This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.mft File: 5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.mft (raw, json) Hash identifier: JcBdRKsZ+7nhApbgRVlcEjW16iy8O1w+dvw54XY5EsI= Subject key identifier: FD:5C:59:65:5B:BF:04:44:66:71:DF:7F:30:7E:67:E8:A2:57:D2:B0 Authority key identifier: 5F:BB:D0:F3:D7:B8:1E:8A:FD:99:E5:A3:4B:67:83:4D:D3:CD:13:C9 Certificate issuer: /CN=5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9 Certificate serial: 3C07B861991CDC9BDDF104DF2DB55306F8DC3E54 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.mft Manifest number: 2E Signing time: Fri 19 Dec 2025 22:25:59 +0000 Manifest this update: Fri 19 Dec 2025 22:20:59 +0000 Manifest next update: Sat 20 Dec 2025 22:32:59 +0000 Files and hashes: 1: 326130363a313238333a383966303a3a2f34342d3434203d3e20323134303333.roa (hash: uXHhm0ZjjPodrKnjp4qW+YTDv1/Z29fczrFjmi+w+J4=) 2: 326130363a313238333a383930303a3a2f34302d3430203d3e20323133343133.roa (hash: 0gYE6skrisUrM06D53bvZrZFAv0EfqoV+nCI7G9OKOs=) 3: 326130363a313238333a383930613a3a2f34382d3438203d3e20323136333637.roa (hash: HuUH/JYH1vthyPEN3kexTHE/fhKQ1xn353p6qv+mYJg=) 4: 326130363a313238333a383930333a3a2f34382d3438203d3e20323133343133.roa (hash: hfsX7O4ssow2aXydnwN9zYa6SNNgkh4xqDb4M6RjByw=) 5: 326130363a313238333a383930313a3a2f34382d3438203d3e20323134323035.roa (hash: cPNCLrbwdymPiqlNCY/iKCMb0/zZMwnLL5M7UNRh5H0=) 6: 326130363a313238333a383930343a3a2f34382d3438203d3e20323134373632.roa (hash: +ucDYfCsKINgleLYp642WIR5LEPN0kWQYDVnDQaA83s=) 7: 5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.crl (hash: AdlEHpEl48PFlI16Zo+HPr1sMG7hstCd0+Wy5bbNA+Y=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.crl rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.mft rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:07:b8:61:99:1c:dc:9b:dd:f1:04:df:2d:b5:53:06:f8:dc:3e:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9 Validity Not Before: Dec 19 22:20:59 2025 GMT Not After : Dec 20 22:32:59 2025 GMT Subject: CN=FD5C59655BBF04446671DF7F307E67E8A257D2B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a4:ef:2c:b9:82:16:f3:9f:4d:28:7f:cc:bd: 1b:36:b4:18:d2:a5:f2:32:e3:d3:99:72:dc:ae:7f: 5c:a2:23:30:94:d1:12:14:2a:2b:83:a8:0f:9f:6c: 4c:df:29:28:1d:74:39:bb:03:4a:d6:5a:a7:00:8e: f0:fe:4c:41:b2:7c:93:1f:9c:24:fc:ef:ef:52:0e: 5d:5f:c0:28:08:9d:d9:1d:2e:42:e9:e9:56:ef:85: 9b:01:3d:3f:c2:f1:d3:bb:10:8b:27:5c:d1:c8:ca: 84:6b:d4:df:12:d1:cf:61:21:fd:0d:8f:5c:ee:43: 87:66:11:7d:77:06:61:94:3b:f1:42:f0:11:1a:0d: f0:90:3f:d7:91:2c:c9:b1:1e:fe:5a:52:92:16:47: 47:9b:3b:e9:6b:f9:1b:8f:1f:05:25:0c:53:3b:14: f6:1d:79:77:2d:01:05:c9:1c:bf:3d:c2:df:b6:35: 92:93:4f:d6:d2:81:8c:69:97:65:bc:0c:59:18:d4: ce:61:02:c8:f1:c0:41:1a:26:1c:eb:a0:1c:9d:8c: 0c:36:f3:44:17:a8:0d:33:09:8b:79:85:e8:a3:a2: d2:0e:0e:b2:bf:6d:40:db:ee:90:a1:f1:43:15:15: 39:a9:e5:45:88:6f:c5:5a:0a:2f:51:1b:99:df:7e: de:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:5C:59:65:5B:BF:04:44:66:71:DF:7F:30:7E:67:E8:A2:57:D2:B0 X509v3 Authority Key Identifier: keyid:5F:BB:D0:F3:D7:B8:1E:8A:FD:99:E5:A3:4B:67:83:4D:D3:CD:13:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:2e:bf:0f:eb:ef:92:1f:2b:23:79:37:29:4f:6f:83:6b:cf: e0:23:cf:a5:90:5c:fb:e5:80:42:28:af:78:3e:b1:ca:c3:2c: 73:b8:d6:2b:c1:ff:c0:8b:55:57:56:a9:e0:3a:06:a5:51:d9: 7b:77:d7:d3:58:a4:90:5b:31:8f:18:09:48:55:4a:49:bc:28: 13:b9:ed:99:de:1c:b8:a9:6e:81:2d:d5:9e:a2:f3:65:8a:f6: 75:2b:4b:30:79:3d:07:f5:31:1e:ff:4b:6b:40:7b:e7:d1:ea: 09:b1:e6:c2:b3:58:9f:4f:cb:2d:27:65:0f:55:58:86:10:45: ef:e1:8a:25:fa:5d:09:86:8c:60:a7:ae:ac:16:5d:70:30:22: 1f:ca:e5:46:9f:a9:16:8e:27:df:fe:77:e2:27:fa:df:d2:16: 33:6d:50:ec:b5:93:b4:12:a6:74:3b:bd:ed:6f:06:65:1e:20: ab:72:bc:93:8f:37:63:10:d8:50:bb:1b:39:99:6d:2d:56:df: e5:71:20:5c:21:f9:71:7b:90:53:b0:a6:0a:ee:41:12:b5:ee: 76:cb:3c:70:12:69:be:26:61:ed:2c:c7:0d:0f:cb:cb:e7:9f: 16:a1:3c:47:dc:1c:a7:38:a2:8f:93:77:3f:83:36:c8:5a:b6: 59:d9:1d:2c -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUPAe4YZkc3Jvd8QTfLbVTBvjcPlQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZCQkQwRjNEN0I4MUU4QUZEOTlFNUEzNEI2NzgzNERE M0NEMTNDOTAeFw0yNTEyMTkyMjIwNTlaFw0yNTEyMjAyMjMyNTlaMDMxMTAvBgNV BAMTKEZENUM1OTY1NUJCRjA0NDQ2NjcxREY3RjMwN0U2N0U4QTI1N0QyQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChpO8suYIW859NKH/MvRs2tBjS pfIy49OZctyuf1yiIzCU0RIUKiuDqA+fbEzfKSgddDm7A0rWWqcAjvD+TEGyfJMf nCT87+9SDl1fwCgIndkdLkLp6VbvhZsBPT/C8dO7EIsnXNHIyoRr1N8S0c9hIf0N j1zuQ4dmEX13BmGUO/FC8BEaDfCQP9eRLMmxHv5aUpIWR0ebO+lr+RuPHwUlDFM7 FPYdeXctAQXJHL89wt+2NZKTT9bSgYxpl2W8DFkY1M5hAsjxwEEaJhzroBydjAw2 80QXqA0zCYt5heijotIODrK/bUDb7pCh8UMVFTmp5UWIb8VaCi9RG5nfft5xAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU/VxZZVu/BERmcd9/MH5n6KJX0rAwHwYDVR0j BBgwFoAUX7vQ89e4Hor9meWjS2eDTdPNE8kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzhlNjE2MTEtM2IwYi00MWNlLTg4Y2QtZTU2MDM1M2Y2 OTQyLzEvNUZCQkQwRjNEN0I4MUU4QUZEOTlFNUEzNEI2NzgzNEREM0NEMTNDOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJiYi1mMDQ4LTRk ZTEtOTIwNi04ZDQwZjA3MTgwOGIvNi81RkJCRDBGM0Q3QjgxRThBRkQ5OUU1QTM0 QjY3ODM0REQzQ0QxM0M5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzc4ZTYxNjExLTNiMGItNDFjZS04OGNkLWU1NjAzNTNmNjk0Mi8xLzVGQkJEMEYz RDdCODFFOEFGRDk5RTVBMzRCNjc4MzRERDNDRDEzQzkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCeLr8P 6++SHysjeTcpT2+Da8/gI8+lkFz75YBCKK94PrHKwyxzuNYrwf/Ai1VXVqngOgal Udl7d9fTWKSQWzGPGAlIVUpJvCgTue2Z3hy4qW6BLdWeovNlivZ1K0sweT0H9TEe /0trQHvn0eoJsebCs1ifT8stJ2UPVViGEEXv4Yol+l0Jhoxgp66sFl1wMCIfyuVG n6kWjiff/nfiJ/rf0hYzbVDstZO0EqZ0O73tbwZlHiCrcryTjzdjENhQuxs5mW0t Vt/lcSBcIflxe5BTsKYK7kESte52yzxwEmm+JmHtLMcND8vL558WoTxH3BynOKKP k3c/gzbIWrZZ2R0s -----END CERTIFICATE-----Generated at Sat Dec 20 01:38:33 2025 by rpki-client