This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/0/8C5B75AEE1ED7E37D44BFA69536FBDF20E6D3785.mft File: 8C5B75AEE1ED7E37D44BFA69536FBDF20E6D3785.mft (raw, json) Hash identifier: FCHKmQdeq8rvxDuqUT7Pp8JVKiBD6sTuMRTc+/OI7iU= Subject key identifier: A0:45:37:D7:AB:D0:C2:1F:4F:76:8D:29:53:DE:0A:A6:71:F3:62:38 Authority key identifier: 8C:5B:75:AE:E1:ED:7E:37:D4:4B:FA:69:53:6F:BD:F2:0E:6D:37:85 Certificate issuer: /CN=8c5b75aee1ed7e37d44bfa69536fbdf20e6d3785 Certificate serial: 516D19549AA31FCD2263E102F74D1A6ABF55F967 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jFt1ruHtfjfUS_ppU2-98g5tN4U.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/0/8C5B75AEE1ED7E37D44BFA69536FBDF20E6D3785.mft Manifest number: 04 Signing time: Wed 03 Dec 2025 15:49:13 +0000 Manifest this update: Wed 03 Dec 2025 15:44:13 +0000 Manifest next update: Thu 04 Dec 2025 18:40:13 +0000 Files and hashes: 1: 8C5B75AEE1ED7E37D44BFA69536FBDF20E6D3785.crl (hash: yXtzQ69Kmw9rUrkxrwFkyc1AIPjBKqqr1YeU+TfQpRE=) 2: AS206604.asa (hash: zpxAtBgjiRFEGbUqrc4N3vetnbfhkNMO9p+EhtBGacA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/0/8C5B75AEE1ED7E37D44BFA69536FBDF20E6D3785.crl rsync://rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/0/8C5B75AEE1ED7E37D44BFA69536FBDF20E6D3785.mft rsync://rpki.ripe.net/repository/DEFAULT/jFt1ruHtfjfUS_ppU2-98g5tN4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 18:40:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:6d:19:54:9a:a3:1f:cd:22:63:e1:02:f7:4d:1a:6a:bf:55:f9:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c5b75aee1ed7e37d44bfa69536fbdf20e6d3785 Validity Not Before: Dec 3 15:44:13 2025 GMT Not After : Dec 4 18:40:13 2025 GMT Subject: CN=A04537D7ABD0C21F4F768D2953DE0AA671F36238 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:32:08:5b:ff:5b:11:40:45:c8:08:ef:96:9b: b6:90:61:a0:35:5a:a4:2f:f2:70:fe:4f:74:56:8d: 04:26:c2:c8:e8:db:0e:d8:55:6a:74:a8:bb:ec:74: e9:c2:e8:2f:55:5d:da:56:c5:a9:2f:a1:b6:f5:47: 45:4b:23:69:e7:74:2c:e4:36:3f:16:f1:f3:94:83: 33:b7:5b:a7:fc:24:33:2f:25:36:f9:9a:b9:58:1e: fc:f6:24:64:84:ce:a6:17:e5:9c:2e:d2:43:a1:14: c4:f5:9c:c2:be:d1:03:f8:36:88:9e:1d:e7:28:2d: d5:5e:37:b5:90:ee:4f:66:5a:0d:e7:d7:6a:a7:b0: 95:5a:d4:cc:1e:87:33:fe:a4:3d:ba:95:b9:ae:8c: e6:66:2b:3e:d5:3f:4d:a9:10:02:dd:12:c1:dd:46: 0e:47:97:df:d6:c3:55:9f:b5:62:62:7d:e3:b9:f8: 25:d9:2f:1f:25:bb:30:77:02:7c:18:0e:66:b7:77: ed:51:da:82:01:bb:a4:86:80:d7:b3:ee:83:e5:e7: 6f:db:88:fb:3e:dc:ef:56:be:f7:a7:40:21:49:22: 6c:38:44:55:e5:07:7f:9e:5f:ac:84:99:96:5d:c1: 24:8b:76:7d:3b:69:81:c4:50:31:42:75:65:7f:76: e0:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:45:37:D7:AB:D0:C2:1F:4F:76:8D:29:53:DE:0A:A6:71:F3:62:38 X509v3 Authority Key Identifier: keyid:8C:5B:75:AE:E1:ED:7E:37:D4:4B:FA:69:53:6F:BD:F2:0E:6D:37:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/0/8C5B75AEE1ED7E37D44BFA69536FBDF20E6D3785.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jFt1ruHtfjfUS_ppU2-98g5tN4U.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/0/8C5B75AEE1ED7E37D44BFA69536FBDF20E6D3785.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:78:b9:48:43:e5:e3:4d:2d:25:38:22:f8:c7:02:6a:2a:66: 37:90:c1:b7:0b:74:f8:ff:6a:f3:71:ee:ec:3b:aa:c3:ea:79: 8e:a9:e4:27:33:5d:0e:15:48:d7:b9:6a:63:bf:a5:96:66:6d: 17:52:d9:b9:b8:16:a3:7e:46:4b:cc:ed:db:99:45:92:da:42: 7b:e5:f7:c1:d8:b2:48:84:3e:b1:e8:b3:9a:b9:97:34:ee:03: a7:6e:26:1f:ee:fe:c9:10:57:46:31:0e:f6:5a:12:21:29:1d: de:41:6c:89:be:0a:d5:2d:21:ca:5b:75:1c:45:f7:82:36:aa: 65:a9:80:f2:3e:bb:97:3d:4c:77:ab:6f:a1:12:d2:a4:48:be: ff:05:ee:32:36:7c:e0:fa:6f:f5:7b:e8:aa:28:0e:7e:54:4a: a7:24:d0:fd:0b:aa:af:39:41:72:ff:af:e5:1e:58:d9:56:54: ab:9b:be:24:19:59:62:82:91:9b:03:c9:c5:9e:45:1d:4a:a4: 18:75:b3:51:77:7a:55:ca:f5:37:e1:b5:7f:22:53:5e:07:b7: f1:d7:cb:c9:af:4b:a9:de:7d:89:ec:30:cd:7c:72:f4:48:ca: 88:fd:8d:62:4f:7d:c7:0a:67:bf:90:41:3a:1f:86:82:4a:02: d3:04:e6:fa -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUUW0ZVJqjH80iY+EC900aar9V+WcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGM1Yjc1YWVlMWVkN2UzN2Q0NGJmYTY5NTM2ZmJkZjIw ZTZkMzc4NTAeFw0yNTEyMDMxNTQ0MTNaFw0yNTEyMDQxODQwMTNaMDMxMTAvBgNV BAMTKEEwNDUzN0Q3QUJEMEMyMUY0Rjc2OEQyOTUzREUwQUE2NzFGMzYyMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqMghb/1sRQEXICO+Wm7aQYaA1 WqQv8nD+T3RWjQQmwsjo2w7YVWp0qLvsdOnC6C9VXdpWxakvobb1R0VLI2nndCzk Nj8W8fOUgzO3W6f8JDMvJTb5mrlYHvz2JGSEzqYX5Zwu0kOhFMT1nMK+0QP4Noie HecoLdVeN7WQ7k9mWg3n12qnsJVa1MwehzP+pD26lbmujOZmKz7VP02pEALdEsHd Rg5Hl9/Ww1WftWJifeO5+CXZLx8luzB3AnwYDma3d+1R2oIBu6SGgNez7oPl52/b iPs+3O9WvvenQCFJImw4RFXlB3+eX6yEmZZdwSSLdn07aYHEUDFCdWV/duApAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUoEU316vQwh9Pdo0pU94KpnHzYjgwHwYDVR0j BBgwFoAUjFt1ruHtfjfUS/ppU2+98g5tN4UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjkwZTY4NjAtMzcyMS00OGM0LWEzZmUtMTFiMWYyYzBk ZjVmLzAvOEM1Qjc1QUVFMUVEN0UzN0Q0NEJGQTY5NTM2RkJERjIwRTZEMzc4NS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2pGdDFydUh0ZmpmVVNfcHBVMi05OGc1 dE40VS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iOTBlNjg2MC0z NzIxLTQ4YzQtYTNmZS0xMWIxZjJjMGRmNWYvMC84QzVCNzVBRUUxRUQ3RTM3RDQ0 QkZBNjk1MzZGQkRGMjBFNkQzNzg1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfni5SEPl400tJTgi+McC aipmN5DBtwt0+P9q83Hu7Duqw+p5jqnkJzNdDhVI17lqY7+llmZtF1LZubgWo35G S8zt25lFktpCe+X3wdiySIQ+seizmrmXNO4Dp24mH+7+yRBXRjEO9loSISkd3kFs ib4K1S0hylt1HEX3gjaqZamA8j67lz1Md6tvoRLSpEi+/wXuMjZ84Ppv9XvoqigO flRKpyTQ/QuqrzlBcv+v5R5Y2VZUq5u+JBlZYoKRmwPJxZ5FHUqkGHWzUXd6Vcr1 N+G1fyJTXge38dfLya9Lqd59iewwzXxy9EjKiP2NYk99xwpnv5BBOh+GgkoC0wTm +g== -----END CERTIFICATE-----Generated at Thu Dec 4 11:18:03 2025 by rpki-client