This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/984185b7-0343-4a64-aa34-82f61ec0dfdc/1/4558B4A0DFC2FF32DAB39280CBF0C18A9F51A019.mft File: 4558B4A0DFC2FF32DAB39280CBF0C18A9F51A019.mft (raw, json) Hash identifier: E+2KymuKXzK9E0sdyh64bqgLNMtVSYnBaduxfKfEfwc= Subject key identifier: 40:13:C8:21:30:CD:08:FC:FF:52:5F:E7:46:36:7C:32:DB:C3:10:0A Authority key identifier: 45:58:B4:A0:DF:C2:FF:32:DA:B3:92:80:CB:F0:C1:8A:9F:51:A0:19 Certificate issuer: /CN=4558b4a0dfc2ff32dab39280cbf0c18a9f51a019 Certificate serial: B16688687D193DBFC4A9A292C55C1D773B81CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RVi0oN_C_zLas5KAy_DBip9RoBk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/984185b7-0343-4a64-aa34-82f61ec0dfdc/1/4558B4A0DFC2FF32DAB39280CBF0C18A9F51A019.mft Manifest number: 10 Signing time: Fri 26 Dec 2025 07:10:45 +0000 Manifest this update: Fri 26 Dec 2025 07:05:45 +0000 Manifest next update: Sat 27 Dec 2025 07:25:45 +0000 Files and hashes: 1: 4558B4A0DFC2FF32DAB39280CBF0C18A9F51A019.crl (hash: g23KX5PJJWVs1cYISD9gPdJZuXqZTnyBAT+S5fFz2GQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/984185b7-0343-4a64-aa34-82f61ec0dfdc/1/4558B4A0DFC2FF32DAB39280CBF0C18A9F51A019.crl rsync://rsync.paas.rpki.ripe.net/repository/984185b7-0343-4a64-aa34-82f61ec0dfdc/1/4558B4A0DFC2FF32DAB39280CBF0C18A9F51A019.mft rsync://rpki.ripe.net/repository/DEFAULT/RVi0oN_C_zLas5KAy_DBip9RoBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: b1:66:88:68:7d:19:3d:bf:c4:a9:a2:92:c5:5c:1d:77:3b:81:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4558b4a0dfc2ff32dab39280cbf0c18a9f51a019 Validity Not Before: Dec 26 07:05:45 2025 GMT Not After : Dec 27 07:25:45 2025 GMT Subject: CN=4013C82130CD08FCFF525FE746367C32DBC3100A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ea:cb:9a:f8:27:f0:b0:a2:d3:a9:9a:53:c1: 94:e6:15:22:3d:e1:4a:24:d5:5c:0b:77:3b:19:69: 3f:e8:b9:d2:2e:2e:c6:c9:ad:df:79:0b:d6:66:75: de:8c:26:17:eb:99:7c:49:f8:33:ea:85:b5:b1:eb: 1e:1c:68:da:86:50:9b:b6:56:76:a0:6b:df:ec:24: 0c:92:d2:aa:bd:68:18:3b:45:ff:8d:41:98:c7:72: 84:a4:55:db:7c:6b:2f:7c:6e:b2:2e:37:f2:a8:ed: 92:f8:15:aa:e0:7b:e0:36:0f:55:eb:cd:9d:d6:66: e0:d9:db:0c:af:e5:2a:26:52:50:f9:07:ed:ac:be: 83:c9:6b:08:66:84:9e:c3:1c:65:62:74:50:a3:c4: d9:56:e7:18:f6:90:4c:d5:ea:46:93:45:5d:46:73: b1:1f:79:a9:87:5a:84:7a:14:35:de:8e:a0:44:c5: 28:fa:26:47:86:6f:42:d4:09:51:7a:32:d6:8f:cb: 18:48:8f:e4:c0:a3:b6:67:1e:96:1a:c8:34:e8:a5: 77:3b:f1:a4:92:03:b6:60:34:f3:ad:13:9d:47:b4: e9:26:90:fe:12:f8:a0:d1:86:79:63:d6:fc:27:66: 7b:ff:63:68:1e:e4:90:19:b1:d9:dc:fa:80:61:d5: 47:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:13:C8:21:30:CD:08:FC:FF:52:5F:E7:46:36:7C:32:DB:C3:10:0A X509v3 Authority Key Identifier: keyid:45:58:B4:A0:DF:C2:FF:32:DA:B3:92:80:CB:F0:C1:8A:9F:51:A0:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/984185b7-0343-4a64-aa34-82f61ec0dfdc/1/4558B4A0DFC2FF32DAB39280CBF0C18A9F51A019.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RVi0oN_C_zLas5KAy_DBip9RoBk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/984185b7-0343-4a64-aa34-82f61ec0dfdc/1/4558B4A0DFC2FF32DAB39280CBF0C18A9F51A019.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:2e:fe:11:1a:04:50:94:2d:c8:f3:9b:fd:6b:ba:ca:9f:de: 4d:46:3f:f4:15:7e:16:56:a6:71:26:d6:ec:9e:12:6b:54:3b: 7a:ce:74:62:c0:99:7e:7b:3a:0f:f7:5f:c5:bf:6e:05:f9:8c: 26:c0:98:78:41:4d:49:fa:34:ae:4e:0f:cd:df:55:bb:c4:aa: 7a:64:6e:e6:de:32:aa:32:1e:a4:9d:cb:09:97:01:7d:5a:a9: b8:32:4c:4d:46:e2:56:3f:bf:7a:7b:6d:9d:0e:12:a3:6e:ac: 71:05:3d:b2:47:d8:1e:0b:ea:0c:8c:04:89:e1:ce:fd:a3:1f: f6:9b:6f:19:c1:df:fe:c9:c1:53:ba:0a:e9:e6:77:04:ae:80: cd:b0:33:04:80:6d:d7:8c:af:63:64:83:06:0c:5f:ca:cf:84: ad:09:b0:b3:c1:56:44:01:71:92:2b:a3:d6:0c:09:3b:d5:88: 85:d6:78:e1:01:ab:c4:48:bd:5f:6b:b2:14:30:cc:78:cb:1d: e8:56:73:f6:a4:27:85:00:e7:fe:f7:5e:2c:45:ec:cb:1c:5b: c3:0d:eb:63:b9:1e:3f:ff:b9:b9:dd:8c:26:41:61:ab:cf:1d: 9c:7e:f6:95:23:c6:10:1f:31:68:5c:c9:f0:f9:92:a9:2b:2c: 9c:52:6a:47 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUALFmiGh9GT2/xKmiksVcHXc7gc0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU1OGI0YTBkZmMyZmYzMmRhYjM5MjgwY2JmMGMxOGE5 ZjUxYTAxOTAeFw0yNTEyMjYwNzA1NDVaFw0yNTEyMjcwNzI1NDVaMDMxMTAvBgNV BAMTKDQwMTNDODIxMzBDRDA4RkNGRjUyNUZFNzQ2MzY3QzMyREJDMzEwMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg6sua+CfwsKLTqZpTwZTmFSI9 4Uok1VwLdzsZaT/oudIuLsbJrd95C9Zmdd6MJhfrmXxJ+DPqhbWx6x4caNqGUJu2 Vnaga9/sJAyS0qq9aBg7Rf+NQZjHcoSkVdt8ay98brIuN/Ko7ZL4Farge+A2D1Xr zZ3WZuDZ2wyv5SomUlD5B+2svoPJawhmhJ7DHGVidFCjxNlW5xj2kEzV6kaTRV1G c7EfeamHWoR6FDXejqBExSj6JkeGb0LUCVF6MtaPyxhIj+TAo7ZnHpYayDTopXc7 8aSSA7ZgNPOtE51HtOkmkP4S+KDRhnlj1vwnZnv/Y2ge5JAZsdnc+oBh1UfzAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUQBPIITDNCPz/Ul/nRjZ8MtvDEAowHwYDVR0j BBgwFoAURVi0oN/C/zLas5KAy/DBip9RoBkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTg0MTg1YjctMDM0My00YTY0LWFhMzQtODJmNjFlYzBk ZmRjLzEvNDU1OEI0QTBERkMyRkYzMkRBQjM5MjgwQ0JGMEMxOEE5RjUxQTAxOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JWaTBvTl9DX3pMYXM1S0F5X0RCaXA5 Um9Cay5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ODQxODViNy0w MzQzLTRhNjQtYWEzNC04MmY2MWVjMGRmZGMvMS80NTU4QjRBMERGQzJGRjMyREFC MzkyODBDQkYwQzE4QTlGNTFBMDE5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYS7+ERoEUJQtyPOb/Wu6 yp/eTUY/9BV+FlamcSbW7J4Sa1Q7es50YsCZfns6D/dfxb9uBfmMJsCYeEFNSfo0 rk4Pzd9Vu8SqemRu5t4yqjIepJ3LCZcBfVqpuDJMTUbiVj+/enttnQ4So26scQU9 skfYHgvqDIwEieHO/aMf9ptvGcHf/snBU7oK6eZ3BK6AzbAzBIBt14yvY2SDBgxf ys+ErQmws8FWRAFxkiuj1gwJO9WIhdZ44QGrxEi9X2uyFDDMeMsd6FZz9qQnhQDn /vdeLEXsyxxbww3rY7keP/+5ud2MJkFhq88dnH72lSPGEB8xaFzJ8PmSqSssnFJq Rw== -----END CERTIFICATE-----Generated at Fri Dec 26 15:42:22 2025 by rpki-client