This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft File: B3C078E149D9741434FD8877AB4CED46DC2720DA.mft (raw, json) Hash identifier: ZIc7OfhQUk8E+w+2TM+wE+QtUZdsPfu7lwBy8SmkzHo= Subject key identifier: 60:07:F6:DC:C5:46:42:A2:5A:3C:54:34:85:72:98:00:AF:70:14:EA Authority key identifier: B3:C0:78:E1:49:D9:74:14:34:FD:88:77:AB:4C:ED:46:DC:27:20:DA Certificate issuer: /CN=b3c078e149d9741434fd8877ab4ced46dc2720da Certificate serial: 02275E0EF2889B36944F41A437669218C250A8D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft Manifest number: 0368 Signing time: Wed 17 Dec 2025 20:08:13 +0000 Manifest this update: Wed 17 Dec 2025 20:03:13 +0000 Manifest next update: Thu 18 Dec 2025 22:04:13 +0000 Files and hashes: 1: AS215147.asa (hash: GjsvLtdFoDUTAXomZoavpdPPd8CJuRsD46c0/yYhSME=) 2: B3C078E149D9741434FD8877AB4CED46DC2720DA.crl (hash: 1UZFaa/hhD5ntWm0FKqbUEPwREfmwD6Z5tHHiLE/dRg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 22:04:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:27:5e:0e:f2:88:9b:36:94:4f:41:a4:37:66:92:18:c2:50:a8:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3c078e149d9741434fd8877ab4ced46dc2720da Validity Not Before: Dec 17 20:03:13 2025 GMT Not After : Dec 18 22:04:13 2025 GMT Subject: CN=6007F6DCC54642A25A3C543485729800AF7014EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0b:2d:54:72:5a:17:bf:0e:17:b8:79:eb:f2: fd:a6:c6:3b:79:64:36:ea:d6:80:6f:4f:a4:2a:69: 3c:d1:89:2b:2b:61:ba:95:41:5e:f9:57:38:52:f0: 38:f3:83:b1:7b:a2:5e:12:c2:b9:b9:09:ac:ae:19: ce:c6:db:ed:bf:ea:5d:a2:db:8a:cc:34:21:9d:15: d0:f9:9f:00:91:27:90:89:5a:63:8b:a2:c0:13:6e: 89:60:f8:10:ff:e7:46:0f:ae:d8:f4:7c:96:f4:5d: d8:59:2f:b9:ab:fb:16:f5:73:59:a3:67:06:eb:2f: c9:37:3b:d5:df:65:37:bf:4b:67:a0:0e:9e:40:dd: b0:be:52:0c:2f:b8:a4:c0:fc:74:d4:2a:1e:d8:9e: 33:ff:68:4c:62:40:1d:a9:60:86:f4:78:0a:8c:e9: 30:f1:06:90:98:57:7f:44:b3:08:9c:55:f0:dc:60: 20:f3:7f:83:45:e8:f1:42:e9:63:09:ee:4a:8c:d9: 57:26:dc:4a:32:64:79:28:65:b1:88:f0:5a:3f:26: 13:25:e7:42:b2:5b:e3:e0:c1:c4:c7:54:76:f2:60: 8b:c0:a1:a2:b4:b7:4e:39:ee:ec:9d:5e:45:d1:40: 85:77:a2:d9:ee:6b:35:50:04:02:ee:c1:11:1a:42: b4:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:07:F6:DC:C5:46:42:A2:5A:3C:54:34:85:72:98:00:AF:70:14:EA X509v3 Authority Key Identifier: keyid:B3:C0:78:E1:49:D9:74:14:34:FD:88:77:AB:4C:ED:46:DC:27:20:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:7e:fd:51:c0:c9:de:54:87:03:29:3e:81:e5:aa:4f:e8:81: cb:ff:6e:9d:d8:d4:16:e1:d0:a9:42:5c:de:b3:ac:03:21:92: 50:2b:fa:c1:64:69:d3:04:3b:45:5b:fa:f3:8b:5f:4a:f5:58: 4c:d5:cb:b7:23:fe:f9:13:75:4b:66:b6:17:9c:92:e8:92:97: be:a6:08:67:fa:90:4b:89:23:e2:0c:5d:94:56:28:79:dc:20: 71:b2:b9:4d:c1:3d:1e:db:c9:93:6f:4f:47:61:84:e1:ec:86: 0e:46:bf:25:16:a8:3a:fa:06:97:3a:1c:1b:ad:d1:38:eb:79: 27:17:7d:38:88:20:c4:a2:4c:ce:b6:41:87:18:83:c1:e5:1e: 70:db:a3:9d:61:47:27:00:03:60:06:b8:be:5a:42:6d:fd:5f: 8a:64:b5:b6:5b:3a:69:d3:f6:1c:5b:e9:b5:3c:16:7f:37:b1: 40:e7:9e:af:cd:ae:ae:ab:d6:6d:a5:4d:5c:e5:a2:4d:a3:f6: 19:e6:a8:ca:c2:56:78:c7:ee:96:fc:06:b0:08:33:a6:ce:ab: 2e:66:10:52:f4:b7:6c:b0:70:a5:8b:e9:7c:25:b3:c8:c1:d1: 4f:90:80:ca:8b:b7:c4:9e:e1:7f:09:c4:80:ca:ae:ae:88:73: 00:fc:6b:63 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUAideDvKImzaUT0GkN2aSGMJQqNMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjNjMDc4ZTE0OWQ5NzQxNDM0ZmQ4ODc3YWI0Y2VkNDZk YzI3MjBkYTAeFw0yNTEyMTcyMDAzMTNaFw0yNTEyMTgyMjA0MTNaMDMxMTAvBgNV BAMTKDYwMDdGNkRDQzU0NjQyQTI1QTNDNTQzNDg1NzI5ODAwQUY3MDE0RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFCy1UcloXvw4XuHnr8v2mxjt5 ZDbq1oBvT6QqaTzRiSsrYbqVQV75VzhS8Djzg7F7ol4Swrm5CayuGc7G2+2/6l2i 24rMNCGdFdD5nwCRJ5CJWmOLosATbolg+BD/50YPrtj0fJb0XdhZL7mr+xb1c1mj ZwbrL8k3O9XfZTe/S2egDp5A3bC+UgwvuKTA/HTUKh7YnjP/aExiQB2pYIb0eAqM 6TDxBpCYV39EswicVfDcYCDzf4NF6PFC6WMJ7kqM2Vcm3EoyZHkoZbGI8Fo/JhMl 50KyW+PgwcTHVHbyYIvAoaK0t0457uydXkXRQIV3otnuazVQBALuwREaQrS5AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUYAf23MVGQqJaPFQ0hXKYAK9wFOowHwYDVR0j BBgwFoAUs8B44UnZdBQ0/Yh3q0ztRtwnINowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzAvQjNDMDc4RTE0OUQ5NzQxNDM0RkQ4ODc3QUI0Q0VENDZEQzI3MjBEQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3M4QjQ0VW5aZEJRMF9ZaDNxMHp0UnR3 bklOby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJiYi1m MDQ4LTRkZTEtOTIwNi04ZDQwZjA3MTgwOGIvMC9CM0MwNzhFMTQ5RDk3NDE0MzRG RDg4NzdBQjRDRUQ0NkRDMjcyMERBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB379UcDJ3lSHAyk+geWq T+iBy/9undjUFuHQqUJc3rOsAyGSUCv6wWRp0wQ7RVv684tfSvVYTNXLtyP++RN1 S2a2F5yS6JKXvqYIZ/qQS4kj4gxdlFYoedwgcbK5TcE9HtvJk29PR2GE4eyGDka/ JRaoOvoGlzocG63ROOt5Jxd9OIggxKJMzrZBhxiDweUecNujnWFHJwADYAa4vlpC bf1fimS1tls6adP2HFvptTwWfzexQOeer82urqvWbaVNXOWiTaP2GeaoysJWeMfu lvwGsAgzps6rLmYQUvS3bLBwpYvpfCWzyMHRT5CAyou3xJ7hfwnEgMqurohzAPxr Yw== -----END CERTIFICATE-----Generated at Thu Dec 18 11:11:50 2025 by rpki-client