This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft File: B3D0280F500695A43204251C9830454CA8A2E7AC.mft (raw, json) Hash identifier: lkdO63CXbkSMZdKcMkUvU8CPdDkFbZa7Bg2LOpfTDBk= Subject key identifier: EC:98:86:85:4C:80:36:3F:3B:C4:6B:F3:5A:BD:76:7E:F3:EA:54:00 Authority key identifier: B3:D0:28:0F:50:06:95:A4:32:04:25:1C:98:30:45:4C:A8:A2:E7:AC Certificate issuer: /CN=b3d0280f500695a43204251c9830454ca8a2e7ac Certificate serial: 360F2B56CA1FCB3EB9D181F7E04039870F6D39AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft Manifest number: 0315 Signing time: Sat 20 Dec 2025 07:12:34 +0000 Manifest this update: Sat 20 Dec 2025 07:07:34 +0000 Manifest next update: Sun 21 Dec 2025 09:58:34 +0000 Files and hashes: 1: 3138352e3138362e32352e302f32342d3234203d3e203135343430.roa (hash: zbKaWYwmjPPC167P5YL6I94JcPZEWN0HKnmqpfcR9u4=) 2: 3138352e3138362e32362e302f32342d3234203d3e20323135373033.roa (hash: 64uxD3jQtXWcavfYFljDhJHJgbOPhGll/0DiDk/jIuA=) 3: B3D0280F500695A43204251C9830454CA8A2E7AC.crl (hash: eLBtoZdc3sukaTZkyxFDd3XuOP0cawpH7GoN1PyvQm4=) 4: 3138352e3138362e32352e302f32342d3234203d3e20323133373732.roa (hash: KbS5MjAty6bkNu2TCkQpJN6TOq9xU7ustWBHWVtQeSQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.crl rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:58:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:0f:2b:56:ca:1f:cb:3e:b9:d1:81:f7:e0:40:39:87:0f:6d:39:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3d0280f500695a43204251c9830454ca8a2e7ac Validity Not Before: Dec 20 07:07:34 2025 GMT Not After : Dec 21 09:58:34 2025 GMT Subject: CN=EC9886854C80363F3BC46BF35ABD767EF3EA5400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:7e:53:d8:f1:ca:e6:28:c4:59:b3:cd:c7:bf: aa:f4:19:28:8d:fb:8d:a3:8d:f4:0e:e5:06:4c:5a: fd:39:ee:9a:67:b6:40:89:79:5c:5e:e1:fb:82:d8: 31:b0:fb:e4:a4:b4:92:da:60:4a:7f:59:c5:a7:cb: d7:b2:a8:4b:f3:e2:18:7f:5d:fc:ad:a7:4a:48:63: ff:e0:f7:eb:d9:c0:bd:0c:d0:e8:ab:d9:9d:ee:41: 97:b2:42:9c:c4:45:22:b6:85:0a:18:8b:ad:31:5b: 83:64:83:23:77:61:63:9a:e6:cd:d7:18:90:19:93: 2c:e6:ec:af:e1:eb:14:42:ea:4b:58:b7:8f:ff:3e: 5a:e9:2f:72:65:29:f8:06:bd:ac:be:79:43:f1:29: fa:26:07:20:33:a7:a6:26:1a:37:bd:11:30:27:f5: 04:cf:f9:89:44:f7:26:e3:49:e7:fc:bb:fd:20:37: 9e:e6:5f:bd:72:d2:7e:b0:b6:4f:db:86:dc:f1:cb: df:f2:af:5a:c1:06:87:97:6a:26:e2:d7:29:4b:eb: de:aa:aa:38:db:8a:54:02:b6:9a:c2:3c:39:cd:31: 85:ee:74:d2:da:1e:e8:53:fb:93:47:34:3d:df:cd: f5:d6:27:80:a4:ce:d8:f5:42:4f:2a:68:95:8b:ef: 6e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:98:86:85:4C:80:36:3F:3B:C4:6B:F3:5A:BD:76:7E:F3:EA:54:00 X509v3 Authority Key Identifier: keyid:B3:D0:28:0F:50:06:95:A4:32:04:25:1C:98:30:45:4C:A8:A2:E7:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:2c:34:5b:51:d3:fe:41:56:3e:1a:d1:16:4f:3e:b6:93:0c: 61:88:75:83:ef:db:26:f2:dd:c8:2c:87:6d:14:66:b7:11:35: 03:ff:9b:ae:e4:be:37:0e:07:84:11:99:d3:07:a6:92:96:4e: 90:01:d5:e7:97:8c:ad:de:5e:41:54:b0:13:18:76:35:a6:21: fc:9a:3e:b3:b2:a5:66:19:36:e5:9c:63:29:36:ae:db:4e:43: a6:bf:dd:b9:1e:0c:b2:74:1e:0a:a4:b1:3f:b0:e8:49:47:1e: 2d:b4:be:83:b4:3a:e1:57:41:72:db:62:f5:56:0a:10:21:32: 24:17:e8:2b:ee:4b:bd:92:39:e2:b0:dd:10:4f:f8:4c:6c:a0: 29:04:7a:f1:aa:7d:a2:c8:00:31:5d:34:30:5c:8e:48:c3:45: fe:c5:fc:8e:41:1e:df:df:9f:c8:08:99:ad:03:9e:e8:19:e3: 96:40:01:ef:c8:d8:16:47:2f:96:69:b0:69:80:a7:0f:f2:cc: 67:9c:9b:a9:aa:91:b6:b1:38:82:52:33:c7:cc:79:59:ce:59: 3a:cf:8e:4f:5a:3c:ca:c3:ca:42:4c:b4:1f:47:18:12:c6:40: 11:c2:91:c7:c3:bd:6c:9f:fd:a4:82:af:75:50:1d:70:94:f2: 8a:f6:db:df -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUNg8rVsofyz650YH34EA5hw9tOawwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjNkMDI4MGY1MDA2OTVhNDMyMDQyNTFjOTgzMDQ1NGNh OGEyZTdhYzAeFw0yNTEyMjAwNzA3MzRaFw0yNTEyMjEwOTU4MzRaMDMxMTAvBgNV BAMTKEVDOTg4Njg1NEM4MDM2M0YzQkM0NkJGMzVBQkQ3NjdFRjNFQTU0MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpflPY8crmKMRZs83Hv6r0GSiN +42jjfQO5QZMWv057ppntkCJeVxe4fuC2DGw++SktJLaYEp/WcWny9eyqEvz4hh/ Xfytp0pIY//g9+vZwL0M0Oir2Z3uQZeyQpzERSK2hQoYi60xW4NkgyN3YWOa5s3X GJAZkyzm7K/h6xRC6ktYt4//PlrpL3JlKfgGvay+eUPxKfomByAzp6YmGje9ETAn 9QTP+YlE9ybjSef8u/0gN57mX71y0n6wtk/bhtzxy9/yr1rBBoeXaibi1ylL696q qjjbilQCtprCPDnNMYXudNLaHuhT+5NHND3fzfXWJ4Ckztj1Qk8qaJWL726DAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU7JiGhUyANj87xGvzWr12fvPqVAAwHwYDVR0j BBgwFoAUs9AoD1AGlaQyBCUcmDBFTKii56wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODdhZTI1ZjMtNzA2Yi00N2VkLWJiNzQtNDY2ODRhZTBl ZjJiLzAvQjNEMDI4MEY1MDA2OTVBNDMyMDQyNTFDOTgzMDQ1NENBOEEyRTdBQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3M5QW9EMUFHbGFReUJDVWNtREJGVEtp aTU2dy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84N2FlMjVmMy03 MDZiLTQ3ZWQtYmI3NC00NjY4NGFlMGVmMmIvMC9CM0QwMjgwRjUwMDY5NUE0MzIw NDI1MUM5ODMwNDU0Q0E4QTJFN0FDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACSw0W1HT/kFWPhrRFk8+ tpMMYYh1g+/bJvLdyCyHbRRmtxE1A/+bruS+Nw4HhBGZ0wemkpZOkAHV55eMrd5e QVSwExh2NaYh/Jo+s7KlZhk25ZxjKTau205Dpr/duR4MsnQeCqSxP7DoSUceLbS+ g7Q64VdBctti9VYKECEyJBfoK+5LvZI54rDdEE/4TGygKQR68ap9osgAMV00MFyO SMNF/sX8jkEe39+fyAiZrQOe6BnjlkAB78jYFkcvlmmwaYCnD/LMZ5ybqaqRtrE4 glIzx8x5Wc5ZOs+OT1o8ysPKQky0H0cYEsZAEcKRx8O9bJ/9pIKvdVAdcJTyivbb 3w== -----END CERTIFICATE-----Generated at Sat Dec 20 22:08:44 2025 by rpki-client