This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft
File: D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft (raw, json)
Hash identifier: AptUpSp9YLawt97nLPdHgDwIqPmTGyxYS0bBS9lYm3M=
Subject key identifier: E3:EC:25:0F:CF:BF:00:61:87:A9:87:A6:D0:3F:EF:43:12:D0:72:DE
Authority key identifier: D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C
Certificate issuer: /CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C
Certificate serial: 6604EBBED1F06C157BB2F640FB81CE7569AA9B0C
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft
Manifest number: 011C
Signing time: Fri 19 Dec 2025 20:55:38 +0000
Manifest this update: Fri 19 Dec 2025 20:50:38 +0000
Manifest next update: Sat 20 Dec 2025 21:12:38 +0000
Files and hashes: 1: 326130363a313238333a386230363a3a2f34382d313238203d3e20323133343133.roa (hash: LRX/tmRuBv04fybDYPCQD9lanhfB9HcnVGBpgk5TB5I=)
2: 326130363a313238333a386430303a3a2f34302d3438203d3e20323131303636.roa (hash: fhZLtEdAcpVe5ZEFnO5ghX4tvoay2QbvYeWWfzdmNM4=)
3: 5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer (hash: E+mLqx7rEgzkPAUn5rJoLra7vStPRhm9ryAmKBFIvQ0=)
4: 326130363a313238333a386235303a3a2f34342d313238203d3e20323036363034.roa (hash: LicWRa2PbfgNORQ+JYzjM1l7VK8HvoCbIwWlhpceGoA=)
5: 326130363a313238333a383930303a3a2f34302d313238203d3e20323133343133.roa (hash: w6mEbr64LdAB6p4ChAQnVfiw39Sxb+bv0QiR3+vbqY0=)
6: 326130363a313238333a386230353a3a2f34382d313238203d3e20323133343133.roa (hash: BwWttvdgE87UTe5eUGryLDR20yKZtRoPBaxCc1jPa9E=)
7: 326130363a313238333a386230303a3a2f34302d3438203d3e20323131303636.roa (hash: E/viu9vBcRpgXLkYydv4L1bSWYconnC9RhF31aVMM/0=)
8: 326130363a313238333a386630303a3a2f34302d313238203d3e20323131303636.roa (hash: r9X5RrRgRpcWg3o0DruFRABIQJqS6HSEppSZqEX6zcQ=)
9: 326130363a313238333a626434303a3a2f34322d313238203d3e20323130373936.roa (hash: NS2/G+GE49Imka70FRvnrWigl/cu3jsnXcP9mUuT9+I=)
10: 326130363a313238333a383030323a3a2f34382d3438203d3e20323135313437.roa (hash: B3lCmzbMTTF4JEYaqxL5SocH8KSyx1ZOaOngpc1c9xY=)
11: 326130363a313238333a383030333a3a2f34382d313238203d3e20323131303636.roa (hash: hYctHpFLZLrdZbOQKdUp5gBu76GVnDNrzAlSQDHkf8o=)
12: 326130363a313238333a386234303a3a2f34342d313238203d3e20323036363034.roa (hash: jMnRJSIBI/vK/lYdVRqiwNEB3nWoaFm4KV/BQrtgZJI=)
13: 326130363a313238333a383930353a3a2f34382d313238203d3e20323134303333.roa (hash: huX32HgMgk4Y2C020+tWpyikLyAfVZ2TMuvxXCD12N4=)
14: 326130363a313238333a386230333a3a2f34382d313238203d3e20323133343133.roa (hash: 9C302LCYvU+i5JLVJOH4qrTiJnLXDxCLo10Ivgf+geE=)
15: 326130363a313238333a386430303a3a2f34302d313238203d3e20323135313336.roa (hash: Us4SYEZ87W/cYsY9JNhseT6YHmH9HqiIKrkdBOpnc/8=)
16: D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl (hash: RifUKNCgK9cudvs+WFWliod6cVKV+pAeKPocMhKidBw=)
17: D36546790928F44FF74C564231471FA1D8D2A97B.cer (hash: Yk51yNZZDrc+NxDYYI7+6vxfYJuE5Kc7CvebjeR4bSQ=)
18: 326130363a313238333a383030303a3a2f33362d3438203d3e20323135313437.roa (hash: 1HZdS5easOTzXqx+g13vhM2s0dAHymCGMDkKOH0yoVM=)
19: 326130363a313238333a633131663a3a2f34382d313238203d3e20323131303636.roa (hash: MNB/IgLpAkC8BkMxVhMNWcW04HjOlc0Y//dSW/FFyhU=)
20: 326130363a313238333a386230343a3a2f34382d313238203d3e20323133343133.roa (hash: 8yrqf+s2g5bw5KG3SyAhrNgPcZSxkzmGXTu5AJ2lCBE=)
21: 326130363a313238333a386330303a3a2f34302d3438203d3e20323131303636.roa (hash: PjXxPcOFpDrt2/J2rK7/G4zujo+FjWZMvwQwdSAXtCs=)
22: 326130363a313238333a386230373a3a2f34382d313238203d3e20323133343133.roa (hash: +LsHR6M/sTp/p218VbiQsurX+iZ7B1G4y6ss3VYV+wk=)
23: 326130363a313238333a383930323a3a2f34382d313238203d3e20323132373730.roa (hash: 1Mq7zwNWFVrFO4xAnw5YP+F5xNQQ0SyBjbZkZrxTF84=)
24: 326130363a313238333a383930363a3a2f34382d313238203d3e20323134303333.roa (hash: SDzB93ZmXL/9JaeiFrClXOKOMdMaPjQdBjiuTrcER6c=)
25: 326130363a313238333a386232303a3a2f34342d313238203d3e20323036363034.roa (hash: 5OdJnaKVh+px3V/b0A5vN4t5kNQD310BBRMdi9J8Cio=)
26: 326130363a313238333a386233303a3a2f34342d313238203d3e20323036363034.roa (hash: 6akZ76xc8TUp4h4v2+1J9UTOFvzSXYR8sBgcIPy6fb4=)
27: 326130363a313238333a383930313a3a2f34382d313238203d3e20323134323035.roa (hash: ZxaQKtSoKlgJmO3J3XqDtpxRpsMoDdJh04xqfrfCdBY=)
28: 326130363a313238333a386530303a3a2f34302d3438203d3e20323131303636.roa (hash: zh/0wPRro0Lk1m44hGThxyXQVvLxur06EBEe3Ht0Czk=)
29: 326130363a313238333a383930343a3a2f34382d313238203d3e20323134373632.roa (hash: NbESZTGbsnyViyuGLC+8sRHMyf8Ojiq0F9ioTriEM2E=)
30: 326130363a313238333a386130303a3a2f34302d3438203d3e20323131303636.roa (hash: 0UwJEaqOuZNt12cGdgRNs6h5sg/UqNE4VWJ7LVXWQWc=)
31: 326130363a313238333a383966303a3a2f34342d313238203d3e20323134303333.roa (hash: VPyKJTdMnGQqSuzFbkFQ60iQgNT+2pht93oF2htafCQ=)
32: 326130363a313238333a633131303a3a2f34342d3438203d3e20323135313437.roa (hash: +z0Qc7b7Pm0YyOUO4LNkttIVrmFKBrkfbPc/zfrDGTk=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl
rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft
rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer
rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl
rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Dec 2025 21:12:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:04:eb:be:d1:f0:6c:15:7b:b2:f6:40:fb:81:ce:75:69:aa:9b:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C
Validity
Not Before: Dec 19 20:50:38 2025 GMT
Not After : Dec 20 21:12:38 2025 GMT
Subject: CN=E3EC250FCFBF006187A987A6D03FEF4312D072DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bc:a3:28:5c:af:fc:d4:07:7e:17:26:a3:5b:
2d:f4:34:4f:fe:f5:ce:68:67:20:8f:46:9f:39:06:
53:bc:03:4d:25:5e:17:7b:83:1a:61:1a:75:3a:a5:
22:a7:f3:4d:56:ee:ef:ec:f4:01:80:1f:21:03:8e:
f5:50:5d:04:b7:fb:c0:d2:ad:84:20:c2:6e:9e:20:
1d:a1:f5:1f:3e:ee:41:64:93:f5:14:b0:11:94:c6:
1d:b4:8e:eb:c8:aa:c1:41:65:01:0d:fd:ca:61:37:
be:df:dc:00:b0:5c:61:78:f3:86:ed:e5:dc:6d:e0:
53:09:10:ca:12:80:43:98:64:49:45:9e:59:35:79:
7a:c4:98:74:6a:df:72:60:4e:65:55:cf:b9:b4:dd:
aa:77:11:83:47:4e:38:42:05:a4:0b:fb:e3:40:ca:
0d:04:89:38:71:e7:27:3d:3f:7f:d4:73:cc:07:00:
8a:a7:39:7b:39:a1:fc:b1:7f:11:82:bf:61:af:86:
18:1b:24:43:26:79:93:c9:ea:10:55:52:21:fc:30:
9d:ff:0a:05:60:95:e9:e7:da:fb:32:85:7f:cb:03:
39:0f:60:10:b6:80:11:90:c9:10:bb:a5:86:2d:de:
06:9f:15:a5:2e:80:82:d7:7a:93:2a:2e:e6:6a:4d:
ac:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:EC:25:0F:CF:BF:00:61:87:A9:87:A6:D0:3F:EF:43:12:D0:72:DE
X509v3 Authority Key Identifier:
keyid:D5:4D:44:3B:67:C1:CC:5E:A1:B5:44:6E:A0:64:3C:AC:3A:7A:8B:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:f4:f5:fa:7f:72:32:b4:6b:33:fe:dd:4d:ed:96:95:c5:3a:
26:e9:50:fd:71:0f:8d:cd:0f:65:20:cd:b4:40:13:88:81:9e:
63:7c:49:f7:33:5a:13:3c:4c:56:88:5a:ad:8c:c4:d6:db:42:
32:52:95:ac:34:0f:74:99:f7:60:5a:8c:0b:5c:21:5f:9f:9f:
d5:fa:63:45:61:40:33:69:6a:f8:e1:64:65:2f:05:40:9e:44:
c1:d3:7f:a0:d4:3a:29:de:03:66:66:60:84:66:4c:67:6e:14:
1a:c6:d0:ed:1b:bf:b5:d6:84:d4:10:ef:e0:b6:b2:a6:80:7f:
c2:8f:9b:ab:26:f6:28:40:76:64:59:cb:e3:10:fc:3b:0e:84:
85:2a:ca:ed:cd:99:10:ed:01:f1:71:7b:14:b2:79:6a:6b:97:
bf:5d:39:df:83:74:ae:db:22:2f:bd:f5:6a:6e:ff:6c:03:16:
75:66:3d:39:f2:8a:cc:27:cf:8d:a9:ce:4d:13:bf:da:39:59:
e3:88:35:02:4d:6e:2a:dd:e1:26:7d:ba:51:76:f7:96:55:57:
b1:78:c2:f9:da:6e:cc:c3:83:f7:35:dd:00:fa:42:3d:de:ab:
8b:e4:d0:3a:41:fb:a5:ce:4f:1a:46:27:11:84:41:34:10:87:
1f:dc:75:42
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUZgTrvtHwbBV7svZA+4HOdWmqmwwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDU0RDQ0M0I2N0MxQ0M1RUExQjU0NDZFQTA2NDNDQUMz
QTdBOEIyQzAeFw0yNTEyMTkyMDUwMzhaFw0yNTEyMjAyMTEyMzhaMDMxMTAvBgNV
BAMTKEUzRUMyNTBGQ0ZCRjAwNjE4N0E5ODdBNkQwM0ZFRjQzMTJEMDcyREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2vKMoXK/81Ad+FyajWy30NE/+
9c5oZyCPRp85BlO8A00lXhd7gxphGnU6pSKn801W7u/s9AGAHyEDjvVQXQS3+8DS
rYQgwm6eIB2h9R8+7kFkk/UUsBGUxh20juvIqsFBZQEN/cphN77f3ACwXGF484bt
5dxt4FMJEMoSgEOYZElFnlk1eXrEmHRq33JgTmVVz7m03ap3EYNHTjhCBaQL++NA
yg0EiThx5yc9P3/Uc8wHAIqnOXs5ofyxfxGCv2GvhhgbJEMmeZPJ6hBVUiH8MJ3/
CgVglenn2vsyhX/LAzkPYBC2gBGQyRC7pYYt3gafFaUugILXepMqLuZqTaz/AgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQU4+wlD8+/AGGHqYem0D/vQxLQct4wHwYDVR0j
BBgwFoAU1U1EO2fBzF6htURuoGQ8rDp6iywwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4
MDhiLzYvRDU0RDQ0M0I2N0MxQ0M1RUExQjU0NDZFQTA2NDNDQUMzQTdBOEIyQy5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWY3M2E5Yy0yMDU4LTQz
YmItOWFjNi01YWI0MmRmYmY0MDkvNC9ENTRENDQzQjY3QzFDQzVFQTFCNTQ0NkVB
MDY0M0NBQzNBN0E4QjJDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzY4YWJhYmJiLWYwNDgtNGRlMS05MjA2LThkNDBmMDcxODA4Yi82L0Q1NEQ0NDNC
NjdDMUNDNUVBMUI1NDQ2RUEwNjQzQ0FDM0E3QThCMkMubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA+9PX6
f3IytGsz/t1N7ZaVxTom6VD9cQ+NzQ9lIM20QBOIgZ5jfEn3M1oTPExWiFqtjMTW
20IyUpWsNA90mfdgWowLXCFfn5/V+mNFYUAzaWr44WRlLwVAnkTB03+g1Dop3gNm
ZmCEZkxnbhQaxtDtG7+11oTUEO/gtrKmgH/Cj5urJvYoQHZkWcvjEPw7DoSFKsrt
zZkQ7QHxcXsUsnlqa5e/XTnfg3Su2yIvvfVqbv9sAxZ1Zj058orMJ8+Nqc5NE7/a
OVnjiDUCTW4q3eEmfbpRdveWVVexeML52m7Mw4P3Nd0A+kI93quL5NA6Qfulzk8a
RicRhEE0EIcf3HVC
-----END CERTIFICATE-----
Generated at Sat Dec 20 09:59:55 2025 by rpki-client