This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.mft File: 258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.mft (raw, json) Hash identifier: buiJvGaN3FOkrYd8n2/Eksg7EU6UXfwsyCuQE3Ppw1w= Subject key identifier: 1A:BE:01:9E:E6:14:65:C7:4C:36:A5:38:AC:20:7E:30:96:92:79:75 Authority key identifier: 25:8D:1C:E0:CB:76:A9:86:E5:6C:7A:90:A6:6B:A7:DC:72:F5:95:2A Certificate issuer: /CN=258D1CE0CB76A986E56C7A90A66BA7DC72F5952A Certificate serial: 67BE98684BAADF8D2CC1D88CDA8BE61423D17329 Authority info access: rsync://rpki.axivora.net/repo/Axivora-Net/2/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.mft Manifest number: 4D Signing time: Fri 19 Dec 2025 17:54:44 +0000 Manifest this update: Fri 19 Dec 2025 17:49:44 +0000 Manifest next update: Sat 20 Dec 2025 21:53:44 +0000 Files and hashes: 1: 326131343a373538303a3737353a3a2f34382d3438203d3e203134363138.roa (hash: MfUF2laHihcgibdMapv7JAFGkNEIH6JIdDfIW/lhqFE=) 2: 326131343a373538303a3737303a3a2f34342d3438203d3e20323133383931.roa (hash: woLwL0VEJzWnepdsx0zvpMFwwJXef1WYeYkaz1KcaHg=) 3: 326131343a373538303a3737353a3a2f34382d3438203d3e203136353039.roa (hash: LbzBckLICgXq7UKYaeP/CXL1PXD0JCr+a84omRC/7VY=) 4: 258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.crl (hash: u6sq2K5ZSFuWE02eBy8RVjjJsaAuabATtzBJxpib4/Q=) 5: 326131343a373538303a3737373a3a2f34382d3438203d3e203136353039.roa (hash: xvnqSl1qLoVMIEzXN9sXRb87iGsN7N/pVeZWynFQufE=) 6: 326131343a373538303a3737373a3a2f34382d3438203d3e203134363138.roa (hash: RTK2m9QZnNSKC5ZVcuz7+tdRZKTs7/hzcAu/hXd2ZTc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.crl rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.mft rsync://rpki.axivora.net/repo/Axivora-Net/2/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.cer rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.crl rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:be:98:68:4b:aa:df:8d:2c:c1:d8:8c:da:8b:e6:14:23:d1:73:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=258D1CE0CB76A986E56C7A90A66BA7DC72F5952A Validity Not Before: Dec 19 17:49:44 2025 GMT Not After : Dec 20 21:53:44 2025 GMT Subject: CN=1ABE019EE61465C74C36A538AC207E3096927975 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:76:dd:44:50:89:ef:85:86:17:bb:1e:1e:63: dd:5a:36:40:71:aa:ea:db:ea:87:05:67:a4:76:dc: 5b:69:d6:44:5d:f1:02:36:b7:bb:55:51:22:1b:c5: 98:8b:b7:0a:e0:79:fe:33:f1:ec:d4:e8:89:9a:4d: 68:0f:be:87:91:92:10:ed:5d:7a:9c:af:fc:16:08: bf:2d:e6:5e:a9:30:07:42:eb:bc:da:5a:18:44:3a: 14:fd:55:59:31:ef:b5:ee:27:c5:d3:77:d0:3d:49: a7:d8:3f:07:f6:2f:f3:b5:0e:40:b9:60:6a:2b:28: d7:27:8b:34:7f:9b:19:d4:fc:5f:de:68:3d:41:6d: 8c:be:51:7d:86:db:aa:10:cf:01:14:0e:a7:ad:40: a8:36:ff:33:9b:bc:dc:0a:36:91:35:1b:53:ca:45: c4:31:6b:06:ef:88:65:f4:0a:32:c5:6b:f0:d0:37: 63:44:bc:95:3c:1c:88:2b:ba:b9:8c:a1:b2:aa:12: 8b:bf:64:6b:ce:1d:8e:0a:67:6b:35:b7:4f:2b:b5: 78:22:47:d4:f5:8c:8d:12:e7:ef:f6:c6:f2:dd:ce: 15:ed:8c:39:04:19:cb:da:26:99:12:25:25:b0:8a: 0a:88:8e:a5:2e:73:59:ea:0f:46:1b:c3:7b:c1:aa: a4:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:BE:01:9E:E6:14:65:C7:4C:36:A5:38:AC:20:7E:30:96:92:79:75 X509v3 Authority Key Identifier: keyid:25:8D:1C:E0:CB:76:A9:86:E5:6C:7A:90:A6:6B:A7:DC:72:F5:95:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.axivora.net/repo/Axivora-Net/2/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:04:86:42:d1:1f:f7:cf:97:01:8b:46:44:90:24:65:6d:24: d1:71:a1:0f:95:03:e3:79:1b:6d:69:84:4f:df:bd:94:bb:d9: 61:6c:3b:a9:49:d5:b9:a0:02:15:47:ab:43:33:9f:35:98:3b: 40:96:24:7d:56:93:0e:35:5e:24:6e:32:1c:9d:70:79:22:96: bb:2d:25:08:ed:92:8c:2b:fc:84:92:41:6b:3f:8d:a3:44:3a: 1f:0d:7c:78:4f:bb:7b:60:9b:67:01:70:fe:bb:36:b5:fa:18: 8e:ae:1e:52:86:82:ad:c5:52:b8:51:c4:9e:aa:f9:e2:d1:0b: f3:9e:05:c7:ea:9f:bd:11:95:7b:dd:de:e1:e0:66:52:66:25: dc:aa:2c:f2:98:02:3c:1a:1b:b7:53:e1:aa:9a:c3:2b:a5:9b: 29:52:e4:1e:da:68:98:c1:6e:ad:4a:47:e0:98:e0:31:36:ed: f8:01:0a:ca:b6:a5:ef:88:93:85:5c:0d:b9:01:b7:a5:e3:2e: 57:45:c9:99:be:06:d7:90:c4:5c:c8:60:72:04:80:eb:85:dc: e3:b0:90:e9:b9:70:13:67:b6:e1:f8:e2:ef:e9:93:14:99:f6: 54:48:f9:f9:74:97:f9:fe:e5:6a:3d:7d:19:84:5c:c2:c6:67: bf:41:84:31 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgIUZ76YaEuq340swdiM2ovmFCPRcykwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU4RDFDRTBDQjc2QTk4NkU1NkM3QTkwQTY2QkE3REM3 MkY1OTUyQTAeFw0yNTEyMTkxNzQ5NDRaFw0yNTEyMjAyMTUzNDRaMDMxMTAvBgNV BAMTKDFBQkUwMTlFRTYxNDY1Qzc0QzM2QTUzOEFDMjA3RTMwOTY5Mjc5NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWdt1EUInvhYYXux4eY91aNkBx qurb6ocFZ6R23Ftp1kRd8QI2t7tVUSIbxZiLtwrgef4z8ezU6ImaTWgPvoeRkhDt XXqcr/wWCL8t5l6pMAdC67zaWhhEOhT9VVkx77XuJ8XTd9A9SafYPwf2L/O1DkC5 YGorKNcnizR/mxnU/F/eaD1BbYy+UX2G26oQzwEUDqetQKg2/zObvNwKNpE1G1PK RcQxawbviGX0CjLFa/DQN2NEvJU8HIgrurmMobKqEou/ZGvOHY4KZ2s1t08rtXgi R9T1jI0S5+/2xvLdzhXtjDkEGcvaJpkSJSWwigqIjqUuc1nqD0Ybw3vBqqTbAgMB AAGjggJXMIICUzAdBgNVHQ4EFgQUGr4BnuYUZcdMNqU4rCB+MJaSeXUwHwYDVR0j BBgwFoAUJY0c4Mt2qYblbHqQpmun3HL1lSowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDNmZDBiNzYtNzI0My00YjI2LTk3NjAtY2MwN2I5NGJm ZTIzLzEvMjU4RDFDRTBDQjc2QTk4NkU1NkM3QTkwQTY2QkE3REM3MkY1OTUyQS5j cmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3luYzovL3Jwa2kuYXhp dm9yYS5uZXQvcmVwby9BeGl2b3JhLU5ldC8yLzI1OEQxQ0UwQ0I3NkE5ODZFNTZD N0E5MEE2NkJBN0RDNzJGNTk1MkEuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9z aXRvcnkvMDNmZDBiNzYtNzI0My00YjI2LTk3NjAtY2MwN2I5NGJmZTIzLzEvMjU4 RDFDRTBDQjc2QTk4NkU1NkM3QTkwQTY2QkE3REM3MkY1OTUyQS5tZnQwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEB ACYEhkLRH/fPlwGLRkSQJGVtJNFxoQ+VA+N5G21phE/fvZS72WFsO6lJ1bmgAhVH q0MznzWYO0CWJH1Wkw41XiRuMhydcHkilrstJQjtkowr/ISSQWs/jaNEOh8NfHhP u3tgm2cBcP67NrX6GI6uHlKGgq3FUrhRxJ6q+eLRC/OeBcfqn70RlXvd3uHgZlJm JdyqLPKYAjwaG7dT4aqawyulmylS5B7aaJjBbq1KR+CY4DE27fgBCsq2pe+Ik4Vc DbkBt6XjLldFyZm+BteQxFzIYHIEgOuF3OOwkOm5cBNntuH44u/pkxSZ9lRI+fl0 l/n+5Wo9fRmEXMLGZ79BhDE= -----END CERTIFICATE-----Generated at Sat Dec 20 00:53:32 2025 by rpki-client