This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft
File: 6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft (raw, json)
Hash identifier: svJN1d3VqBj2eXH5V7vu49Q7Gz91RVMRLdjBo/w5wvs=
Subject key identifier: 89:42:3D:7B:5C:AB:F3:3A:44:EC:AC:8C:61:DD:50:41:BF:92:3C:82
Authority key identifier: 6A:6F:6E:C2:72:A5:EB:DC:18:24:1C:2C:84:D1:D9:FE:94:C1:25:AA
Certificate issuer: /CN=43729997152fd84fcda6d190c3b3195b02679660112be9a2d7
Certificate serial: 7A37B6974805F49632E573E7355FC875A7C75B01
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft
Manifest number: 044B
Signing time: Sat 20 Dec 2025 04:51:49 +0000
Manifest this update: Sat 20 Dec 2025 04:46:49 +0000
Manifest next update: Sun 21 Dec 2025 06:11:49 +0000
Files and hashes: 1: 6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl (hash: b5rBwwdHLDo5iTp5uVcHzJprisPZy7ffIVK1STLYxC8=)
2: EEF3EC40152A747D52835AE8973E7DC8C193A840.cer (hash: b9uDQIv17Mqj0faPNTNtrEIHppsSxn28riugd1hAwe4=)
3: 3139382e3133352e3136392e302f32342d3234203d3e20333936393933.roa (hash: ZuqL+fdFsSzEWPLF+KldkjLdFZi3woWq3fujFGdDY0Y=)
4: 323630323a666136653a3a2f33362d3336203d3e203133363436.roa (hash: VGLKsgogi2I3ngbX4zz98KwF+ce4xUWbXael6VtJ/R8=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl
rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/829fb872-15bb-4a4e-9ed9-259960b049bd.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/829fb872-15bb-4a4e-9ed9-259960b049bd.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 21 Dec 2025 06:11:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:37:b6:97:48:05:f4:96:32:e5:73:e7:35:5f:c8:75:a7:c7:5b:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43729997152fd84fcda6d190c3b3195b02679660112be9a2d7
Validity
Not Before: Dec 20 04:46:49 2025 GMT
Not After : Dec 21 06:11:49 2025 GMT
Subject: CN=89423D7B5CABF33A44ECAC8C61DD5041BF923C82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:77:32:a4:7c:3e:5d:16:d9:80:d9:ec:fb:98:
0e:f8:34:fb:14:dc:60:36:a2:e8:c4:fc:76:9e:ec:
a0:b8:bb:1b:66:96:6e:0c:12:6d:0a:7b:9a:99:3b:
59:ba:41:d5:12:b1:69:02:a9:e0:57:83:d1:67:6b:
b7:60:ea:bb:bc:27:e2:35:ed:e3:e5:92:34:70:a4:
44:d9:e0:86:02:c1:de:1e:2f:c9:54:23:62:00:bf:
d9:86:cf:73:4a:59:7d:76:35:0e:8b:a9:8b:d6:8a:
9a:13:21:42:a1:9d:bd:aa:a1:28:f6:58:1f:27:44:
a4:8c:c5:27:98:b0:65:38:a7:a6:c4:b7:70:19:e3:
a2:14:d6:69:b7:6c:81:dc:2a:84:8d:8f:2e:5b:d2:
8f:e9:6a:b5:ea:cb:ed:b9:e0:84:6e:8d:6b:2d:63:
fd:e9:c1:e7:24:88:ff:5d:96:e1:1b:7d:8c:b9:6e:
2f:26:34:ac:92:3b:17:92:6e:c6:08:78:64:2c:55:
50:44:93:c4:03:e7:b3:19:7f:5a:be:01:c6:aa:2d:
ce:8e:c7:c4:1c:97:c7:62:67:00:01:27:fd:7c:45:
99:3a:3c:d7:58:26:82:f0:1e:f5:de:f0:7e:ad:c9:
9f:1d:fe:44:b7:5f:8d:c0:3b:fa:d7:bc:f8:b6:aa:
a1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:42:3D:7B:5C:AB:F3:3A:44:EC:AC:8C:61:DD:50:41:BF:92:3C:82
X509v3 Authority Key Identifier:
keyid:6A:6F:6E:C2:72:A5:EB:DC:18:24:1C:2C:84:D1:D9:FE:94:C1:25:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/829fb872-15bb-4a4e-9ed9-259960b049bd/43729997152fd84fcda6d190c3b3195b02679660112be9a2d7.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/7/6A6F6EC272A5EBDC18241C2C84D1D9FE94C125AA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:76:7f:37:df:8b:01:79:db:0f:92:57:6f:5a:40:59:fd:2d:
1b:6c:c7:2a:26:ae:49:10:4f:bc:66:ee:74:9e:ad:6f:d6:54:
b1:bb:b7:ad:d3:b3:9f:50:2c:60:c2:ad:d6:2c:aa:3d:3b:f0:
82:7f:d1:7a:e6:49:cd:cf:96:b3:a2:89:f1:77:ec:58:31:37:
4d:e2:3d:99:c0:a0:2e:f0:1a:5f:d4:1e:ed:3c:1a:b2:5a:0c:
25:e4:cf:a5:bd:82:29:ac:06:c3:ef:28:82:96:15:9a:64:d6:
be:f1:67:a6:0e:78:e8:9b:57:06:44:89:cb:53:be:40:59:25:
23:85:ab:f9:72:90:42:93:14:60:3e:76:ba:06:39:b1:33:78:
07:5f:fb:db:b9:d7:74:89:6a:5b:1c:1a:e0:f3:58:8c:9c:55:
d2:fd:4b:a8:e7:12:94:da:e9:b9:0e:97:cf:47:e6:70:d1:90:
1a:22:ad:5d:bd:3d:98:28:ae:09:84:82:d0:62:b8:05:d3:3a:
39:69:60:0b:f3:e0:7b:7c:61:9c:ea:fd:25:7c:14:30:8e:4e:
79:b6:5c:e4:ba:4d:09:bc:ee:71:12:9b:cb:59:11:03:d9:c7:
83:4a:56:3b:d6:0c:54:73:22:e7:f3:71:72:4e:94:b0:d0:82:
34:09:d6:f2
-----BEGIN CERTIFICATE-----
MIIF1zCCBL+gAwIBAgIUeje2l0gF9JYy5XPnNV/IdafHWwEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDM3Mjk5OTcxNTJmZDg0ZmNkYTZkMTkwYzNiMzE5NWIw
MjY3OTY2MDExMmJlOWEyZDcwHhcNMjUxMjIwMDQ0NjQ5WhcNMjUxMjIxMDYxMTQ5
WjAzMTEwLwYDVQQDEyg4OTQyM0Q3QjVDQUJGMzNBNDRFQ0FDOEM2MURENTA0MUJG
OTIzQzgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHcypHw+XRbZ
gNns+5gO+DT7FNxgNqLoxPx2nuyguLsbZpZuDBJtCnuamTtZukHVErFpAqngV4PR
Z2u3YOq7vCfiNe3j5ZI0cKRE2eCGAsHeHi/JVCNiAL/Zhs9zSll9djUOi6mL1oqa
EyFCoZ29qqEo9lgfJ0SkjMUnmLBlOKemxLdwGeOiFNZpt2yB3CqEjY8uW9KP6Wq1
6svtueCEbo1rLWP96cHnJIj/XZbhG32MuW4vJjSskjsXkm7GCHhkLFVQRJPEA+ez
GX9avgHGqi3OjsfEHJfHYmcAASf9fEWZOjzXWCaC8B713vB+rcmfHf5Et1+NwDv6
17z4tqqhbQIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFIlCPXtcq/M6ROysjGHdUEG/
kjyCMB8GA1UdIwQYMBaAFGpvbsJypevcGCQcLITR2f6UwSWqMA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzY2YmQ5MmYxLTQxNWItNDc2NS04YTE2
LWRiZmM0NTkzYzFhOC83LzZBNkY2RUMyNzJBNUVCREMxODI0MUMyQzg0RDFEOUZF
OTRDMTI1QUEuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTIt
NDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84MjlmYjg3Mi0xNWJiLTRhNGUtOWVkOS0y
NTk5NjBiMDQ5YmQvNDM3Mjk5OTcxNTJmZDg0ZmNkYTZkMTkwYzNiMzE5NWIwMjY3
OTY2MDExMmJlOWEyZDcuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH
MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
NjZiZDkyZjEtNDE1Yi00NzY1LThhMTYtZGJmYzQ1OTNjMWE4LzcvNkE2RjZFQzI3
MkE1RUJEQzE4MjQxQzJDODREMUQ5RkU5NEMxMjVBQS5tZnQwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA
MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAFp2fzff
iwF52w+SV29aQFn9LRtsxyomrkkQT7xm7nSerW/WVLG7t63Ts59QLGDCrdYsqj07
8IJ/0XrmSc3PlrOiifF37FgxN03iPZnAoC7wGl/UHu08GrJaDCXkz6W9gimsBsPv
KIKWFZpk1r7xZ6YOeOibVwZEictTvkBZJSOFq/lykEKTFGA+droGObEzeAdf+9u5
13SJalscGuDzWIycVdL9S6jnEpTa6bkOl89H5nDRkBoirV29PZgorgmEgtBiuAXT
OjlpYAvz4Ht8YZzq/SV8FDCOTnm2XOS6TQm87nESm8tZEQPZx4NKVjvWDFRzIufz
cXJOlLDQgjQJ1vI=
-----END CERTIFICATE-----
Generated at Sat Dec 20 21:05:13 2025 by rpki-client