This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.mft File: B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.mft (raw, json) Hash identifier: ZSmIj94tBxYi7tYiOp5B+wCAcs+rJjWguXnrctKMsPY= Subject key identifier: ED:0D:04:F3:46:7E:1A:94:FC:49:BA:F1:FD:35:FC:21:25:5E:2A:44 Authority key identifier: B3:F0:D7:73:DC:BE:52:3A:3F:B1:F5:D2:6D:00:33:48:74:BC:9F:B2 Certificate issuer: /CN=B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2 Certificate serial: 558ACF966ECB32D29089BFF1063D75352AEDB2F8 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.mft Manifest number: CD Signing time: Sat 20 Dec 2025 16:14:14 +0000 Manifest this update: Sat 20 Dec 2025 16:09:14 +0000 Manifest next update: Sun 21 Dec 2025 17:58:14 +0000 Files and hashes: 1: 326130613a363034343a623334333a3a2f34382d3438203d3e20323039373335.roa (hash: gl3XcUXLDzu/fH6TlbsYQk5DZAQEnfCBBv+yPT42ay4=) 2: 326130613a363034343a623363303a3a2f34342d3434203d3e203434373333.roa (hash: rJLCwnl4uhsE/sIS8YisrOAIem98x56OxfgeBDZO+zk=) 3: 326130613a363034343a623330303a3a2f34322d3432203d3e20323134383039.roa (hash: rL0HqOB+MnXMFAFPM77NjHuvY8wsbwqcrhR4UPqYqsc=) 4: B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.crl (hash: jqRUVa1GQj9jSN40Np4Zx43NHIcMAL+gbdI69m3MtRc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.crl rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.mft rsync://krill.47272.net/repo/HYEHOST/5/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 17:58:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:8a:cf:96:6e:cb:32:d2:90:89:bf:f1:06:3d:75:35:2a:ed:b2:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2 Validity Not Before: Dec 20 16:09:14 2025 GMT Not After : Dec 21 17:58:14 2025 GMT Subject: CN=ED0D04F3467E1A94FC49BAF1FD35FC21255E2A44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:bd:93:62:5a:50:92:7e:4f:e8:df:ab:d6:96: e3:3e:23:34:49:c8:19:bc:41:ee:aa:75:a3:7e:51: 25:08:1d:9e:94:69:fb:33:21:a0:e7:d0:ba:23:cf: ab:97:eb:b6:d8:0c:45:12:86:b4:d2:8e:31:99:9a: 6b:49:dd:9a:6e:83:05:e3:fe:1b:96:73:49:1a:cc: 21:84:69:58:6b:f9:ec:0a:86:ba:1f:75:19:99:1b: 4e:4b:91:5b:00:e2:64:2b:6b:5a:dd:98:77:c6:20: f0:20:62:84:0e:92:c9:41:53:62:3a:9a:88:79:83: 1b:0f:ed:fa:9d:d3:ac:80:cd:e4:d9:78:9a:2f:20: 57:05:d1:a7:da:c1:86:dd:12:f8:98:b2:4a:c2:8f: e3:27:d8:e0:40:f5:58:f8:55:db:14:90:9a:55:00: d2:9c:00:f0:89:5c:9b:53:fd:71:12:ab:6b:fc:89: 2b:f4:ea:63:b9:a0:1a:f3:6b:94:21:df:c8:6b:32: 5a:85:63:30:00:69:9c:9c:a4:7f:f5:d2:af:1e:87: 90:b9:06:08:d5:69:04:41:35:71:ca:44:42:44:c1: 88:53:7e:2b:6c:15:9d:86:ae:10:7b:79:14:98:b0: 03:6c:b0:6b:27:5a:3c:03:c0:d2:fe:11:70:f2:f7: 0a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:0D:04:F3:46:7E:1A:94:FC:49:BA:F1:FD:35:FC:21:25:5E:2A:44 X509v3 Authority Key Identifier: keyid:B3:F0:D7:73:DC:BE:52:3A:3F:B1:F5:D2:6D:00:33:48:74:BC:9F:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:f3:22:32:84:20:91:7c:5d:45:11:1c:26:30:e0:f5:d4:4b: 79:fc:74:00:9c:f7:00:97:0f:e4:cc:30:2a:d4:eb:3e:da:7c: 85:99:7e:c5:a3:b7:33:89:e4:a8:6a:1a:1e:22:4d:3a:86:a8: 81:3b:3a:1b:57:e3:60:98:27:f6:a5:c1:5b:5f:79:a0:bf:2d: 88:b2:bc:46:d4:5a:ed:89:9a:50:b0:e5:b1:ba:6d:30:4f:1b: cf:19:fd:0d:34:b9:34:98:f3:4a:bf:3d:aa:24:e3:8b:f6:9e: 62:df:d1:34:f5:d5:f2:8f:4b:6a:a7:60:df:ad:1b:e6:16:df: 6a:d3:e7:e9:ce:f1:b9:a4:a6:8f:52:60:0a:70:71:57:32:72: 2b:7c:af:61:0c:d3:8c:51:5b:17:9c:a7:ca:e0:fd:a4:e0:45: dc:59:c6:69:15:2e:9d:ea:2d:20:4d:0d:5f:fa:2e:ec:52:46: 22:e4:73:ed:9f:5f:89:51:06:8a:3d:c4:4c:d1:92:f8:ff:f3: 03:f3:7a:ff:5f:6a:3f:ae:a7:96:d8:df:00:dc:da:19:98:3b: b4:43:1b:56:73:3f:c7:88:6a:67:06:10:3e:1f:9b:ce:b9:03: ed:c5:d3:07:02:0b:81:55:bc:9d:01:48:e3:47:d6:27:e2:8d: 82:be:ce:7e -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUVYrPlm7LMtKQib/xBj11NSrtsvgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNGMEQ3NzNEQ0JFNTIzQTNGQjFGNUQyNkQwMDMzNDg3 NEJDOUZCMjAeFw0yNTEyMjAxNjA5MTRaFw0yNTEyMjExNzU4MTRaMDMxMTAvBgNV BAMTKEVEMEQwNEYzNDY3RTFBOTRGQzQ5QkFGMUZEMzVGQzIxMjU1RTJBNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5vZNiWlCSfk/o36vWluM+IzRJ yBm8Qe6qdaN+USUIHZ6UafszIaDn0Lojz6uX67bYDEUShrTSjjGZmmtJ3ZpugwXj /huWc0kazCGEaVhr+ewKhrofdRmZG05LkVsA4mQra1rdmHfGIPAgYoQOkslBU2I6 moh5gxsP7fqd06yAzeTZeJovIFcF0afawYbdEviYskrCj+Mn2OBA9Vj4VdsUkJpV ANKcAPCJXJtT/XESq2v8iSv06mO5oBrza5Qh38hrMlqFYzAAaZycpH/10q8eh5C5 BgjVaQRBNXHKREJEwYhTfitsFZ2GrhB7eRSYsANssGsnWjwDwNL+EXDy9wq/AgMB AAGjggJSMIICTjAdBgNVHQ4EFgQU7Q0E80Z+GpT8Sbrx/TX8ISVeKkQwHwYDVR0j BBgwFoAUs/DXc9y+Ujo/sfXSbQAzSHS8n7IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzEwOThjMjMtYTk3Ny00ZjlhLTk3YzktY2Q0ZTc1OWRl YTA5LzIvQjNGMEQ3NzNEQ0JFNTIzQTNGQjFGNUQyNkQwMDMzNDg3NEJDOUZCMi5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS9CM0YwRDc3M0RDQkU1MjNBM0ZCMUY1RDI2 RDAwMzM0ODc0QkM5RkIyLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcxMDk4YzIzLWE5NzctNGY5YS05N2M5LWNkNGU3NTlkZWEwOS8yL0IzRjBENzcz RENCRTUyM0EzRkIxRjVEMjZEMDAzMzQ4NzRCQzlGQjIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBo8yIy hCCRfF1FERwmMOD11Et5/HQAnPcAlw/kzDAq1Os+2nyFmX7Fo7czieSoahoeIk06 hqiBOzobV+NgmCf2pcFbX3mgvy2IsrxG1FrtiZpQsOWxum0wTxvPGf0NNLk0mPNK vz2qJOOL9p5i39E09dXyj0tqp2DfrRvmFt9q0+fpzvG5pKaPUmAKcHFXMnIrfK9h DNOMUVsXnKfK4P2k4EXcWcZpFS6d6i0gTQ1f+i7sUkYi5HPtn1+JUQaKPcRM0ZL4 //MD83r/X2o/rqeW2N8A3NoZmDu0QxtWcz/HiGpnBhA+H5vOuQPtxdMHAguBVbyd AUjjR9Yn4o2Cvs5+ -----END CERTIFICATE-----Generated at Sun Dec 21 07:19:58 2025 by rpki-client