This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/1/0C5C398C0045A4F0FE0F8EDCF20795E5F8EAAA30.mft File: 0C5C398C0045A4F0FE0F8EDCF20795E5F8EAAA30.mft (raw, json) Hash identifier: u51E72N79owbN8txX878O+62brMlmFhsmMTbSlCHbv0= Subject key identifier: B3:51:21:37:39:DC:A3:0C:08:12:50:2D:42:0D:8B:00:89:AE:D4:25 Authority key identifier: 0C:5C:39:8C:00:45:A4:F0:FE:0F:8E:DC:F2:07:95:E5:F8:EA:AA:30 Certificate issuer: /CN=0c5c398c0045a4f0fe0f8edcf20795e5f8eaaa30 Certificate serial: 6C9ED2AC29E63C1B6E7E8B8F43C992C3D5EC356A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFw5jABFpPD-D47c8geV5fjqqjA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/1/0C5C398C0045A4F0FE0F8EDCF20795E5F8EAAA30.mft Manifest number: 0A Signing time: Tue 16 Dec 2025 20:28:25 +0000 Manifest this update: Tue 16 Dec 2025 20:23:25 +0000 Manifest next update: Wed 17 Dec 2025 21:23:25 +0000 Files and hashes: 1: 0C5C398C0045A4F0FE0F8EDCF20795E5F8EAAA30.crl (hash: eemwQGtWpunBZl58d/Nke6UrNGCk5lmTRAfO3BXDQVI=) 2: AS208754.asa (hash: FCqaEG1820JDvKuOhtOQoU+IfY0gdGsZycMqX5Ae+Wk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/1/0C5C398C0045A4F0FE0F8EDCF20795E5F8EAAA30.crl rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/1/0C5C398C0045A4F0FE0F8EDCF20795E5F8EAAA30.mft rsync://rpki.ripe.net/repository/DEFAULT/DFw5jABFpPD-D47c8geV5fjqqjA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 21:23:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:9e:d2:ac:29:e6:3c:1b:6e:7e:8b:8f:43:c9:92:c3:d5:ec:35:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c5c398c0045a4f0fe0f8edcf20795e5f8eaaa30 Validity Not Before: Dec 16 20:23:25 2025 GMT Not After : Dec 17 21:23:25 2025 GMT Subject: CN=B351213739DCA30C0812502D420D8B0089AED425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:84:d8:c4:f2:45:4f:71:1a:3c:71:06:46:62: c9:0f:af:92:a6:97:d2:96:a5:2e:42:17:36:94:af: b1:3a:d9:e7:9f:1a:3f:1b:71:bc:66:b3:0a:04:f0: fe:35:ba:7b:c0:4f:96:95:3a:52:8f:9c:76:d0:66: cd:76:4b:38:10:38:26:31:27:cb:42:f6:82:77:94: 1c:d0:bd:e9:62:1a:52:91:df:8a:0e:3f:90:81:b2: 83:1d:c5:ce:66:57:3f:9f:bd:20:e0:0d:e7:98:2a: f4:d1:c3:50:18:77:2a:92:9c:8b:f6:f0:8e:91:4c: 81:5c:b0:9c:95:a4:b4:20:d0:08:2a:7e:d7:d1:11: 97:7e:97:53:37:5e:e8:53:72:21:22:ac:c3:24:56: 68:84:0c:9a:6c:e0:c0:2c:8c:42:35:82:47:aa:9e: b4:d3:02:43:41:e2:9a:ec:ef:5d:ed:6d:03:56:9b: bb:35:ca:cd:8a:a1:28:b4:ba:bd:a4:d9:04:d9:f9: a8:59:3b:a7:3a:d3:7e:1b:9d:da:58:63:ce:73:cb: 49:e8:66:23:df:49:7a:a3:45:81:7c:70:8e:a3:6b: f8:9c:c1:8d:04:97:a6:41:08:8a:0d:32:40:e2:9a: bc:af:ff:07:ca:15:e2:24:0f:b6:45:17:a3:1a:e0: 8f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:51:21:37:39:DC:A3:0C:08:12:50:2D:42:0D:8B:00:89:AE:D4:25 X509v3 Authority Key Identifier: keyid:0C:5C:39:8C:00:45:A4:F0:FE:0F:8E:DC:F2:07:95:E5:F8:EA:AA:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/1/0C5C398C0045A4F0FE0F8EDCF20795E5F8EAAA30.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFw5jABFpPD-D47c8geV5fjqqjA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/1/0C5C398C0045A4F0FE0F8EDCF20795E5F8EAAA30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:f0:92:e1:8c:ea:61:63:91:e5:2e:41:6a:cf:79:c0:b4:97: 60:30:4c:57:45:2a:23:1d:b2:27:36:f0:ca:e1:98:9c:37:aa: a3:1f:9a:75:67:fe:29:22:9f:99:60:f9:d2:a6:e0:e5:3a:09: 6a:b6:d0:3d:ea:8c:a6:0b:2a:c3:e8:f0:cf:ba:33:76:05:21: 90:bc:af:fa:95:f8:18:77:a9:6d:38:eb:48:ff:a4:98:0a:aa: 79:df:7d:bf:2b:20:8f:2f:dc:f2:36:ff:00:1c:a1:0c:48:c5: 61:2d:c8:52:5d:86:71:2b:7f:13:97:86:9c:05:b9:3d:69:d3: 3e:fe:84:f7:2f:7e:3c:dc:02:35:c0:73:be:55:52:fc:f7:27: b6:b0:7d:6a:84:cb:f1:93:06:13:c7:70:c7:d3:dd:29:c1:ca: ed:93:b9:28:85:c5:0b:7a:c4:af:a4:24:1f:4b:96:05:02:8a: d4:d8:2e:d5:99:9e:f3:13:b5:f4:89:96:37:9a:e4:15:9f:3d: 0a:32:2f:b2:48:e9:b5:35:18:d6:10:f6:30:7a:01:64:f4:3b: 50:3c:f0:fc:56:dc:36:c4:eb:22:b8:44:23:32:77:ad:2e:0c: 9c:5b:18:b4:c8:27:06:05:2a:ef:f2:4c:c7:e9:f3:ef:1f:ca: 39:bb:21:0f -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUbJ7SrCnmPBtufouPQ8mSw9XsNWowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMGM1YzM5OGMwMDQ1YTRmMGZlMGY4ZWRjZjIwNzk1ZTVm OGVhYWEzMDAeFw0yNTEyMTYyMDIzMjVaFw0yNTEyMTcyMTIzMjVaMDMxMTAvBgNV BAMTKEIzNTEyMTM3MzlEQ0EzMEMwODEyNTAyRDQyMEQ4QjAwODlBRUQ0MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCshNjE8kVPcRo8cQZGYskPr5Km l9KWpS5CFzaUr7E62eefGj8bcbxmswoE8P41unvAT5aVOlKPnHbQZs12SzgQOCYx J8tC9oJ3lBzQveliGlKR34oOP5CBsoMdxc5mVz+fvSDgDeeYKvTRw1AYdyqSnIv2 8I6RTIFcsJyVpLQg0AgqftfREZd+l1M3XuhTciEirMMkVmiEDJps4MAsjEI1gkeq nrTTAkNB4prs713tbQNWm7s1ys2KoSi0ur2k2QTZ+ahZO6c6034bndpYY85zy0no ZiPfSXqjRYF8cI6ja/icwY0El6ZBCIoNMkDimryv/wfKFeIkD7ZFF6Ma4I9xAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUs1EhNzncowwIElAtQg2LAImu1CUwHwYDVR0j BBgwFoAUDFw5jABFpPD+D47c8geV5fjqqjAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjgxMmQzZWYtYzVmYy00NWIwLTk1NGEtOGE1MjIxMGMy ZTkwLzEvMEM1QzM5OEMwMDQ1QTRGMEZFMEY4RURDRjIwNzk1RTVGOEVBQUEzMC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RGdzVqQUJGcFBELUQ0N2M4Z2VWNWZq cXFqQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mODEyZDNlZi1j NWZjLTQ1YjAtOTU0YS04YTUyMjEwYzJlOTAvMS8wQzVDMzk4QzAwNDVBNEYwRkUw RjhFRENGMjA3OTVFNUY4RUFBQTMwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoPCS4YzqYWOR5S5Bas95 wLSXYDBMV0UqIx2yJzbwyuGYnDeqox+adWf+KSKfmWD50qbg5ToJarbQPeqMpgsq w+jwz7ozdgUhkLyv+pX4GHepbTjrSP+kmAqqed99vysgjy/c8jb/AByhDEjFYS3I Ul2GcSt/E5eGnAW5PWnTPv6E9y9+PNwCNcBzvlVS/PcntrB9aoTL8ZMGE8dwx9Pd KcHK7ZO5KIXFC3rEr6QkH0uWBQKK1Ngu1Zme8xO19ImWN5rkFZ89CjIvskjptTUY 1hD2MHoBZPQ7UDzw/FbcNsTrIrhEIzJ3rS4MnFsYtMgnBgUq7/JMx+nz7x/KObsh Dw== -----END CERTIFICATE-----Generated at Wed Dec 17 06:43:36 2025 by rpki-client