This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft File: DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft (raw, json) Hash identifier: nVvCdzk6CpG7uTe6ge9TuUoTBvw/2qc8x0lvr1IUIpE= Subject key identifier: 3D:6E:02:DC:BA:F3:76:46:40:4B:9E:D1:99:F4:55:7F:29:06:D0:84 Authority key identifier: DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18 Certificate issuer: /CN=DDC25AD2F1A489247713EE39B1C03EA2FDDA4118 Certificate serial: 5B5A44A9D1F762942D57FF26779630F907ABEEAB Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft Manifest number: 018C Signing time: Fri 28 Nov 2025 17:13:32 +0000 Manifest this update: Fri 28 Nov 2025 17:08:32 +0000 Manifest next update: Sun 30 Nov 2025 07:29:32 +0000 Files and hashes: 1: DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl (hash: Oiy4NrzSYNaNKgal4Hvj4kUoQIP2YT3eJLWKND/k+R0=) 2: 326130623a346530373a363030303a3a2f34302d3438203d3e20323134373031.roa (hash: mhaYla+UsHdOX7ijGa8kmFH/Ey3jwcszbuWBzNvxxRw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 29 Nov 2025 12:33:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:5a:44:a9:d1:f7:62:94:2d:57:ff:26:77:96:30:f9:07:ab:ee:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDC25AD2F1A489247713EE39B1C03EA2FDDA4118 Validity Not Before: Nov 28 17:08:32 2025 GMT Not After : Nov 30 07:29:32 2025 GMT Subject: CN=3D6E02DCBAF37646404B9ED199F4557F2906D084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:19:45:41:70:3b:ee:46:8a:2b:22:4e:1f:a2: af:1b:3f:01:e1:6b:ad:1c:e1:0e:84:60:28:ef:5b: da:cd:98:d1:4b:e9:76:cd:67:9e:cb:a9:17:7c:7e: bf:fa:80:99:cc:b4:bb:82:3b:85:c3:47:d6:d3:96: db:fd:2e:ec:1f:dc:fa:87:e0:75:e7:80:2b:b0:0d: ee:26:ea:30:b4:88:53:c0:c7:38:ed:7d:a1:45:cb: 12:44:9b:2f:6b:88:dc:58:d0:06:43:b6:eb:75:7e: 92:59:9d:ac:2b:d7:c2:c0:14:d8:06:10:62:84:10: 3a:51:be:c6:4f:e5:8a:24:3c:ff:89:80:cb:65:30: 5b:71:c0:9b:39:09:e4:e0:6c:69:e6:55:bc:79:d4: 01:66:b7:03:21:10:8a:ae:f5:d5:8b:3e:38:c4:b8: 78:ff:1c:39:fb:40:8c:34:43:52:5b:36:af:c1:c4: b6:3a:5b:2c:b2:d9:96:d1:3f:7f:a0:ea:d3:d4:bd: ad:9f:1b:44:c0:39:06:23:f2:9a:16:ac:ea:da:67: e8:7a:8d:4b:0b:7a:ea:c3:93:bf:35:2d:82:ef:c2: 06:ff:51:69:b6:66:36:8e:e5:46:0c:49:86:44:e5: 3e:77:04:8a:39:91:8a:1b:bc:cf:09:26:cc:2a:9a: 9c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:6E:02:DC:BA:F3:76:46:40:4B:9E:D1:99:F4:55:7F:29:06:D0:84 X509v3 Authority Key Identifier: keyid:DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:43:ac:f5:c9:c8:dd:b0:46:8f:95:10:7c:76:ea:87:5a:16: 6d:e6:c9:af:16:d7:56:ff:5e:36:30:bf:42:63:b1:7c:eb:ef: a4:00:ac:16:5f:96:2a:71:ea:e1:c1:7b:29:a0:b6:3b:a9:cb: a0:87:12:f8:98:fd:49:ba:58:e0:24:92:1b:2e:ca:fb:da:59: 10:c7:d8:be:d7:6b:8b:85:4c:fd:ec:a6:28:e2:bd:04:63:42: f7:80:4d:27:3b:1f:e1:5e:5f:15:c8:c4:2c:09:76:64:92:64: 9c:de:29:a0:5f:b9:62:99:9c:1a:b7:7c:d8:5f:c2:c2:17:f5: 4f:ff:82:0e:ad:86:e3:09:7d:cb:b6:34:22:0a:81:6e:86:25: 85:d2:ca:95:0f:35:c1:76:0d:43:be:95:90:d8:2c:e7:87:9b: ca:2b:e0:26:c6:76:6e:84:34:64:89:83:6e:92:0d:99:3f:4c: 31:bf:21:31:e6:5f:15:f5:b7:a2:09:8e:76:eb:f9:59:9f:50: 85:fb:79:95:f8:2b:c9:be:61:d4:c1:69:66:f9:bf:1e:ab:38: 8d:d1:b3:5c:7d:69:a7:2a:0f:86:eb:01:52:ec:86:cc:28:cf: aa:67:d0:4d:b2:89:e5:f6:c6:d1:d3:73:29:27:a4:6a:24:30: 71:ee:2c:13 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUW1pEqdH3YpQtV/8md5Yw+Qer7qswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJG RERBNDExODAeFw0yNTExMjgxNzA4MzJaFw0yNTExMzAwNzI5MzJaMDMxMTAvBgNV BAMTKDNENkUwMkRDQkFGMzc2NDY0MDRCOUVEMTk5RjQ1NTdGMjkwNkQwODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4GUVBcDvuRoorIk4foq8bPwHh a60c4Q6EYCjvW9rNmNFL6XbNZ57LqRd8fr/6gJnMtLuCO4XDR9bTltv9Luwf3PqH 4HXngCuwDe4m6jC0iFPAxzjtfaFFyxJEmy9riNxY0AZDtut1fpJZnawr18LAFNgG EGKEEDpRvsZP5YokPP+JgMtlMFtxwJs5CeTgbGnmVbx51AFmtwMhEIqu9dWLPjjE uHj/HDn7QIw0Q1JbNq/BxLY6Wyyy2ZbRP3+g6tPUva2fG0TAOQYj8poWrOraZ+h6 jUsLeurDk781LYLvwgb/UWm2ZjaO5UYMSYZE5T53BIo5kYobvM8JJswqmpwNAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUPW4C3LrzdkZAS57RmfRVfykG0IQwHwYDVR0j BBgwFoAU3cJa0vGkiSR3E+45scA+ov3aQRgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmVhZDJkY2YtZWFkNS00OTU0LWFkODQtNjU4MGNkMmE5 YzUwLzMvRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJGRERBNDExOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJGRERB NDExOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZWFkMmRjZi1l YWQ1LTQ5NTQtYWQ4NC02NTgwY2QyYTljNTAvMy9EREMyNUFEMkYxQTQ4OTI0Nzcx M0VFMzlCMUMwM0VBMkZEREE0MTE4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn0Os9cnI3bBGj5UQfHbq h1oWbebJrxbXVv9eNjC/QmOxfOvvpACsFl+WKnHq4cF7KaC2O6nLoIcS+Jj9SbpY 4CSSGy7K+9pZEMfYvtdri4VM/eymKOK9BGNC94BNJzsf4V5fFcjELAl2ZJJknN4p oF+5YpmcGrd82F/Cwhf1T/+CDq2G4wl9y7Y0IgqBboYlhdLKlQ81wXYNQ76VkNgs 54ebyivgJsZ2boQ0ZImDbpINmT9MMb8hMeZfFfW3ogmOduv5WZ9Qhft5lfgryb5h 1MFpZvm/Hqs4jdGzXH1ppyoPhusBUuyGzCjPqmfQTbKJ5fbG0dNzKSekaiQwce4s Ew== -----END CERTIFICATE-----Generated at Fri Nov 28 23:57:28 2025 by rpki-client