This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft File: 637FD1BA3FED44454D6D7030247709D28DB3491A.mft (raw, json) Hash identifier: lR1bFUon+jd04m26UaT0+mpg55FISoBuez7K9VmqEmc= Subject key identifier: 96:30:16:FB:D5:E2:0D:3E:08:67:3C:9F:CD:1B:E6:5B:84:2E:70:77 Authority key identifier: 63:7F:D1:BA:3F:ED:44:45:4D:6D:70:30:24:77:09:D2:8D:B3:49:1A Certificate issuer: /CN=637fd1ba3fed44454d6d7030247709d28db3491a Certificate serial: 61914DED9098907BC4E1876AF03DCFAAD1CCFFF6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft Manifest number: 0419 Signing time: Fri 19 Dec 2025 01:57:33 +0000 Manifest this update: Fri 19 Dec 2025 01:52:33 +0000 Manifest next update: Sat 20 Dec 2025 04:56:33 +0000 Files and hashes: 1: 3133392e32382e32372e302f32342d3234203d3e20323036313530.roa (hash: spk6NtqPTGXoBo4XJMsULHBo1PCje3tyvN9b3jHB/pA=) 2: 3133392e32382e32342e302f32342d3234203d3e20323132363039.roa (hash: Zbml066pXi3G2h7cDhaY/zBOXtPP1DXZek0hCHsXFhc=) 3: 3133392e32382e32352e302f32342d3234203d3e20323030303137.roa (hash: KTt7IBC5OKuP6muE0/6zCxuIwEkqcnypdMUhBFAyx18=) 4: 637FD1BA3FED44454D6D7030247709D28DB3491A.crl (hash: n6ArXL0+jX8hBOEQMWXHMHm0NpqwbLjqy9PAQaQ7iVw=) 5: 3133392e32382e32342e302f32342d3234203d3e20323131343430.roa (hash: eR+xyo+zY+fM9l50cFs0swlGeIX2NljYGKvE5SQX83U=) 6: 3133392e32382e32352e302f32342d3234203d3e20323131343135.roa (hash: kj5wXeF4AQFWN9fpmE1MKtBmtMRLs1TA1rGuGr1+5eA=) 7: 3133392e32382e32362e302f32342d3234203d3e20313337343039.roa (hash: 4dsufrRZZT3ng/M0mUxRioQsmJP0ZwUerMNQTCdj11A=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.crl rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:56:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:91:4d:ed:90:98:90:7b:c4:e1:87:6a:f0:3d:cf:aa:d1:cc:ff:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=637fd1ba3fed44454d6d7030247709d28db3491a Validity Not Before: Dec 19 01:52:33 2025 GMT Not After : Dec 20 04:56:33 2025 GMT Subject: CN=963016FBD5E20D3E08673C9FCD1BE65B842E7077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:bb:26:af:a3:a6:e0:bb:4d:86:30:cc:ee:17: b7:ef:4b:87:62:63:d7:61:cf:6b:4a:28:1f:27:d9: e2:5b:ad:54:37:50:c8:4e:8b:c8:7b:75:2b:20:05: 8c:4b:ef:25:71:c8:cc:70:29:d8:ce:2e:47:b9:38: 4e:42:8a:f0:c8:c8:5a:99:cb:de:91:9d:92:60:79: 98:6e:64:91:09:43:9b:d1:66:70:f7:4f:af:0e:72: a1:bb:21:ed:a1:c9:a1:b9:c9:40:9e:b7:1c:ef:f2: 2f:81:3f:a5:7d:21:24:ce:7d:97:6a:d6:93:d3:7b: b9:6d:28:c2:ae:c6:64:e3:ce:db:4d:70:2e:aa:08: ec:61:17:96:96:00:1a:5c:1f:ef:4c:29:7d:13:56: 7e:37:de:7d:b3:4b:aa:88:9f:11:f4:61:48:8d:e5: 0f:44:06:19:46:32:f7:6e:94:68:3e:dd:4b:87:31: 38:07:0d:e2:57:59:f8:02:2e:1a:bc:96:5e:18:2a: 52:c6:93:6a:c2:7e:3a:6c:1d:0b:e1:d8:aa:be:bd: 2e:46:2b:67:d6:4b:ce:67:07:f1:bd:dc:45:5b:22: c1:86:6b:2c:c6:6f:04:bb:e6:f0:2f:cd:9b:15:f8: 41:bc:fa:ca:ff:bb:72:76:b3:ca:61:48:dd:1d:fe: e6:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:30:16:FB:D5:E2:0D:3E:08:67:3C:9F:CD:1B:E6:5B:84:2E:70:77 X509v3 Authority Key Identifier: keyid:63:7F:D1:BA:3F:ED:44:45:4D:6D:70:30:24:77:09:D2:8D:B3:49:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:e4:4b:a6:6d:ad:0f:bf:8e:ab:60:f5:b9:7f:0d:45:d2:2d: e6:fa:22:68:55:ae:99:c7:3b:ff:f9:53:eb:63:11:3c:81:92: f6:81:c3:c7:d4:97:ca:3b:e4:fd:01:d7:40:4e:1e:70:2f:8e: db:1b:ac:c9:e7:e2:29:61:57:d1:8e:75:62:6d:cd:d9:6e:6f: be:b4:4f:70:9e:c5:d1:bb:01:7a:79:85:ee:7d:62:63:8d:2c: cf:1a:f4:70:d7:90:8a:98:ce:eb:2c:73:09:5e:55:79:78:0c: 5a:26:99:90:ab:1a:68:bb:6a:d5:d7:58:10:b8:2a:52:07:d5: 48:c3:86:6c:08:55:51:f4:6f:63:55:aa:02:c3:af:06:55:26: ed:81:4e:94:6f:a8:04:86:f2:fa:79:98:0e:25:20:9f:93:03: bc:69:11:7d:54:b1:0f:46:88:3f:6c:f8:65:92:f8:2d:84:21: a7:9b:5a:7d:1c:1e:9a:3b:87:29:20:ee:14:79:2a:d7:f5:f3: 45:c3:b7:4b:b0:ed:43:0d:83:ca:ac:e8:f0:8f:7f:ce:ad:1c: 33:17:8b:ed:b8:9a:5b:ac:34:4d:bf:70:74:4d:1f:2b:7c:28: 9b:98:81:1a:39:d6:01:50:be:f4:2d:8f:93:57:ec:6d:d2:de: f9:5c:e0:4b -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUYZFN7ZCYkHvE4Ydq8D3PqtHM//YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjM3ZmQxYmEzZmVkNDQ0NTRkNmQ3MDMwMjQ3NzA5ZDI4 ZGIzNDkxYTAeFw0yNTEyMTkwMTUyMzNaFw0yNTEyMjAwNDU2MzNaMDMxMTAvBgNV BAMTKDk2MzAxNkZCRDVFMjBEM0UwODY3M0M5RkNEMUJFNjVCODQyRTcwNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXuyavo6bgu02GMMzuF7fvS4di Y9dhz2tKKB8n2eJbrVQ3UMhOi8h7dSsgBYxL7yVxyMxwKdjOLke5OE5CivDIyFqZ y96RnZJgeZhuZJEJQ5vRZnD3T68OcqG7Ie2hyaG5yUCetxzv8i+BP6V9ISTOfZdq 1pPTe7ltKMKuxmTjzttNcC6qCOxhF5aWABpcH+9MKX0TVn433n2zS6qInxH0YUiN 5Q9EBhlGMvdulGg+3UuHMTgHDeJXWfgCLhq8ll4YKlLGk2rCfjpsHQvh2Kq+vS5G K2fWS85nB/G93EVbIsGGayzGbwS75vAvzZsV+EG8+sr/u3J2s8phSN0d/uZhAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUljAW+9XiDT4IZzyfzRvmW4QucHcwHwYDVR0j BBgwFoAUY3/Ruj/tREVNbXAwJHcJ0o2zSRowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTk0ZGY3MTQtZDM3ZC00OTQyLThlOTQtOTFkZDg1M2Vm N2UzLzAvNjM3RkQxQkEzRkVENDQ0NTRENkQ3MDMwMjQ3NzA5RDI4REIzNDkxQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1kzX1J1al90UkVWTmJYQXdKSGNKMG8y elNSby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hOTRkZjcxNC1k MzdkLTQ5NDItOGU5NC05MWRkODUzZWY3ZTMvMC82MzdGRDFCQTNGRUQ0NDQ1NEQ2 RDcwMzAyNDc3MDlEMjhEQjM0OTFBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO+RLpm2tD7+Oq2D1uX8N RdIt5voiaFWumcc7//lT62MRPIGS9oHDx9SXyjvk/QHXQE4ecC+O2xusyefiKWFX 0Y51Ym3N2W5vvrRPcJ7F0bsBenmF7n1iY40szxr0cNeQipjO6yxzCV5VeXgMWiaZ kKsaaLtq1ddYELgqUgfVSMOGbAhVUfRvY1WqAsOvBlUm7YFOlG+oBIby+nmYDiUg n5MDvGkRfVSxD0aIP2z4ZZL4LYQhp5tafRwemjuHKSDuFHkq1/XzRcO3S7DtQw2D yqzo8I9/zq0cMxeL7biaW6w0Tb9wdE0fK3wom5iBGjnWAVC+9C2Pk1fsbdLe+Vzg Sw== -----END CERTIFICATE-----Generated at Fri Dec 19 09:59:03 2025 by rpki-client