This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.mft File: CE964F98379F0320A7191E6D6788800535885928.mft (raw, json) Hash identifier: ywqvAOxlm0E4i+wSeI3OC4DJRiJoTB5sE0vCN1nnR40= Subject key identifier: 74:3D:05:89:BA:15:0A:82:A2:56:67:CD:AC:33:3D:6D:40:CB:54:D2 Authority key identifier: CE:96:4F:98:37:9F:03:20:A7:19:1E:6D:67:88:80:05:35:88:59:28 Certificate issuer: /CN=ce964f98379f0320a7191e6d6788800535885928 Certificate serial: 249BEBCFFBBBDFD56BC3D6B212FFDEFEAA8C8CC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpZPmDefAyCnGR5tZ4iABTWIWSg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.mft Manifest number: B0 Signing time: Fri 26 Dec 2025 07:31:17 +0000 Manifest this update: Fri 26 Dec 2025 07:26:17 +0000 Manifest next update: Sat 27 Dec 2025 08:07:17 +0000 Files and hashes: 1: CE964F98379F0320A7191E6D6788800535885928.crl (hash: 8HcLZGYW84GRQbbW35X7my90mzHttXd2QNDeBM9Ybig=) 2: AS214955.asa (hash: pJ7+xLkRqPDuQTZ4CjdQziRCbw0R4LvxfMvSG4sXOdg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.crl rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.mft rsync://rpki.ripe.net/repository/DEFAULT/zpZPmDefAyCnGR5tZ4iABTWIWSg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:9b:eb:cf:fb:bb:df:d5:6b:c3:d6:b2:12:ff:de:fe:aa:8c:8c:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce964f98379f0320a7191e6d6788800535885928 Validity Not Before: Dec 26 07:26:17 2025 GMT Not After : Dec 27 08:07:17 2025 GMT Subject: CN=743D0589BA150A82A25667CDAC333D6D40CB54D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:cc:7e:20:6c:b0:a1:c3:c2:47:0a:1c:76:ab: e7:28:a5:f8:9e:2a:21:4e:cd:eb:86:d2:fd:2a:b8: 22:34:3c:57:71:df:b4:ae:7d:e9:c6:f6:11:1b:cb: 5a:12:6a:6c:9e:63:76:81:3f:74:d3:2e:31:14:60: ef:84:2d:98:ce:cd:14:b3:86:ad:fe:a3:e1:89:ad: 48:e8:f1:be:72:d3:9b:dc:1c:36:e1:21:92:2c:f6: 25:7c:64:1f:5e:4c:6c:44:13:63:40:dd:84:73:3f: 38:42:c9:e7:a7:a5:49:17:63:ac:07:82:3a:d6:b0: 2d:22:c1:f9:19:33:0b:7a:72:87:95:12:17:ff:3d: 40:4a:56:5b:67:01:57:25:a7:91:49:2b:54:6b:e5: 7d:bf:53:b3:0b:f8:c1:62:6a:cd:04:c2:51:99:3d: 63:19:26:18:1f:13:e5:8f:c5:65:39:9e:3d:94:8a: 95:b6:a8:9a:24:57:23:94:93:5c:7a:ef:af:04:9b: 34:b2:b4:1e:63:f8:22:bc:72:ec:49:d5:3e:72:46: 40:dd:ae:7a:53:62:fb:03:18:fa:72:2f:c9:6e:22: 0f:25:3b:e0:bb:f3:ec:a4:f6:63:04:a5:09:f8:a7: 76:de:fd:bc:3a:70:4a:f8:60:b9:21:ff:0f:63:20: b9:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:3D:05:89:BA:15:0A:82:A2:56:67:CD:AC:33:3D:6D:40:CB:54:D2 X509v3 Authority Key Identifier: keyid:CE:96:4F:98:37:9F:03:20:A7:19:1E:6D:67:88:80:05:35:88:59:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpZPmDefAyCnGR5tZ4iABTWIWSg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/0/CE964F98379F0320A7191E6D6788800535885928.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:ae:e3:95:f9:8d:a6:9a:b9:f9:be:42:5c:f5:76:ea:a0:84: 6b:e5:18:89:5a:e7:1d:f5:b7:01:0c:a2:a5:46:65:40:d8:1c: ab:19:5b:c5:c8:ed:9f:61:1a:be:89:a2:be:78:3d:d4:ab:25: 62:31:09:7f:70:38:04:aa:22:aa:f9:0e:dc:36:3d:59:5d:09: a0:3e:27:3b:36:4d:c7:45:78:f0:d1:d7:f5:2d:9b:f9:ad:c7: fe:b8:e5:6a:e9:78:ca:60:61:1c:de:e9:34:a4:3d:0d:ff:41: 22:6b:ec:87:f8:58:2f:3d:27:b7:10:9b:ce:2b:9c:48:56:2e: a0:89:48:18:ee:54:17:c2:f3:15:5e:4f:40:ed:06:b0:6c:68: c0:56:e0:14:32:b3:7b:9d:e7:93:fb:72:68:7b:91:28:21:8e: 72:c2:d3:75:63:00:8c:63:25:fc:e2:d1:2b:a0:ed:c7:72:66: a5:61:5e:89:11:1b:76:c0:65:81:54:4c:74:2f:41:72:45:8a: 8c:8e:df:ff:2a:0e:75:51:d7:26:2b:46:1e:57:5f:8d:e7:c3: 25:7e:43:de:c0:df:63:56:4e:5c:7c:30:44:85:25:77:a5:39: ad:e6:ca:ee:26:2e:48:5a:72:0f:1a:33:ea:7c:ef:27:bd:ed: 15:66:f6:6d -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUJJvrz/u739Vrw9ayEv/e/qqMjMYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2U5NjRmOTgzNzlmMDMyMGE3MTkxZTZkNjc4ODgwMDUz NTg4NTkyODAeFw0yNTEyMjYwNzI2MTdaFw0yNTEyMjcwODA3MTdaMDMxMTAvBgNV BAMTKDc0M0QwNTg5QkExNTBBODJBMjU2NjdDREFDMzMzRDZENDBDQjU0RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkzH4gbLChw8JHChx2q+copfie KiFOzeuG0v0quCI0PFdx37SufenG9hEby1oSamyeY3aBP3TTLjEUYO+ELZjOzRSz hq3+o+GJrUjo8b5y05vcHDbhIZIs9iV8ZB9eTGxEE2NA3YRzPzhCyeenpUkXY6wH gjrWsC0iwfkZMwt6coeVEhf/PUBKVltnAVclp5FJK1Rr5X2/U7ML+MFias0EwlGZ PWMZJhgfE+WPxWU5nj2UipW2qJokVyOUk1x6768EmzSytB5j+CK8cuxJ1T5yRkDd rnpTYvsDGPpyL8luIg8lO+C78+yk9mMEpQn4p3be/bw6cEr4YLkh/w9jILntAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUdD0FiboVCoKiVmfNrDM9bUDLVNIwHwYDVR0j BBgwFoAUzpZPmDefAyCnGR5tZ4iABTWIWSgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2Y5OWU2NmQtNGM3Yi00MTMwLTkxZDUtNGZiZDg0MzU3 NzkyLzAvQ0U5NjRGOTgzNzlGMDMyMEE3MTkxRTZENjc4ODgwMDUzNTg4NTkyOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3pwWlBtRGVmQXlDbkdSNXRaNGlBQlRX SVdTZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zZjk5ZTY2ZC00 YzdiLTQxMzAtOTFkNS00ZmJkODQzNTc3OTIvMC9DRTk2NEY5ODM3OUYwMzIwQTcx OTFFNkQ2Nzg4ODAwNTM1ODg1OTI4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAva7jlfmNppq5+b5CXPV2 6qCEa+UYiVrnHfW3AQyipUZlQNgcqxlbxcjtn2Eavomivng91KslYjEJf3A4BKoi qvkO3DY9WV0JoD4nOzZNx0V48NHX9S2b+a3H/rjlaul4ymBhHN7pNKQ9Df9BImvs h/hYLz0ntxCbziucSFYuoIlIGO5UF8LzFV5PQO0GsGxowFbgFDKze53nk/tyaHuR KCGOcsLTdWMAjGMl/OLRK6Dtx3JmpWFeiREbdsBlgVRMdC9BckWKjI7f/yoOdVHX JitGHldfjefDJX5D3sDfY1ZOXHwwRIUld6U5rebK7iYuSFpyDxoz6nzvJ73tFWb2 bQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:07:50 2025 by rpki-client