This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft File: 06DB699D191D4B0289910C88E99CF94A671142F5.mft (raw, json) Hash identifier: QYLIgJxZNWWK+HmRN9s9X8enGAu6F+XcnejDaMzUZGI= Subject key identifier: 03:4F:B0:29:75:F1:4E:2C:8F:2B:15:86:E5:99:27:BA:53:09:17:7C Authority key identifier: 06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5 Certificate issuer: /CN=06DB699D191D4B0289910C88E99CF94A671142F5 Certificate serial: 1AD468E81E1B041B9A723EE0188E2A62093DAAB6 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft Manifest number: EC Signing time: Sat 20 Dec 2025 14:24:35 +0000 Manifest this update: Sat 20 Dec 2025 14:19:35 +0000 Manifest next update: Sun 21 Dec 2025 15:39:35 +0000 Files and hashes: 1: 326130363a396634313a3a2f33322d3332203d3e20323135303835.roa (hash: oQiFmCDOiC8wMUPyhseeYgHp6yjZLGbjApAcNJ0LBoc=) 2: 06DB699D191D4B0289910C88E99CF94A671142F5.crl (hash: K6gZ7adiwqSua+qbJYUghm45l/LCzzdbV+o7k7no8ks=) 3: 38332e3134322e33312e302f32342d3234203d3e20323135303835.roa (hash: K8xHXu8PBNylpSXaMswB01W3KM9JQNKdf8F+yOiMZUQ=) 4: 326130363a396634313a313030303a3a2f34342d3438203d3e20323035383338.roa (hash: AZY42IY279tP8q55kCb+OP1wLi+9ejrODI15M2jhRhg=) 5: 326130363a396634313a613930303a3a2f34382d3438203d3e20323037363832.roa (hash: UqjWSUv2XiZdDsdQ0uOndREGc/szQ2JnxQlbZ2ADckI=) 6: 326130363a396634313a363936393a3a2f34382d3438203d3e20323132323432.roa (hash: oZMKPe8zIqKXDWE+ceP6ZovC366mkj//dk5ag6RqSYo=) 7: 5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer (hash: vr0IDnvMrQlAIKTPbmc9XgADtBREMeozkPpGVjOFGr4=) 8: 326130363a396634313a613930313a3a2f34382d3438203d3e20323035383338.roa (hash: TZFInP0XSpkR7gzjfw2R3ov4SaV+J0Kzbqc0lAbOzbM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:39:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:d4:68:e8:1e:1b:04:1b:9a:72:3e:e0:18:8e:2a:62:09:3d:aa:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06DB699D191D4B0289910C88E99CF94A671142F5 Validity Not Before: Dec 20 14:19:35 2025 GMT Not After : Dec 21 15:39:35 2025 GMT Subject: CN=034FB02975F14E2C8F2B1586E59927BA5309177C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:51:6d:cc:a6:db:df:f8:fd:d5:1f:83:63:17: 45:5a:8e:7c:2e:09:bd:83:59:f2:ff:db:7d:fd:58: 90:35:fe:b9:c5:7e:54:77:8b:ef:9d:85:28:70:f6: 5b:ce:b9:dd:e6:c2:e4:79:6f:c4:a2:2b:24:de:73: 16:97:72:05:20:30:ad:7f:7e:79:ca:fe:82:16:6d: 6e:34:69:2f:00:a5:9a:fd:7c:34:33:07:17:f6:45: 3a:29:c4:21:3a:12:02:b3:bf:2a:6d:4c:3b:29:f3: 00:cb:fe:b5:76:0c:2f:fd:4a:3a:6d:46:fe:bd:f4: e1:0d:c9:99:07:3f:c2:6d:76:03:3b:97:0a:6a:2d: 97:80:0c:d8:0c:43:16:aa:5c:8c:91:d2:dd:d7:02: 2b:cf:d1:94:19:41:4c:d9:ed:cd:e0:16:3a:e7:91: 80:a0:78:4d:fd:82:17:54:7e:d3:1c:48:eb:5d:c3: 7f:db:66:c3:9e:97:6e:50:6c:c4:52:4e:c3:c8:55: f0:8c:cb:55:32:5d:47:15:d0:d4:84:51:35:6e:8d: a7:d5:ec:a3:c1:e3:0b:02:4d:5f:62:6c:4e:54:5a: b4:cd:42:d1:e3:7f:35:e5:8e:59:1f:40:eb:36:dd: bc:67:f5:31:16:9e:83:e4:fd:54:fb:7a:34:d4:de: b9:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:4F:B0:29:75:F1:4E:2C:8F:2B:15:86:E5:99:27:BA:53:09:17:7C X509v3 Authority Key Identifier: keyid:06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:cf:32:25:39:7c:01:0a:6e:bf:38:df:4a:da:24:3a:fd:f0: b6:77:e6:c1:e4:c2:b8:7a:f5:6e:99:e6:25:6a:f2:87:d7:a3: 50:89:d5:f1:9b:33:1c:9e:83:28:00:cb:a8:1b:e6:4b:c6:6b: a1:dd:d8:c0:67:e0:2e:db:69:d8:c9:ad:9c:50:b2:11:a1:dd: 64:e0:17:1c:16:ea:66:9c:24:c9:05:54:03:92:95:f8:70:57: a8:f2:3d:b5:68:fb:c1:a5:4b:63:d2:84:c3:b6:ee:c3:e6:5f: 67:3e:1a:35:7e:fa:fc:6a:0f:62:3d:3d:07:8e:5e:67:2a:2e: a4:67:bd:13:f9:bd:a2:5d:79:1c:ef:2e:3a:c0:a2:3a:aa:98: cd:cc:46:20:7f:51:a3:fe:6e:44:54:12:7a:93:a4:7b:1e:d9: 8b:27:f1:d7:01:cc:b1:d3:51:91:ce:65:7f:73:ea:98:d6:85: 5d:f7:32:56:31:bb:5e:ef:48:87:dc:9f:5a:7d:9f:63:38:bb: 07:24:18:7b:1f:4f:38:7a:a4:c5:81:8b:01:b2:75:11:23:54: c5:a1:dd:b3:19:d7:92:d1:1a:25:ef:68:40:ba:a7:1b:4a:2a: 2e:c0:df:e5:a5:f5:69:c1:78:9b:08:e2:71:c7:85:62:30:8a: 9d:cb:41:a1 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUGtRo6B4bBBuacj7gGI4qYgk9qrYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDZEQjY5OUQxOTFENEIwMjg5OTEwQzg4RTk5Q0Y5NEE2 NzExNDJGNTAeFw0yNTEyMjAxNDE5MzVaFw0yNTEyMjExNTM5MzVaMDMxMTAvBgNV BAMTKDAzNEZCMDI5NzVGMTRFMkM4RjJCMTU4NkU1OTkyN0JBNTMwOTE3N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaUW3Mptvf+P3VH4NjF0Vajnwu Cb2DWfL/2339WJA1/rnFflR3i++dhShw9lvOud3mwuR5b8SiKyTecxaXcgUgMK1/ fnnK/oIWbW40aS8ApZr9fDQzBxf2RTopxCE6EgKzvyptTDsp8wDL/rV2DC/9Sjpt Rv699OENyZkHP8JtdgM7lwpqLZeADNgMQxaqXIyR0t3XAivP0ZQZQUzZ7c3gFjrn kYCgeE39ghdUftMcSOtdw3/bZsOel25QbMRSTsPIVfCMy1UyXUcV0NSEUTVujafV 7KPB4wsCTV9ibE5UWrTNQtHjfzXljlkfQOs23bxn9TEWnoPk/VT7ejTU3rlxAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUA0+wKXXxTiyPKxWG5ZknulMJF3wwHwYDVR0j BBgwFoAUBttpnRkdSwKJkQyI6Zz5SmcRQvUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzAxMTk0NGQtN2ViMy00ZjYzLWExNTktY2ZmMDJjMDI2 YWJmLzIvMDZEQjY5OUQxOTFENEIwMjg5OTEwQzg4RTk5Q0Y5NEE2NzExNDJGNS5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvMDZEQjY5OUQxOTFENEIwMjg5OTEwQzg4RTk5Q0Y5NEE2NzEx NDJGNS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMDExOTQ0ZC03 ZWIzLTRmNjMtYTE1OS1jZmYwMmMwMjZhYmYvMi8wNkRCNjk5RDE5MUQ0QjAyODk5 MTBDODhFOTlDRjk0QTY3MTE0MkY1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABs8yJTl8AQpuvzjfStok Ov3wtnfmweTCuHr1bpnmJWryh9ejUInV8ZszHJ6DKADLqBvmS8Zrod3YwGfgLttp 2MmtnFCyEaHdZOAXHBbqZpwkyQVUA5KV+HBXqPI9tWj7waVLY9KEw7buw+ZfZz4a NX76/GoPYj09B45eZyoupGe9E/m9ol15HO8uOsCiOqqYzcxGIH9Ro/5uRFQSepOk ex7Ziyfx1wHMsdNRkc5lf3PqmNaFXfcyVjG7Xu9Ih9yfWn2fYzi7ByQYex9POHqk xYGLAbJ1ESNUxaHdsxnXktEaJe9oQLqnG0oqLsDf5aX1acF4mwjicceFYjCKnctB oQ== -----END CERTIFICATE-----Generated at Sun Dec 21 05:50:35 2025 by rpki-client