This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.mft File: 735D93706CBF4688CE7D60FC0ED693D4CC4A9326.mft (raw, json) Hash identifier: mMlP4TWDubVvGhQ/kEohnheLS8SRCaA0wljXFN2w3ew= Subject key identifier: 47:BE:3C:0B:59:B7:70:46:BF:0A:C9:E8:50:D0:60:84:15:79:62:2F Authority key identifier: 73:5D:93:70:6C:BF:46:88:CE:7D:60:FC:0E:D6:93:D4:CC:4A:93:26 Certificate issuer: /CN=735d93706cbf4688ce7d60fc0ed693d4cc4a9326 Certificate serial: 710D9AFFD4F50E4AD98B8E1FBCBE4D48B9F5AA88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.mft Manifest number: 04B1 Signing time: Sat 20 Dec 2025 13:38:23 +0000 Manifest this update: Sat 20 Dec 2025 13:33:23 +0000 Manifest next update: Sun 21 Dec 2025 15:04:23 +0000 Files and hashes: 1: AS42689.roa (hash: OGi0fOBGeOOs5mHqzbV17lZisG6Hn/1OzlvinOYWVW8=) 2: 735D93706CBF4688CE7D60FC0ED693D4CC4A9326.crl (hash: kRvtxt4A7tswSCZiDs1TiSXDm4jKKmhmRBDPxyv1fEc=) 3: AS6079.roa (hash: cwt2kgma2qYi3LhLoT0eQ8hzydzk6ECH01Cp7+lYh5Q=) 4: AS48961.roa (hash: 3cIbAXwf9Yl1EVegsCq9QH9D9FfXgLy3FkzfZ43rjN4=) 5: AS7029.roa (hash: 8PLTntWjTUT/j3wb4jf3whlNbIemwNkkni4M1Q4/mDw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.crl rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.mft rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:0d:9a:ff:d4:f5:0e:4a:d9:8b:8e:1f:bc:be:4d:48:b9:f5:aa:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=735d93706cbf4688ce7d60fc0ed693d4cc4a9326 Validity Not Before: Dec 20 13:33:23 2025 GMT Not After : Dec 21 15:04:23 2025 GMT Subject: CN=47BE3C0B59B77046BF0AC9E850D060841579622F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fe:a6:f2:70:36:08:82:26:fd:c0:0a:12:ff: 4a:c3:89:ed:15:e0:ea:47:58:f5:71:d7:28:1f:86: da:25:7e:6b:39:24:4e:38:3d:00:64:e1:37:56:d8: 2e:fa:7a:3c:cb:1b:a6:bd:50:94:ff:c6:8b:e2:92: 9d:8a:41:aa:81:32:71:84:56:a4:a0:9b:00:84:be: f8:28:27:2a:ac:f8:2f:07:65:d6:5b:7e:70:95:c4: fd:e5:6b:32:80:57:47:dc:08:8a:68:c6:55:5d:3d: 20:5c:30:0b:97:f5:71:e1:7f:0c:0b:cc:b9:0e:d6: 2b:05:5d:82:88:46:5a:fe:ed:9a:27:f2:e9:fc:c5: 2a:c1:b2:8d:f2:38:a1:3f:ae:a3:fb:b7:5b:c0:d7: 49:58:e2:a2:b2:6a:1b:45:70:7a:b8:5b:75:4d:6e: 36:80:e3:67:78:fa:ad:6e:7c:74:6d:e3:65:e1:b8: fb:db:0b:69:58:28:d1:9b:1d:20:a1:72:11:55:37: 3e:47:8e:e4:31:94:2f:dc:68:18:d6:09:a3:57:9a: 05:5d:f0:72:e7:5b:1c:0e:c6:b5:72:fe:05:0a:2b: 5c:15:ea:47:b8:24:e7:37:24:57:61:32:dd:17:14: 0f:6a:d3:f4:e2:58:65:ff:72:9d:24:02:de:7f:db: c6:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:BE:3C:0B:59:B7:70:46:BF:0A:C9:E8:50:D0:60:84:15:79:62:2F X509v3 Authority Key Identifier: keyid:73:5D:93:70:6C:BF:46:88:CE:7D:60:FC:0E:D6:93:D4:CC:4A:93:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:a2:9e:ef:14:cc:59:52:fe:74:d2:ed:39:e5:69:e9:78:b5: 88:11:2e:c0:8c:f8:e6:f2:16:87:e3:03:46:8c:e8:9e:22:4a: 3c:9e:25:31:36:37:af:f5:bb:e6:9c:8a:2a:6d:c9:ac:92:17: 45:17:c6:4d:25:ee:19:e0:05:cf:6b:b8:19:8f:da:2a:39:35: 2f:04:32:b5:21:2f:92:17:b8:b0:62:2c:ae:25:27:9f:70:5a: a5:f1:fe:38:6e:84:27:b6:c8:32:69:7f:72:58:a9:29:16:63: 9f:c8:3e:32:56:cd:77:75:7c:82:14:c1:38:0c:02:de:18:db: 67:e3:c4:75:84:d3:11:e0:4d:b2:d3:b6:f1:7e:cb:91:b9:82: 3f:4b:56:25:08:15:53:84:a5:d4:e2:85:cc:23:2d:ef:3d:68: a0:10:07:0a:9e:ad:38:dc:20:51:26:24:6b:e0:d3:62:38:77: 00:16:93:bf:b8:6c:74:88:b2:d7:1b:4c:69:5c:85:d0:aa:ba: 50:42:20:0c:f6:56:9e:30:bf:c5:2f:91:96:6c:ca:0f:cc:fe: d3:68:88:30:5e:d1:44:e2:5b:32:38:1b:18:0a:08:57:fb:eb: d3:d4:22:1b:fb:40:d3:80:8a:78:7d:5c:d5:c4:44:dc:cc:63: 1d:35:c7:24 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUcQ2a/9T1DkrZi44fvL5NSLn1qogwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzM1ZDkzNzA2Y2JmNDY4OGNlN2Q2MGZjMGVkNjkzZDRj YzRhOTMyNjAeFw0yNTEyMjAxMzMzMjNaFw0yNTEyMjExNTA0MjNaMDMxMTAvBgNV BAMTKDQ3QkUzQzBCNTlCNzcwNDZCRjBBQzlFODUwRDA2MDg0MTU3OTYyMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1/qbycDYIgib9wAoS/0rDie0V 4OpHWPVx1ygfhtolfms5JE44PQBk4TdW2C76ejzLG6a9UJT/xovikp2KQaqBMnGE VqSgmwCEvvgoJyqs+C8HZdZbfnCVxP3lazKAV0fcCIpoxlVdPSBcMAuX9XHhfwwL zLkO1isFXYKIRlr+7Zon8un8xSrBso3yOKE/rqP7t1vA10lY4qKyahtFcHq4W3VN bjaA42d4+q1ufHRt42XhuPvbC2lYKNGbHSChchFVNz5HjuQxlC/caBjWCaNXmgVd 8HLnWxwOxrVy/gUKK1wV6ke4JOc3JFdhMt0XFA9q0/TiWGX/cp0kAt5/28YzAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUR748C1m3cEa/CsnoUNBghBV5Yi8wHwYDVR0j BBgwFoAUc12TcGy/RojOfWD8DtaT1MxKkyYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmU2ZGE1YzctNjcwYS00MWIxLTk2ZWItMzg5OTM4OGIy OTJjLzAvNzM1RDkzNzA2Q0JGNDY4OENFN0Q2MEZDMEVENjkzRDRDQzRBOTMyNi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MxMlRjR3lfUm9qT2ZXRDhEdGFUMU14 S2t5WS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yZTZkYTVjNy02 NzBhLTQxYjEtOTZlYi0zODk5Mzg4YjI5MmMvMC83MzVEOTM3MDZDQkY0Njg4Q0U3 RDYwRkMwRUQ2OTNENENDNEE5MzI2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlqKe7xTMWVL+dNLtOeVp 6Xi1iBEuwIz45vIWh+MDRozoniJKPJ4lMTY3r/W75pyKKm3JrJIXRRfGTSXuGeAF z2u4GY/aKjk1LwQytSEvkhe4sGIsriUnn3BapfH+OG6EJ7bIMml/clipKRZjn8g+ MlbNd3V8ghTBOAwC3hjbZ+PEdYTTEeBNstO28X7LkbmCP0tWJQgVU4Sl1OKFzCMt 7z1ooBAHCp6tONwgUSYka+DTYjh3ABaTv7hsdIiy1xtMaVyF0Kq6UEIgDPZWnjC/ xS+RlmzKD8z+02iIMF7RROJbMjgbGAoIV/vr09QiG/tA04CKeH1c1cRE3MxjHTXH JA== -----END CERTIFICATE-----Generated at Sun Dec 21 01:31:54 2025 by rpki-client