This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft File: 0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft (raw, json) Hash identifier: h3x+C1jss4mfPWh4DlBi5Pa2oj1bEWMh3sm9O8Yl25Y= Subject key identifier: C5:26:DD:91:46:5A:1C:62:E2:85:57:A7:58:3A:51:8E:F2:FA:3F:D6 Authority key identifier: 0B:C6:D2:25:F0:CE:3E:60:77:12:A9:A9:8C:45:61:91:2F:34:32:B6 Certificate issuer: /CN=0BC6D225F0CE3E607712A9A98C4561912F3432B6 Certificate serial: 6FB0EB1CEDFE83601A9C1C1E95D1C2BEA8B42393 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft Manifest number: B3 Signing time: Sat 20 Dec 2025 23:34:27 +0000 Manifest this update: Sat 20 Dec 2025 23:29:27 +0000 Manifest next update: Mon 22 Dec 2025 02:16:27 +0000 Files and hashes: 1: 0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl (hash: EPg2ZW9L9sWxL5T/0tyUUWf552BZV3yTee0m07If5/s=) 2: 326130623a346530373a316330303a3a2f34382d3438203d3e20313531373034.roa (hash: GbSyn/a7s2Tct/cl+IXObaOaKJfLlKE/P5lfI5qam+k=) 3: 326130623a346530373a316330323a3a2f34382d3438203d3e20323133383632.roa (hash: /X68JagauxWyaFcSb3BbJbw5DWqXyP6Pe5X7avcQNQs=) 4: 326130623a346530373a316330313a3a2f34382d3438203d3e20313531373034.roa (hash: VQpA5o0Pq6sWKS236BEYQWIKLgBdNGi2BEIwMERcePY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:b0:eb:1c:ed:fe:83:60:1a:9c:1c:1e:95:d1:c2:be:a8:b4:23:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BC6D225F0CE3E607712A9A98C4561912F3432B6 Validity Not Before: Dec 20 23:29:27 2025 GMT Not After : Dec 22 02:16:27 2025 GMT Subject: CN=C526DD91465A1C62E28557A7583A518EF2FA3FD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b2:2e:cf:d4:29:c0:a6:29:46:59:cd:87:3f: 1a:20:ce:1f:a0:be:c4:5c:9b:d7:ae:01:9a:26:bf: ae:df:44:33:b5:e1:43:22:75:7e:4c:3d:09:7a:75: 0d:70:b6:e2:2a:8a:75:2e:75:ca:1a:f6:a8:d5:c2: 5c:27:8f:29:6e:42:14:5d:df:e0:ac:41:74:1b:e4: dd:87:37:e2:05:a0:4a:c6:d2:de:a2:c5:6d:48:5b: 38:09:eb:58:0c:a4:05:ff:3e:c7:91:b6:4d:e9:2f: 81:56:9d:94:61:a6:2d:80:1a:0c:41:a2:ef:93:be: c6:61:5f:68:36:01:f4:97:87:2f:58:4c:38:39:90: 86:c3:42:4f:b6:de:85:24:3e:0f:36:e7:b6:a7:ae: cf:23:7f:70:35:3f:e4:dd:c2:25:41:ec:13:29:b3: d3:ca:20:f6:fa:e0:0c:86:f0:55:51:02:e1:5b:f0: ab:03:44:65:03:68:cf:87:bf:0b:ed:88:68:54:98: b2:09:72:f1:92:cc:64:f6:89:94:76:74:72:68:31: 65:80:8a:3b:16:25:5b:44:a8:5f:20:09:21:2d:17: 50:f8:55:44:0f:ca:87:7f:50:35:a3:91:14:92:8b: c4:33:61:36:f5:01:7a:4e:61:7d:51:52:cb:63:90: 0e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:26:DD:91:46:5A:1C:62:E2:85:57:A7:58:3A:51:8E:F2:FA:3F:D6 X509v3 Authority Key Identifier: keyid:0B:C6:D2:25:F0:CE:3E:60:77:12:A9:A9:8C:45:61:91:2F:34:32:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:c4:c4:2a:41:e5:e4:fb:e7:70:0a:ed:3f:46:0f:83:fa:ae: f7:09:25:2e:71:ac:a1:0f:77:9e:ba:c4:7b:a7:d0:1c:05:08: 8d:2d:84:9d:34:bb:f8:8f:9c:28:83:c9:f1:7e:17:94:25:7d: 89:3a:cb:a5:f1:9c:5e:7c:ab:99:f7:a1:2d:39:3a:f4:68:74: ad:d0:1d:d2:bd:24:ce:cc:91:28:d1:3b:25:6d:60:9c:38:91: 1c:dc:3b:be:de:bc:a5:d2:a1:10:a3:b2:97:62:3a:cb:d8:0b: 07:87:e0:f0:eb:28:b3:6d:2e:cf:19:be:29:ff:0a:a8:7e:af: aa:81:0a:cc:fb:b5:81:f2:9c:aa:96:63:ea:6f:49:59:91:65: f0:23:1e:71:92:e4:a8:78:d9:b5:eb:d5:b4:d0:f0:4a:24:e7: 53:4a:5c:5d:60:70:16:1e:5e:17:5b:30:6f:b9:76:22:38:fb: e9:97:e2:f7:d5:de:1c:94:fb:9d:ec:95:9c:11:77:ad:df:ea: 52:8d:02:61:d4:42:73:53:bc:9f:58:af:b1:b3:c8:54:9c:82: 82:ad:e2:bf:09:4f:33:f3:e3:71:90:8b:02:8f:8a:24:ee:7d: e1:f4:cc:38:44:1d:59:f7:68:bd:39:2b:87:d7:72:1f:f9:80: b5:d3:87:16 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUb7DrHO3+g2AanBweldHCvqi0I5MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEy RjM0MzJCNjAeFw0yNTEyMjAyMzI5MjdaFw0yNTEyMjIwMjE2MjdaMDMxMTAvBgNV BAMTKEM1MjZERDkxNDY1QTFDNjJFMjg1NTdBNzU4M0E1MThFRjJGQTNGRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3si7P1CnApilGWc2HPxogzh+g vsRcm9euAZomv67fRDO14UMidX5MPQl6dQ1wtuIqinUudcoa9qjVwlwnjyluQhRd 3+CsQXQb5N2HN+IFoErG0t6ixW1IWzgJ61gMpAX/PseRtk3pL4FWnZRhpi2AGgxB ou+TvsZhX2g2AfSXhy9YTDg5kIbDQk+23oUkPg8257anrs8jf3A1P+TdwiVB7BMp s9PKIPb64AyG8FVRAuFb8KsDRGUDaM+HvwvtiGhUmLIJcvGSzGT2iZR2dHJoMWWA ijsWJVtEqF8gCSEtF1D4VUQPyod/UDWjkRSSi8QzYTb1AXpOYX1RUstjkA79AgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUxSbdkUZaHGLihVenWDpRjvL6P9YwHwYDVR0j BBgwFoAUC8bSJfDOPmB3EqmpjEVhkS80MrYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTMxZTk3MjAtMGI2Mi00M2E4LThlMWYtMjMwNjg0ZWFm OWFmLzMvMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEyRjM0MzJCNi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEyRjM0 MzJCNi5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS81MzFlOTcyMC0w YjYyLTQzYTgtOGUxZi0yMzA2ODRlYWY5YWYvMy8wQkM2RDIyNUYwQ0UzRTYwNzcx MkE5QTk4QzQ1NjE5MTJGMzQzMkI2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANsTEKkHl5PvncArtP0YP g/qu9wklLnGsoQ93nrrEe6fQHAUIjS2EnTS7+I+cKIPJ8X4XlCV9iTrLpfGcXnyr mfehLTk69Gh0rdAd0r0kzsyRKNE7JW1gnDiRHNw7vt68pdKhEKOyl2I6y9gLB4fg 8Osos20uzxm+Kf8KqH6vqoEKzPu1gfKcqpZj6m9JWZFl8CMecZLkqHjZtevVtNDw SiTnU0pcXWBwFh5eF1swb7l2Ijj76Zfi99XeHJT7neyVnBF3rd/qUo0CYdRCc1O8 n1ivsbPIVJyCgq3ivwlPM/PjcZCLAo+KJO594fTMOEQdWfdovTkrh9dyH/mAtdOH Fg== -----END CERTIFICATE-----Generated at Sun Dec 21 08:36:18 2025 by rpki-client