This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/0/DF083FC9C36AB37158AD80E5C84E76BE97ADC09F.mft File: DF083FC9C36AB37158AD80E5C84E76BE97ADC09F.mft (raw, json) Hash identifier: /EuUsnxm1g/FOJHjKGZMei0yeHPjStY5D44qArGxhdw= Subject key identifier: FA:5C:4C:5A:2E:5E:1F:F0:AD:07:31:BC:07:4B:3B:C4:BD:80:96:AA Authority key identifier: DF:08:3F:C9:C3:6A:B3:71:58:AD:80:E5:C8:4E:76:BE:97:AD:C0:9F Certificate issuer: /CN=df083fc9c36ab37158ad80e5c84e76be97adc09f Certificate serial: 15DFE9C0F5EBE6CAD21E6F283FA9D706627BA862 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3wg_ycNqs3FYrYDlyE52vpetwJ8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/0/DF083FC9C36AB37158AD80E5C84E76BE97ADC09F.mft Manifest number: 25 Signing time: Wed 24 Dec 2025 00:18:17 +0000 Manifest this update: Wed 24 Dec 2025 00:13:17 +0000 Manifest next update: Thu 25 Dec 2025 02:30:17 +0000 Files and hashes: 1: DF083FC9C36AB37158AD80E5C84E76BE97ADC09F.crl (hash: yApiONVnHZun+J+YuCRRaYmDDGJCINpDNvQRpwIU/P4=) 2: 323030313a3637383a313134633a3a2f34382d3438203d3e20323034353335.roa (hash: 9p7lN4fPyJsdHWKsoNbq0ArF1KunMN6fkvMq7UIoE20=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/0/DF083FC9C36AB37158AD80E5C84E76BE97ADC09F.crl rsync://rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/0/DF083FC9C36AB37158AD80E5C84E76BE97ADC09F.mft rsync://rpki.ripe.net/repository/DEFAULT/3wg_ycNqs3FYrYDlyE52vpetwJ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 02:30:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:df:e9:c0:f5:eb:e6:ca:d2:1e:6f:28:3f:a9:d7:06:62:7b:a8:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df083fc9c36ab37158ad80e5c84e76be97adc09f Validity Not Before: Dec 24 00:13:17 2025 GMT Not After : Dec 25 02:30:17 2025 GMT Subject: CN=FA5C4C5A2E5E1FF0AD0731BC074B3BC4BD8096AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:22:cf:1e:ef:e6:66:86:a7:20:0f:8e:ed:d2: 17:35:97:5c:88:1d:c2:80:31:5c:32:e6:c9:ce:a3: 88:80:a1:a2:ff:84:35:29:84:c9:90:a3:bb:92:7e: 43:47:c8:90:63:05:d6:8b:29:11:24:ac:81:12:26: a7:31:41:32:75:7a:34:71:8d:a8:fc:2a:b7:ea:1d: 7d:a0:ed:a7:97:4d:84:59:94:1e:9b:2f:05:7d:17: f5:f5:da:c9:2b:60:f7:92:37:ec:e3:f8:87:a8:70: 93:aa:a4:8d:5d:8c:16:d3:b4:6c:43:8b:89:ac:c9: 30:d1:7e:dd:66:c4:17:be:45:af:f8:7b:e8:e4:de: bf:c6:32:9a:26:97:ee:91:c1:ae:22:c9:c5:07:f3: 3a:ea:32:dd:9d:a8:0f:44:70:68:49:3b:8e:0b:67: f6:9a:7e:8a:76:88:4b:2e:6b:f6:a9:1f:13:34:ed: 0d:5a:2e:d8:4b:3e:71:25:4d:8e:92:e0:1f:23:7d: ce:cb:94:fb:91:ba:8a:cf:03:47:f9:39:1c:4c:50: e1:74:4f:b3:37:d4:d1:5c:7a:6c:0c:cf:d8:56:55: a6:2a:08:a3:3f:79:69:48:7d:72:71:df:4d:dd:3f: 72:8e:d2:13:c3:a7:91:8e:b5:08:b9:c8:6a:95:c8: 14:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:5C:4C:5A:2E:5E:1F:F0:AD:07:31:BC:07:4B:3B:C4:BD:80:96:AA X509v3 Authority Key Identifier: keyid:DF:08:3F:C9:C3:6A:B3:71:58:AD:80:E5:C8:4E:76:BE:97:AD:C0:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/0/DF083FC9C36AB37158AD80E5C84E76BE97ADC09F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wg_ycNqs3FYrYDlyE52vpetwJ8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/0/DF083FC9C36AB37158AD80E5C84E76BE97ADC09F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:d0:d9:0e:fb:05:90:07:17:8a:de:bf:9e:2c:b7:f7:a8:f8: f4:51:25:42:cc:96:7d:87:e5:be:53:ee:b8:8f:a8:c8:95:54: e6:a5:f7:73:7b:3c:e1:46:90:8f:5c:15:d9:2d:4c:e7:8e:8e: 04:37:48:ab:14:30:a5:54:c4:66:fa:63:b8:3a:a2:9c:9b:20: bb:9d:34:5d:1c:9d:52:29:00:7a:f0:59:a4:cb:9b:ba:2e:2a: 1f:fa:fd:ba:50:59:d5:d8:aa:da:ae:ea:8c:aa:db:67:cd:23: e8:36:ea:e8:a5:05:17:b7:91:42:6f:39:ff:cf:d2:c6:f1:09: 7b:38:50:ff:57:61:18:9d:98:22:8e:a1:a3:27:b1:7e:fa:03: f4:7a:05:a6:c0:60:92:22:8f:c9:30:65:c2:f9:b8:4e:18:4b: a4:2a:f3:6c:c5:3b:a0:3f:38:88:d4:1b:08:5a:b3:39:fa:2e: c2:dd:85:bc:70:11:91:ff:66:2f:6b:fc:49:64:db:3d:d5:e6: c7:80:05:26:d3:5c:6e:4b:bc:e8:ed:1d:3c:6e:43:4d:fe:55: 3d:22:62:0a:29:f7:2b:5a:1e:b2:b1:c7:9f:1c:4e:46:60:63: 0c:01:9f:84:c4:be:06:81:9e:b0:83:71:fe:ba:81:bd:c4:68: 0c:3d:cc:3a -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUFd/pwPXr5srSHm8oP6nXBmJ7qGIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZGYwODNmYzljMzZhYjM3MTU4YWQ4MGU1Yzg0ZTc2YmU5 N2FkYzA5ZjAeFw0yNTEyMjQwMDEzMTdaFw0yNTEyMjUwMjMwMTdaMDMxMTAvBgNV BAMTKEZBNUM0QzVBMkU1RTFGRjBBRDA3MzFCQzA3NEIzQkM0QkQ4MDk2QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKIs8e7+ZmhqcgD47t0hc1l1yI HcKAMVwy5snOo4iAoaL/hDUphMmQo7uSfkNHyJBjBdaLKREkrIESJqcxQTJ1ejRx jaj8KrfqHX2g7aeXTYRZlB6bLwV9F/X12skrYPeSN+zj+IeocJOqpI1djBbTtGxD i4msyTDRft1mxBe+Ra/4e+jk3r/GMpoml+6Rwa4iycUH8zrqMt2dqA9EcGhJO44L Z/aafop2iEsua/apHxM07Q1aLthLPnElTY6S4B8jfc7LlPuRuorPA0f5ORxMUOF0 T7M31NFcemwMz9hWVaYqCKM/eWlIfXJx303dP3KO0hPDp5GOtQi5yGqVyBR5AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU+lxMWi5eH/CtBzG8B0s7xL2AlqowHwYDVR0j BBgwFoAU3wg/ycNqs3FYrYDlyE52vpetwJ8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWJiNzdjOGEtMmQ2OS00MzI1LWI0ZmEtNjAzMzg4Yzk2 YmIzLzAvREYwODNGQzlDMzZBQjM3MTU4QUQ4MEU1Qzg0RTc2QkU5N0FEQzA5Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzN3Z195Y05xczNGWXJZRGx5RTUydnBl dHdKOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85YmI3N2M4YS0y ZDY5LTQzMjUtYjRmYS02MDMzODhjOTZiYjMvMC9ERjA4M0ZDOUMzNkFCMzcxNThB RDgwRTVDODRFNzZCRTk3QURDMDlGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs9DZDvsFkAcXit6/niy3 96j49FElQsyWfYflvlPuuI+oyJVU5qX3c3s84UaQj1wV2S1M546OBDdIqxQwpVTE ZvpjuDqinJsgu500XRydUikAevBZpMubui4qH/r9ulBZ1diq2q7qjKrbZ80j6Dbq 6KUFF7eRQm85/8/SxvEJezhQ/1dhGJ2YIo6hoyexfvoD9HoFpsBgkiKPyTBlwvm4 ThhLpCrzbMU7oD84iNQbCFqzOfouwt2FvHARkf9mL2v8SWTbPdXmx4AFJtNcbku8 6O0dPG5DTf5VPSJiCin3K1oesrHHnxxORmBjDAGfhMS+BoGesINx/rqBvcRoDD3M Og== -----END CERTIFICATE-----Generated at Wed Dec 24 10:28:44 2025 by rpki-client