This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/189/B056811CB944A23C757F57AFFD483C6FCFB80119.mft File: B056811CB944A23C757F57AFFD483C6FCFB80119.mft (raw, json) Hash identifier: +kz/AC/bm0+48r56wDNy52QZydSVnL5G1SK6v9D+yNs= Subject key identifier: 78:03:9F:5C:A3:A6:21:FB:83:2E:E2:7F:42:20:40:50:CC:93:27:33 Authority key identifier: B0:56:81:1C:B9:44:A2:3C:75:7F:57:AF:FD:48:3C:6F:CF:B8:01:19 Certificate issuer: /CN=b056811cb944a23c757f57affd483c6fcfb80119 Certificate serial: 5CC9A72A89B906BEEE74FBC9F21A0A21AD18A0B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFaBHLlEojx1f1ev_Ug8b8-4ARk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/189/B056811CB944A23C757F57AFFD483C6FCFB80119.mft Manifest number: 10DD Signing time: Tue 09 Dec 2025 13:50:16 +0000 Manifest this update: Tue 09 Dec 2025 13:45:16 +0000 Manifest next update: Wed 10 Dec 2025 16:56:16 +0000 Files and hashes: 1: B056811CB944A23C757F57AFFD483C6FCFB80119.crl (hash: GFqkPSl/I7jxG+GR3id4sAoF++ohY0XcDUfJ/g94PpE=) 2: 33372e31362e38392e302f32342d3234203d3e20323035363539.roa (hash: 6QRhHbC8A6tvkoInC0OAQAidq/KLzHjtVgzI9mMUm4k=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/189/B056811CB944A23C757F57AFFD483C6FCFB80119.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/189/B056811CB944A23C757F57AFFD483C6FCFB80119.mft rsync://rpki.ripe.net/repository/DEFAULT/sFaBHLlEojx1f1ev_Ug8b8-4ARk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Dec 2025 16:56:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:c9:a7:2a:89:b9:06:be:ee:74:fb:c9:f2:1a:0a:21:ad:18:a0:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b056811cb944a23c757f57affd483c6fcfb80119 Validity Not Before: Dec 9 13:45:16 2025 GMT Not After : Dec 10 16:56:16 2025 GMT Subject: CN=78039F5CA3A621FB832EE27F42204050CC932733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:88:84:80:32:8e:c1:d5:d7:81:f1:7a:ac:1d: 9d:56:05:5b:50:e0:88:c7:15:f3:7a:38:fb:b2:80: cb:36:9c:80:5b:57:93:99:f7:bc:0a:41:81:2b:ab: 3c:8b:44:8b:78:76:e4:eb:dd:d8:5d:58:a1:b1:66: 81:01:88:4b:33:01:55:96:49:bf:60:0c:56:20:01: 7c:d6:07:9c:5b:90:56:ba:67:bf:b1:de:b5:ba:a2: 7d:b2:d4:05:bc:ca:77:f9:3d:3f:6f:10:b3:75:2d: 3b:73:e9:dc:26:5b:c6:b3:4a:d9:16:2f:4c:e5:81: 69:95:cb:20:45:3e:8c:88:04:5a:e1:3e:92:66:cb: a0:d1:28:ca:e5:ea:f6:e1:9e:e9:ab:c4:9b:0a:cb: 54:78:9c:3b:1e:39:8e:6b:26:eb:b4:46:9d:fc:03: a8:c9:17:4b:a9:2f:73:c4:18:ed:55:42:2d:c7:68: e1:83:11:5e:4f:09:b8:f8:34:84:0b:de:ba:d2:2b: 2b:d6:97:3d:d3:3f:02:15:79:e9:94:51:d4:d4:53: 15:da:2b:5e:f5:5f:e7:82:fa:d6:57:52:45:9e:9f: 2e:bc:03:12:50:f7:9f:e8:77:ce:ff:89:dc:c5:00: d6:7d:04:0a:06:bb:36:60:02:1d:93:e5:a3:10:63: d4:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:03:9F:5C:A3:A6:21:FB:83:2E:E2:7F:42:20:40:50:CC:93:27:33 X509v3 Authority Key Identifier: keyid:B0:56:81:1C:B9:44:A2:3C:75:7F:57:AF:FD:48:3C:6F:CF:B8:01:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/189/B056811CB944A23C757F57AFFD483C6FCFB80119.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFaBHLlEojx1f1ev_Ug8b8-4ARk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/189/B056811CB944A23C757F57AFFD483C6FCFB80119.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:8f:7b:e8:cb:36:24:b7:b4:dd:75:e3:4f:29:ee:63:75:34: 6f:ec:a0:7a:70:6d:93:a1:92:ba:1d:b4:e5:d8:6f:2a:57:98: 49:d6:79:0a:f6:76:53:e8:f6:7c:f4:be:31:98:84:c5:4b:9e: 25:54:d2:51:05:b7:3d:91:c6:b0:fa:f1:1b:b0:48:62:12:ae: 67:e1:c5:6e:cd:50:52:e3:d4:a2:b0:51:0a:96:98:f2:ea:48: d8:e5:2f:c8:18:e1:08:aa:d0:cd:84:e2:7e:16:c2:c7:cf:64: 02:30:26:63:d5:dd:cf:0f:9f:7e:03:7b:af:5c:ea:76:dc:0d: af:80:55:e5:82:52:d5:23:2c:56:11:82:88:34:8d:20:21:ba: dc:1b:1f:18:86:8e:e1:cc:64:90:ea:f4:5f:2b:dd:71:5c:3e: 4d:7f:8c:da:05:26:fa:3f:c1:dc:11:d7:45:a8:13:f6:6d:dc: 38:97:9e:93:b7:44:e1:7f:e6:93:c5:3c:70:66:be:4c:bc:cb: b8:58:32:a8:42:5a:f1:fc:6e:a3:f1:b6:5b:5d:db:c7:f5:e4: 94:e2:cb:af:a0:ea:ca:1d:4c:82:12:78:fe:99:9d:39:89:43: ad:2c:9b:c8:0f:36:6e:40:c0:57:45:5e:66:6a:e9:75:19:62: d9:b9:ef:72 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgIUXMmnKom5Br7udPvJ8hoKIa0YoLIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjA1NjgxMWNiOTQ0YTIzYzc1N2Y1N2FmZmQ0ODNjNmZj ZmI4MDExOTAeFw0yNTEyMDkxMzQ1MTZaFw0yNTEyMTAxNjU2MTZaMDMxMTAvBgNV BAMTKDc4MDM5RjVDQTNBNjIxRkI4MzJFRTI3RjQyMjA0MDUwQ0M5MzI3MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGiISAMo7B1deB8XqsHZ1WBVtQ 4IjHFfN6OPuygMs2nIBbV5OZ97wKQYErqzyLRIt4duTr3dhdWKGxZoEBiEszAVWW Sb9gDFYgAXzWB5xbkFa6Z7+x3rW6on2y1AW8ynf5PT9vELN1LTtz6dwmW8azStkW L0zlgWmVyyBFPoyIBFrhPpJmy6DRKMrl6vbhnumrxJsKy1R4nDseOY5rJuu0Rp38 A6jJF0upL3PEGO1VQi3HaOGDEV5PCbj4NIQL3rrSKyvWlz3TPwIVeemUUdTUUxXa K171X+eC+tZXUkWeny68AxJQ95/od87/idzFANZ9BAoGuzZgAh2T5aMQY9QpAgMB AAGjggJNMIICSTAdBgNVHQ4EFgQUeAOfXKOmIfuDLuJ/QiBAUMyTJzMwHwYDVR0j BBgwFoAUsFaBHLlEojx1f1ev/Ug8b8+4ARkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xODkvQjA1NjgxMUNCOTQ0QTIzQzc1N0Y1N0FGRkQ0ODNDNkZDRkI4MDEx OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3NGYUJITGxFb2p4MWYxZXZfVWc4 YjgtNEFSay5jZXIwgaEGCCsGAQUFBwELBIGUMIGRMIGOBggrBgEFBQcwC4aBgXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE4OS9CMDU2ODExQ0I5NDRB MjNDNzU3RjU3QUZGRDQ4M0M2RkNGQjgwMTE5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAto976Ms2JLe0 3XXjTynuY3U0b+ygenBtk6GSuh205dhvKleYSdZ5CvZ2U+j2fPS+MZiExUueJVTS UQW3PZHGsPrxG7BIYhKuZ+HFbs1QUuPUorBRCpaY8upI2OUvyBjhCKrQzYTifhbC x89kAjAmY9Xdzw+ffgN7r1zqdtwNr4BV5YJS1SMsVhGCiDSNICG63BsfGIaO4cxk kOr0XyvdcVw+TX+M2gUm+j/B3BHXRagT9m3cOJeek7dE4X/mk8U8cGa+TLzLuFgy qEJa8fxuo/G2W13bx/XklOLLr6Dqyh1MghJ4/pmdOYlDrSybyA82bkDAV0VeZmrp dRli2bnvcg== -----END CERTIFICATE-----Generated at Wed Dec 10 10:09:58 2025 by rpki-client