This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
File: 3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft (raw, json)
Hash identifier: d/vc+mEmUqAQxnDRGTJrtnMVKqiFNLS+Mhk72IJIhIE=
Subject key identifier: 85:DC:D4:B3:79:C2:78:82:E6:D3:34:61:10:8A:F6:EC:6D:5E:89:CA
Authority key identifier: 3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
Certificate issuer: /CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Certificate serial: 13FFD87C6EB994CCF3889DF781ED6FC6EF4FAFD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
Manifest number: 02FE
Signing time: Sat 20 Dec 2025 07:33:47 +0000
Manifest this update: Sat 20 Dec 2025 07:28:47 +0000
Manifest next update: Sun 21 Dec 2025 10:47:47 +0000
Files and hashes: 1: 326131343a366634353a646561643a3a2f34382d3438203d3e203438343336.roa (hash: qTx2l+4Rmw9QcHHVu+RMfEZ9wVvbUUTMbX9wtkxLgYk=)
2: 326131343a366634303a3a2f33322d3438203d3e20323030323432.roa (hash: wghHBUAPyTh1k75qu9+3ST+twxsY88XGIADNiAK2tow=)
3: 326131343a366634343a633730313a3a2f34382d3438203d3e203438343336.roa (hash: ga3nLrPruxDKXz/HZkq9lRMiU1IAca5YQ8TT+rGp+T4=)
4: 326131343a366634343a633064653a3a2f34382d3438203d3e203438343336.roa (hash: g+1tMLXY3SN1Y/zUSSaWRJc99akoWdOPFvMCxkZrGLU=)
5: 326131343a366634343a3432303a3a2f34342d3438203d3e20323036373531.roa (hash: tAH3E769OlzQWJEjgXPQBoGBF8R2vjgSThIJK0OhT8g=)
6: 326131343a366634343a353336303a3a2f34342d3438203d3e20323136303338.roa (hash: kV9C6QKeijySZWnfoj92GJUvF6GdpqcT/jUq1YV72FQ=)
7: 326131343a366634343a343430303a3a2f34302d3438203d3e20323133313336.roa (hash: HawlF8j6AaLKvNQu2aTpKUa6yLzB5NKlnnf7Xm6b/mk=)
8: 326131343a366634353a3a2f33362d3438203d3e203530323234.roa (hash: Cm6iG7rXYSmOBRLZv4C/D104nGz4969UDdr1rCKUD0A=)
9: 326131343a366634353a623030623a3a2f34382d3438203d3e20323134373537.roa (hash: J9QsdPj5DQDhu5mtlU23kktl0EvwgihwetcbiHJN5aI=)
10: 326131343a366634353a633030303a3a2f33362d3438203d3e20313938333432.roa (hash: E5i+93dh5I/S5MMaZahzwFpc+FrF3/j8/oPFxMb1ofg=)
11: AS200242.asa (hash: 1AlMG2dsNj+2a3kLp0CpSmy1LKhmLk73ZFr/4CSbD+w=)
12: 326131343a366634343a633064653a3a2f34382d3438203d3e20313938333432.roa (hash: CR1Da8B3Ve/Ki5AH4lTB+zn6wD6Vb8CX/Tfk65mSnm4=)
13: 326131343a366634303a3a2f32392d3438203d3e20323030323432.roa (hash: x7hOPFZjN7RZHBsYqLnDpQUy2G9KH75g5Bkk7YCqeYo=)
14: 326131343a366634343a623030623a3a2f34382d3438203d3e20323135343733.roa (hash: FmiBX7ObUBJXMx50BEJxB5rcHYX/1xnmOVK+ALpTHJE=)
15: 326131343a366634343a623030623a3a2f34382d3438203d3e20313939353832.roa (hash: jzgTEml4YLsCpJ5PWa0CjR2ZyZx1iGCX4c7IWy4h9Uw=)
16: 326131343a366634343a656465383a3a2f34382d3438203d3e20323035373839.roa (hash: 37pW5zkUWwecCqjFHAdYxHEZTGOlFK8BvptTevydiHI=)
17: 3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl (hash: jvbohlUJpa+i9oqQh749y8Rqic5Z+qFSxpxV1jsBM80=)
18: 326131343a366634343a633730313a3a2f34382d3438203d3e20313938333432.roa (hash: 7HzMy3EQC4VhBpQQuwAgqmxWq4MZqQyb1t+9r/yAxck=)
19: 326131343a366634343a636166653a3a2f34382d3438203d3e20323035373839.roa (hash: Gh/w94WLUPZNwP3yscIWB0P8fPzMkD8rKLwHE/CiSik=)
20: 326131343a366634353a646561643a3a2f34382d3438203d3e20313938333432.roa (hash: 9H5bHORS1buGdk6dUDjyuqRIpPDaKxv77H5RNmLlgrw=)
21: 326131343a366634343a623030623a3a2f34382d3438203d3e20323130363637.roa (hash: m8+D+okBVVmTzlPUuDfmEBZbvua+N+sKP5fs6j2S33Y=)
22: 326131343a366634343a633066663a3a2f34382d3438203d3e203534363831.roa (hash: dC8rQUoWVp/X7YVAzZ2dHrxEZrdm+LkwjO9CaebKOYE=)
23: 04C92D9B1C8307B70C47290166D5989CEFABDCC4.cer (hash: WC2xT6FYiM9dJRxOd1eaHqB3GTC9TL6xOPD7Nd7Wdro=)
24: 326131343a366634343a323339303a3a2f34342d3438203d3e20323136313135.roa (hash: mVRk7OX5nwehY6QXOhw6587D02FFEQfLM0VwJdYXtak=)
25: 326131343a366634343a623030623a3a2f34382d3438203d3e20313937393139.roa (hash: Wi5+YIc762ypl+B2WINgJse4hzMgAIpn5Ywt7Gts2zw=)
26: 326131343a366634343a65663a3a2f34382d3438203d3e20323136303338.roa (hash: QG09fxLJtKa1Y7d6YZoiVLo1F1ttiuWxvVNqxNhuPNo=)
27: 326131343a366634323a3a2f33312d3438203d3e20323030323432.roa (hash: ITJiuOJiPhL9zGFnR/kFwwhgRvQux+ehMzGBms69CVM=)
28: 326131343a366634343a353630383a3a2f34382d3438203d3e20323030323432.roa (hash: tIzxcCSG/V5QyAqn4lWVGbnRYKGordkU7LLlPvgkHMc=)
29: 326131343a366634353a633030303a3a2f33362d3438203d3e203438343336.roa (hash: buWW9LxxoX84xDGlXRuc7ac6Vqdjfpe3tuguLo1bU7c=)
30: 326131343a366634343a646561643a3a2f34382d3438203d3e203534363831.roa (hash: +RB/H3yC2Zhqk6dbZnb2AoHhKMIePUOM6t4+sjUxfqU=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 10:47:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:ff:d8:7c:6e:b9:94:cc:f3:88:9d:f7:81:ed:6f:c6:ef:4f:af:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Validity
Not Before: Dec 20 07:28:47 2025 GMT
Not After : Dec 21 10:47:47 2025 GMT
Subject: CN=85DCD4B379C27882E6D33461108AF6EC6D5E89CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:45:2e:db:9c:f4:48:39:3a:46:c5:96:63:d2:
81:32:a1:c3:af:a2:69:c9:c3:f0:88:d7:71:3d:62:
a0:f5:57:d2:36:08:d7:19:26:9f:25:55:b0:0d:bf:
76:8c:f2:38:e6:31:97:10:0d:3a:4d:ea:89:de:88:
27:6e:5c:d2:ed:cb:44:27:bd:2f:70:91:3f:48:8c:
59:ef:79:e7:ac:4c:0d:00:2e:d8:01:30:6a:4a:9c:
c4:a3:ab:77:60:90:a7:96:89:bf:5e:45:eb:39:58:
ab:33:8e:d2:23:7c:e9:bc:9e:06:85:75:ad:a5:76:
48:a9:c2:af:83:46:ab:ae:c2:7f:f4:91:a3:1c:05:
bc:b9:b6:1d:f8:5c:77:d8:33:75:5c:a7:94:89:0a:
f8:cd:7d:ad:8c:1d:d2:ad:dd:eb:e4:b5:76:28:02:
e3:d4:5d:39:f9:18:ab:bc:8b:ed:28:d8:60:83:cb:
f2:37:fa:c8:fb:16:d9:d8:dd:56:19:17:01:65:a8:
a1:7a:17:85:3f:8e:c7:43:b2:ea:ad:e3:fa:85:09:
c2:9a:ab:98:4c:af:54:7c:a9:8e:ed:fb:13:91:7a:
af:3b:6e:c3:b4:06:b7:3a:0f:62:cc:0c:1e:47:8f:
24:c4:4b:85:aa:2d:6a:fc:b3:e7:b2:dd:d4:4f:be:
13:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:DC:D4:B3:79:C2:78:82:E6:D3:34:61:10:8A:F6:EC:6D:5E:89:CA
X509v3 Authority Key Identifier:
keyid:3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:b8:43:88:ae:8a:18:de:40:4c:da:d7:70:c3:7d:dc:7e:c7:
e7:79:e4:d7:de:fb:39:d2:01:32:7d:5e:52:e6:6a:07:1b:bc:
c0:df:9f:78:cd:0b:9d:1d:e5:59:73:36:12:ec:84:88:36:5e:
65:97:53:d3:0d:15:5c:e1:7f:a5:fb:61:c1:a3:cb:1b:2e:9b:
be:cf:83:53:12:5d:5c:e3:ce:a8:47:09:ba:6f:30:e2:a6:65:
27:50:79:39:48:6e:c1:54:4b:61:0b:87:3a:71:02:b2:c4:46:
ce:36:39:bf:21:8e:32:bd:58:0f:c2:68:12:ea:82:5a:1c:81:
92:96:76:13:38:20:6c:ba:62:74:45:7b:0f:a6:08:9f:84:2b:
9a:65:46:01:6d:e2:cb:4f:c7:8c:09:8f:e9:88:56:9e:2e:ce:
00:a3:36:b0:b8:12:85:fd:f6:af:40:cd:e4:e0:e8:81:54:6c:
d3:24:3d:45:08:c9:6d:49:8b:86:ee:cd:5f:02:d0:7d:6a:28:
23:c3:9b:aa:74:b2:02:e4:1e:91:f2:12:4b:b9:9c:0e:f9:66:
42:c7:cf:0e:2f:b7:aa:5d:6f:f0:7b:93:eb:8d:c6:fa:ab:0b:
aa:7b:75:f5:8f:c9:8e:12:9b:76:d9:e9:02:83:1a:50:e8:1b:
b9:a4:4b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 23:04:46 2025 by rpki-client