This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/9C9C8D5185D8125C9D65490A0EE0601C997FDAA5.mft File: 9C9C8D5185D8125C9D65490A0EE0601C997FDAA5.mft (raw, json) Hash identifier: yAYElQsq9FkqeWVd85g3mamOyGWo3z5XegzlNGuZ5iI= Subject key identifier: 75:A9:A6:BE:93:1F:7C:74:C0:D4:21:B7:A2:81:33:AE:47:7D:43:66 Authority key identifier: 9C:9C:8D:51:85:D8:12:5C:9D:65:49:0A:0E:E0:60:1C:99:7F:DA:A5 Certificate issuer: /CN=9c9c8d5185d8125c9d65490a0ee0601c997fdaa5 Certificate serial: 0BA5A10829F27F648AAD1EED3445DB6941FAA5EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJyNUYXYElydZUkKDuBgHJl_2qU.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/9C9C8D5185D8125C9D65490A0EE0601C997FDAA5.mft Manifest number: 49 Signing time: Fri 26 Dec 2025 12:07:22 +0000 Manifest this update: Fri 26 Dec 2025 12:02:22 +0000 Manifest next update: Sat 27 Dec 2025 15:06:22 +0000 Files and hashes: 1: 9C9C8D5185D8125C9D65490A0EE0601C997FDAA5.crl (hash: kqWoOWxuIAX4CVskzJ1MvrzM2ODz53Lkh4+zxlW2DPk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/9C9C8D5185D8125C9D65490A0EE0601C997FDAA5.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/9C9C8D5185D8125C9D65490A0EE0601C997FDAA5.mft rsync://rpki.ripe.net/repository/DEFAULT/nJyNUYXYElydZUkKDuBgHJl_2qU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:a5:a1:08:29:f2:7f:64:8a:ad:1e:ed:34:45:db:69:41:fa:a5:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c9c8d5185d8125c9d65490a0ee0601c997fdaa5 Validity Not Before: Dec 26 12:02:22 2025 GMT Not After : Dec 27 15:06:22 2025 GMT Subject: CN=75A9A6BE931F7C74C0D421B7A28133AE477D4366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ca:c2:e4:24:74:14:2f:9d:ca:d8:3f:06:77: 1b:89:3c:d1:cc:d6:ed:f0:c9:fa:f5:2c:70:a0:61: b8:ea:fc:43:3c:ab:96:3b:6c:a6:11:53:2d:aa:0c: c2:af:13:ca:4b:f3:91:38:34:b4:30:6b:52:62:6c: 5d:e2:4d:8f:8c:c7:09:5d:3c:e6:2f:7e:01:b3:a8: 0a:81:32:5a:0c:93:b7:c4:7a:1f:47:bd:84:72:2c: 54:ac:4a:6d:e8:e3:eb:d8:c6:ec:66:fb:7c:85:38: 6e:a5:dd:52:c6:0e:e8:45:9c:c1:45:ed:26:a2:40: 49:dc:88:c7:53:52:df:d8:af:e2:48:e5:66:ac:c3: eb:cc:83:82:fe:23:01:6e:c7:d2:29:1b:13:ef:5f: a8:c6:91:30:14:32:3f:23:35:86:5f:0d:ce:a5:38: b2:07:5b:48:c1:63:d0:e1:8c:12:44:a6:f0:cd:12: e5:3d:a0:35:d7:a2:cd:b1:0e:82:76:a1:5a:2a:ed: ad:9a:f9:b3:0d:c6:51:79:cf:a5:c4:fb:8e:fd:39: 3b:13:46:0a:30:74:ba:a1:7c:67:0f:7b:a7:95:a7: 6b:b4:17:fb:65:59:89:28:dd:85:21:95:ef:22:46: 11:b2:12:d4:23:6c:02:1b:90:ea:a6:df:ed:c2:10: 9b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:A9:A6:BE:93:1F:7C:74:C0:D4:21:B7:A2:81:33:AE:47:7D:43:66 X509v3 Authority Key Identifier: keyid:9C:9C:8D:51:85:D8:12:5C:9D:65:49:0A:0E:E0:60:1C:99:7F:DA:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/9C9C8D5185D8125C9D65490A0EE0601C997FDAA5.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJyNUYXYElydZUkKDuBgHJl_2qU.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/9C9C8D5185D8125C9D65490A0EE0601C997FDAA5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:c7:c2:88:85:b1:e5:b9:fa:25:c3:c0:73:05:c6:51:ea:9f: f2:cc:01:bd:02:cf:06:b0:52:07:45:fa:0f:65:2b:77:94:69: dd:1d:f4:5b:f8:4f:72:df:60:0c:81:08:36:e3:51:cd:d3:61: eb:49:2c:3f:0e:fc:c8:d0:ec:43:32:06:69:a7:c0:5d:fd:bf: 1c:72:ac:f3:7f:00:13:0b:76:9c:13:45:4c:91:1f:bf:51:1e: 5c:63:3d:ac:13:ce:d1:f1:b9:68:b2:f3:41:87:48:5e:ca:21: 2a:86:b0:87:ea:1a:70:ac:58:33:f6:dc:11:bd:68:5e:ba:3d: 18:bb:e2:76:f0:a2:3e:88:8b:e4:41:13:e4:2d:e9:8b:9c:52: a8:ac:e0:33:eb:e4:25:3e:0e:ec:13:4d:73:7f:87:e9:0d:b3: 01:43:8f:e4:23:47:df:72:0b:03:90:66:be:b1:3e:4c:d5:14: 8d:0d:eb:cd:4b:88:2f:19:0f:9a:c5:82:86:50:ae:c6:25:0b: 47:5d:b5:3e:d8:7f:e3:f7:8b:1a:d6:8a:d2:19:c3:30:b2:e4: 41:46:9d:1d:69:16:16:40:8e:c4:36:9a:23:4f:50:1b:3d:ad: f0:09:2f:fe:fc:21:b6:7f:81:d0:4a:17:66:e1:c4:04:aa:0a: c1:bf:29:27 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUC6WhCCnyf2SKrR7tNEXbaUH6pe4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWM5YzhkNTE4NWQ4MTI1YzlkNjU0OTBhMGVlMDYwMWM5 OTdmZGFhNTAeFw0yNTEyMjYxMjAyMjJaFw0yNTEyMjcxNTA2MjJaMDMxMTAvBgNV BAMTKDc1QTlBNkJFOTMxRjdDNzRDMEQ0MjFCN0EyODEzM0FFNDc3RDQzNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJysLkJHQUL53K2D8GdxuJPNHM 1u3wyfr1LHCgYbjq/EM8q5Y7bKYRUy2qDMKvE8pL85E4NLQwa1JibF3iTY+Mxwld POYvfgGzqAqBMloMk7fEeh9HvYRyLFSsSm3o4+vYxuxm+3yFOG6l3VLGDuhFnMFF 7SaiQEnciMdTUt/Yr+JI5Wasw+vMg4L+IwFux9IpGxPvX6jGkTAUMj8jNYZfDc6l OLIHW0jBY9DhjBJEpvDNEuU9oDXXos2xDoJ2oVoq7a2a+bMNxlF5z6XE+479OTsT RgowdLqhfGcPe6eVp2u0F/tlWYko3YUhle8iRhGyEtQjbAIbkOqm3+3CEJslAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUdammvpMffHTA1CG3ooEzrkd9Q2YwHwYDVR0j BBgwFoAUnJyNUYXYElydZUkKDuBgHJl/2qUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzAvOUM5QzhENTE4NUQ4MTI1QzlENjU0OTBBMEVFMDYwMUM5OTdGREFBNS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25KeU5VWVhZRWx5ZFpVa0tEdUJnSEps XzJxVS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJiYi1m MDQ4LTRkZTEtOTIwNi04ZDQwZjA3MTgwOGIvMC85QzlDOEQ1MTg1RDgxMjVDOUQ2 NTQ5MEEwRUUwNjAxQzk5N0ZEQUE1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADcfCiIWx5bn6JcPAcwXG Ueqf8swBvQLPBrBSB0X6D2Urd5Rp3R30W/hPct9gDIEINuNRzdNh60ksPw78yNDs QzIGaafAXf2/HHKs838AEwt2nBNFTJEfv1EeXGM9rBPO0fG5aLLzQYdIXsohKoaw h+oacKxYM/bcEb1oXro9GLvidvCiPoiL5EET5C3pi5xSqKzgM+vkJT4O7BNNc3+H 6Q2zAUOP5CNH33ILA5BmvrE+TNUUjQ3rzUuILxkPmsWChlCuxiULR121Pth/4/eL GtaK0hnDMLLkQUadHWkWFkCOxDaaI09QGz2t8Akv/vwhtn+B0EoXZuHEBKoKwb8p Jw== -----END CERTIFICATE-----Generated at Fri Dec 26 16:02:20 2025 by rpki-client