This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft File: 4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft (raw, json) Hash identifier: DMneCtkXJs/MwQNtloH5TvoiJw/Oe9y9q5OwZ2wn52g= Subject key identifier: 4B:B4:76:3E:82:9F:BC:22:A7:D9:CA:3A:E3:1A:06:32:E7:02:9F:ED Authority key identifier: 40:50:A1:7B:AE:1C:5F:37:63:D4:5A:38:DC:FE:AC:E0:FE:22:2B:D6 Certificate issuer: /CN=4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6 Certificate serial: 24B4E4EBF56352B5AB365C711D18C70AD023826C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft Manifest number: 01FE Signing time: Sun 14 Dec 2025 02:03:03 +0000 Manifest this update: Sun 14 Dec 2025 01:58:03 +0000 Manifest next update: Mon 15 Dec 2025 04:54:03 +0000 Files and hashes: 1: 4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.crl (hash: kCG0y7QyJVU1CiCzC+BCGyP9AKBYDRuE/J+9FW1Y/NY=) 2: 326131343a373538313a396632303a3a2f34342d3434203d3e20323135323838.roa (hash: Si3nvIvR6vlJSP9N899TEpLNTv8CH8Xf9C307NCghTQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.crl rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 01:53:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:b4:e4:eb:f5:63:52:b5:ab:36:5c:71:1d:18:c7:0a:d0:23:82:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6 Validity Not Before: Dec 14 01:58:03 2025 GMT Not After : Dec 15 04:54:03 2025 GMT Subject: CN=4BB4763E829FBC22A7D9CA3AE31A0632E7029FED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f6:70:53:a4:62:a4:a4:90:2e:b8:21:74:35: 10:0d:3a:c2:31:33:1c:f3:04:f6:6f:6e:ce:4c:71: 92:7f:6c:2e:87:46:85:38:2a:95:a8:80:ce:de:e7: 28:7a:0c:9d:43:e9:be:ff:0e:18:70:0d:e9:18:e5: be:3b:c8:9b:43:a5:ec:12:1e:78:c5:63:10:8d:b6: 72:f6:9d:01:c2:7a:ba:5a:ce:ef:3f:cc:c1:61:f6: bd:de:a8:bc:1d:bd:14:92:f3:44:5c:72:11:21:97: 7c:bc:92:35:e1:aa:e2:c5:ee:48:47:5a:66:5e:a9: 52:f8:f1:d6:9e:90:a9:42:d4:5a:46:f1:11:a7:d1: 44:82:dd:a1:97:08:df:dc:19:b3:bb:4d:dd:6a:bc: be:26:39:f4:37:a5:d0:a0:7b:f3:7b:f9:e3:a0:9c: 1b:30:e3:33:8d:69:c3:1f:59:3b:ef:ff:b1:30:6f: e6:0a:e1:42:04:9c:6d:df:e8:eb:e9:08:03:f5:77: 7b:db:4f:a0:64:86:54:69:06:d2:59:78:ae:c0:1c: 89:fe:bd:30:59:fb:3c:35:c3:33:77:01:6e:bb:f2: ab:60:e2:7a:4a:13:db:b9:39:32:13:f2:d5:c0:6a: 8d:df:41:bd:6c:40:0e:50:82:e0:f6:07:02:dc:03: 6f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:B4:76:3E:82:9F:BC:22:A7:D9:CA:3A:E3:1A:06:32:E7:02:9F:ED X509v3 Authority Key Identifier: keyid:40:50:A1:7B:AE:1C:5F:37:63:D4:5A:38:DC:FE:AC:E0:FE:22:2B:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:c5:a3:43:c3:3c:67:2c:d2:82:1d:9a:91:4d:ef:1c:64:8c: 69:7b:19:51:96:d0:b0:41:bd:91:1e:d5:e6:13:1d:e7:43:bb: da:e7:ea:de:c0:32:b6:22:5a:e4:a3:1b:ce:19:27:de:6d:8d: 6a:6a:d3:6a:d0:b8:98:08:69:ce:8f:33:e6:af:16:33:04:16: 8d:b3:b6:01:cc:15:80:f2:9c:5d:30:b1:c6:4a:32:35:59:3c: 60:a4:bc:47:0c:13:c3:66:75:53:df:ff:f2:1c:cf:d4:57:cc: a1:2d:d6:9e:5a:79:59:a5:70:cf:49:93:1b:11:ed:98:e8:86: a3:29:ec:62:98:87:b5:0f:33:f0:e1:19:64:d0:27:97:f8:86: 57:72:04:bb:f7:4c:b3:ab:37:90:0a:17:c1:70:27:90:f8:8e: 08:5e:a8:cd:fc:ef:fb:e2:19:ac:d0:62:b6:2f:5e:ff:27:93: 2f:e4:df:e0:ca:78:30:3a:f9:3b:89:1e:55:49:cf:7f:f2:84: 6e:b1:02:c5:ac:8c:dd:88:d0:2e:30:2e:24:e1:b9:03:d8:2e: 77:00:86:ba:eb:f0:1b:a6:d3:97:6f:9a:6b:ff:5b:86:dd:54: e0:90:4f:97:fe:87:23:af:4e:89:29:56:aa:cb:a5:da:4a:1a: 03:15:f4:58 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUJLTk6/VjUrWrNlxxHRjHCtAjgmwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA1MEExN0JBRTFDNUYzNzYzRDQ1QTM4RENGRUFDRTBG RTIyMkJENjAeFw0yNTEyMTQwMTU4MDNaFw0yNTEyMTUwNDU0MDNaMDMxMTAvBgNV BAMTKDRCQjQ3NjNFODI5RkJDMjJBN0Q5Q0EzQUUzMUEwNjMyRTcwMjlGRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO9nBTpGKkpJAuuCF0NRANOsIx MxzzBPZvbs5McZJ/bC6HRoU4KpWogM7e5yh6DJ1D6b7/DhhwDekY5b47yJtDpewS HnjFYxCNtnL2nQHCerpazu8/zMFh9r3eqLwdvRSS80RcchEhl3y8kjXhquLF7khH WmZeqVL48daekKlC1FpG8RGn0USC3aGXCN/cGbO7Td1qvL4mOfQ3pdCge/N7+eOg nBsw4zONacMfWTvv/7Ewb+YK4UIEnG3f6OvpCAP1d3vbT6BkhlRpBtJZeK7AHIn+ vTBZ+zw1wzN3AW678qtg4npKE9u5OTIT8tXAao3fQb1sQA5QguD2BwLcA29PAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUS7R2PoKfvCKn2co64xoGMucCn+0wHwYDVR0j BBgwFoAUQFChe64cXzdj1Fo43P6s4P4iK9YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzg2YjY1YjEtNDVlOS00ZmIyLWFkYzUtODdiYTcxMWUy MWI3LzEvNDA1MEExN0JBRTFDNUYzNzYzRDQ1QTM4RENGRUFDRTBGRTIyMkJENi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC80MDUwQTE3QkFFMUM1RjM3NjNENDVBMzhE Q0ZFQUNFMEZFMjIyQkQ2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2M4NmI2NWIxLTQ1ZTktNGZiMi1hZGM1LTg3YmE3MTFlMjFiNy8xLzQwNTBBMTdC QUUxQzVGMzc2M0Q0NUEzOERDRkVBQ0UwRkUyMjJCRDYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQApxaND wzxnLNKCHZqRTe8cZIxpexlRltCwQb2RHtXmEx3nQ7va5+rewDK2IlrkoxvOGSfe bY1qatNq0LiYCGnOjzPmrxYzBBaNs7YBzBWA8pxdMLHGSjI1WTxgpLxHDBPDZnVT 3//yHM/UV8yhLdaeWnlZpXDPSZMbEe2Y6IajKeximIe1DzPw4Rlk0CeX+IZXcgS7 90yzqzeQChfBcCeQ+I4IXqjN/O/74hms0GK2L17/J5Mv5N/gyngwOvk7iR5VSc9/ 8oRusQLFrIzdiNAuMC4k4bkD2C53AIa66/AbptOXb5pr/1uG3VTgkE+X/ocjr06J KVaqy6XaShoDFfRY -----END CERTIFICATE-----Generated at Sun Dec 14 09:30:40 2025 by rpki-client