This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft
File: 3134EE987E08D8B5583FEEF621A03150C4F35434.mft (raw, json)
Hash identifier: 8savTSJQhFCfLnCEQs8uD/Lks0+fPlgudIaIy2/Rtak=
Subject key identifier: B1:C1:F5:D4:CC:01:78:E7:C2:6D:48:40:8D:5D:86:C2:83:D6:65:48
Authority key identifier: 31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
Certificate issuer: /CN=3134ee987e08d8b5583feef621a03150c4f35434
Certificate serial: 599E6390A044B648AAAC6650DD678FF4F66F2FF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft
Manifest number: 0398
Signing time: Sat 20 Dec 2025 11:47:33 +0000
Manifest this update: Sat 20 Dec 2025 11:42:33 +0000
Manifest next update: Sun 21 Dec 2025 14:35:33 +0000
Files and hashes: 1: 2AFACA7F316DBE0CFF394F9D5952E52992F185F1.cer (hash: TzD6pGlBEMmZI/OlLFvK4Q5nKNXovDA7wOkDjfwohQo=)
2: 326131343a316563373a666430303a3a2f34302d3438203d3e20323136323034.roa (hash: s/Nou3yfPszN+70d0fh1KxFGk9lHz9YF1rBNojiEJcI=)
3: 1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer (hash: BF/TWOjb2Ii4r0osOdYS/rUG+zOQPpS2tAXbzEo5Wzo=)
4: 326131343a316563373a663830303a3a2f34382d3438203d3e20323131303139.roa (hash: IUL9dWtw0Umsxfs7xwdo1JVZ6ulAsKal+ROC0kpiHgM=)
5: 326131343a316563373a663731303a3a2f34342d3438203d3e20323030303838.roa (hash: AEg6jBnmgaUb2x64BLtcycaY+zMRMacIwLXjCKOp0Kc=)
6: 326131343a316563373a663630303a3a2f34302d3438203d3e20323133393938.roa (hash: jfvc4Qyrnftgf9GYsuLUox0bHp6mia0CtR4lMdTVrZY=)
7: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer (hash: jLV89odZdgTYzYRcumFoTReP+gmmk+raXpcoYf0+wxA=)
8: 326131343a316563373a663530303a3a2f34302d3430203d3e20323038343533.roa (hash: 26SEXU3Pd+BR8SHx6kufhwY94Io89XBTIVQPTTPnVB8=)
9: 326131343a316563373a663830313a3a2f34382d3438203d3e20323131303139.roa (hash: q5taedROXWkWDrb/6D/rTI85VzK640g7YzLTCK454po=)
10: 326131343a316563373a663230303a3a2f34302d3438203d3e20323036353430.roa (hash: qSdNZRVsblfNLTN5jWJzdVW0nG7dD+fw8GdvqXWqzCg=)
11: 326131343a316563373a663830303a3a2f34302d3438203d3e20323131303139.roa (hash: AGI7e/F2Snd3LJvhDdI7M6IquMMB8CwXmbzdMBVWefQ=)
12: AS215318.asa (hash: Cq1YNeZujV2DCB3+fofzEgyWvtRNnETlVqcvQ1iCKVE=)
13: 326131343a316563373a666230303a3a2f34302d3438203d3e20323134373435.roa (hash: 6hKao63oIzBdls8N02e3UeaWWtVa56Xgit+XQJDfjec=)
14: 326131343a316563373a666666663a3a2f34382d3438203d3e20323030313739.roa (hash: jxX5jejatt6POI8r69/OIdC4tpqjlqDh7/l5cMHt1Lc=)
15: 326131343a316563373a323030303a3a2f34302d3438203d3e20323133353135.roa (hash: ei7uKbr21cStunIFD4/+QnxpXX+lUv4yRtUBnFqqQIw=)
16: 326131343a316563373a666666633a3a2f34382d3438203d3e20323136333339.roa (hash: Xpu7YHsE9Uu/Z34+AM32q6wFmIndeEkcOzm4kV29gZU=)
17: 3134EE987E08D8B5583FEEF621A03150C4F35434.crl (hash: +Fxoo1QU3xEf69MVGB1M1586rI0IFs0SMbdBoeK0YVU=)
18: 326131343a316563373a663733303a3a2f34342d3438203d3e20313336353537.roa (hash: EjYVXtoGI4pKSiTLS0VJX0KMS0fHh7kyk5vR1WUohgI=)
19: 326131343a316563373a663930303a3a2f34302d3438203d3e20323131363733.roa (hash: eFx1IPRipEBged0ZijUlxcw0OO6jOfnGP3TjandnEEA=)
20: 326131343a316563373a663330303a3a2f34302d3438203d3e20323132303835.roa (hash: /N5wUQJdysICqY/mrt3+ONpnXUY6EQuvRkeb07T1NVw=)
21: 326131343a316563373a666666643a3a2f34382d3438203d3e20323038343533.roa (hash: cQGzH58GG/5AlClFkvMjXXZFAsalmfdZS0xTjTmJx5Q=)
22: 326131343a316563373a313030303a3a2f33362d3438203d3e20323134343831.roa (hash: mAC3tE41nQDojIaT/TKY9BuNdhC77RQ6VPm5O+XWCIE=)
23: 326131343a316563373a663130303a3a2f34302d3438203d3e20323134313838.roa (hash: l6K8Ipuv+LpAjKBvLV7xS+N25xPDi1Q5md9XNlMDt3o=)
24: 326131343a316563343a3a2f33322d3430203d3e203535323031.roa (hash: J7TluaWBMRkzmoR+yQUgqy6TY9pp5e+qFllmxawGaBk=)
25: 39312e3139362e362e302f32342d3234203d3e20323135333138.roa (hash: j1BjBA5NyrZGkTgGio3bSgpZw6QFV9sBz2jgQ+DhB30=)
26: 326131343a316563323a3a2f34302d3434203d3e20323135333138.roa (hash: 1f8XyNlehbCOnOttGzyrDosIHnqaI9sKAvrNf1ADCiI=)
27: 326131343a316563373a666661303a3a2f34382d3438203d3e20323133353135.roa (hash: uw8e5+V55rs+wlENeJdGRICWtffz7xQmePuL+3U/nIU=)
28: 326131343a316563373a666530303a3a2f34302d3438203d3e20323135343637.roa (hash: 8asU86WRYRMPRuHXiCGWb31YsN6wlyGCHOUyjPq08QE=)
29: 326131343a316563373a663732303a3a2f34342d3438203d3e203139333138.roa (hash: 354DUYTmwYIpJ7s6pAfElMpcSbsG0UySE6atyDydlaw=)
30: 326131343a316563373a663730303a3a2f34302d3438203d3e20323033363632.roa (hash: TXZSGetReOdbEu0rJcDlVY8E6EFEIEHEr5rTFcqv3xU=)
31: 326131343a316563373a666330303a3a2f34302d3438203d3e20323130363435.roa (hash: D0UhxJixjH/6ED4b7asHdvZhN16xQRz9JstOKq1KOMc=)
32: 326131343a316563373a313130303a3a2f34302d3438203d3e20323135343337.roa (hash: LSZWA34YwCO9D6JtWEG8LpUQ1o3Anb+MGXWPU43gT4A=)
33: 326131343a316563373a663730303a3a2f34342d3438203d3e20333937343233.roa (hash: 3NaEQ7JEzM4oESWmvkMu3mTAfj7phWpZMjjU4RHfTkQ=)
34: 326131343a316563373a666666653a3a2f34382d3438203d3e20323135343733.roa (hash: tXMEYMrTa38uR0L+SQ9LimzmDrpxo8zhMIaTp0PKkR0=)
35: 326131343a316563373a666130303a3a2f34302d3438203d3e20323134333635.roa (hash: D7vq42LlJ1JkjKrlS8EXaLer6htaFFui19vj1Iz46+0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft
rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 14:35:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:9e:63:90:a0:44:b6:48:aa:ac:66:50:dd:67:8f:f4:f6:6f:2f:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3134ee987e08d8b5583feef621a03150c4f35434
Validity
Not Before: Dec 20 11:42:33 2025 GMT
Not After : Dec 21 14:35:33 2025 GMT
Subject: CN=B1C1F5D4CC0178E7C26D48408D5D86C283D66548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:d3:70:6f:88:9a:1e:19:f6:47:68:64:08:80:
4f:c7:07:12:a7:c3:2c:fd:a3:ef:61:4a:cd:38:16:
20:39:9d:0d:d6:fd:ac:6c:8e:a7:52:fc:2d:33:4a:
c9:3e:50:58:25:54:e6:89:0c:84:68:d2:5f:46:91:
66:6f:5f:8f:ab:f3:f8:f8:b3:0c:5a:0a:0a:62:2c:
db:af:05:1b:15:e6:b5:a1:c7:22:c0:4f:09:a0:f3:
dd:f5:b5:79:b0:16:ed:c6:13:b9:2e:1c:34:04:c7:
20:7b:be:1d:15:22:19:78:5e:47:d7:dc:cd:75:7b:
85:9a:27:76:dd:37:2f:33:03:e0:8a:a9:66:b9:78:
f8:46:a3:76:78:e4:b9:24:d2:4c:ea:ed:df:5d:2c:
d0:eb:c6:f3:43:d5:bb:e0:2c:41:ba:45:65:b7:12:
27:2f:33:1f:ff:36:ed:62:8f:f1:3b:8f:df:2c:2e:
38:a3:79:47:d4:48:4b:42:9b:82:4a:62:db:b7:e3:
e2:3d:7f:4c:b8:95:fd:9f:ed:c5:4f:23:19:ae:19:
a5:b4:27:c0:d9:d3:e0:4c:14:04:eb:b9:bb:0e:5b:
4a:27:05:fa:3f:ad:fb:56:b6:9e:d4:66:bf:1a:78:
c9:66:09:b0:b6:dc:7f:41:12:45:14:4c:57:41:b3:
c0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C1:F5:D4:CC:01:78:E7:C2:6D:48:40:8D:5D:86:C2:83:D6:65:48
X509v3 Authority Key Identifier:
keyid:31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:c2:9b:17:e9:ed:7a:25:c4:e4:6b:8d:9e:ef:91:20:00:72:
27:7b:32:88:62:56:18:d5:c2:ad:ed:a6:7c:30:16:62:e0:57:
88:52:65:3b:8e:44:a9:f8:76:31:9b:4e:a3:13:15:82:9e:b4:
2c:de:ad:e6:d4:d0:ab:2a:7b:26:3c:e6:52:dd:c5:ab:5f:33:
7b:52:a0:ea:69:4a:97:ef:9f:da:35:8e:33:00:84:88:cb:e8:
ea:dc:1e:1d:44:60:b4:9b:8f:eb:c7:6b:31:3d:6b:b7:c7:f1:
33:a9:dd:f3:de:bf:69:94:ee:ce:f5:4f:4b:4d:33:9a:c1:f7:
c7:9b:ac:ca:38:0f:3d:9d:a7:fe:a8:02:fa:20:50:91:91:0d:
af:c7:90:63:69:42:18:72:70:fe:3b:26:a6:6c:d8:d8:c0:85:
90:87:65:63:73:65:f5:85:f4:0d:69:b5:13:c2:9f:b4:0a:7c:
f8:1e:ed:c6:7d:68:ad:e8:19:06:c4:f9:86:e6:b6:f7:63:b8:
f5:aa:ef:0b:11:77:e5:6e:ac:54:39:30:b4:6e:67:43:db:6e:
ac:e4:1e:5c:f5:6e:12:04:ea:77:8d:13:02:bc:9f:d0:c0:39:
e7:a7:75:d7:14:9f:27:8d:e9:66:4c:cc:0c:91:b7:03:9d:99:
50:23:c3:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 20:45:17 2025 by rpki-client