This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.mft File: 6578E79662000496EB1540D8BD8FA65ED8D63A62.mft (raw, json) Hash identifier: mIFGItpqsVm7hBKVW07QYOm7X0sOkva8YG2CX1IquG8= Subject key identifier: 1C:2F:82:B7:0C:C8:AA:D8:E0:BB:6A:A0:B7:BB:58:1F:2C:17:DC:B4 Authority key identifier: 65:78:E7:96:62:00:04:96:EB:15:40:D8:BD:8F:A6:5E:D8:D6:3A:62 Certificate issuer: /CN=6578E79662000496EB1540D8BD8FA65ED8D63A62 Certificate serial: 16F3DDB84096D82A527D9F4E3D5DB84E84B1FFCE Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6578E79662000496EB1540D8BD8FA65ED8D63A62.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.mft Manifest number: A6 Signing time: Wed 31 Dec 2025 04:07:47 +0000 Manifest this update: Wed 31 Dec 2025 04:02:47 +0000 Manifest next update: Thu 01 Jan 2026 07:49:47 +0000 Files and hashes: 1: 326130363a613030353a6432643a3a2f34382d3438203d3e203530313034.roa (hash: CAs4yn2E+Z/tR5i90G5tFQhJLWheBQDwrBHMrZXdGBo=) 2: 38352e3135352e3232372e302f32342d3234203d3e203530313034.roa (hash: ocAxx23XjwXyOYOHcEuZaqgQEocGKpcgw1PpjzeOLXQ=) 3: 38352e3135352e3232372e302f32342d3234203d3e203332323030.roa (hash: u3B6KKBKIUk9SO5JxQD+EeR9cSC3pRMQPnPBIW/RPYA=) 4: 38352e3135352e3232372e302f32342d3234203d3e20313339323035.roa (hash: F3nL+PATD3gOzZdjINpCRdbNyER8HiHmFGbm/cRvxqY=) 5: 326130363a613030353a6432643a3a2f34382d3438203d3e20313532333638.roa (hash: 52mHsWa4VgNp8igpY75YRE/bqiZx2ZdwnVE8gr1/unY=) 6: 6578E79662000496EB1540D8BD8FA65ED8D63A62.crl (hash: Qtk3TGqKsdUTt2lVrguQ8yfcdjP+sjWqnOIKMgrgZzQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.crl rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6578E79662000496EB1540D8BD8FA65ED8D63A62.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 23:41:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:f3:dd:b8:40:96:d8:2a:52:7d:9f:4e:3d:5d:b8:4e:84:b1:ff:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6578E79662000496EB1540D8BD8FA65ED8D63A62 Validity Not Before: Dec 31 04:02:47 2025 GMT Not After : Jan 1 07:49:47 2026 GMT Subject: CN=1C2F82B70CC8AAD8E0BB6AA0B7BB581F2C17DCB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:04:df:29:61:e2:a2:ce:00:13:a6:72:fb:1a: aa:90:1e:d9:f7:98:4b:9b:d1:ab:6d:9e:65:2b:cc: 39:5f:e9:cf:6a:49:8e:78:6c:86:2c:4e:92:a1:eb: 37:00:29:1a:25:2c:64:07:40:7a:f2:97:86:14:89: 07:19:34:16:1a:80:e6:f6:14:08:fa:d0:27:7b:55: 2b:f3:98:bd:84:73:04:52:58:e4:9c:6b:45:30:3e: fa:22:ab:d4:37:1f:69:6e:5f:37:33:5b:6f:b1:5d: 07:a8:c3:6a:d5:7d:87:48:9a:38:6b:96:86:e1:b7: 4a:04:b3:78:f8:b7:d8:c1:59:9d:f0:03:1a:09:f3: 6d:3f:b6:a2:54:46:0c:ef:b2:76:d3:d1:f8:61:75: a5:1f:52:57:e7:e5:38:a4:d4:2f:0e:cd:cb:a3:c8: b7:cf:30:d1:f1:cc:ad:5b:67:a7:25:03:6c:1f:c1: c2:84:92:e4:d1:c3:c5:76:ef:e1:fa:3b:f8:bf:68: 88:e2:ec:e5:db:1a:76:2a:94:00:fb:cc:b2:2d:f4: e8:40:4b:10:98:0f:61:1c:2a:59:4b:5e:2a:04:75: 8e:2b:33:30:4d:4e:20:e2:48:ae:f5:09:a5:fe:40: cb:f6:eb:9d:a5:c5:a2:d5:3f:41:25:98:b9:79:c7: b9:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:2F:82:B7:0C:C8:AA:D8:E0:BB:6A:A0:B7:BB:58:1F:2C:17:DC:B4 X509v3 Authority Key Identifier: keyid:65:78:E7:96:62:00:04:96:EB:15:40:D8:BD:8F:A6:5E:D8:D6:3A:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6578E79662000496EB1540D8BD8FA65ED8D63A62.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:8c:58:1b:58:ac:f5:d4:1e:71:35:3a:c4:b3:41:76:b7:3f: ac:f7:f5:54:9e:71:a6:7f:64:34:d7:73:b1:68:7f:c1:0c:1e: 14:96:b5:4d:fd:54:98:ac:e4:08:63:5e:72:a1:61:bc:fd:05: 42:db:0d:c6:bf:5d:0c:f2:20:22:5b:62:51:a7:4e:7d:96:d6: 36:55:56:a0:e8:bf:2e:b6:66:c9:f2:fe:cc:be:02:8a:7d:ae: 8c:c3:c7:7b:1a:88:c5:6d:b7:33:83:53:d6:ba:97:e7:49:f8: ba:a6:fd:04:c1:4e:e0:23:90:17:e1:9d:68:7c:88:05:47:fe: 75:95:68:6a:20:06:65:63:8a:52:54:29:97:86:35:0f:9a:55: c2:6e:29:69:d3:5c:e9:0a:1c:3c:95:f3:4a:d5:8d:7b:2f:1f: 1b:72:f7:dc:8e:76:b1:c1:2a:3b:eb:ff:14:14:d7:2e:6c:d6: 7c:94:6c:fd:27:a0:08:7c:ba:f2:20:b6:27:c6:1d:fc:e0:33: 33:a8:94:ba:72:1b:8b:76:5a:4d:5b:14:87:55:13:cc:95:e6: 41:b2:3d:7c:91:aa:03:78:16:20:18:80:ad:fb:ba:ab:43:18: 02:e3:12:98:80:9f:fe:74:5f:85:f4:a6:30:56:68:e4:8d:99: d7:07:23:46 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUFvPduECW2CpSfZ9OPV24ToSx/84wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU3OEU3OTY2MjAwMDQ5NkVCMTU0MEQ4QkQ4RkE2NUVE OEQ2M0E2MjAeFw0yNTEyMzEwNDAyNDdaFw0yNjAxMDEwNzQ5NDdaMDMxMTAvBgNV BAMTKDFDMkY4MkI3MENDOEFBRDhFMEJCNkFBMEI3QkI1ODFGMkMxN0RDQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoBN8pYeKizgATpnL7GqqQHtn3 mEub0attnmUrzDlf6c9qSY54bIYsTpKh6zcAKRolLGQHQHryl4YUiQcZNBYagOb2 FAj60Cd7VSvzmL2EcwRSWOSca0UwPvoiq9Q3H2luXzczW2+xXQeow2rVfYdImjhr lobht0oEs3j4t9jBWZ3wAxoJ820/tqJURgzvsnbT0fhhdaUfUlfn5Tik1C8Ozcuj yLfPMNHxzK1bZ6clA2wfwcKEkuTRw8V27+H6O/i/aIji7OXbGnYqlAD7zLIt9OhA SxCYD2EcKllLXioEdY4rMzBNTiDiSK71CaX+QMv2652lxaLVP0ElmLl5x7nLAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUHC+CtwzIqtjgu2qgt7tYHywX3LQwHwYDVR0j BBgwFoAUZXjnlmIABJbrFUDYvY+mXtjWOmIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJkMzA2YjQtZTVjMy00OGY5LWIyZWUtMzZhOWJkZGVk OGM0LzgvNjU3OEU3OTY2MjAwMDQ5NkVCMTU0MEQ4QkQ4RkE2NUVEOEQ2M0E2Mi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNjU3OEU3OTY2MjAwMDQ5NkVCMTU0MEQ4QkQ4RkE2NUVEOEQ2 M0E2Mi5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYmQzMDZiNC1l NWMzLTQ4ZjktYjJlZS0zNmE5YmRkZWQ4YzQvOC82NTc4RTc5NjYyMDAwNDk2RUIx NTQwRDhCRDhGQTY1RUQ4RDYzQTYyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdIxYG1is9dQecTU6xLNB drc/rPf1VJ5xpn9kNNdzsWh/wQweFJa1Tf1UmKzkCGNecqFhvP0FQtsNxr9dDPIg IltiUadOfZbWNlVWoOi/LrZmyfL+zL4Cin2ujMPHexqIxW23M4NT1rqX50n4uqb9 BMFO4COQF+GdaHyIBUf+dZVoaiAGZWOKUlQpl4Y1D5pVwm4padNc6QocPJXzStWN ey8fG3L33I52scEqO+v/FBTXLmzWfJRs/SegCHy68iC2J8Yd/OAzM6iUunIbi3Za TVsUh1UTzJXmQbI9fJGqA3gWIBiArfu6q0MYAuMSmICf/nRfhfSmMFZo5I2Z1wcj Rg== -----END CERTIFICATE-----Generated at Wed Dec 31 06:45:11 2025 by rpki-client