This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft File: D8219647415018E4FFD3F11C27A807530D7B7CF1.mft (raw, json) Hash identifier: 2Po9O70uTsz+GoJ9SeKPNHnSOhz184QCOSgAvtjFkN4= Subject key identifier: 5E:B0:C0:DC:1F:BE:D1:DD:B5:6B:65:80:03:42:6E:51:E6:FB:58:67 Authority key identifier: D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1 Certificate issuer: /CN=d8219647415018e4ffd3f11c27a807530d7b7cf1 Certificate serial: 293C26C119C81E40933115A96868A98BB5086649 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft Manifest number: 033E Signing time: Sun 21 Dec 2025 20:07:21 +0000 Manifest this update: Sun 21 Dec 2025 20:02:21 +0000 Manifest next update: Mon 22 Dec 2025 20:46:21 +0000 Files and hashes: 1: AS215828.asa (hash: gn0zvNq0jqiLUYK3MJlHlnirErp0oB8cq8E7u3vxlhE=) 2: D8219647415018E4FFD3F11C27A807530D7B7CF1.crl (hash: hPdz8q9N26t3dKUqewNmrqDH8HUsp9mj0wVBTIE7zpY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.crl rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 20:46:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:3c:26:c1:19:c8:1e:40:93:31:15:a9:68:68:a9:8b:b5:08:66:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8219647415018e4ffd3f11c27a807530d7b7cf1 Validity Not Before: Dec 21 20:02:21 2025 GMT Not After : Dec 22 20:46:21 2025 GMT Subject: CN=5EB0C0DC1FBED1DDB56B658003426E51E6FB5867 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:43:ab:5f:44:f1:26:1d:5a:98:80:de:79:c3: 32:d7:53:95:cd:eb:bb:52:be:a8:7c:66:5e:79:d8: 98:36:3b:fd:3d:e4:1d:e2:2e:d7:98:b2:d7:77:76: 79:d5:e0:26:5c:b7:9f:9b:b8:2c:dd:e5:e9:42:1f: 91:03:0d:75:1f:70:f2:a9:24:14:d3:77:33:c2:98: a4:c0:35:72:72:77:10:79:70:c4:ce:75:4c:b3:b0: ed:ee:c1:60:73:ee:a9:6c:f0:3b:84:c3:17:2a:04: d3:f5:ed:2f:e7:00:09:a4:6d:72:93:db:f9:9d:84: 0f:e4:da:3c:9e:a1:e4:97:80:9b:09:d9:aa:68:bf: 02:2f:45:78:c1:3e:98:ec:3a:b8:3d:70:e5:81:f7: 8c:b9:96:a5:ad:56:a4:c3:bd:b9:64:16:51:4e:95: e7:ed:1c:0b:60:3c:3f:da:db:5a:fb:1a:18:e9:50: 53:39:db:bc:82:c3:dc:f6:f9:8a:9f:05:e5:c2:05: f4:a9:53:4f:a9:f2:e8:41:3c:d5:0d:76:92:05:c6: 36:d0:d4:5c:52:34:57:74:68:e8:bf:99:89:88:04: 2f:23:0c:db:3f:5c:38:a8:30:7c:0d:a9:0e:63:98: d4:eb:ce:03:07:a4:cf:2d:b5:b1:85:ff:47:65:ac: 7f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:B0:C0:DC:1F:BE:D1:DD:B5:6B:65:80:03:42:6E:51:E6:FB:58:67 X509v3 Authority Key Identifier: keyid:D8:21:96:47:41:50:18:E4:FF:D3:F1:1C:27:A8:07:53:0D:7B:7C:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CGWR0FQGOT_0_EcJ6gHUw17fPE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/0/D8219647415018E4FFD3F11C27A807530D7B7CF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:5d:13:5e:72:64:c4:d6:a4:5d:52:0e:28:91:e2:a3:1c:4f: 8a:de:9f:43:2b:ca:93:29:d5:30:ac:c4:bc:36:38:f5:6a:5d: ff:f6:5d:8a:f2:55:0e:9f:2e:81:27:e6:78:7b:c6:68:22:05: 13:6e:7a:d0:df:a7:0a:90:ba:c7:de:c0:83:28:d4:05:3e:8f: f9:ab:e9:a0:de:f5:42:aa:7f:e3:92:a9:1d:f2:46:19:92:28: 31:2e:dd:49:2a:eb:13:23:95:1d:e6:d3:89:3e:b7:87:c7:c3: 41:61:c9:05:88:2a:4f:9c:46:aa:ef:d7:9a:d2:58:3c:b9:fb: 20:e1:ef:be:fd:f7:1d:2a:0b:9b:68:9f:96:17:d2:31:29:8f: 51:db:76:f8:8e:3b:55:d1:67:05:29:65:c2:d3:89:cb:3f:7a: 2f:ef:57:1b:60:2f:76:56:91:25:3d:36:5a:9f:a6:dd:9b:bf: 90:7e:81:40:7a:74:1d:cb:69:9c:57:8b:26:83:0e:d4:90:aa: 0d:a3:72:9e:d4:a1:ae:b8:eb:38:af:96:6b:47:ed:d4:b0:fc: 66:ff:8c:a3:cb:4d:52:29:08:32:5f:a7:44:56:72:47:12:6e: f4:9f:f5:a1:f1:82:ae:d6:e0:fe:0b:d8:a8:01:98:ed:52:fb: fb:c7:49:cf -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUKTwmwRnIHkCTMRWpaGipi7UIZkkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDgyMTk2NDc0MTUwMThlNGZmZDNmMTFjMjdhODA3NTMw ZDdiN2NmMTAeFw0yNTEyMjEyMDAyMjFaFw0yNTEyMjIyMDQ2MjFaMDMxMTAvBgNV BAMTKDVFQjBDMERDMUZCRUQxRERCNTZCNjU4MDAzNDI2RTUxRTZGQjU4NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpQ6tfRPEmHVqYgN55wzLXU5XN 67tSvqh8Zl552Jg2O/095B3iLteYstd3dnnV4CZct5+buCzd5elCH5EDDXUfcPKp JBTTdzPCmKTANXJydxB5cMTOdUyzsO3uwWBz7qls8DuEwxcqBNP17S/nAAmkbXKT 2/mdhA/k2jyeoeSXgJsJ2apovwIvRXjBPpjsOrg9cOWB94y5lqWtVqTDvblkFlFO leftHAtgPD/a21r7GhjpUFM527yCw9z2+YqfBeXCBfSpU0+p8uhBPNUNdpIFxjbQ 1FxSNFd0aOi/mYmIBC8jDNs/XDioMHwNqQ5jmNTrzgMHpM8ttbGF/0dlrH/nAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUXrDA3B++0d21a2WAA0JuUeb7WGcwHwYDVR0j BBgwFoAU2CGWR0FQGOT/0/EcJ6gHUw17fPEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWMwZWQwNDYtZmE5NS00NWMzLTkxNDYtOTcxZGI4YTll OGJiLzAvRDgyMTk2NDc0MTUwMThFNEZGRDNGMTFDMjdBODA3NTMwRDdCN0NGMS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJDR1dSMEZRR09UXzBfRWNKNmdIVXcx N2ZQRS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85YzBlZDA0Ni1m YTk1LTQ1YzMtOTE0Ni05NzFkYjhhOWU4YmIvMC9EODIxOTY0NzQxNTAxOEU0RkZE M0YxMUMyN0E4MDc1MzBEN0I3Q0YxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz10TXnJkxNakXVIOKJHi oxxPit6fQyvKkynVMKzEvDY49Wpd//ZdivJVDp8ugSfmeHvGaCIFE2560N+nCpC6 x97AgyjUBT6P+avpoN71Qqp/45KpHfJGGZIoMS7dSSrrEyOVHebTiT63h8fDQWHJ BYgqT5xGqu/XmtJYPLn7IOHvvv33HSoLm2iflhfSMSmPUdt2+I47VdFnBSllwtOJ yz96L+9XG2AvdlaRJT02Wp+m3Zu/kH6BQHp0HctpnFeLJoMO1JCqDaNyntShrrjr OK+Wa0ft1LD8Zv+Mo8tNUikIMl+nRFZyRxJu9J/1ofGCrtbg/gvYqAGY7VL7+8dJ zw== -----END CERTIFICATE-----Generated at Mon Dec 22 05:47:49 2025 by rpki-client