This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft File: 0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft (raw, json) Hash identifier: qzHmIhjISpvKWR7dSdN5im0Xzx8M76gsq5yjb/0KtKU= Subject key identifier: 49:E0:A7:7A:16:1D:01:BF:1C:96:1D:9A:38:69:38:09:2E:42:4B:5B Authority key identifier: 0A:FD:B7:22:2B:9E:BA:33:A6:5E:29:BB:E3:F2:9D:7C:5F:4B:09:B9 Certificate issuer: /CN=0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9 Certificate serial: 349E959E0831E7E48229EF65BF682232325E0975 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft Manifest number: E1 Signing time: Sun 21 Dec 2025 02:41:39 +0000 Manifest this update: Sun 21 Dec 2025 02:36:39 +0000 Manifest next update: Mon 22 Dec 2025 05:45:39 +0000 Files and hashes: 1: 0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.crl (hash: i19x15Y/fcjVhNX4JBQxNBa0fdwNRS6iluK88/P9SKI=) 2: 326130373a353463313a663030303a3a2f33362d3438203d3e20323038343533.roa (hash: PoxwFIHy8kdey2mlHnL1hmx4hhF1/GhCPxY1mv6kDWE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.crl rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 16:06:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:9e:95:9e:08:31:e7:e4:82:29:ef:65:bf:68:22:32:32:5e:09:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9 Validity Not Before: Dec 21 02:36:39 2025 GMT Not After : Dec 22 05:45:39 2025 GMT Subject: CN=49E0A77A161D01BF1C961D9A386938092E424B5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:af:18:7b:e9:ef:f1:2f:78:08:f8:9f:50:14: fa:42:79:67:87:b2:a4:e5:8b:df:3c:f7:98:76:5b: ae:93:50:43:24:37:57:38:a0:fd:ea:56:8a:d7:50: 4d:35:f2:b9:2b:5f:19:42:86:ab:78:10:f7:6b:70: a2:95:8a:38:bd:1c:93:50:cd:bf:c6:43:03:9e:33: 0d:10:35:fe:ec:b7:98:93:41:e4:25:40:ed:51:35: 04:fd:a7:aa:ef:b7:86:64:b2:87:be:b5:ce:05:df: 20:85:e6:66:38:3d:53:a1:45:ed:83:31:d3:d4:16: 82:87:71:e9:bd:05:21:5f:a5:0c:12:ab:ce:f2:5f: 6c:bf:74:9c:4d:95:42:28:f4:49:cd:17:96:61:65: 43:dc:f3:8b:b7:f7:ef:58:9f:0e:1f:4f:fe:81:d4: c2:6e:40:29:02:68:62:85:89:29:41:61:ee:71:a7: 06:7e:60:b5:28:d1:01:b7:32:2e:d1:29:5f:65:bc: 3f:a2:49:fd:43:a8:ca:3b:23:77:6c:23:e3:86:31: 63:a2:3f:5e:7c:67:af:fc:b5:eb:ef:ce:96:a9:c2: 99:22:f9:46:c3:c9:f3:15:3c:d0:a4:57:cf:5e:de: fa:af:e9:78:f6:40:c9:ca:80:ad:e2:d2:5e:f3:97: 5c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:E0:A7:7A:16:1D:01:BF:1C:96:1D:9A:38:69:38:09:2E:42:4B:5B X509v3 Authority Key Identifier: keyid:0A:FD:B7:22:2B:9E:BA:33:A6:5E:29:BB:E3:F2:9D:7C:5F:4B:09:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:d5:15:38:79:0f:82:7f:7c:97:c4:c6:7e:64:b6:8a:e5:15: a7:43:d2:1b:be:97:d6:29:f7:c4:d2:25:15:20:78:ac:aa:d2: 92:c7:1e:1c:f9:eb:8b:1e:6b:28:c5:3a:cc:b6:d6:73:2a:95: 59:87:19:c6:96:d3:b9:c9:eb:e2:0e:49:ce:bb:5c:c5:22:57: 4e:de:3c:2d:a2:30:64:5f:f1:3c:8b:87:27:2e:fd:23:b8:6a: c9:7e:9a:dc:0d:e0:cd:86:d5:69:d5:60:09:eb:ce:a0:23:ff: 79:d9:18:96:33:18:f5:4b:41:fd:bd:95:95:a7:db:f5:19:10: ad:57:e7:41:23:dc:08:27:ac:53:21:38:54:53:af:82:8e:d4: d8:70:9d:ef:19:7b:09:1e:87:3d:05:c6:40:cd:ef:0c:69:79: c9:82:53:5b:ca:0e:c4:10:94:e1:c1:15:59:7a:24:35:70:fc: 53:5a:60:cd:1c:aa:7c:11:e0:f3:dc:37:f4:a3:f5:64:d4:97: 68:47:7a:11:87:af:59:74:c3:ce:d2:13:b7:4b:cf:8e:ce:12: 54:4e:50:95:87:39:c0:cc:22:e2:a6:de:f9:d5:61:b1:e7:62: 12:99:f5:35:25:9d:27:11:ad:86:f2:af:4a:42:1c:f2:fa:81: c1:00:a4:5f -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUNJ6Vnggx5+SCKe9lv2giMjJeCXUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEFGREI3MjIyQjlFQkEzM0E2NUUyOUJCRTNGMjlEN0M1 RjRCMDlCOTAeFw0yNTEyMjEwMjM2MzlaFw0yNTEyMjIwNTQ1MzlaMDMxMTAvBgNV BAMTKDQ5RTBBNzdBMTYxRDAxQkYxQzk2MUQ5QTM4NjkzODA5MkU0MjRCNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWrxh76e/xL3gI+J9QFPpCeWeH sqTli98895h2W66TUEMkN1c4oP3qVorXUE018rkrXxlChqt4EPdrcKKViji9HJNQ zb/GQwOeMw0QNf7st5iTQeQlQO1RNQT9p6rvt4Zksoe+tc4F3yCF5mY4PVOhRe2D MdPUFoKHcem9BSFfpQwSq87yX2y/dJxNlUIo9EnNF5ZhZUPc84u39+9Ynw4fT/6B 1MJuQCkCaGKFiSlBYe5xpwZ+YLUo0QG3Mi7RKV9lvD+iSf1DqMo7I3dsI+OGMWOi P158Z6/8tevvzpapwpki+UbDyfMVPNCkV89e3vqv6Xj2QMnKgK3i0l7zl1wHAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUSeCnehYdAb8clh2aOGk4CS5CS1swHwYDVR0j BBgwFoAUCv23IiueujOmXim74/KdfF9LCbkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE0NzZkNjItOWNmYS00ODcxLWEyZDktZmFkZjU3ODFj MTFiLzMvMEFGREI3MjIyQjlFQkEzM0E2NUUyOUJCRTNGMjlEN0M1RjRCMDlCOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvNC8wQUZEQjcyMjJCOUVCQTMzQTY1RTI5QkJF M0YyOUQ3QzVGNEIwOUI5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcxNDc2ZDYyLTljZmEtNDg3MS1hMmQ5LWZhZGY1NzgxYzExYi8zLzBBRkRCNzIy MkI5RUJBMzNBNjVFMjlCQkUzRjI5RDdDNUY0QjA5QjkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCh1RU4 eQ+Cf3yXxMZ+ZLaK5RWnQ9IbvpfWKffE0iUVIHisqtKSxx4c+euLHmsoxTrMttZz KpVZhxnGltO5yeviDknOu1zFIldO3jwtojBkX/E8i4cnLv0juGrJfprcDeDNhtVp 1WAJ686gI/952RiWMxj1S0H9vZWVp9v1GRCtV+dBI9wIJ6xTIThUU6+CjtTYcJ3v GXsJHoc9BcZAze8MaXnJglNbyg7EEJThwRVZeiQ1cPxTWmDNHKp8EeDz3Df0o/Vk 1JdoR3oRh69ZdMPO0hO3S8+OzhJUTlCVhznAzCLipt751WGx52ISmfU1JZ0nEa2G 8q9KQhzy+oHBAKRf -----END CERTIFICATE-----Generated at Sun Dec 21 09:15:00 2025 by rpki-client