This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.mft File: C678CC0A7BAA95891441AD80954491DFED87D33A.mft (raw, json) Hash identifier: 0qiysVyUNaPuuXeCB+zqBb6/UnWvyAFgdyEa0J5IF+A= Subject key identifier: 8F:24:10:D7:29:CA:0C:12:B1:E6:11:74:E1:71:B1:1B:7D:87:C0:90 Authority key identifier: C6:78:CC:0A:7B:AA:95:89:14:41:AD:80:95:44:91:DF:ED:87:D3:3A Certificate issuer: /CN=c678cc0a7baa95891441ad80954491dfed87d33a Certificate serial: 44C00935D3F2ACE5C257C496460FED5197F6BFCF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xnjMCnuqlYkUQa2AlUSR3-2H0zo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.mft Manifest number: 0331 Signing time: Fri 26 Dec 2025 00:21:21 +0000 Manifest this update: Fri 26 Dec 2025 00:16:21 +0000 Manifest next update: Sat 27 Dec 2025 01:15:21 +0000 Files and hashes: 1: C678CC0A7BAA95891441AD80954491DFED87D33A.crl (hash: 7lg3cgFNvD5gYZH4D0ZKe3Ygg0I1+3CCtuhYieXsxlM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.crl rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.mft rsync://rpki.ripe.net/repository/DEFAULT/xnjMCnuqlYkUQa2AlUSR3-2H0zo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 01:15:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:c0:09:35:d3:f2:ac:e5:c2:57:c4:96:46:0f:ed:51:97:f6:bf:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c678cc0a7baa95891441ad80954491dfed87d33a Validity Not Before: Dec 26 00:16:21 2025 GMT Not After : Dec 27 01:15:21 2025 GMT Subject: CN=8F2410D729CA0C12B1E61174E171B11B7D87C090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:6c:a7:80:56:19:19:be:2e:74:e8:2b:45:0a: 74:96:8f:81:39:b7:f6:8b:8d:c8:0a:20:e9:b2:9b: 0a:b1:ba:96:76:2a:15:7f:d9:0c:a4:48:e5:98:c2: ad:3d:bd:d6:89:e6:62:0e:dd:50:1a:c3:44:78:14: ab:09:a2:8a:f2:11:b2:6f:3e:b9:45:80:af:fd:3b: cc:35:49:cf:8e:f4:e3:89:83:08:7a:c9:f8:16:9c: 0b:12:44:67:3a:ae:3e:f3:e3:f5:91:01:83:5f:70: b1:99:66:e1:0e:fa:ce:37:27:df:d6:63:fc:6d:6a: bc:ca:e4:ad:fd:3d:63:81:d9:85:a3:ca:34:a9:e7: 9a:19:61:8c:51:42:58:bf:57:17:99:a5:b1:31:17: c6:10:c2:3a:30:f9:26:ea:91:d6:df:5a:f1:bf:08: 63:06:cf:97:f8:7b:29:33:6a:0a:37:08:8b:8e:60: c3:d2:7b:83:c4:4a:46:be:91:76:42:58:f1:92:cb: 62:5d:a9:a1:f9:5d:93:74:db:a4:85:55:fd:df:54: d9:98:ba:ae:17:f2:02:4d:48:e3:f1:cd:12:ea:cd: a2:6c:8c:dc:46:9c:03:f4:40:88:38:cf:ef:7c:dd: 08:42:81:79:27:e4:a6:58:5f:23:e8:be:c5:9d:9e: 7c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:24:10:D7:29:CA:0C:12:B1:E6:11:74:E1:71:B1:1B:7D:87:C0:90 X509v3 Authority Key Identifier: keyid:C6:78:CC:0A:7B:AA:95:89:14:41:AD:80:95:44:91:DF:ED:87:D3:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnjMCnuqlYkUQa2AlUSR3-2H0zo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:dc:42:00:17:35:52:ee:3b:e6:68:83:f8:f2:de:77:6b:e1: bf:4d:7e:ad:90:60:c4:74:39:0d:e5:b9:f5:5a:87:f6:cd:1c: 9f:6f:bc:8d:2b:06:8c:61:a5:56:fb:68:e3:72:80:ce:0f:ec: 5f:88:86:79:e1:f9:01:3a:70:6c:cf:65:80:8d:04:26:ac:e2: ed:96:ca:87:8b:7d:51:ed:10:28:ce:52:36:53:a7:8d:25:06: ee:ae:24:a0:07:42:35:73:4c:58:db:48:be:64:d4:f3:f2:23: 1c:e3:43:06:40:80:ee:6f:cc:d3:d7:2c:68:23:66:ea:eb:4c: e5:41:62:81:85:1f:a6:ef:0b:98:df:db:9a:d6:e4:7c:5a:f0: de:8c:6a:f3:9c:de:ea:2c:13:1b:5b:d8:bf:d2:85:0e:52:55: b3:87:ec:58:6a:05:aa:c4:a8:99:ea:f7:e7:50:57:ba:f4:25: f6:15:4b:9a:7b:73:26:e7:9e:a7:4e:14:db:eb:2a:06:aa:42: c2:34:a8:e6:58:6b:ef:a7:10:f2:2e:3a:20:1b:69:da:4d:27: cb:ab:66:f4:b9:0d:ca:3f:f7:8e:7b:bc:d9:dc:99:0d:7f:c0: da:68:dd:a1:47:7d:5e:2a:cf:7a:9e:75:88:00:ca:88:5d:a5: 8a:5e:b8:c2 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIURMAJNdPyrOXCV8SWRg/tUZf2v88wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzY3OGNjMGE3YmFhOTU4OTE0NDFhZDgwOTU0NDkxZGZl ZDg3ZDMzYTAeFw0yNTEyMjYwMDE2MjFaFw0yNTEyMjcwMTE1MjFaMDMxMTAvBgNV BAMTKDhGMjQxMEQ3MjlDQTBDMTJCMUU2MTE3NEUxNzFCMTFCN0Q4N0MwOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGbKeAVhkZvi506CtFCnSWj4E5 t/aLjcgKIOmymwqxupZ2KhV/2QykSOWYwq09vdaJ5mIO3VAaw0R4FKsJooryEbJv PrlFgK/9O8w1Sc+O9OOJgwh6yfgWnAsSRGc6rj7z4/WRAYNfcLGZZuEO+s43J9/W Y/xtarzK5K39PWOB2YWjyjSp55oZYYxRQli/VxeZpbExF8YQwjow+SbqkdbfWvG/ CGMGz5f4eykzago3CIuOYMPSe4PESka+kXZCWPGSy2JdqaH5XZN026SFVf3fVNmY uq4X8gJNSOPxzRLqzaJsjNxGnAP0QIg4z+983QhCgXkn5KZYXyPovsWdnnxhAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUjyQQ1ynKDBKx5hF04XGxG32HwJAwHwYDVR0j BBgwFoAUxnjMCnuqlYkUQa2AlUSR3+2H0zowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDA2MzMzYzYtOTQ2ZC00YjBiLTk1ZWYtZGFiYTI2MmE0 MmUxLzAvQzY3OENDMEE3QkFBOTU4OTE0NDFBRDgwOTU0NDkxREZFRDg3RDMzQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3huak1DbnVxbFlrVVFhMkFsVVNSMy0y SDB6by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kMDYzMzNjNi05 NDZkLTRiMGItOTVlZi1kYWJhMjYyYTQyZTEvMC9DNjc4Q0MwQTdCQUE5NTg5MTQ0 MUFEODA5NTQ0OTFERkVEODdEMzNBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQtxCABc1Uu475miD+PLe d2vhv01+rZBgxHQ5DeW59VqH9s0cn2+8jSsGjGGlVvto43KAzg/sX4iGeeH5ATpw bM9lgI0EJqzi7ZbKh4t9Ue0QKM5SNlOnjSUG7q4koAdCNXNMWNtIvmTU8/IjHOND BkCA7m/M09csaCNm6utM5UFigYUfpu8LmN/bmtbkfFrw3oxq85ze6iwTG1vYv9KF DlJVs4fsWGoFqsSomer351BXuvQl9hVLmntzJueep04U2+sqBqpCwjSo5lhr76cQ 8i46IBtp2k0ny6tm9LkNyj/3jnu82dyZDX/A2mjdoUd9XirPep51iADKiF2lil64 wg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:06:26 2025 by rpki-client