This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/1/2615B626807D30988381C32656617AE6FD6638B6.mft File: 2615B626807D30988381C32656617AE6FD6638B6.mft (raw, json) Hash identifier: cPWZXpLooJjyTHkO/9zbsTTb665Cm5A6ykexbvb+VX8= Subject key identifier: 1A:10:DD:5A:31:B0:5F:77:96:45:6D:DC:84:B4:05:0B:7D:A2:C9:53 Authority key identifier: 26:15:B6:26:80:7D:30:98:83:81:C3:26:56:61:7A:E6:FD:66:38:B6 Certificate issuer: /CN=2615b626807d30988381c32656617ae6fd6638b6 Certificate serial: 4FFEE073FACDB7023B4B22C776B506968B4247A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JhW2JoB9MJiDgcMmVmF65v1mOLY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/1/2615B626807D30988381C32656617AE6FD6638B6.mft Manifest number: 95 Signing time: Fri 26 Dec 2025 06:14:59 +0000 Manifest this update: Fri 26 Dec 2025 06:09:59 +0000 Manifest next update: Sat 27 Dec 2025 07:49:59 +0000 Files and hashes: 1: 2615B626807D30988381C32656617AE6FD6638B6.crl (hash: hY2SIcBjS4gXLEbEVro8t/1QfgF8gWD1W2T+LETIwpU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/1/2615B626807D30988381C32656617AE6FD6638B6.crl rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/1/2615B626807D30988381C32656617AE6FD6638B6.mft rsync://rpki.ripe.net/repository/DEFAULT/JhW2JoB9MJiDgcMmVmF65v1mOLY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:fe:e0:73:fa:cd:b7:02:3b:4b:22:c7:76:b5:06:96:8b:42:47:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2615b626807d30988381c32656617ae6fd6638b6 Validity Not Before: Dec 26 06:09:59 2025 GMT Not After : Dec 27 07:49:59 2025 GMT Subject: CN=1A10DD5A31B05F7796456DDC84B4050B7DA2C953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:14:63:09:d4:ed:6c:9b:d7:c6:3d:be:37:e4: 93:5f:42:65:54:f6:eb:c1:02:39:7d:52:bf:d0:3d: 36:30:15:aa:c5:cf:05:73:25:d4:fd:e3:d6:80:97: 0b:24:d1:f8:6e:2e:0a:92:f2:a9:ad:5b:f4:89:90: 11:13:72:2f:cc:40:c2:4b:8f:82:ad:3d:e5:02:79: ce:52:15:1e:8d:fb:cf:39:61:65:ce:c8:81:bb:8c: fc:89:c4:f2:62:7f:cd:a9:15:6c:98:d7:91:f9:ff: 71:91:e1:22:59:2f:b9:f7:f0:06:32:2b:9c:ed:bc: de:30:a5:38:fe:70:9b:7f:b9:f6:96:38:c4:9f:b6: b0:97:0b:80:cb:6d:fa:b7:18:94:78:ce:33:fb:97: 65:e7:77:42:0e:be:ed:fe:d9:1d:e5:b9:b8:8b:f1: 6d:9a:85:8c:74:86:16:a9:06:b1:6e:e8:17:15:45: d1:99:c6:84:96:b8:2c:89:ac:02:d3:82:f3:bb:00: 1e:e3:7d:d5:1a:0c:d7:e8:c1:93:01:1b:6d:23:8f: 6b:78:00:96:bf:cd:d3:fe:cb:ef:1e:8d:ac:2a:d4: 04:76:77:15:96:39:8f:94:11:99:a0:f7:fd:8e:7c: 9b:db:7a:c1:f4:5a:1b:ca:25:76:03:5c:73:86:d7: 58:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:10:DD:5A:31:B0:5F:77:96:45:6D:DC:84:B4:05:0B:7D:A2:C9:53 X509v3 Authority Key Identifier: keyid:26:15:B6:26:80:7D:30:98:83:81:C3:26:56:61:7A:E6:FD:66:38:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/1/2615B626807D30988381C32656617AE6FD6638B6.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JhW2JoB9MJiDgcMmVmF65v1mOLY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/1/2615B626807D30988381C32656617AE6FD6638B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:4a:72:4b:95:2e:0d:e1:d2:f4:31:75:00:55:8b:bc:e3:45: f4:2d:98:af:67:1b:1e:9e:0f:f8:19:be:1c:eb:c9:44:00:ad: 6c:eb:4d:5d:d9:f1:e2:6e:0a:2b:86:79:61:76:33:96:0e:98: 62:79:db:04:5a:2f:e4:67:c5:45:96:16:68:a5:81:dc:1c:22: 8d:a5:4c:53:fe:c6:f5:de:4e:da:09:09:83:91:d3:26:15:38: 2d:78:99:04:bd:0b:50:d2:55:54:67:ac:55:e7:d4:fd:bd:b2: 46:c2:b0:f7:f8:5d:d2:e0:9a:cc:c8:e7:67:15:e9:94:63:fb: ea:7a:47:29:5a:04:96:73:7c:ad:a6:e2:34:29:d4:9c:07:f5: a6:7d:f9:e5:05:64:5d:e9:56:af:eb:8c:b8:b2:89:f3:1d:38: 7a:60:70:38:1f:64:6e:89:b5:54:d7:80:44:45:bd:20:c9:a1: 19:eb:95:5e:f0:1a:a7:87:5d:f9:86:70:ba:38:10:21:24:10: 53:65:40:b0:92:89:92:84:30:42:5f:c8:c6:ae:2f:06:ae:a4: b0:a5:37:0e:1e:31:25:38:3e:f3:d1:54:1c:3e:e0:74:67:f0: 05:1e:5e:46:d8:c0:05:ef:91:89:23:5d:82:7e:59:74:76:ba: 54:ba:2f:4c -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUT/7gc/rNtwI7SyLHdrUGlotCR6AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjYxNWI2MjY4MDdkMzA5ODgzODFjMzI2NTY2MTdhZTZm ZDY2MzhiNjAeFw0yNTEyMjYwNjA5NTlaFw0yNTEyMjcwNzQ5NTlaMDMxMTAvBgNV BAMTKDFBMTBERDVBMzFCMDVGNzc5NjQ1NkREQzg0QjQwNTBCN0RBMkM5NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClFGMJ1O1sm9fGPb435JNfQmVU 9uvBAjl9Ur/QPTYwFarFzwVzJdT949aAlwsk0fhuLgqS8qmtW/SJkBETci/MQMJL j4KtPeUCec5SFR6N+885YWXOyIG7jPyJxPJif82pFWyY15H5/3GR4SJZL7n38AYy K5ztvN4wpTj+cJt/ufaWOMSftrCXC4DLbfq3GJR4zjP7l2Xnd0IOvu3+2R3lubiL 8W2ahYx0hhapBrFu6BcVRdGZxoSWuCyJrALTgvO7AB7jfdUaDNfowZMBG20jj2t4 AJa/zdP+y+8ejawq1AR2dxWWOY+UEZmg9/2OfJvbesH0WhvKJXYDXHOG11hNAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUGhDdWjGwX3eWRW3chLQFC32iyVMwHwYDVR0j BBgwFoAUJhW2JoB9MJiDgcMmVmF65v1mOLYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWVjYWM0MTMtNGNkMi00NzJjLWIwMWUtNzQ0NThjZWEz ODZjLzEvMjYxNUI2MjY4MDdEMzA5ODgzODFDMzI2NTY2MTdBRTZGRDY2MzhCNi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0poVzJKb0I5TUppRGdjTW1WbUY2NXYx bU9MWS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZWNhYzQxMy00 Y2QyLTQ3MmMtYjAxZS03NDQ1OGNlYTM4NmMvMS8yNjE1QjYyNjgwN0QzMDk4ODM4 MUMzMjY1NjYxN0FFNkZENjYzOEI2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOUpyS5UuDeHS9DF1AFWL vONF9C2Yr2cbHp4P+Bm+HOvJRACtbOtNXdnx4m4KK4Z5YXYzlg6YYnnbBFov5GfF RZYWaKWB3BwijaVMU/7G9d5O2gkJg5HTJhU4LXiZBL0LUNJVVGesVefU/b2yRsKw 9/hd0uCazMjnZxXplGP76npHKVoElnN8rabiNCnUnAf1pn355QVkXelWr+uMuLKJ 8x04emBwOB9kbom1VNeAREW9IMmhGeuVXvAap4dd+YZwujgQISQQU2VAsJKJkoQw Ql/Ixq4vBq6ksKU3Dh4xJTg+89FUHD7gdGfwBR5eRtjABe+RiSNdgn5ZdHa6VLov TA== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:37 2025 by rpki-client