This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
File: 3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft (raw, json)
Hash identifier: TMB3GV9q2aWx5mk2rr46TKG115lyyaLH6dMNX3NlMiM=
Subject key identifier: 5D:35:88:B7:B2:2F:4A:D2:69:94:AB:63:36:BE:F6:ED:27:D8:80:63
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial: 2A682CC62CE3DD89E1F8B490531931157432EF98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
Manifest number: 0168
Signing time: Fri 19 Dec 2025 11:17:06 +0000
Manifest this update: Fri 19 Dec 2025 11:12:06 +0000
Manifest next update: Sat 20 Dec 2025 13:06:06 +0000
Files and hashes: 1: AS395793.roa (hash: V5JEB7lz8FwA4enu53vGQgB/6Qx37KJCclmB6l2ZUq0=)
2: AS197537.roa (hash: JP3hx/IAvQ4SgOvsKr86baQJpbUUMchlqabqd0xftz0=)
3: AS27463.roa (hash: Qa9G1fyPkPtivskG7RmcNp+V3FFUx0ZZAO5NHVFED+0=)
4: AS63199.roa (hash: 12M/4rDEnNlu6NpcT1coUXqoQ04lDw3cZPaAu5+YbWM=)
5: AS42831.roa (hash: uuKI3/yP2w4woZt9biKewlb0tCO9hThIqZOmRiy7DQo=)
6: AS202736.roa (hash: mvaFQ8VzOiSlC6osU1pagjFGEUjuXEDkXWP0QHArhMs=)
7: AS5650.roa (hash: Js0jrGQQyIbg26/8AZigTW/NGuPFZW8fhpgPYAsdnV8=)
8: AS8820.roa (hash: 37NLowiuT9jy/dagftAxkW62Xv5potfYYsy61mpYIOM=)
9: AS214025.roa (hash: QQrQzSCf1RokpR1jZpI0uXRdVOPLg7PuMKRznUH/3LY=)
10: AS61244.roa (hash: rBybT6KNUveYSpFmW0LV7SLnrcp5d5Ac6NXXIFW7N3g=)
11: AS48266.roa (hash: wN58VW25Z+LecojZP+oOAtM/5chfYovrCCO/Cl8gTkE=)
12: AS203446.roa (hash: oqoiqzh1+ViDUf4HKID2vR8MgIa8o5lwgPwsNCMr93E=)
13: AS57043.roa (hash: 5kt0gUPpPlXUEkEZgXCUZ1bMA7kcongFeMkYDKoEOqw=)
14: AS207821.roa (hash: duP/7c0JhJ943FShftflbTsUFfvdFJVpDpIIC2INpqY=)
15: AS212238.roa (hash: 0IyslS3CG8KwMKdb6hG7WmS6/jX6BN24to036ny5Oec=)
16: AS13347.roa (hash: Vcr6EeUXObLLwMTr/P281IyX4fwZYhwUt1AVEFcBuD4=)
17: AS401776.roa (hash: ebLx46/uD/rPd1H9fx2yLVz5RrxFIjvh29qH51zn5WU=)
18: AS210732.roa (hash: EmDXi9UctgaSCDq82zNTOg8zLFou2/aExhjh0/O5J3U=)
19: AS984.roa (hash: 9ATj70EvyOEJUloVaxSnzdXUrBuU3YdN7scbt4sKaSg=)
20: AS24940.roa (hash: 9llPOqU1kkKR3lcv6by46UJ3h/kj9YxcNOMcBr6oIUw=)
21: 3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl (hash: 98Y9o0LL0DWt3+mrGdfvSW1vkJUF0JRc8fN3+b63cU0=)
22: AS3320.roa (hash: J0gCdn8aWPQr54/0F/uediEv8Z8fjukYJoHGgqTaPFs=)
23: AS25198.roa (hash: FqGiyIX/w2q23xvxQalz6f4NFkQfGG5TLHZxxG09oeg=)
24: AS32132.roa (hash: AnbuErehQXFxV+kWQt2eul6q993RKYVkoz7/H8Ifyq0=)
25: AS20326.roa (hash: bjlCs1cn8SZvrAA+XVOeFzTEEDwkFKKTeVLvOLa+FN0=)
26: AS399073.roa (hash: 9W+8Rej68EJTWmEEI49+dSUZhcc+C37ptbroUQavDdM=)
27: AS47690.roa (hash: ooqiQO4HpfGl3m9/7LtHIwFb/PWFu0EXUeXrqpQ+FtA=)
28: AS137409.roa (hash: Y9UvfHoHT/x96pt+KFD1GFP/gX4ktFwFm+kigGEhsmM=)
29: AS16276.roa (hash: KW9MPVc+GYoziUSGxGJkc9sN3s6o49VGu2rqobWKOO8=)
30: AS208545.roa (hash: QaFp0CtwymMb26LzXqGktL2J3jbDSYF8yfVJZ7bGYbw=)
31: AS9009.roa (hash: 3Xt+kLkYr0AOLYU71hxVNM0goE/MIxNJEsmOva08MWQ=)
32: AS205886.roa (hash: sTiEMkgGikZqMsIZQnshE+5D76nt7ESMGpjidVFtNRc=)
33: AS206781.roa (hash: u5AtvuN8DZoybC5jmpdLGiJIsJAgQ1te19Ty/6LaNP8=)
34: AS214483.roa (hash: 6RqqmAQfiH5vxDsevnysTOwpoPe3+DXp3DMdAvOkobQ=)
35: AS215607.roa (hash: zz/4pZ29ma+j9IGHrOCXiUO6WajVwOT0F+zsKOMnWJ0=)
36: AS7029.roa (hash: EQdsNpFUDlB6ynhRTbcYQBl7UF6yGjIXmjLtDYAN+1w=)
37: AS214271.roa (hash: Ryxr7X7Ltqo6eG8diqWyYYKBcmlEtpuVl7WOq2jpWd4=)
38: AS834.roa (hash: LHgqYdZH32fgBrUpuF6Ip+ppTGXXgd4A7vaShWcRjwM=)
39: AS174.roa (hash: gSp0Qhfbko2L/Uwwa69PRUe0heBn9jeFBc7NNsYK+IQ=)
40: AS152179.roa (hash: CLoHb65khJ/xkZgyKfE4QHe9gx+LzXYYD8aDDeekOmU=)
41: AS5065.roa (hash: JGE9pcBF2Jpsr5+PtvnbT/gcrMiv31piwJgRI0akVTQ=)
42: AS60123.roa (hash: QtgZXfsHBEnogO7UuZmZIr/ZqG9Z8/NgNBqi4sK9HBo=)
43: AS13335.roa (hash: d1T4k2GKdCN6l2wTM8AzWL9EUnZokcmdFZNLtewAX9k=)
44: AS60128.roa (hash: LYwh4MoU7+i8XzsRvFs92IcyFCoJKzZY9vGXelEbElA=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Dec 2025 13:06:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:68:2c:c6:2c:e3:dd:89:e1:f8:b4:90:53:19:31:15:74:32:ef:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Validity
Not Before: Dec 19 11:12:06 2025 GMT
Not After : Dec 20 13:06:06 2025 GMT
Subject: CN=5D3588B7B22F4AD26994AB6336BEF6ED27D88063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:6f:3f:19:5e:9a:89:40:a6:83:6d:bd:87:d7:
79:e0:8d:c4:b1:98:b0:3e:22:3a:07:da:2b:f7:5c:
6c:84:45:23:28:7e:05:dc:67:c7:32:38:87:ee:67:
66:be:da:fc:e2:26:9e:79:24:e5:e1:22:ab:06:ac:
ec:df:5d:2f:2a:24:16:cf:71:63:f8:2b:a0:a5:43:
ae:b6:67:c7:23:74:9c:27:bd:89:11:58:1d:1e:ac:
72:27:ea:4f:bf:91:ed:78:02:1c:0b:12:e3:d1:f9:
18:ec:1f:47:1d:73:8c:b9:5b:df:3c:cf:61:b9:1d:
e7:d1:9c:20:43:2a:d9:74:9a:d6:74:1f:34:34:dc:
dc:1b:f1:5c:13:c1:e3:3d:3a:c4:ea:f6:02:a9:63:
4a:3e:56:07:2c:3a:69:52:d5:21:08:06:db:f3:eb:
8b:49:3b:e1:ab:97:55:f1:af:f8:27:7e:56:5b:cc:
38:79:de:9d:19:20:cc:4f:19:0e:d9:fe:bb:22:94:
97:4d:1f:cf:38:2e:14:4f:3a:48:61:75:5e:3c:fa:
b5:93:13:7b:3f:e9:72:63:d0:53:15:fd:bc:43:33:
af:a6:55:73:43:d2:0f:d4:ee:83:85:88:bc:35:db:
a7:e5:a9:7e:4c:d2:2f:c4:ea:72:3a:5e:3b:fc:d7:
2d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:35:88:B7:B2:2F:4A:D2:69:94:AB:63:36:BE:F6:ED:27:D8:80:63
X509v3 Authority Key Identifier:
keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:4e:fa:73:e1:55:52:94:10:fa:f0:4a:ac:57:2d:8c:60:6b:
2f:43:5f:df:40:f3:87:0e:d3:31:4c:37:c6:5a:bf:e4:e8:18:
9c:f6:ab:51:90:e3:90:84:25:93:a3:89:26:05:9d:88:f8:10:
58:ec:47:8f:5f:07:ac:e7:f0:25:2a:1d:f7:44:bd:15:6a:9a:
dc:99:d4:e1:0c:1e:5d:7a:00:d0:cb:83:17:ec:c3:59:c4:51:
a0:40:0e:57:56:c3:1f:5d:1d:72:f4:33:e7:dc:ef:fc:f7:d0:
31:a7:07:ed:37:b2:1d:2a:87:d5:d0:92:1c:d9:5d:e8:58:08:
d7:e3:63:63:9d:bd:f2:31:bf:44:fc:c3:09:81:29:f7:59:50:
34:e2:58:c5:04:7c:39:79:22:f3:79:46:61:74:fe:4a:22:bf:
49:1f:c8:02:df:02:6a:e4:fe:22:9b:8e:25:27:1a:01:73:5b:
9c:8e:19:9e:e3:3a:b5:96:53:e7:1d:12:ca:b5:6d:1e:b7:ad:
07:89:90:b3:43:6f:97:ed:c1:bf:0c:eb:40:34:49:3b:60:40:
d9:a8:6d:d7:1a:dc:c2:21:f6:24:fa:96:1b:bc:3b:b3:dc:a6:
af:cd:30:c7:07:07:93:17:f7:3b:ef:c6:da:92:cc:fa:b9:25:
02:29:4b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 02:40:04 2025 by rpki-client