This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/0/CF277DDF4A74DE53E4483795713BFB135A1140DE.mft File: CF277DDF4A74DE53E4483795713BFB135A1140DE.mft (raw, json) Hash identifier: u7TMCr8yWzRTkgHF6o0HeDlNPz+Jx2yo+ZSUKfnpScI= Subject key identifier: 05:B3:B5:3D:35:D1:47:87:EC:C2:57:AF:2C:F6:4D:06:E0:A5:93:63 Authority key identifier: CF:27:7D:DF:4A:74:DE:53:E4:48:37:95:71:3B:FB:13:5A:11:40:DE Certificate issuer: /CN=cf277ddf4a74de53e4483795713bfb135a1140de Certificate serial: 10933DE9E1698D8E6ECC1B642471ECA2DAF70E24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zyd930p03lPkSDeVcTv7E1oRQN4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/0/CF277DDF4A74DE53E4483795713BFB135A1140DE.mft Manifest number: 37 Signing time: Fri 26 Dec 2025 08:25:10 +0000 Manifest this update: Fri 26 Dec 2025 08:20:10 +0000 Manifest next update: Sat 27 Dec 2025 10:40:10 +0000 Files and hashes: 1: CF277DDF4A74DE53E4483795713BFB135A1140DE.crl (hash: RiorCKhtn/A6dM4jRQ1Arfh9M482P7h16Bt4MLJyJzw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/0/CF277DDF4A74DE53E4483795713BFB135A1140DE.crl rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/0/CF277DDF4A74DE53E4483795713BFB135A1140DE.mft rsync://rpki.ripe.net/repository/DEFAULT/zyd930p03lPkSDeVcTv7E1oRQN4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:93:3d:e9:e1:69:8d:8e:6e:cc:1b:64:24:71:ec:a2:da:f7:0e:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf277ddf4a74de53e4483795713bfb135a1140de Validity Not Before: Dec 26 08:20:10 2025 GMT Not After : Dec 27 10:40:10 2025 GMT Subject: CN=05B3B53D35D14787ECC257AF2CF64D06E0A59363 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:93:a6:57:c9:e2:f2:15:4a:d6:77:98:2e:98: 43:b2:75:fe:28:a5:d9:03:63:d5:78:c2:39:cc:49: 50:5b:cd:90:52:83:61:bd:79:f2:35:d0:46:2c:f9: 78:c8:fb:d3:43:82:55:22:f9:d0:8a:46:5d:d5:93: f0:1f:4e:ca:d3:95:eb:90:37:76:a1:7b:5e:b2:dc: 6b:f3:dc:02:a5:7b:a6:f5:7f:b4:b0:1a:7b:7f:68: 12:17:38:9e:21:68:a0:c0:3e:56:91:24:da:ea:c3: 81:a2:b1:2c:41:20:be:18:a6:13:d8:28:2c:14:f3: 52:9b:a9:f0:a7:6b:5f:6d:04:48:be:e1:bb:a2:ea: 80:68:79:7d:49:39:8d:51:50:6e:5e:e5:3a:2d:12: 4c:4d:93:f5:c2:ee:ea:f0:22:fd:0a:f9:2a:6b:b0: d5:41:a1:5a:68:35:84:ec:4d:1b:46:41:29:88:ce: 63:7c:4b:0d:94:9d:c4:73:6d:b8:bf:d6:17:a1:05: f1:02:20:6e:21:60:02:c1:bb:c7:16:ba:18:6e:e7: 79:03:78:0f:f4:18:46:10:e8:ea:37:73:31:87:55: f9:ce:0f:3d:35:d0:a5:9b:68:24:3a:11:ba:59:8f: 3f:54:69:6e:19:5a:26:1e:46:c2:77:0c:79:12:a4: d3:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:B3:B5:3D:35:D1:47:87:EC:C2:57:AF:2C:F6:4D:06:E0:A5:93:63 X509v3 Authority Key Identifier: keyid:CF:27:7D:DF:4A:74:DE:53:E4:48:37:95:71:3B:FB:13:5A:11:40:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/0/CF277DDF4A74DE53E4483795713BFB135A1140DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zyd930p03lPkSDeVcTv7E1oRQN4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/0/CF277DDF4A74DE53E4483795713BFB135A1140DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:25:9e:e2:44:eb:56:e0:6e:d9:3d:83:99:05:e8:79:98:8e: 45:a4:5f:65:6a:d4:fe:4a:56:bf:d8:86:51:e3:05:db:17:f6: 50:8a:56:45:52:0c:77:b6:1d:c4:9c:66:02:49:e9:2c:6d:8f: ee:75:4f:14:5a:8a:14:1c:99:c6:82:f7:16:26:1e:69:c1:d4: ae:bd:e6:d1:d9:3b:25:46:cb:bf:41:05:a0:10:2a:42:be:8c: 96:c9:11:7c:1c:fb:6a:a3:bb:1e:f0:ae:d1:55:5c:de:b6:83: 44:23:b1:9d:a9:16:f5:9a:f0:44:c6:4d:4b:ea:58:6b:08:93: 8c:79:6a:a2:ab:44:bc:f8:d3:ff:09:e2:02:c5:f7:4f:38:ab: 23:3a:0d:e8:63:27:e5:20:e5:32:c2:ab:21:92:d1:ae:2b:a1: 7a:69:23:1b:97:42:bd:7b:89:b6:a7:74:a3:84:d0:30:6c:72: 3e:b7:ae:e5:6f:31:e6:b0:06:29:5a:ad:8a:50:61:f3:af:e6: 94:00:bd:b0:6a:9c:36:c6:27:d0:d2:a5:9f:aa:d7:4a:a4:07: f2:48:1e:7e:76:01:16:f2:86:24:3f:77:a9:7b:04:f8:57:bc: 03:32:95:55:01:85:82:33:c1:3d:dd:a2:f1:84:51:7b:f6:4a: 0b:79:a7:9a -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUEJM96eFpjY5uzBtkJHHsotr3DiQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2YyNzdkZGY0YTc0ZGU1M2U0NDgzNzk1NzEzYmZiMTM1 YTExNDBkZTAeFw0yNTEyMjYwODIwMTBaFw0yNTEyMjcxMDQwMTBaMDMxMTAvBgNV BAMTKDA1QjNCNTNEMzVEMTQ3ODdFQ0MyNTdBRjJDRjY0RDA2RTBBNTkzNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjk6ZXyeLyFUrWd5gumEOydf4o pdkDY9V4wjnMSVBbzZBSg2G9efI10EYs+XjI+9NDglUi+dCKRl3Vk/AfTsrTleuQ N3ahe16y3Gvz3AKle6b1f7SwGnt/aBIXOJ4haKDAPlaRJNrqw4GisSxBIL4YphPY KCwU81KbqfCna19tBEi+4bui6oBoeX1JOY1RUG5e5TotEkxNk/XC7urwIv0K+Spr sNVBoVpoNYTsTRtGQSmIzmN8Sw2UncRzbbi/1hehBfECIG4hYALBu8cWuhhu53kD eA/0GEYQ6Oo3czGHVfnODz010KWbaCQ6EbpZjz9UaW4ZWiYeRsJ3DHkSpNN5AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUBbO1PTXRR4fswlevLPZNBuClk2MwHwYDVR0j BBgwFoAUzyd930p03lPkSDeVcTv7E1oRQN4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzhlNjE2MTEtM2IwYi00MWNlLTg4Y2QtZTU2MDM1M2Y2 OTQyLzAvQ0YyNzdEREY0QTc0REU1M0U0NDgzNzk1NzEzQkZCMTM1QTExNDBERS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p5ZDkzMHAwM2xQa1NEZVZjVHY3RTFv UlFONC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83OGU2MTYxMS0z YjBiLTQxY2UtODhjZC1lNTYwMzUzZjY5NDIvMC9DRjI3N0RERjRBNzRERTUzRTQ0 ODM3OTU3MTNCRkIxMzVBMTE0MERFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMSWe4kTrVuBu2T2DmQXo eZiORaRfZWrU/kpWv9iGUeMF2xf2UIpWRVIMd7YdxJxmAknpLG2P7nVPFFqKFByZ xoL3FiYeacHUrr3m0dk7JUbLv0EFoBAqQr6MlskRfBz7aqO7HvCu0VVc3raDRCOx nakW9ZrwRMZNS+pYawiTjHlqoqtEvPjT/wniAsX3TzirIzoN6GMn5SDlMsKrIZLR riuhemkjG5dCvXuJtqd0o4TQMGxyPreu5W8x5rAGKVqtilBh86/mlAC9sGqcNsYn 0NKln6rXSqQH8kgefnYBFvKGJD93qXsE+Fe8AzKVVQGFgjPBPd2i8YRRe/ZKC3mn mg== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:37 2025 by rpki-client