na2Z8F2bOxTF/krDnUD+jAMZyZR+jvVdOOchKgNJaTxQY3JRTTADrmgJ45jh RB2A+wWyMp+ZlDfYHplafpSqBU6ZoZF0lDVRstxNHwkupTr4V8OkBy/ZsfJyEJoO 1vcgJ7x/NAXEfxoMe5bGVqV63GO2lOoCQ0XYDsh2CwtRBBZl8E8fx166z5JhIXz9 syr7rPfM+8WNp9jTMQ/QqgfFV320oQBN2BlqZGXiiX2MnZ8ocR7nrkpqm+wDG38V 6CYYwvH5QgQARvqV -----END CERTIFICATE-----Generated at Sat Dec 13 11:47:22 2025 by rpki-client