This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft File: 9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft (raw, json) Hash identifier: zpayB23JwTx/xirCNwWQZETAsEL8WfSt/yOYpjgq6ww= Subject key identifier: 77:00:E4:57:74:5F:84:FE:4D:A1:7F:20:58:AA:AA:91:5E:C0:D6:50 Authority key identifier: 9D:49:BD:0B:28:84:C6:DC:50:85:C1:A6:94:DF:7B:97:0E:05:DA:AB Certificate issuer: /CN=9d49bd0b2884c6dc5085c1a694df7b970e05daab Certificate serial: 74FCA9871D9F0051433B7B09D764666C0B46FA0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nUm9CyiExtxQhcGmlN97lw4F2qs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft Manifest number: 027A Signing time: Fri 26 Dec 2025 07:50:16 +0000 Manifest this update: Fri 26 Dec 2025 07:45:16 +0000 Manifest next update: Sun 28 Dec 2025 09:51:16 +0000 Files and hashes: 1: 9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.crl (hash: R802VE1rvmzhryi5uEXni54Ct3oqqLoQHs8brHMF8rU=) 2: AS209735.asa (hash: 4lq2i8m+npa42DYropbb29vhZU9mPbpa0ah43H0njAQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft rsync://rpki.ripe.net/repository/DEFAULT/nUm9CyiExtxQhcGmlN97lw4F2qs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:fc:a9:87:1d:9f:00:51:43:3b:7b:09:d7:64:66:6c:0b:46:fa:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d49bd0b2884c6dc5085c1a694df7b970e05daab Validity Not Before: Dec 26 07:45:16 2025 GMT Not After : Dec 28 09:51:16 2025 GMT Subject: CN=7700E457745F84FE4DA17F2058AAAA915EC0D650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:21:fe:c3:dd:b8:3b:5a:ad:77:59:3d:5d:d7: 58:0b:3f:d0:06:98:ac:b2:f3:86:e8:19:e6:58:fd: ac:83:be:e3:fa:61:74:d0:90:d3:83:2c:40:09:90: 0c:9a:98:20:97:f5:a9:a1:6d:99:49:2f:7c:82:be: 8d:cb:07:9c:ee:68:ff:55:df:2e:bb:35:5b:3f:70: 8e:18:79:13:1d:f1:40:b3:68:b2:2c:71:a4:65:0c: 5f:cf:29:ae:11:57:13:19:4f:78:58:11:00:44:18: 4d:cb:52:67:69:3a:79:4f:1e:15:5b:db:f7:cf:6a: d8:df:23:51:4b:93:91:a9:24:f0:8c:3e:1a:ac:e2: b6:43:56:8d:fe:6e:b7:5c:7b:f0:17:4f:3d:73:42: 33:10:6e:4a:bd:7b:3b:8b:2f:3b:2c:6f:e0:d9:64: 5e:29:00:77:76:2a:b8:8c:53:4b:bf:52:62:1d:57: 99:fa:8a:d1:e3:5c:7e:70:69:f3:72:3c:51:b1:ac: 30:a6:db:ce:b7:45:bf:b5:a7:4c:f8:32:02:c0:57: 70:f9:68:79:94:37:70:69:0c:68:4e:6a:1f:c3:7b: ca:2b:6e:fb:31:be:f3:6b:89:6d:dc:46:fc:fb:40: 57:ba:13:65:d9:9c:41:b5:89:87:ed:ed:bd:3b:ae: c6:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:00:E4:57:74:5F:84:FE:4D:A1:7F:20:58:AA:AA:91:5E:C0:D6:50 X509v3 Authority Key Identifier: keyid:9D:49:BD:0B:28:84:C6:DC:50:85:C1:A6:94:DF:7B:97:0E:05:DA:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUm9CyiExtxQhcGmlN97lw4F2qs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/4/9D49BD0B2884C6DC5085C1A694DF7B970E05DAAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:23:34:e0:5d:9f:d2:af:21:06:95:5a:7a:7b:d2:95:1e:e8: 3c:28:16:0c:59:6d:8f:98:10:87:17:2a:57:0c:a7:b2:0f:11: 8c:55:43:d9:d6:2f:bb:15:4a:6b:67:44:a0:10:7f:ea:6f:a1: 9b:29:4f:a6:c9:ad:30:aa:bc:ef:20:11:27:8d:12:f8:3e:a2: 15:e7:ef:ab:eb:41:fc:24:5c:74:9f:64:25:8f:18:59:d4:67: 4f:96:cb:da:4a:ac:1e:a1:f6:54:1b:cd:f4:a6:0c:9e:7d:a1: 87:12:9f:37:00:f1:3d:1d:81:e9:e5:3b:6b:97:76:c7:6b:3f: 17:33:cb:6b:45:ed:2e:2e:17:98:58:13:ab:ed:f6:4e:9e:7d: c5:d8:0e:cf:dc:bd:0a:48:b9:59:99:ac:57:47:67:dd:93:13: f1:90:ba:62:0d:d3:e9:f4:51:81:44:a9:51:15:1e:a6:a9:fb: bd:b3:bb:d6:eb:e2:50:0b:d4:9e:ee:96:53:8e:d9:bc:50:53: 0e:8a:99:a0:c5:93:ba:e4:d7:dd:e4:6c:bb:5d:32:85:b5:e5: 87:d6:33:f0:f1:82:da:17:fa:65:c0:b6:61:ef:9b:09:40:eb: 7d:1c:b9:5b:5d:04:67:7e:01:a4:8a:11:31:ce:1e:e6:96:bf: 6e:69:f2:d9 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUdPyphx2fAFFDO3sJ12RmbAtG+g4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOWQ0OWJkMGIyODg0YzZkYzUwODVjMWE2OTRkZjdiOTcw ZTA1ZGFhYjAeFw0yNTEyMjYwNzQ1MTZaFw0yNTEyMjgwOTUxMTZaMDMxMTAvBgNV BAMTKDc3MDBFNDU3NzQ1Rjg0RkU0REExN0YyMDU4QUFBQTkxNUVDMEQ2NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3If7D3bg7Wq13WT1d11gLP9AG mKyy84boGeZY/ayDvuP6YXTQkNODLEAJkAyamCCX9amhbZlJL3yCvo3LB5zuaP9V 3y67NVs/cI4YeRMd8UCzaLIscaRlDF/PKa4RVxMZT3hYEQBEGE3LUmdpOnlPHhVb 2/fPatjfI1FLk5GpJPCMPhqs4rZDVo3+brdce/AXTz1zQjMQbkq9ezuLLzssb+DZ ZF4pAHd2KriMU0u/UmIdV5n6itHjXH5wafNyPFGxrDCm2863Rb+1p0z4MgLAV3D5 aHmUN3BpDGhOah/De8orbvsxvvNriW3cRvz7QFe6E2XZnEG1iYft7b07rsZbAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUdwDkV3RfhP5NoX8gWKqqkV7A1lAwHwYDVR0j BBgwFoAUnUm9CyiExtxQhcGmlN97lw4F2qswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2 NGY0LzQvOUQ0OUJEMEIyODg0QzZEQzUwODVDMUE2OTRERjdCOTcwRTA1REFBQi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL25VbTlDeWlFeHR4UWhjR21sTjk3bHc0 RjJxcy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0x OTg3LTQ3MDEtOGYxZi04NDI1MTExOTY0ZjQvNC85RDQ5QkQwQjI4ODRDNkRDNTA4 NUMxQTY5NERGN0I5NzBFMDVEQUFCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkiM04F2f0q8hBpVaenvS lR7oPCgWDFltj5gQhxcqVwynsg8RjFVD2dYvuxVKa2dEoBB/6m+hmylPpsmtMKq8 7yARJ40S+D6iFefvq+tB/CRcdJ9kJY8YWdRnT5bL2kqsHqH2VBvN9KYMnn2hhxKf NwDxPR2B6eU7a5d2x2s/FzPLa0XtLi4XmFgTq+32Tp59xdgOz9y9Cki5WZmsV0dn 3ZMT8ZC6Yg3T6fRRgUSpURUepqn7vbO71uviUAvUnu6WU47ZvFBTDoqZoMWTuuTX 3eRsu10yhbXlh9Yz8PGC2hf6ZcC2Ye+bCUDrfRy5W10EZ34BpIoRMc4e5pa/bmny 2Q== -----END CERTIFICATE-----Generated at Fri Dec 26 15:46:30 2025 by rpki-client