This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft File: 3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft (raw, json) Hash identifier: T1uIaSswhtW/FglgMw4dlVcluj4Dk9xRAZ88dSp5JxQ= Subject key identifier: C5:93:11:A4:96:D2:B5:D9:FB:9A:84:0A:33:AD:C5:5E:47:ED:C7:8C Authority key identifier: 3F:CD:3A:83:9E:A1:41:7F:D9:88:F3:DD:FD:04:54:19:7F:AA:F4:7A Certificate issuer: /CN=324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b Certificate serial: 746B02873F6FD3CEDFE8523463010E945D95E514 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft Manifest number: 023B Signing time: Sat 20 Dec 2025 06:20:22 +0000 Manifest this update: Sat 20 Dec 2025 06:15:22 +0000 Manifest next update: Sun 21 Dec 2025 09:46:22 +0000 Files and hashes: 1: 323630323a663764653a3a2f34302d3438203d3e203236393534.roa (hash: nc0OfcCKdw/6xTqKkcylPBA4tjafxEa+iXIGeRNqKAA=) 2: 3133302e31322e39332e302f32342d3234203d3e203236393534.roa (hash: vVLMMj/up4t8BoR2x4+9T6jLFKzm1RRXCwaLQiGBGUU=) 3: 3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl (hash: KvmPOTiVsdGMETt+uuDEVo43/hX4E8oBEhZWKJULNkc=) 4: 32332e3139312e34302e302f32342d3234203d3e203236393534.roa (hash: S3jzo3eG6y4PI2K8QRCs4He73uG95vDRz8jaxjn2rIA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 09:46:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:6b:02:87:3f:6f:d3:ce:df:e8:52:34:63:01:0e:94:5d:95:e5:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b Validity Not Before: Dec 20 06:15:22 2025 GMT Not After : Dec 21 09:46:22 2025 GMT Subject: CN=C59311A496D2B5D9FB9A840A33ADC55E47EDC78C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:5f:2a:c8:0d:40:34:d9:95:ca:43:a7:4f:07: e1:a1:08:4b:0e:62:a2:d4:53:17:21:08:fb:8b:4e: 26:2e:a1:59:25:29:f8:68:87:d4:ab:a1:21:6c:93: 9a:2a:6a:fb:82:73:f2:82:79:65:ae:94:fb:8d:33: f8:01:62:4b:c4:38:f6:5e:3f:52:6f:0f:8d:21:6b: 5f:5f:a1:27:2e:50:c5:53:bb:c1:f0:94:d2:69:65: 18:60:58:e3:6b:e3:a7:7c:7e:1e:61:f4:d1:07:ae: e7:cf:9a:0f:77:ca:f2:e8:27:cf:bc:71:24:fa:19: c1:47:22:db:21:c7:c4:77:72:a0:aa:38:71:fb:76: 6e:85:69:a2:f4:87:e8:da:79:bc:74:03:47:ac:aa: 60:44:dc:6c:5c:e1:0c:df:d8:e5:22:2e:9f:0d:24: e8:0f:f0:30:b4:f4:d0:42:de:06:6a:57:ee:29:6d: 1d:30:93:fa:4e:fe:30:18:e5:eb:16:fc:1d:58:a6: eb:4a:d9:37:17:cc:d6:7f:2c:69:52:e8:96:3c:e2: 1d:95:e3:55:38:ff:da:5d:f5:6e:f7:af:f0:34:a8: b4:d8:40:bf:04:b0:52:e5:51:93:7c:94:28:82:35: 5b:bc:d8:1a:e2:55:16:ad:71:8b:88:74:45:92:b4: d8:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:93:11:A4:96:D2:B5:D9:FB:9A:84:0A:33:AD:C5:5E:47:ED:C7:8C X509v3 Authority Key Identifier: keyid:3F:CD:3A:83:9E:A1:41:7F:D9:88:F3:DD:FD:04:54:19:7F:AA:F4:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:a1:e2:1d:6d:31:99:f0:61:1f:5b:0b:73:8f:34:08:de:9b: e6:10:45:7a:fc:fd:b1:81:dd:1c:de:36:78:5d:b4:7a:05:05: b1:51:a0:12:47:64:dc:6d:ed:4f:d9:ab:92:7a:50:ec:67:56: 0d:0e:a0:ba:31:f8:c6:92:34:00:96:52:31:d7:2d:db:02:1f: 29:42:ba:d7:08:93:cf:1f:d6:4a:19:b4:64:fd:67:17:d7:15: de:49:73:4d:cc:c1:69:63:df:fd:d5:78:9e:cc:dd:b7:26:c1: 0c:43:1d:c6:05:49:df:a8:22:af:56:9e:05:a3:4e:4d:d3:0d: 01:46:f4:46:cf:84:73:95:93:6d:9b:71:e7:e4:d8:f4:b4:13: 70:e1:fe:34:aa:aa:e0:56:a9:83:75:21:52:6e:75:17:f6:55: cf:bb:a5:7b:8c:53:50:86:bb:82:d9:d7:36:ed:8a:2a:3e:1f: 17:bb:a3:dc:fb:c8:91:ff:78:03:94:ad:2a:ef:77:c9:c2:82: 86:b9:8f:78:d6:e0:d2:2a:b8:d2:86:22:24:38:ed:96:53:6e: b3:10:bf:34:13:1e:d4:79:c9:a8:53:2c:fe:ca:7f:a4:d5:e5: 09:aa:6d:0d:bf:23:eb:29:28:ae:26:b6:46:6c:1a:44:f6:a9: 30:ba:d7:61 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUdGsChz9v087f6FI0YwEOlF2V5RQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMzI0ZmZlMzlhOThhMDE0NmI1MDNkOGEwMTVjYTJjMmU3 NjdjZjNkMGI5ZmRlNjIzMWIwHhcNMjUxMjIwMDYxNTIyWhcNMjUxMjIxMDk0NjIy WjAzMTEwLwYDVQQDEyhDNTkzMTFBNDk2RDJCNUQ5RkI5QTg0MEEzM0FEQzU1RTQ3 RURDNzhDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0l8qyA1ANNmV ykOnTwfhoQhLDmKi1FMXIQj7i04mLqFZJSn4aIfUq6EhbJOaKmr7gnPygnllrpT7 jTP4AWJLxDj2Xj9Sbw+NIWtfX6EnLlDFU7vB8JTSaWUYYFjja+OnfH4eYfTRB67n z5oPd8ry6CfPvHEk+hnBRyLbIcfEd3Kgqjhx+3ZuhWmi9Ifo2nm8dANHrKpgRNxs XOEM39jlIi6fDSToD/AwtPTQQt4GalfuKW0dMJP6Tv4wGOXrFvwdWKbrStk3F8zW fyxpUuiWPOIdleNVOP/aXfVu96/wNKi02EC/BLBS5VGTfJQogjVbvNga4lUWrXGL iHRFkrTYTwIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFMWTEaSW0rXZ+5qECjOtxV5H 7ceMMB8GA1UdIwQYMBaAFD/NOoOeoUF/2Yjz3f0EVBl/qvR6MA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5 LTBhYjcwZTQ4MTViYi8xLzNGQ0QzQTgzOUVBMTQxN0ZEOTg4RjNEREZEMDQ1NDE5 N0ZBQUY0N0EuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYt NDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81MWNkOTlmNy0yZjQyLTRkZWMtYjJjNi0w OWJhZmFhMzc4MGUvMzI0ZmZlMzlhOThhMDE0NmI1MDNkOGEwMTVjYTJjMmU3Njdj ZjNkMGI5ZmRlNjIzMWIuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv NzNiOGVjMDEtOGJhNS00NzlmLWEyMjktMGFiNzBlNDgxNWJiLzEvM0ZDRDNBODM5 RUExNDE3RkQ5ODhGM0RERkQwNDU0MTk3RkFBRjQ3QS5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJOh4h1t MZnwYR9bC3OPNAjem+YQRXr8/bGB3RzeNnhdtHoFBbFRoBJHZNxt7U/Zq5J6UOxn Vg0OoLox+MaSNACWUjHXLdsCHylCutcIk88f1koZtGT9ZxfXFd5Jc03MwWlj3/3V eJ7M3bcmwQxDHcYFSd+oIq9WngWjTk3TDQFG9EbPhHOVk22bcefk2PS0E3Dh/jSq quBWqYN1IVJudRf2Vc+7pXuMU1CGu4LZ1zbtiio+Hxe7o9z7yJH/eAOUrSrvd8nC goa5j3jW4NIquNKGIiQ47ZZTbrMQvzQTHtR5yahTLP7Kf6TV5QmqbQ2/I+spKK4m tkZsGkT2qTC612E= -----END CERTIFICATE-----Generated at Sat Dec 20 18:50:43 2025 by rpki-client