This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft
File: B3F1737E90F240D7ABB33C72F84D71482FE62679.mft (raw, json)
Hash identifier: S3MfEzlRhPNCwm/NuqdBLzyjs0H1rNBBh7FHNRZ6zYw=
Subject key identifier: 9C:D2:F2:91:DB:7B:1B:37:16:65:12:A8:30:1D:29:4E:47:5B:2E:2C
Authority key identifier: B3:F1:73:7E:90:F2:40:D7:AB:B3:3C:72:F8:4D:71:48:2F:E6:26:79
Certificate issuer: /CN=B3F1737E90F240D7ABB33C72F84D71482FE62679
Certificate serial: 24CCAB42DB7635D118B7C82BB8BBCA86B8FF6DDB
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/B3F1737E90F240D7ABB33C72F84D71482FE62679.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft
Manifest number: E8
Signing time: Sat 20 Dec 2025 21:47:59 +0000
Manifest this update: Sat 20 Dec 2025 21:42:59 +0000
Manifest next update: Sun 21 Dec 2025 22:53:59 +0000
Files and hashes: 1: 326130373a353463373a356631303a3a2f34382d3438203d3e20323135353737.roa (hash: 7mCuwzfIey+Hcqy/Vhuj4zUx9bQcgkzpUeh+UNvlKO4=)
2: 326130373a353463373a356666653a3a2f34382d3438203d3e20323135353737.roa (hash: FG+PaaelFQQTh0Pl3BlClI1RFrk+FdkeBozLHlfkasU=)
3: 326130373a353463373a356630303a3a2f34342d3434203d3e20323135353737.roa (hash: x50UL+Ve3n2XGikbTbQdFLaQIWslIjcJnasiyHq58lM=)
4: B3F1737E90F240D7ABB33C72F84D71482FE62679.crl (hash: cLDyEG2NHQkaiRlVyaKlxY2Cofq9pdMMg/NIp2poqTE=)
5: 326130373a353463373a353030303a3a2f33362d3336203d3e20323136343535.roa (hash: dERySCDhc3+rlKwMAYMhD9XvddhhgSjXbVZeRoj98gc=)
6: 326130373a353463373a353939393a3a2f34382d3438203d3e20323136343535.roa (hash: SvnI/kKkXn3yiVhNqVKN9Taah5WCLs8Rw+D4PBjSrbo=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.crl
rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft
rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/B3F1737E90F240D7ABB33C72F84D71482FE62679.cer
rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 16:06:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:cc:ab:42:db:76:35:d1:18:b7:c8:2b:b8:bb:ca:86:b8:ff:6d:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B3F1737E90F240D7ABB33C72F84D71482FE62679
Validity
Not Before: Dec 20 21:42:59 2025 GMT
Not After : Dec 21 22:53:59 2025 GMT
Subject: CN=9CD2F291DB7B1B37166512A8301D294E475B2E2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:72:65:6e:32:3e:0a:dd:58:67:a7:71:2f:c8:
b7:6e:ca:34:48:a3:6b:6c:59:1b:ed:79:3d:cb:35:
d5:46:9d:cb:07:06:63:a6:8c:57:42:06:55:28:33:
92:2d:4b:fc:29:4f:a9:a7:4c:12:34:a8:9a:3c:a1:
9a:a8:ff:79:67:3f:c2:e5:bf:6d:79:66:09:28:b4:
26:e0:62:d3:4a:ee:47:c9:00:c5:22:fd:05:ce:1f:
9f:2f:80:88:a4:83:ac:aa:dc:e2:7c:c0:d6:94:4e:
ae:d2:a4:84:2b:ca:6f:4d:6b:f8:f7:c1:57:1f:3a:
29:ae:61:3c:47:61:78:e5:0c:f3:00:b0:fd:1c:48:
62:cc:aa:56:96:1f:50:fe:b2:41:06:02:07:cc:5e:
fe:af:6e:5a:85:81:fe:c2:d5:31:c5:81:74:21:ef:
5d:3a:37:bf:a2:e9:b3:b0:63:eb:cd:ce:cf:8f:3d:
c3:d0:20:84:3e:b3:cb:80:f5:9c:97:15:6c:32:67:
6b:91:98:0c:14:e4:cd:40:c6:f1:e9:7b:4b:ce:fc:
bf:a6:90:36:77:55:24:bc:81:0c:42:23:50:88:81:
1e:ef:4f:43:58:70:25:2a:23:5e:57:a3:c1:b2:6d:
af:ee:71:59:78:fd:0b:9e:71:6d:7a:1f:a4:b7:fd:
00:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D2:F2:91:DB:7B:1B:37:16:65:12:A8:30:1D:29:4E:47:5B:2E:2C
X509v3 Authority Key Identifier:
keyid:B3:F1:73:7E:90:F2:40:D7:AB:B3:3C:72:F8:4D:71:48:2F:E6:26:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/B3F1737E90F240D7ABB33C72F84D71482FE62679.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:90:88:06:61:c7:25:93:8d:fa:08:68:f2:04:1b:4a:09:43:
9e:84:c6:63:db:57:24:7e:bb:bd:f7:b3:f0:c3:f7:6f:a1:82:
6a:63:4e:2b:ef:a3:24:0b:d5:f7:26:06:6d:5c:6f:e5:09:d5:
bc:63:02:75:01:b2:4f:12:31:7e:74:b8:47:fb:f5:ce:30:f5:
27:be:3e:b9:8f:fb:ba:3c:67:fe:b1:49:46:54:5e:de:af:4c:
d2:6d:28:8f:77:2e:4e:05:3d:ec:27:da:38:91:fd:7d:17:c7:
f7:b4:fc:3e:72:b6:6c:73:5e:6a:9a:18:fb:27:da:d4:a6:94:
51:66:17:ee:61:45:75:87:50:e0:80:ab:73:7d:ea:a3:7b:c4:
96:91:6a:d6:96:dc:b3:5d:35:57:65:57:15:5a:ee:89:00:4d:
11:fb:9f:e1:6b:bf:ca:52:57:10:2a:7b:40:c7:67:41:ed:0d:
c4:c7:7d:3d:ec:8a:2b:de:7a:a5:23:a0:4e:60:19:eb:9c:fc:
ab:4c:a8:bc:a6:6e:00:d4:fb:49:ac:9b:17:9f:5d:ec:e6:eb:
50:1e:10:1f:22:47:12:ea:ab:93:03:a4:67:a4:eb:c0:68:c9:
74:6f:1c:d6:0c:7b:c0:d3:12:c0:0f:1e:f7:58:ab:d6:f7:14:
b1:55:dc:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 05:20:14 2025 by rpki-client