This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft File: D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft (raw, json) Hash identifier: 6elQVA299rMqI8b8VkSi3UkDQ7Nx6QJGpsrENKaWRjE= Subject key identifier: 39:55:C9:63:8A:7B:19:44:9C:32:C0:9C:01:B9:19:3B:B4:15:80:8D Authority key identifier: D6:15:AB:CB:A5:01:55:64:AD:E9:B4:73:D6:4F:1E:34:A0:BA:8D:4A Certificate issuer: /CN=D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A Certificate serial: 3D16D05E5D93E8E3A6793EE54BB8A8F4A97B2553 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft Manifest number: 0164 Signing time: Sun 21 Dec 2025 02:25:17 +0000 Manifest this update: Sun 21 Dec 2025 02:20:17 +0000 Manifest next update: Mon 22 Dec 2025 04:08:17 +0000 Files and hashes: 1: 326131343a373538303a3930323a3a2f34382d3438203d3e20323033383433.roa (hash: BFT8GbG7CSJ9YmzS1PjnMDrg1nwAcfXEJPEfuo5FzQk=) 2: 326131343a373538303a3930333a3a2f34382d3438203d3e203331383938.roa (hash: ypgUGD6Euz3HGS0A9GoVgCiVtLF78aI6ZX/YlUyvGd8=) 3: D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.crl (hash: 5tawr522kvxwy10qFfVG61pXCtUC/E7wc75TKHLDMgg=) 4: 326131343a373538303a3930313a3a2f34382d3438203d3e20323033383433.roa (hash: XxS9zprV7IX1JjrBQQ+JptkD2bW89WKl615fH9J1hzc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.crl rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:16:d0:5e:5d:93:e8:e3:a6:79:3e:e5:4b:b8:a8:f4:a9:7b:25:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A Validity Not Before: Dec 21 02:20:17 2025 GMT Not After : Dec 22 04:08:17 2025 GMT Subject: CN=3955C9638A7B19449C32C09C01B9193BB415808D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f8:5e:89:ca:5d:be:51:e3:1e:e4:8c:fb:65: 18:b8:be:32:3b:74:ec:c8:fc:f7:ca:b4:7c:4e:5a: 31:e2:d6:4f:94:d1:ed:db:ef:59:22:ab:27:0c:97: b1:fa:81:18:3f:8d:29:9d:8c:4c:46:8f:eb:ca:a7: a3:c6:ed:0c:2e:c2:4a:f7:12:1e:ec:68:cb:77:b6: 09:2f:a5:eb:ef:05:e0:2b:3f:31:98:1f:39:f7:0f: 4c:20:39:5d:ca:0b:79:79:ce:02:97:64:1b:39:9e: 6d:c8:ae:0f:50:80:f7:99:22:b6:f8:2d:79:2c:5d: 69:b8:36:3c:4f:7c:53:ee:f5:4c:ba:2d:af:d8:df: 74:df:c5:97:56:a2:8a:14:dd:8c:3b:0f:55:5e:47: f2:97:05:8b:15:1c:52:aa:4b:34:e0:f8:e3:d3:b6: be:12:6f:92:74:29:f8:3b:e7:54:dd:7a:a8:34:c1: 59:3c:3a:57:4c:45:9c:ee:2d:6a:d8:a3:9c:1f:22: cc:04:c7:00:2b:28:04:ca:6c:f5:d2:4d:41:41:42: d0:66:65:e3:33:3a:66:8c:13:bb:ad:f0:dc:30:b3: 40:85:36:d0:03:61:c2:c5:81:7d:8f:f5:54:c0:87: 1a:d1:2b:43:aa:9d:28:93:c0:18:6a:7c:84:d9:dd: 5a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:55:C9:63:8A:7B:19:44:9C:32:C0:9C:01:B9:19:3B:B4:15:80:8D X509v3 Authority Key Identifier: keyid:D6:15:AB:CB:A5:01:55:64:AD:E9:B4:73:D6:4F:1E:34:A0:BA:8D:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/3/D615ABCBA5015564ADE9B473D64F1E34A0BA8D4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:3b:45:de:9a:2c:9f:69:d0:b8:ba:a8:b9:6d:27:9c:8c:83: b9:1e:0c:b0:3d:85:05:7e:3b:e2:ba:77:fd:95:73:f8:5a:bf: 9a:c9:ba:aa:d7:36:77:3a:a3:51:0f:7b:ef:ef:8d:48:d1:fb: 40:b0:25:30:27:b9:0c:5e:e4:90:43:17:20:ed:f8:aa:99:f9: ab:23:ea:d7:2b:d7:85:83:c8:e9:71:6f:4c:4a:7a:db:78:df: 04:30:ea:8f:6c:7c:66:73:a4:18:5a:c6:af:2d:56:62:bf:23: 84:80:79:87:49:72:ba:e5:79:11:46:f7:ef:4b:6f:08:11:16: f5:9b:ea:4b:30:ee:fd:a9:67:61:02:70:32:44:b1:9e:ad:4b: 32:fd:c3:eb:6d:9f:19:7c:f2:92:4d:ee:75:72:d3:07:df:08: 9c:3d:f1:97:b5:23:61:84:65:2a:6c:3e:14:29:1a:71:1f:b5: 4a:ce:d7:72:c4:ab:cd:17:b9:db:d4:aa:00:48:d6:4c:e2:b1: 95:20:9c:ce:cf:a3:3e:45:82:b2:6d:bc:19:80:73:98:09:76: b2:ee:7a:8f:1a:b8:36:c8:ea:1c:12:95:c2:ee:0e:c9:b7:49: 7c:d2:8b:97:c0:1a:96:86:42:ea:4c:40:39:c4:7e:6f:fa:fa: 9e:22:fc:37 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUPRbQXl2T6OOmeT7lS7io9Kl7JVMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDYxNUFCQ0JBNTAxNTU2NEFERTlCNDczRDY0RjFFMzRB MEJBOEQ0QTAeFw0yNTEyMjEwMjIwMTdaFw0yNTEyMjIwNDA4MTdaMDMxMTAvBgNV BAMTKDM5NTVDOTYzOEE3QjE5NDQ5QzMyQzA5QzAxQjkxOTNCQjQxNTgwOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm+F6Jyl2+UeMe5Iz7ZRi4vjI7 dOzI/PfKtHxOWjHi1k+U0e3b71kiqycMl7H6gRg/jSmdjExGj+vKp6PG7Qwuwkr3 Eh7saMt3tgkvpevvBeArPzGYHzn3D0wgOV3KC3l5zgKXZBs5nm3Irg9QgPeZIrb4 LXksXWm4NjxPfFPu9Uy6La/Y33TfxZdWoooU3Yw7D1VeR/KXBYsVHFKqSzTg+OPT tr4Sb5J0Kfg751Tdeqg0wVk8OldMRZzuLWrYo5wfIswExwArKATKbPXSTUFBQtBm ZeMzOmaME7ut8Nwws0CFNtADYcLFgX2P9VTAhxrRK0OqnSiTwBhqfITZ3VrLAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUOVXJY4p7GUScMsCcAbkZO7QVgI0wHwYDVR0j BBgwFoAU1hWry6UBVWSt6bRz1k8eNKC6jUowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTNmNjg1NjEtMGE3NC00Y2NhLWJmOGYtMTJmYWFhZmM4 ZWI4LzMvRDYxNUFCQ0JBNTAxNTU2NEFERTlCNDczRDY0RjFFMzRBMEJBOEQ0QS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9ENjE1QUJDQkE1MDE1NTY0QURFOUI0NzNE NjRGMUUzNEEwQkE4RDRBLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzEzZjY4NTYxLTBhNzQtNGNjYS1iZjhmLTEyZmFhYWZjOGViOC8zL0Q2MTVBQkNC QTUwMTU1NjRBREU5QjQ3M0Q2NEYxRTM0QTBCQThENEEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQASO0Xe miyfadC4uqi5bSecjIO5HgywPYUFfjviunf9lXP4Wr+aybqq1zZ3OqNRD3vv741I 0ftAsCUwJ7kMXuSQQxcg7fiqmfmrI+rXK9eFg8jpcW9MSnrbeN8EMOqPbHxmc6QY WsavLVZivyOEgHmHSXK65XkRRvfvS28IERb1m+pLMO79qWdhAnAyRLGerUsy/cPr bZ8ZfPKSTe51ctMH3wicPfGXtSNhhGUqbD4UKRpxH7VKztdyxKvNF7nb1KoASNZM 4rGVIJzOz6M+RYKybbwZgHOYCXay7nqPGrg2yOocEpXC7g7Jt0l80ouXwBqWhkLq TEA5xH5v+vqeIvw3 -----END CERTIFICATE-----Generated at Sun Dec 21 12:26:50 2025 by rpki-client