This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft File: B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft (raw, json) Hash identifier: DhQ4QUCdpLYJzKcEoT7MfbYENbagtLdM8loZ8R3osFA= Subject key identifier: FE:31:87:96:E8:EC:9E:72:D7:78:0D:77:CA:C7:74:14:97:52:A1:B5 Authority key identifier: B5:F5:EC:5C:56:7F:D4:89:BE:73:90:28:62:EB:EE:81:CC:DE:E3:5C Certificate issuer: /CN=B5F5EC5C567FD489BE73902862EBEE81CCDEE35C Certificate serial: 345E4E685C9A2FFF2E28048EA66FF290DDB8422B Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft Manifest number: B6 Signing time: Sun 21 Dec 2025 00:15:41 +0000 Manifest this update: Sun 21 Dec 2025 00:10:41 +0000 Manifest next update: Mon 22 Dec 2025 00:40:41 +0000 Files and hashes: 1: 326130623a396534373a666666663a3a2f34382d3438203d3e20323132333936.roa (hash: 75MQYcrJ2fBMIggMxPD0oPJNZ5TBWMJfZ5gCQQu+izk=) 2: B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.crl (hash: 7pHhnDq07uLveAMu3ivFipIFtqr1M+BKzKuYdEic1fA=) 3: 326130623a396534303a3a2f33322d3332203d3e20323134343531.roa (hash: GwXhJxTPfppTl2To2mF3GpvFgaV+3IGFSczXonJ1+q0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.crl rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:5e:4e:68:5c:9a:2f:ff:2e:28:04:8e:a6:6f:f2:90:dd:b8:42:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5F5EC5C567FD489BE73902862EBEE81CCDEE35C Validity Not Before: Dec 21 00:10:41 2025 GMT Not After : Dec 22 00:40:41 2025 GMT Subject: CN=FE318796E8EC9E72D7780D77CAC774149752A1B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1f:30:d7:fd:84:c5:97:f5:82:fc:42:2d:aa: 6e:7c:b5:c9:fa:f7:a3:aa:a2:5e:f0:2d:c7:5a:1a: 70:c7:d4:09:75:f5:8a:48:54:45:7a:3b:db:f5:b1: 6f:c0:32:03:e2:92:e9:b4:da:6d:2c:7c:af:f2:e2: 4a:63:0f:14:c5:8a:3c:ac:1b:c6:62:29:05:13:cf: 07:f6:21:d5:bf:6a:bc:d4:0c:05:f7:7b:9f:22:8e: cd:c6:e5:88:a5:e6:1b:bc:5d:28:a8:db:2d:f3:71: fc:d1:00:a6:18:91:4e:72:d0:89:e8:8a:41:1d:6e: 13:42:70:9b:48:eb:0f:d4:a8:49:0e:57:78:f1:b2: b9:4f:42:c9:d6:ea:f3:b9:57:a1:7a:ee:04:ad:40: 7b:86:ac:92:2b:a0:0a:5a:ae:0f:72:c8:5a:96:d2: a3:b1:b3:56:68:79:f6:c6:19:86:f7:87:a4:9d:d9: 7c:25:41:eb:59:cb:a2:c8:bd:29:ea:02:5b:2b:5d: 00:33:d3:d8:23:ff:c7:92:ba:db:4a:a9:82:a9:1c: e7:98:85:fd:b8:41:aa:d6:c0:76:6e:fc:3a:4f:ea: 2a:7f:d4:b8:89:25:db:f1:94:47:34:4a:be:21:7f: 98:b4:a7:42:fc:04:0c:63:a5:34:3e:cb:e5:26:7e: 04:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:31:87:96:E8:EC:9E:72:D7:78:0D:77:CA:C7:74:14:97:52:A1:B5 X509v3 Authority Key Identifier: keyid:B5:F5:EC:5C:56:7F:D4:89:BE:73:90:28:62:EB:EE:81:CC:DE:E3:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:0e:7c:fd:7b:9c:66:da:f0:63:86:e6:2b:d0:23:54:ce:cb: 60:e0:e0:fa:c7:f2:af:f8:7b:e3:cb:0e:23:b5:3d:ce:65:fb: 2c:a2:06:ce:70:05:82:77:31:5a:e1:08:f5:9e:66:60:f9:74: 37:86:45:77:f3:48:4c:0a:b9:bd:d6:3d:7a:f1:36:b9:65:4b: c5:0c:12:d1:01:07:9a:85:a2:00:b6:fa:4a:94:62:3a:de:aa: 32:9d:12:6a:a9:6e:cd:79:34:19:f6:28:40:5c:e2:0e:a8:1f: a8:1a:1e:7b:05:87:26:55:34:31:0c:3b:5e:96:a5:e3:64:29: 5d:cb:29:32:4a:3f:2e:38:dd:d4:03:8a:a7:1f:65:d2:c5:42: 7b:dd:1d:15:e4:80:b1:eb:f0:2d:a4:5b:98:04:ea:46:12:d8: 60:70:5a:97:59:29:af:11:af:35:09:da:14:07:22:91:cb:66: 3d:27:10:05:81:4b:a9:ea:6d:f0:e0:6f:b0:1a:77:bc:2d:d3: b3:26:84:c5:c2:79:37:aa:ed:28:7b:6f:a4:72:73:56:f5:e1: cb:e7:c5:bb:31:37:b8:ca:a9:26:87:ad:6b:e0:bb:3b:1f:a9: 01:19:93:42:7e:38:00:06:12:a3:fc:ad:0c:d1:9f:2b:2d:43: a5:5c:db:07 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUNF5OaFyaL/8uKASOpm/ykN24QiswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVGNUVDNUM1NjdGRDQ4OUJFNzM5MDI4NjJFQkVFODFD Q0RFRTM1QzAeFw0yNTEyMjEwMDEwNDFaFw0yNTEyMjIwMDQwNDFaMDMxMTAvBgNV BAMTKEZFMzE4Nzk2RThFQzlFNzJENzc4MEQ3N0NBQzc3NDE0OTc1MkExQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoHzDX/YTFl/WC/EItqm58tcn6 96Oqol7wLcdaGnDH1Al19YpIVEV6O9v1sW/AMgPikum02m0sfK/y4kpjDxTFijys G8ZiKQUTzwf2IdW/arzUDAX3e58ijs3G5Yil5hu8XSio2y3zcfzRAKYYkU5y0Ino ikEdbhNCcJtI6w/UqEkOV3jxsrlPQsnW6vO5V6F67gStQHuGrJIroAparg9yyFqW 0qOxs1ZoefbGGYb3h6Sd2XwlQetZy6LIvSnqAlsrXQAz09gj/8eSuttKqYKpHOeY hf24QarWwHZu/DpP6ip/1LiJJdvxlEc0Sr4hf5i0p0L8BAxjpTQ+y+UmfgQ5AgMB AAGjggJ3MIICczAdBgNVHQ4EFgQU/jGHlujsnnLXeA13ysd0FJdSobUwHwYDVR0j BBgwFoAUtfXsXFZ/1Im+c5AoYuvugcze41wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjJjZjhiYTctY2IwMi00MThiLWJlMDQtNGQ5ZjNhMDdl OTUwLzUvQjVGNUVDNUM1NjdGRDQ4OUJFNzM5MDI4NjJFQkVFODFDQ0RFRTM1Qy5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvQjVGNUVDNUM1NjdGRDQ4OUJFNzM5MDI4NjJFQkVFODFDQ0RF RTM1Qy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yMmNmOGJhNy1j YjAyLTQxOGItYmUwNC00ZDlmM2EwN2U5NTAvNS9CNUY1RUM1QzU2N0ZENDg5QkU3 MzkwMjg2MkVCRUU4MUNDREVFMzVDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeQ58/XucZtrwY4bmK9Aj VM7LYODg+sfyr/h748sOI7U9zmX7LKIGznAFgncxWuEI9Z5mYPl0N4ZFd/NITAq5 vdY9evE2uWVLxQwS0QEHmoWiALb6SpRiOt6qMp0SaqluzXk0GfYoQFziDqgfqBoe ewWHJlU0MQw7Xpal42QpXcspMko/Ljjd1AOKpx9l0sVCe90dFeSAsevwLaRbmATq RhLYYHBal1kprxGvNQnaFAcikctmPScQBYFLqept8OBvsBp3vC3TsyaExcJ5N6rt KHtvpHJzVvXhy+fFuzE3uMqpJoeta+C7Ox+pARmTQn44AAYSo/ytDNGfKy1DpVzb Bw== -----END CERTIFICATE-----Generated at Sun Dec 21 05:37:36 2025 by rpki-client