This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft File: 4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft (raw, json) Hash identifier: tG7U1yqBokx6xeJ22n7xZEYA5/HIPTGv+HaVU61SSTI= Subject key identifier: E2:17:0D:79:A8:DE:B8:F9:96:BD:D0:23:E4:50:16:07:66:73:C7:35 Authority key identifier: 4E:C2:49:B7:AF:3E:E6:9C:5B:BD:F3:C7:F4:CB:EE:1E:AA:EC:49:4F Certificate issuer: /CN=4ec249b7af3ee69c5bbdf3c7f4cbee1eaaec494f Certificate serial: 5DBF733560D41687901729D704D1A3CE6E257A0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsJJt68-5pxbvfPH9MvuHqrsSU8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft Manifest number: 08 Signing time: Fri 26 Dec 2025 09:12:56 +0000 Manifest this update: Fri 26 Dec 2025 09:07:56 +0000 Manifest next update: Sat 27 Dec 2025 10:09:56 +0000 Files and hashes: 1: 4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.crl (hash: 6+01dAQG8zIvTGBKlc/jj/1T4Bc/CccBq33iKN62Av4=) 2: AS216299.asa (hash: oVJRfuuC2/zjjySrwwFLZolSVN/C1Q8awE+NnUf1KTE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.crl rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft rsync://rpki.ripe.net/repository/DEFAULT/TsJJt68-5pxbvfPH9MvuHqrsSU8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:bf:73:35:60:d4:16:87:90:17:29:d7:04:d1:a3:ce:6e:25:7a:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ec249b7af3ee69c5bbdf3c7f4cbee1eaaec494f Validity Not Before: Dec 26 09:07:56 2025 GMT Not After : Dec 27 10:09:56 2025 GMT Subject: CN=E2170D79A8DEB8F996BDD023E45016076673C735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:73:e5:aa:13:8b:ce:96:f8:bf:7d:b3:00:89: 16:f7:cb:20:4f:2c:b3:d8:45:ed:de:d8:b8:77:16: af:8c:57:89:0b:c2:50:18:62:97:69:f4:90:9e:a9: f8:f2:54:f5:d2:6f:87:ca:32:d6:08:4a:8d:40:5b: a7:7b:ea:5b:31:ed:9f:5d:3a:b3:21:96:b8:9b:b8: ab:70:60:12:66:dc:13:26:43:05:5a:15:d2:65:6b: 3e:e5:28:11:e0:f0:95:07:df:76:1a:08:99:cd:5a: 9b:ef:43:67:de:0e:e5:52:2b:d7:cc:8b:64:60:17: 1f:63:8a:c3:58:26:e8:90:aa:e1:a5:63:de:80:ef: c4:6a:42:99:97:6a:65:ef:86:58:87:5d:a0:f4:f7: b1:db:84:9b:5f:ed:a9:74:db:80:30:a7:f1:4d:d1: c7:3d:de:91:b2:e1:e5:b3:09:a0:d9:47:84:e5:43: 5d:18:32:95:e6:db:a5:6c:b2:51:f8:9e:77:d5:67: 33:b0:7f:db:bb:1d:6f:57:aa:87:7e:4e:a3:72:2c: 8d:b4:73:19:dd:4d:6f:d0:00:6b:7c:77:44:08:4f: c1:75:82:0c:d9:4a:d9:f8:74:ec:0f:e9:dc:5a:79: eb:0c:57:cc:13:68:2a:ea:e7:79:42:a3:28:7f:13: 06:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:17:0D:79:A8:DE:B8:F9:96:BD:D0:23:E4:50:16:07:66:73:C7:35 X509v3 Authority Key Identifier: keyid:4E:C2:49:B7:AF:3E:E6:9C:5B:BD:F3:C7:F4:CB:EE:1E:AA:EC:49:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsJJt68-5pxbvfPH9MvuHqrsSU8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:90:90:e9:88:a6:80:80:97:58:12:00:88:55:78:85:3f:b1: 7e:ca:9b:59:7c:fa:bf:26:96:07:39:c9:a2:36:aa:c6:6d:5a: 80:08:ed:d6:25:1d:3d:47:52:36:51:ab:dc:2a:cc:fa:50:97: 8e:74:79:6b:59:7d:40:c8:15:9f:3d:0e:b0:d3:c6:4b:09:53: 45:4b:fa:a7:c1:28:d4:4f:94:01:d5:3d:2a:46:6a:76:90:2a: 48:8f:36:cc:bf:61:ce:12:09:d8:a1:96:a4:37:06:00:b5:72: f6:20:8b:8c:5a:08:63:7c:17:8a:43:a5:5b:07:46:ec:8a:38: 22:49:b9:ff:44:4f:fa:02:9e:1a:42:72:f3:2b:c1:fd:cc:a1: f3:d0:2f:eb:aa:df:4e:bd:23:84:4e:e3:00:85:1f:cf:44:54: 3b:cd:bb:16:17:a5:ea:51:5f:e2:b7:93:da:06:b3:ec:d4:e6: 15:7f:95:50:76:53:59:4b:01:90:d5:85:96:40:84:b1:51:88: 0e:f4:d4:1e:29:b7:52:0a:23:c8:ba:e5:02:93:eb:d1:42:d7: 9a:44:69:06:46:b4:dc:8b:c2:e4:b3:52:87:5c:da:eb:b4:fc: b6:cb:11:75:c9:a8:8c:cd:83:8f:31:1b:ec:e0:a2:94:a9:76: d1:7a:02:20 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUXb9zNWDUFoeQFynXBNGjzm4leg8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGVjMjQ5YjdhZjNlZTY5YzViYmRmM2M3ZjRjYmVlMWVh YWVjNDk0ZjAeFw0yNTEyMjYwOTA3NTZaFw0yNTEyMjcxMDA5NTZaMDMxMTAvBgNV BAMTKEUyMTcwRDc5QThERUI4Rjk5NkJERDAyM0U0NTAxNjA3NjY3M0M3MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcc+WqE4vOlvi/fbMAiRb3yyBP LLPYRe3e2Lh3Fq+MV4kLwlAYYpdp9JCeqfjyVPXSb4fKMtYISo1AW6d76lsx7Z9d OrMhlribuKtwYBJm3BMmQwVaFdJlaz7lKBHg8JUH33YaCJnNWpvvQ2feDuVSK9fM i2RgFx9jisNYJuiQquGlY96A78RqQpmXamXvhliHXaD097HbhJtf7al024Awp/FN 0cc93pGy4eWzCaDZR4TlQ10YMpXm26VsslH4nnfVZzOwf9u7HW9Xqod+TqNyLI20 cxndTW/QAGt8d0QIT8F1ggzZStn4dOwP6dxaeesMV8wTaCrq53lCoyh/EwYHAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU4hcNeajeuPmWvdAj5FAWB2ZzxzUwHwYDVR0j BBgwFoAUTsJJt68+5pxbvfPH9MvuHqrsSU8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTJiODQxNTYtOTU5Ny00NGI0LWJkMjQtNjVkZTJjMzU1 ZWZjLzEvNEVDMjQ5QjdBRjNFRTY5QzVCQkRGM0M3RjRDQkVFMUVBQUVDNDk0Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1RzSkp0NjgtNXB4YnZmUEg5TXZ1SHFy c1NVOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS81MmI4NDE1Ni05 NTk3LTQ0YjQtYmQyNC02NWRlMmMzNTVlZmMvMS80RUMyNDlCN0FGM0VFNjlDNUJC REYzQzdGNENCRUUxRUFBRUM0OTRGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFZCQ6YimgICXWBIAiFV4 hT+xfsqbWXz6vyaWBznJojaqxm1agAjt1iUdPUdSNlGr3CrM+lCXjnR5a1l9QMgV nz0OsNPGSwlTRUv6p8Eo1E+UAdU9KkZqdpAqSI82zL9hzhIJ2KGWpDcGALVy9iCL jFoIY3wXikOlWwdG7Io4Ikm5/0RP+gKeGkJy8yvB/cyh89Av66rfTr0jhE7jAIUf z0RUO827Fhel6lFf4reT2gaz7NTmFX+VUHZTWUsBkNWFlkCEsVGIDvTUHim3Ugoj yLrlApPr0ULXmkRpBka03IvC5LNSh1za67T8tssRdcmojM2DjzEb7OCilKl20XoC IA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:41:49 2025 by rpki-client