This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.mft File: 317EDB3410058E086217C50FB97009DDE70A6F1A.mft (raw, json) Hash identifier: mXHu8RJLcIpVL116R7cmEDqKzw5NTR0kB8YD8vSP4T8= Subject key identifier: 04:AC:CD:B7:2A:77:BE:B8:F3:F3:35:7B:19:32:D6:4A:04:54:54:A9 Authority key identifier: 31:7E:DB:34:10:05:8E:08:62:17:C5:0F:B9:70:09:DD:E7:0A:6F:1A Certificate issuer: /CN=317edb3410058e086217c50fb97009dde70a6f1a Certificate serial: 29E413FB52078C0BA1A11E61EEF81C88F59057D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MX7bNBAFjghiF8UPuXAJ3ecKbxo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.mft Manifest number: 22 Signing time: Sun 07 Dec 2025 13:24:33 +0000 Manifest this update: Sun 07 Dec 2025 13:19:33 +0000 Manifest next update: Mon 08 Dec 2025 16:09:33 +0000 Files and hashes: 1: AS207682.asa (hash: yNMgsZTlVBgZuwAny+gfftheJcltZQ2eLBjscmcmhhI=) 2: 317EDB3410058E086217C50FB97009DDE70A6F1A.crl (hash: yPNFOnPoc2hg1zC7x8llvTN+6Z+cA9guqRE4jvt5RxI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.crl rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.mft rsync://rpki.ripe.net/repository/DEFAULT/MX7bNBAFjghiF8UPuXAJ3ecKbxo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:e4:13:fb:52:07:8c:0b:a1:a1:1e:61:ee:f8:1c:88:f5:90:57:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=317edb3410058e086217c50fb97009dde70a6f1a Validity Not Before: Dec 7 13:19:33 2025 GMT Not After : Dec 8 16:09:33 2025 GMT Subject: CN=04ACCDB72A77BEB8F3F3357B1932D64A045454A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:44:e8:03:4d:de:db:a1:80:a3:49:18:6c:a8: 4f:5e:c1:ab:99:e1:4f:16:74:fa:2b:1f:e8:c8:5f: 0f:a8:dd:77:1c:4c:2b:75:a5:94:04:da:fb:3f:55: 54:3f:9e:bc:74:7f:1c:7f:3e:4d:60:13:02:7a:e5: f7:c8:89:1e:99:a5:aa:a6:25:d5:a8:ae:cb:b8:e3: 92:94:9b:46:f3:00:68:1d:d5:1b:5b:6e:77:75:2e: 43:a0:e0:c1:b3:de:27:85:57:db:09:b3:0e:1b:52: 6b:53:98:6d:39:49:d4:0b:2d:71:92:2d:81:5f:6c: b2:44:1c:a3:9b:8f:47:a1:12:2a:25:9a:fc:e9:d7: a2:c4:6f:13:a2:60:7c:0d:67:c7:9c:cf:26:92:8d: d6:b3:e5:5b:57:a7:ce:fb:d1:b1:e3:f8:4e:5c:c3: a3:9a:0c:94:7c:8e:69:6d:8a:52:ea:36:f4:68:dd: 52:83:02:93:f6:eb:74:92:85:b4:96:c1:31:28:d9: 70:ed:fd:a1:f3:39:29:4a:37:3e:7f:dd:dc:8d:23: 63:8c:b4:71:4b:ca:e8:3e:aa:22:69:a8:49:72:1e: fc:83:05:65:ae:a8:65:d9:aa:0a:4c:f0:b9:50:74: 23:25:81:ce:63:dc:93:5b:e4:44:e1:34:07:15:6f: b7:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:AC:CD:B7:2A:77:BE:B8:F3:F3:35:7B:19:32:D6:4A:04:54:54:A9 X509v3 Authority Key Identifier: keyid:31:7E:DB:34:10:05:8E:08:62:17:C5:0F:B9:70:09:DD:E7:0A:6F:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MX7bNBAFjghiF8UPuXAJ3ecKbxo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:12:8e:7d:91:7f:31:2f:38:f3:13:77:f2:b6:81:05:43:ea: e1:b3:03:9b:e9:a7:57:a7:a6:18:53:a7:5e:cf:45:2e:36:36: ba:72:09:b1:2a:19:2a:29:42:92:66:d3:c1:5d:bc:e1:31:88: 7f:b7:d3:46:f5:b0:40:92:3b:3b:35:85:5f:6d:47:2d:5d:32: 0d:72:3b:85:b7:29:2d:47:f5:93:42:f9:d7:1d:cb:7e:22:95: 16:0f:65:a8:e7:09:53:5e:52:ae:94:64:43:dd:72:af:91:ae: 3a:31:1b:24:bc:85:d9:0c:32:55:b1:65:50:05:2d:cc:b6:1d: cb:77:22:ab:d5:d9:e3:79:bd:f9:8e:24:a8:19:62:c0:27:89: 72:01:5e:80:5c:f1:1a:0f:f9:fd:ff:ae:9c:42:f6:9b:96:84: 05:a3:2b:fb:ed:c8:04:f8:cc:2e:bf:79:c6:0d:8b:24:86:c7: 05:02:44:dd:76:a5:a9:2f:e5:0d:1f:5c:9c:fc:78:0c:e8:5e: 8f:5d:cb:47:e2:71:6c:c3:18:4e:46:cc:fd:57:a2:02:34:72: 9b:58:32:d7:fe:4c:59:35:d8:9e:17:1c:9b:48:10:ed:89:40: c8:21:be:ff:3d:d4:9c:da:5b:ee:34:02:67:35:17:67:81:70: 4c:43:b6:1e -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUKeQT+1IHjAuhoR5h7vgciPWQV9cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE3ZWRiMzQxMDA1OGUwODYyMTdjNTBmYjk3MDA5ZGRl NzBhNmYxYTAeFw0yNTEyMDcxMzE5MzNaFw0yNTEyMDgxNjA5MzNaMDMxMTAvBgNV BAMTKDA0QUNDREI3MkE3N0JFQjhGM0YzMzU3QjE5MzJENjRBMDQ1NDU0QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoROgDTd7boYCjSRhsqE9ewauZ 4U8WdPorH+jIXw+o3XccTCt1pZQE2vs/VVQ/nrx0fxx/Pk1gEwJ65ffIiR6Zpaqm JdWorsu445KUm0bzAGgd1Rtbbnd1LkOg4MGz3ieFV9sJsw4bUmtTmG05SdQLLXGS LYFfbLJEHKObj0ehEiolmvzp16LEbxOiYHwNZ8eczyaSjdaz5VtXp8770bHj+E5c w6OaDJR8jmltilLqNvRo3VKDApP263SShbSWwTEo2XDt/aHzOSlKNz5/3dyNI2OM tHFLyug+qiJpqElyHvyDBWWuqGXZqgpM8LlQdCMlgc5j3JNb5EThNAcVb7cvAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUBKzNtyp3vrjz8zV7GTLWSgRUVKkwHwYDVR0j BBgwFoAUMX7bNBAFjghiF8UPuXAJ3ecKbxowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzAxMTk0NGQtN2ViMy00ZjYzLWExNTktY2ZmMDJjMDI2 YWJmLzMvMzE3RURCMzQxMDA1OEUwODYyMTdDNTBGQjk3MDA5RERFNzBBNkYxQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL01YN2JOQkFGamdoaUY4VVB1WEFKM2Vj S2J4by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMDExOTQ0ZC03 ZWIzLTRmNjMtYTE1OS1jZmYwMmMwMjZhYmYvMy8zMTdFREIzNDEwMDU4RTA4NjIx N0M1MEZCOTcwMDlEREU3MEE2RjFBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZBKOfZF/MS848xN38raB BUPq4bMDm+mnV6emGFOnXs9FLjY2unIJsSoZKilCkmbTwV284TGIf7fTRvWwQJI7 OzWFX21HLV0yDXI7hbcpLUf1k0L51x3LfiKVFg9lqOcJU15SrpRkQ91yr5GuOjEb JLyF2QwyVbFlUAUtzLYdy3ciq9XZ43m9+Y4kqBliwCeJcgFegFzxGg/5/f+unEL2 m5aEBaMr++3IBPjMLr95xg2LJIbHBQJE3XalqS/lDR9cnPx4DOhej13LR+JxbMMY TkbM/VeiAjRym1gy1/5MWTXYnhccm0gQ7YlAyCG+/z3UnNpb7jQCZzUXZ4FwTEO2 Hg== -----END CERTIFICATE-----Generated at Sun Dec 7 16:56:40 2025 by rpki-client