This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.mft File: 2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.mft (raw, json) Hash identifier: 35MGN0/nvmtsWVzFhUqXWfxNs7WUHNxW3F6xum+dUmM= Subject key identifier: 47:99:D1:37:27:1B:1C:6B:67:FE:35:51:BE:21:84:2F:63:87:28:52 Authority key identifier: 2D:6D:8B:17:B6:3C:09:8C:A2:2D:8B:13:EA:1E:8D:DC:43:AA:F5:13 Certificate issuer: /CN=2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513 Certificate serial: 1D625E6DCDA6D025608E45227E2C48E8C89DEE19 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.mft Manifest number: 15 Signing time: Sat 22 Nov 2025 04:59:49 +0000 Manifest this update: Sat 22 Nov 2025 04:54:49 +0000 Manifest next update: Sun 23 Nov 2025 05:40:49 +0000 Files and hashes: 1: 2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.crl (hash: 0bWH+J+EZhaAhRkJRYIztl+YVkbVfUPLy9QJGSH50Wc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 05:40:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:62:5e:6d:cd:a6:d0:25:60:8e:45:22:7e:2c:48:e8:c8:9d:ee:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513 Validity Not Before: Nov 22 04:54:49 2025 GMT Not After : Nov 23 05:40:49 2025 GMT Subject: CN=4799D137271B1C6B67FE3551BE21842F63872852 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:fb:e8:b3:d0:f8:0c:e3:1c:2f:38:d8:95:9c: dd:86:30:44:c8:d9:90:4b:5a:e8:cf:42:b9:bf:9f: b5:7f:f1:60:c6:da:ed:3b:ce:20:53:38:07:b4:e1: 20:6e:11:fb:2b:c9:a7:2e:7d:98:87:e9:26:8e:80: b0:8e:90:c2:68:52:ad:d8:ab:67:3e:9c:d3:af:ca: c6:ad:d8:58:1b:01:9b:c8:4b:9b:1d:a1:ef:c3:ae: a9:8b:aa:73:ca:5b:25:30:13:3f:91:be:bb:f9:8a: 26:76:ca:0b:f0:c9:cd:a2:78:fa:2d:26:5c:41:78: d7:65:cc:49:e4:1c:7d:4c:e7:12:fa:a2:af:f7:4f: 6a:42:b3:11:53:24:3c:88:11:72:fe:db:0f:d1:51: 1a:a6:36:16:5d:32:4b:a0:6f:4e:fa:b9:85:54:59: 88:8a:cf:b2:14:b1:86:59:e6:7c:da:6d:82:b4:e5: 2b:80:e9:45:e1:23:95:74:e4:91:32:5b:fe:7a:a9: 30:aa:6a:93:53:1c:2b:3e:4c:8c:4f:61:c5:cb:91: e2:e9:0e:f9:1b:85:0e:f2:87:fe:21:c3:54:93:fa: 69:fe:c0:a4:91:4d:b8:65:e3:f6:08:f1:f0:42:14: 7a:d0:9c:db:cd:6e:0e:fd:b0:9f:49:e2:02:09:24: 35:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:99:D1:37:27:1B:1C:6B:67:FE:35:51:BE:21:84:2F:63:87:28:52 X509v3 Authority Key Identifier: keyid:2D:6D:8B:17:B6:3C:09:8C:A2:2D:8B:13:EA:1E:8D:DC:43:AA:F5:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/2D6D8B17B63C098CA22D8B13EA1E8DDC43AAF513.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:16:f0:70:c3:27:78:6a:8e:ba:f8:fe:87:85:98:4b:67:0f: 10:86:9b:60:2b:6a:f8:b4:57:90:a2:88:c6:3f:74:31:5c:b0: d8:b4:0b:86:a5:86:ce:93:a6:a0:a4:27:cb:c3:02:2b:05:1c: 87:44:74:c8:55:2c:4e:aa:cd:7c:fd:52:62:27:35:91:01:fe: ba:6f:86:97:bf:16:1d:2d:64:7d:22:6a:76:41:e6:08:a8:b7: 8b:68:d6:df:6e:7f:54:a9:9e:7b:3d:08:86:64:0e:6a:8e:07: 1c:2a:53:76:5f:f3:8e:57:b9:52:b9:58:d8:63:62:66:a6:69: f2:08:0d:8f:7d:6a:31:6a:a5:e2:9a:3f:b7:5f:bd:a6:c1:76: c6:30:a9:17:99:5f:9e:71:c5:c1:6a:48:91:4e:07:94:f5:ac: 31:1d:7d:cf:78:85:8a:4c:78:42:ae:69:b2:cb:e8:9f:d8:c7: bc:35:9e:e0:df:cd:93:fd:21:f3:ec:e1:50:ad:3f:6f:26:9c: 02:98:3e:89:d0:da:22:23:a5:0f:5c:09:a1:e8:e9:c8:a5:15: de:9f:7d:cd:f3:43:3b:d6:82:c9:f6:c5:14:1f:51:50:81:13: bd:10:a4:28:e3:14:e6:c0:5e:06:8b:24:02:38:1f:97:44:e8: bc:a2:e1:11 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUHWJebc2m0CVgjkUifixI6Mid7hkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ2RDhCMTdCNjNDMDk4Q0EyMkQ4QjEzRUExRThEREM0 M0FBRjUxMzAeFw0yNTExMjIwNDU0NDlaFw0yNTExMjMwNTQwNDlaMDMxMTAvBgNV BAMTKDQ3OTlEMTM3MjcxQjFDNkI2N0ZFMzU1MUJFMjE4NDJGNjM4NzI4NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK++iz0PgM4xwvONiVnN2GMETI 2ZBLWujPQrm/n7V/8WDG2u07ziBTOAe04SBuEfsryacufZiH6SaOgLCOkMJoUq3Y q2c+nNOvysat2FgbAZvIS5sdoe/DrqmLqnPKWyUwEz+Rvrv5iiZ2ygvwyc2iePot JlxBeNdlzEnkHH1M5xL6oq/3T2pCsxFTJDyIEXL+2w/RURqmNhZdMkugb076uYVU WYiKz7IUsYZZ5nzabYK05SuA6UXhI5V05JEyW/56qTCqapNTHCs+TIxPYcXLkeLp DvkbhQ7yh/4hw1ST+mn+wKSRTbhl4/YI8fBCFHrQnNvNbg79sJ9J4gIJJDX/AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUR5nRNycbHGtn/jVRviGEL2OHKFIwHwYDVR0j BBgwFoAULW2LF7Y8CYyiLYsT6h6N3EOq9RMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzYvMkQ2RDhCMTdCNjNDMDk4Q0EyMkQ4QjEzRUExRThEREM0M0FBRjUxMy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWY3M2E5Yy0yMDU4LTQz YmItOWFjNi01YWI0MmRmYmY0MDkvNC8yRDZEOEIxN0I2M0MwOThDQTIyRDhCMTNF QTFFOEREQzQzQUFGNTEzLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzY4YWJhYmJiLWYwNDgtNGRlMS05MjA2LThkNDBmMDcxODA4Yi82LzJENkQ4QjE3 QjYzQzA5OENBMjJEOEIxM0VBMUU4RERDNDNBQUY1MTMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAGFvBw wyd4ao66+P6HhZhLZw8QhptgK2r4tFeQoojGP3QxXLDYtAuGpYbOk6agpCfLwwIr BRyHRHTIVSxOqs18/VJiJzWRAf66b4aXvxYdLWR9Imp2QeYIqLeLaNbfbn9UqZ57 PQiGZA5qjgccKlN2X/OOV7lSuVjYY2JmpmnyCA2PfWoxaqXimj+3X72mwXbGMKkX mV+eccXBakiRTgeU9awxHX3PeIWKTHhCrmmyy+if2Me8NZ7g382T/SHz7OFQrT9v JpwCmD6J0NoiI6UPXAmh6OnIpRXen33N80M71oLJ9sUUH1FQgRO9EKQo4xTmwF4G iyQCOB+XROi8ouER -----END CERTIFICATE-----Generated at Sat Nov 22 21:57:49 2025 by rpki-client