This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft
File: 25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft (raw, json)
Hash identifier: 9ChGgf4nmXSB8YqU35mPkIioleccC2hCT6RU322vHnk=
Subject key identifier: 37:D8:FC:A5:EC:37:AD:6A:9E:4D:33:CC:10:1F:22:4D:6E:5C:90:8B
Authority key identifier: 25:C7:3D:FC:86:8C:3F:62:CB:7F:F9:71:AF:47:76:71:CA:F3:80:AA
Certificate issuer: /CN=25c73dfc868c3f62cb7ff971af477671caf380aa
Certificate serial: 15D0C23AA4AD03E8C5200AA1C4C7FA8801C2958E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jcc9_IaMP2LLf_lxr0d2ccrzgKo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft
Manifest number: 04F6
Signing time: Mon 02 Feb 2026 00:02:22 +0000
Manifest this update: Sun 01 Feb 2026 23:57:22 +0000
Manifest next update: Tue 03 Feb 2026 00:37:22 +0000
Files and hashes: 1: AS205603.asa (hash: hilS75f+xThcKc+nN214Mi4BwyvAFPo1c2Y0cUS3H24=)
2: 25C73DFC868C3F62CB7FF971AF477671CAF380AA.crl (hash: HdusqAAvSHGCO389qYb+nXrkJrTUstpuGyC9TXA+uMM=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.crl
rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jcc9_IaMP2LLf_lxr0d2ccrzgKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Feb 2026 21:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:d0:c2:3a:a4:ad:03:e8:c5:20:0a:a1:c4:c7:fa:88:01:c2:95:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c73dfc868c3f62cb7ff971af477671caf380aa
Validity
Not Before: Feb 1 23:57:22 2026 GMT
Not After : Feb 3 00:37:22 2026 GMT
Subject: CN=37D8FCA5EC37AD6A9E4D33CC101F224D6E5C908B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:45:39:65:a2:7f:39:bf:ce:9b:f1:96:75:57:
6f:59:7a:0c:d1:8c:0e:cb:e1:fc:fc:5e:ed:1f:67:
0b:81:27:16:13:97:28:42:6b:81:cd:be:5f:13:ed:
d8:de:32:73:b0:8b:66:d3:8d:25:89:89:3e:aa:54:
0a:d0:be:3a:c8:86:33:f5:88:10:82:9c:d6:cd:83:
65:df:34:3b:74:dd:b0:91:46:a8:cc:9f:e3:b8:88:
ce:72:d5:51:90:09:6f:bc:d8:dc:a8:b4:c2:3c:3b:
07:b3:86:1e:db:47:ad:5f:67:95:8a:5e:62:67:9e:
d5:12:3d:6f:78:21:4b:7e:4a:e8:84:c2:35:ba:b2:
25:14:4c:b0:d3:6e:71:fa:e5:48:ce:49:b2:98:00:
b1:bc:90:f4:55:ee:c0:6c:b3:23:7a:d6:8f:b8:80:
89:ec:51:65:54:5a:f4:55:6c:a1:2a:53:64:1e:0e:
6c:57:6d:3d:3d:be:1e:a1:61:8c:05:30:58:a3:6b:
94:2d:04:bc:68:64:1e:bc:60:1f:bf:cd:30:3e:40:
df:46:96:9b:31:a5:8f:87:7f:2f:b8:af:53:87:69:
7c:4a:35:8e:4a:30:62:bd:a7:6b:18:11:0c:72:ec:
43:89:12:fe:fd:94:65:7f:73:33:ef:51:aa:f9:df:
10:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D8:FC:A5:EC:37:AD:6A:9E:4D:33:CC:10:1F:22:4D:6E:5C:90:8B
X509v3 Authority Key Identifier:
keyid:25:C7:3D:FC:86:8C:3F:62:CB:7F:F9:71:AF:47:76:71:CA:F3:80:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jcc9_IaMP2LLf_lxr0d2ccrzgKo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:c4:98:d0:a2:d4:08:ba:86:dc:e8:9d:c4:95:ab:2f:26:4e:
ef:f8:3e:50:a0:61:11:d9:34:b1:ea:69:52:89:d3:5b:0d:e8:
b9:cc:ff:c4:04:dc:05:d0:c9:2f:b3:b0:8a:af:af:f8:7a:53:
7c:cd:3b:3b:a3:22:c0:a9:e2:46:53:80:c0:ea:71:63:a6:19:
48:51:e5:67:ad:53:d4:80:91:92:0e:d2:e3:56:92:c0:8d:54:
ab:8b:7c:64:3f:b5:ca:d6:3f:3e:e4:25:d6:8b:9c:70:f7:75:
fe:7f:bb:94:55:1a:ca:38:f2:1e:70:52:0e:24:33:d7:67:a1:
ac:e8:b8:9c:98:08:08:6e:8b:05:31:6c:01:b5:1c:ee:b9:88:
a1:24:16:13:b3:f4:ba:97:33:98:f7:97:db:55:ea:65:32:d5:
d0:69:28:71:e9:75:2c:00:7f:c2:94:59:26:59:b7:7e:2f:8d:
03:df:a7:9e:1d:62:b0:f9:18:66:fe:fb:f4:67:d4:60:12:94:
7f:a1:3d:91:5b:27:14:29:bc:d4:01:c2:a1:93:2b:8e:47:50:
44:75:42:a7:51:a0:23:b6:70:d5:40:af:4c:82:e7:c9:44:e9:
b4:f2:28:6e:69:f2:35:ea:ad:74:4b:6a:6e:49:a5:c4:6f:06:
10:40:31:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 08:14:30 2026 by rpki-client