This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.mft File: AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.mft (raw, json) Hash identifier: 8NxoFuAz/ikOrkli6AuaHFAQPdTfpVnCmvOH5xw4mEQ= Subject key identifier: 61:72:F0:12:2E:0A:F8:01:9F:A4:BA:01:89:61:F9:C3:66:85:F4:43 Authority key identifier: AC:7F:9B:C3:0C:04:B3:A2:36:BD:F8:A4:30:86:9E:CA:1A:28:B3:24 Certificate issuer: /CN=AC7F9BC30C04B3A236BDF8A430869ECA1A28B324 Certificate serial: 67D0FC2C31ACCD5FE38E2C3AAC1AA21C4C1CF23E Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.mft Manifest number: 32 Signing time: Sun 21 Dec 2025 01:11:44 +0000 Manifest this update: Sun 21 Dec 2025 01:06:44 +0000 Manifest next update: Mon 22 Dec 2025 04:28:44 +0000 Files and hashes: 1: 3230362e35332e302e302f32342d3234203d3e20323038393135.roa (hash: WAuGwGix52TOMRQkik+jyE1rcWEn8673KCYGvlhnhXY=) 2: 326130643a643930353a3a2f33322d3332203d3e20323038393135.roa (hash: 2xUP0qecdhpogJJIXpKqaPO0rpU4gp47dCbQRpKimlY=) 3: AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.crl (hash: +kYigh+ypVeIJi1FOLsZjbW5nhYGtiqJC/CGoavlD3k=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.crl rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:d0:fc:2c:31:ac:cd:5f:e3:8e:2c:3a:ac:1a:a2:1c:4c:1c:f2:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC7F9BC30C04B3A236BDF8A430869ECA1A28B324 Validity Not Before: Dec 21 01:06:44 2025 GMT Not After : Dec 22 04:28:44 2025 GMT Subject: CN=6172F0122E0AF8019FA4BA018961F9C36685F443 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b6:c9:23:5f:44:ab:34:90:cc:ec:8f:16:c2: 02:36:63:32:77:c5:2f:77:dd:92:a9:ac:4d:fd:c8: f0:14:84:e0:36:8a:52:5f:3e:66:62:f8:ed:ab:8f: 00:5d:f3:ea:3d:63:84:23:18:cb:23:77:0c:03:d0: 67:cf:a5:09:ab:79:02:a4:06:65:aa:bd:91:13:8a: 1c:43:d3:03:a2:0b:87:a5:1c:4a:38:78:c8:50:8c: b9:a4:e5:23:24:ac:dc:fe:75:27:4a:76:a0:aa:ab: 0c:c1:51:b8:01:e5:2f:02:84:e5:fb:e0:09:07:f9: ee:cd:26:f2:4a:db:45:34:c6:fc:d7:ba:2b:f1:81: b3:60:57:80:e7:eb:cd:f0:39:b2:3a:ce:87:ea:b0: 2e:a1:15:26:2d:b8:02:44:bc:b6:94:7a:3f:46:88: 09:0e:85:e9:27:c2:c4:e0:d7:73:95:ff:b9:5a:5b: a4:76:c2:7e:cc:b6:87:8b:f7:bd:67:d6:10:c1:00: d2:0b:bc:20:ce:71:df:ce:b6:36:9f:8c:9e:5b:08: a5:15:6d:58:ae:00:b5:8b:e7:75:d9:c0:e2:3f:81: c9:96:54:1b:2f:d2:5b:3e:0f:cf:28:e5:d8:49:ed: 18:08:91:fe:e6:47:4b:59:20:cf:2f:09:b5:50:3c: d9:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:72:F0:12:2E:0A:F8:01:9F:A4:BA:01:89:61:F9:C3:66:85:F4:43 X509v3 Authority Key Identifier: keyid:AC:7F:9B:C3:0C:04:B3:A2:36:BD:F8:A4:30:86:9E:CA:1A:28:B3:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:64:65:50:b1:05:ab:8c:96:b9:76:f6:b6:71:3c:b2:28:0c: aa:6b:1f:b8:d3:54:78:73:5e:0c:66:c5:59:9d:f5:b5:a0:eb: e4:c3:42:20:e2:4e:d5:16:9b:37:0f:30:b6:66:f4:3c:dc:11: 52:64:52:29:09:cf:40:eb:c2:59:e3:c9:16:01:e7:ea:cb:57: 0f:73:a2:3a:49:5f:c9:75:c0:6a:7e:29:a2:93:2d:96:95:14: 25:11:74:c4:07:40:b5:77:50:e3:43:1d:7b:1e:50:41:a3:7d: ae:05:99:69:00:f2:eb:dc:af:6b:49:48:65:94:d0:2b:38:b0: 46:ce:2f:18:eb:8f:23:f2:65:08:17:ba:ff:cd:53:2e:44:66: 14:7f:38:f3:f2:d7:7d:80:26:90:e6:fa:2f:da:6a:93:74:68: 4d:ba:99:68:88:e9:06:65:7b:75:23:c5:ce:c1:e9:8e:71:65: b5:27:d0:4f:90:13:d9:c2:0a:73:37:97:48:fd:35:df:1a:dd: 5a:4d:2f:c5:92:62:5a:35:c6:9b:35:ed:3e:ed:f7:b4:43:ad: b5:85:d0:fd:e0:fd:fe:d7:f0:a1:b5:3f:f3:01:07:9b:a9:f1: d7:c0:98:48:17:47:0b:db:94:1e:4e:2b:93:a9:32:9b:28:64: 19:2b:b0:8f -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUZ9D8LDGszV/jjiw6rBqiHEwc8j4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUM3RjlCQzMwQzA0QjNBMjM2QkRGOEE0MzA4NjlFQ0Ex QTI4QjMyNDAeFw0yNTEyMjEwMTA2NDRaFw0yNTEyMjIwNDI4NDRaMDMxMTAvBgNV BAMTKDYxNzJGMDEyMkUwQUY4MDE5RkE0QkEwMTg5NjFGOUMzNjY4NUY0NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCttskjX0SrNJDM7I8WwgI2YzJ3 xS933ZKprE39yPAUhOA2ilJfPmZi+O2rjwBd8+o9Y4QjGMsjdwwD0GfPpQmreQKk BmWqvZETihxD0wOiC4elHEo4eMhQjLmk5SMkrNz+dSdKdqCqqwzBUbgB5S8ChOX7 4AkH+e7NJvJK20U0xvzXuivxgbNgV4Dn683wObI6zofqsC6hFSYtuAJEvLaUej9G iAkOheknwsTg13OV/7laW6R2wn7MtoeL971n1hDBANILvCDOcd/OtjafjJ5bCKUV bViuALWL53XZwOI/gcmWVBsv0ls+D88o5dhJ7RgIkf7mR0tZIM8vCbVQPNlxAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUYXLwEi4K+AGfpLoBiWH5w2aF9EMwHwYDVR0j BBgwFoAUrH+bwwwEs6I2vfikMIaeyhoosyQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRjY2I0YjAtZTMwZS00MjZjLTg0ZGMtNDY0ZmQxODk5 MTE2LzEvQUM3RjlCQzMwQzA0QjNBMjM2QkRGOEE0MzA4NjlFQ0ExQTI4QjMyNC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvQUM3RjlCQzMwQzA0QjNBMjM2QkRGOEE0MzA4NjlFQ0ExQTI4 QjMyNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGNjYjRiMC1l MzBlLTQyNmMtODRkYy00NjRmZDE4OTkxMTYvMS9BQzdGOUJDMzBDMDRCM0EyMzZC REY4QTQzMDg2OUVDQTFBMjhCMzI0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA2RlULEFq4yWuXb2tnE8 sigMqmsfuNNUeHNeDGbFWZ31taDr5MNCIOJO1RabNw8wtmb0PNwRUmRSKQnPQOvC WePJFgHn6stXD3OiOklfyXXAan4popMtlpUUJRF0xAdAtXdQ40Mdex5QQaN9rgWZ aQDy69yva0lIZZTQKziwRs4vGOuPI/JlCBe6/81TLkRmFH848/LXfYAmkOb6L9pq k3RoTbqZaIjpBmV7dSPFzsHpjnFltSfQT5AT2cIKczeXSP013xrdWk0vxZJiWjXG mzXtPu33tEOttYXQ/eD9/tfwobU/8wEHm6nx18CYSBdHC9uUHk4rk6kymyhkGSuw jw== -----END CERTIFICATE-----Generated at Sun Dec 21 06:26:16 2025 by rpki-client