This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft File: 94521D5EA7B7900080F6E66836D4DEDA347054FD.mft (raw, json) Hash identifier: tHwzLrGUjlFj1sHLLY4RbMgAyKeoY3OQWlqvcQGc0ok= Subject key identifier: 01:E7:9C:42:1A:B1:32:9C:17:D1:91:9B:6B:DF:7E:CA:A3:26:51:72 Authority key identifier: 94:52:1D:5E:A7:B7:90:00:80:F6:E6:68:36:D4:DE:DA:34:70:54:FD Certificate issuer: /CN=94521d5ea7b7900080f6e66836d4deda347054fd Certificate serial: 4670EF48FAF892619677AA65CF92AEBA1618C824 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft Manifest number: 01E1 Signing time: Fri 28 Nov 2025 15:58:32 +0000 Manifest this update: Fri 28 Nov 2025 15:53:32 +0000 Manifest next update: Sun 30 Nov 2025 05:11:32 +0000 Files and hashes: 1: AS214701.asa (hash: EwiuTDTlJzzW3BaZbT2OcjZ0BGKln2twmg9+cBCEmTw=) 2: 94521D5EA7B7900080F6E66836D4DEDA347054FD.crl (hash: 4KJz+8k1cxeUFvBeZAiF7jIpYk/fDBal/8cLMkJ5+x8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.crl rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 29 Nov 2025 14:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:70:ef:48:fa:f8:92:61:96:77:aa:65:cf:92:ae:ba:16:18:c8:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94521d5ea7b7900080f6e66836d4deda347054fd Validity Not Before: Nov 28 15:53:32 2025 GMT Not After : Nov 30 05:11:32 2025 GMT Subject: CN=01E79C421AB1329C17D1919B6BDF7ECAA3265172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d4:0a:a9:dc:62:68:fb:d1:25:5c:42:86:9a: f9:0e:dc:c6:32:31:01:78:2f:39:05:cb:4b:94:e0: f1:d0:21:fc:29:ed:fa:d5:71:90:08:3f:5b:c6:3b: d6:0c:43:8c:16:4e:c1:1a:5f:70:5f:30:48:3e:dd: 32:b3:f1:c1:31:aa:8b:cd:6f:4e:18:97:2b:28:02: a5:72:51:ab:57:2d:ff:0e:3f:2d:1e:17:5a:02:6a: 94:4f:22:c7:9b:45:97:f8:1d:7e:ff:d2:33:0f:90: 23:68:81:75:e6:19:5f:ad:59:7a:41:4c:fd:56:5e: 93:18:76:09:0e:eb:01:89:06:3b:2c:14:0d:d7:d1: 50:9b:ea:81:3e:cb:8f:19:d2:2a:66:3b:7d:e0:52: 7f:62:e2:85:a7:f3:8f:11:c0:7b:1e:89:05:54:7a: c7:5d:9d:44:5e:61:90:2f:99:bb:70:c0:63:65:4b: 95:f4:70:b8:4b:d5:ce:3f:cf:77:61:ec:3b:0b:08: 13:45:8c:79:21:87:c0:ef:91:76:5d:25:29:2c:70: 4a:6e:7a:6f:ec:14:0f:a6:13:04:c0:96:2b:1e:ef: d0:4a:c1:08:74:4f:1e:a6:f9:bd:c1:98:97:6e:8a: fe:f3:42:ad:b8:77:b4:b5:82:7f:5f:7e:99:53:ce: df:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:E7:9C:42:1A:B1:32:9C:17:D1:91:9B:6B:DF:7E:CA:A3:26:51:72 X509v3 Authority Key Identifier: keyid:94:52:1D:5E:A7:B7:90:00:80:F6:E6:68:36:D4:DE:DA:34:70:54:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:3c:3a:bf:7b:e9:4b:6b:ad:60:09:ff:da:52:e2:67:16:a0: 9e:e4:56:93:f0:5a:30:82:06:1b:db:e5:ec:a7:78:25:ae:c2: 98:d2:f4:50:f7:06:90:a5:5a:c6:0e:e9:22:a7:62:2d:65:c2: 87:55:75:8b:05:54:2a:a0:dc:f4:0e:e0:49:67:e2:26:48:60: f5:3c:71:e2:99:d6:79:93:b7:fc:55:2d:a7:a5:be:82:1e:53: fc:14:9b:58:f4:75:8c:52:4f:41:dd:82:e7:73:7d:12:0d:ed: 33:bc:b5:28:50:ab:4c:d2:60:c4:82:ba:81:b4:85:e5:34:d2: d6:1a:6c:a7:4f:c6:55:64:cb:c1:22:67:77:94:f6:f5:cb:d7: bc:2b:31:33:3c:bb:b7:a1:21:d9:99:de:0d:ed:54:12:e1:f7: af:6e:0c:17:9e:67:9c:a9:b4:b7:50:c9:1e:85:27:3e:5a:52: 31:d8:9e:52:3e:64:c6:ad:d5:7a:4a:73:ab:b8:e9:e5:7d:8b: 02:e9:94:af:e6:77:65:2a:36:17:de:32:62:92:b0:74:2b:12: 39:dc:bb:fc:92:d2:cd:ad:54:98:b2:e1:24:a4:b7:a3:c3:67: 56:c3:32:07:12:fa:42:80:61:ff:11:08:6f:ac:bb:6e:c4:1d: bc:47:db:a3 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIURnDvSPr4kmGWd6plz5KuuhYYyCQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQ1MjFkNWVhN2I3OTAwMDgwZjZlNjY4MzZkNGRlZGEz NDcwNTRmZDAeFw0yNTExMjgxNTUzMzJaFw0yNTExMzAwNTExMzJaMDMxMTAvBgNV BAMTKDAxRTc5QzQyMUFCMTMyOUMxN0QxOTE5QjZCREY3RUNBQTMyNjUxNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ1Aqp3GJo+9ElXEKGmvkO3MYy MQF4LzkFy0uU4PHQIfwp7frVcZAIP1vGO9YMQ4wWTsEaX3BfMEg+3TKz8cExqovN b04YlysoAqVyUatXLf8OPy0eF1oCapRPIsebRZf4HX7/0jMPkCNogXXmGV+tWXpB TP1WXpMYdgkO6wGJBjssFA3X0VCb6oE+y48Z0ipmO33gUn9i4oWn848RwHseiQVU esddnUReYZAvmbtwwGNlS5X0cLhL1c4/z3dh7DsLCBNFjHkhh8DvkXZdJSkscEpu em/sFA+mEwTAlise79BKwQh0Tx6m+b3BmJduiv7zQq24d7S1gn9ffplTzt+zAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUAeecQhqxMpwX0ZGba99+yqMmUXIwHwYDVR0j BBgwFoAUlFIdXqe3kACA9uZoNtTe2jRwVP0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmVhZDJkY2YtZWFkNS00OTU0LWFkODQtNjU4MGNkMmE5 YzUwLzAvOTQ1MjFENUVBN0I3OTAwMDgwRjZFNjY4MzZENERFREEzNDcwNTRGRC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2xGSWRYcWUza0FDQTl1Wm9OdFRlMmpS d1ZQMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZWFkMmRjZi1l YWQ1LTQ5NTQtYWQ4NC02NTgwY2QyYTljNTAvMC85NDUyMUQ1RUE3Qjc5MDAwODBG NkU2NjgzNkQ0REVEQTM0NzA1NEZELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAczw6v3vpS2utYAn/2lLi ZxagnuRWk/BaMIIGG9vl7Kd4Ja7CmNL0UPcGkKVaxg7pIqdiLWXCh1V1iwVUKqDc 9A7gSWfiJkhg9Txx4pnWeZO3/FUtp6W+gh5T/BSbWPR1jFJPQd2C53N9Eg3tM7y1 KFCrTNJgxIK6gbSF5TTS1hpsp0/GVWTLwSJnd5T29cvXvCsxMzy7t6Eh2ZneDe1U EuH3r24MF55nnKm0t1DJHoUnPlpSMdieUj5kxq3Vekpzq7jp5X2LAumUr+Z3ZSo2 F94yYpKwdCsSOdy7/JLSza1UmLLhJKS3o8NnVsMyBxL6QoBh/xEIb6y7bsQdvEfb ow== -----END CERTIFICATE-----Generated at Fri Nov 28 23:53:53 2025 by rpki-client