This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.mft File: A0BBB954570CFA6E856937043DD2C1745A0A05C2.mft (raw, json) Hash identifier: a1v0AxGNhfJMtWXXhbYgmtYQN47zgN4sr1AuCdvEsvw= Subject key identifier: 1B:DB:91:5F:F4:B9:6B:C7:39:F3:8C:EB:66:DD:BE:3A:BB:E3:1D:43 Authority key identifier: A0:BB:B9:54:57:0C:FA:6E:85:69:37:04:3D:D2:C1:74:5A:0A:05:C2 Certificate issuer: /CN=a0bbb954570cfa6e856937043dd2c1745a0a05c2 Certificate serial: 17D0A7961AA094349EDC0E493A01D7B17D417C4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLu5VFcM-m6FaTcEPdLBdFoKBcI.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.mft Manifest number: 88 Signing time: Thu 25 Dec 2025 22:59:39 +0000 Manifest this update: Thu 25 Dec 2025 22:54:39 +0000 Manifest next update: Sat 27 Dec 2025 00:41:39 +0000 Files and hashes: 1: A0BBB954570CFA6E856937043DD2C1745A0A05C2.crl (hash: 92PBsUEZ4A28dJ1dVpxhi4B0HJG5VwZsubWwVwS6NDM=) 2: AS214757.asa (hash: KJVkb/rZusffYD5r7h9TWmgVTQ05c1gZ3oofLZ7qbQY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.crl rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.mft rsync://rpki.ripe.net/repository/DEFAULT/oLu5VFcM-m6FaTcEPdLBdFoKBcI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 00:41:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:d0:a7:96:1a:a0:94:34:9e:dc:0e:49:3a:01:d7:b1:7d:41:7c:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0bbb954570cfa6e856937043dd2c1745a0a05c2 Validity Not Before: Dec 25 22:54:39 2025 GMT Not After : Dec 27 00:41:39 2025 GMT Subject: CN=1BDB915FF4B96BC739F38CEB66DDBE3ABBE31D43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:4e:45:1f:90:e9:0c:40:96:c0:b6:2c:1a:81: f4:7e:71:a0:f4:b3:2f:80:37:39:85:cb:26:84:18: b9:68:56:93:b7:90:ba:4f:ff:6a:78:c6:84:cb:f8: 7d:9f:1c:51:6a:0f:59:b5:9b:78:a3:17:77:0f:cd: 75:13:c3:f9:5c:03:f1:fb:64:14:51:60:dc:46:61: c6:f6:45:97:30:86:58:57:f7:38:29:c1:3c:35:57: 26:57:2e:b9:a4:05:55:f0:e9:50:ba:6a:9f:27:b0: ca:72:58:27:11:6b:68:17:84:ab:4c:83:de:3e:74: 0a:bc:84:34:91:cb:31:3e:13:56:bf:40:e3:da:a5: 25:c5:c2:62:5b:64:45:b0:d5:79:ad:05:db:e1:1c: 49:48:c5:d5:62:87:e1:9d:85:01:62:d4:4d:f0:62: 7b:be:af:e8:22:64:44:5d:58:92:30:7e:c1:37:12: 06:40:54:5a:75:c2:46:95:cd:61:38:a7:05:24:f7: 5e:ca:9b:ec:95:c8:e9:7f:f7:6e:97:73:15:cb:67: 59:68:15:a9:b0:3b:44:d1:84:07:c2:e3:ea:68:48: 74:26:15:be:2c:60:b7:7f:c9:f6:9f:6e:e4:38:35: 9a:58:88:ac:fc:35:ed:df:ce:48:5e:a8:5f:83:84: 8b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:DB:91:5F:F4:B9:6B:C7:39:F3:8C:EB:66:DD:BE:3A:BB:E3:1D:43 X509v3 Authority Key Identifier: keyid:A0:BB:B9:54:57:0C:FA:6E:85:69:37:04:3D:D2:C1:74:5A:0A:05:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLu5VFcM-m6FaTcEPdLBdFoKBcI.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/97b5f6f4-24be-4ae0-82a8-e5d82842e229/0/A0BBB954570CFA6E856937043DD2C1745A0A05C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:f9:3c:10:fe:a7:db:04:fc:3b:cf:0c:70:18:d7:74:9b:5c: 94:9c:f8:25:f5:1a:90:02:49:91:6b:35:f1:bc:04:5a:e9:fa: 97:ea:3f:f0:47:f5:7f:b9:11:71:22:30:03:05:b5:43:ad:99: e7:53:72:40:27:ea:af:dc:2e:f4:f1:06:f7:ca:9a:2e:e9:c0: c6:45:85:7c:dc:9c:62:66:96:3a:b7:16:33:5c:8f:73:0d:5a: 5e:3d:4a:06:0e:cb:68:2f:ac:43:72:86:8c:1d:e6:38:3e:f3: 6f:af:09:06:dc:e3:84:aa:4f:ac:5f:cf:cc:c3:ba:9b:8d:10: bd:16:2c:35:89:aa:c1:2f:ce:95:c9:1f:b9:ca:dc:9a:35:d6: 75:d3:75:64:ad:43:c4:71:b7:33:ff:f1:b2:4b:01:41:8e:8d: 0a:88:ea:1d:dc:0d:65:14:5e:1b:60:d0:cb:6d:a9:55:ee:00: ba:bc:9a:46:d0:f4:7c:83:43:bf:71:21:6c:e9:05:51:cf:4f: 46:e7:43:6f:b6:09:82:b2:6d:0f:9c:c9:13:34:73:58:53:37: c4:08:6f:43:b2:0d:3a:0b:bc:9d:be:0b:88:6b:c6:28:2b:56: f1:95:3f:10:d3:87:7b:74:05:c6:8c:f4:69:be:ce:3b:13:f5: 99:16:b9:4a -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUF9CnlhqglDSe3A5JOgHXsX1BfEwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTBiYmI5NTQ1NzBjZmE2ZTg1NjkzNzA0M2RkMmMxNzQ1 YTBhMDVjMjAeFw0yNTEyMjUyMjU0MzlaFw0yNTEyMjcwMDQxMzlaMDMxMTAvBgNV BAMTKDFCREI5MTVGRjRCOTZCQzczOUYzOENFQjY2RERCRTNBQkJFMzFENDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQTkUfkOkMQJbAtiwagfR+caD0 sy+ANzmFyyaEGLloVpO3kLpP/2p4xoTL+H2fHFFqD1m1m3ijF3cPzXUTw/lcA/H7 ZBRRYNxGYcb2RZcwhlhX9zgpwTw1VyZXLrmkBVXw6VC6ap8nsMpyWCcRa2gXhKtM g94+dAq8hDSRyzE+E1a/QOPapSXFwmJbZEWw1XmtBdvhHElIxdVih+GdhQFi1E3w Ynu+r+giZERdWJIwfsE3EgZAVFp1wkaVzWE4pwUk917Km+yVyOl/926XcxXLZ1lo FamwO0TRhAfC4+poSHQmFb4sYLd/yfafbuQ4NZpYiKz8Ne3fzkheqF+DhIszAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUG9uRX/S5a8c584zrZt2+OrvjHUMwHwYDVR0j BBgwFoAUoLu5VFcM+m6FaTcEPdLBdFoKBcIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTdiNWY2ZjQtMjRiZS00YWUwLTgyYTgtZTVkODI4NDJl MjI5LzAvQTBCQkI5NTQ1NzBDRkE2RTg1NjkzNzA0M0REMkMxNzQ1QTBBMDVDMi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL29MdTVWRmNNLW02RmFUY0VQZExCZEZv S0JjSS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85N2I1ZjZmNC0y NGJlLTRhZTAtODJhOC1lNWQ4Mjg0MmUyMjkvMC9BMEJCQjk1NDU3MENGQTZFODU2 OTM3MDQzREQyQzE3NDVBMEEwNUMyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB/k8EP6n2wT8O88McBjX dJtclJz4JfUakAJJkWs18bwEWun6l+o/8Ef1f7kRcSIwAwW1Q62Z51NyQCfqr9wu 9PEG98qaLunAxkWFfNycYmaWOrcWM1yPcw1aXj1KBg7LaC+sQ3KGjB3mOD7zb68J BtzjhKpPrF/PzMO6m40QvRYsNYmqwS/OlckfucrcmjXWddN1ZK1DxHG3M//xsksB QY6NCojqHdwNZRReG2DQy22pVe4AuryaRtD0fINDv3EhbOkFUc9PRudDb7YJgrJt D5zJEzRzWFM3xAhvQ7INOgu8nb4LiGvGKCtW8ZU/ENOHe3QFxoz0ab7OOxP1mRa5 Sg== -----END CERTIFICATE-----Generated at Fri Dec 26 15:45:45 2025 by rpki-client