This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft File: D36546790928F44FF74C564231471FA1D8D2A97B.mft (raw, json) Hash identifier: FK/hCioEXTy50m3D3V68DSXsxLAe6iHcETB83zDgwmI= Subject key identifier: FC:02:2D:10:93:2F:17:0C:81:5B:ED:15:B4:D4:EE:B4:1D:4B:8D:18 Authority key identifier: D3:65:46:79:09:28:F4:4F:F7:4C:56:42:31:47:1F:A1:D8:D2:A9:7B Certificate issuer: /CN=D36546790928F44FF74C564231471FA1D8D2A97B Certificate serial: 2FFD5CEF4D88A0BC7FFAE86A5B33FB479E70A345 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D36546790928F44FF74C564231471FA1D8D2A97B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft Manifest number: 3A Signing time: Sat 20 Dec 2025 16:07:12 +0000 Manifest this update: Sat 20 Dec 2025 16:02:12 +0000 Manifest next update: Sun 21 Dec 2025 19:52:12 +0000 Files and hashes: 1: D36546790928F44FF74C564231471FA1D8D2A97B.crl (hash: lqHM2GpENfMXt9npSK8uQv3L2OsYjjFz+njSeuz+zng=) 2: 326130363a313238333a626434303a3a2f34322d313238203d3e20323130373936.roa (hash: Uw0Yd63FHiLbrVWXi+u/Khr5x1SAZF46bRDWajH7ZJ4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.crl rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D36546790928F44FF74C564231471FA1D8D2A97B.cer rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:25:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:fd:5c:ef:4d:88:a0:bc:7f:fa:e8:6a:5b:33:fb:47:9e:70:a3:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D36546790928F44FF74C564231471FA1D8D2A97B Validity Not Before: Dec 20 16:02:12 2025 GMT Not After : Dec 21 19:52:12 2025 GMT Subject: CN=FC022D10932F170C815BED15B4D4EEB41D4B8D18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:06:85:33:a2:59:6a:38:3f:fa:7c:31:1d:03: 75:ca:9e:78:a3:db:04:86:a4:84:c6:89:64:67:97: 1a:e2:53:5a:e8:74:5c:70:30:4d:f8:8b:52:07:30: 84:15:de:8d:6a:fe:d0:4b:37:d8:7e:fc:07:33:04: 20:62:1b:2b:c2:a7:97:82:87:f9:91:c8:33:0c:d7: 79:71:4b:1c:9d:ef:4e:9c:5a:7a:6d:16:40:1f:d4: a2:7a:48:47:7f:08:8d:9d:9b:17:ad:2c:e9:e2:1e: 6e:29:ff:e3:d4:81:9b:30:cc:30:f3:52:be:e1:0f: 65:bf:7f:93:f0:8e:72:5b:46:0f:bb:d6:dc:ce:1a: ab:61:20:1d:91:04:9b:4f:99:fe:11:39:bb:3b:25: 7d:7a:6a:d3:a0:3f:c2:d6:ec:21:53:39:67:e6:9e: b7:af:a8:56:1f:84:bf:e8:d7:d9:3a:7d:82:ef:0b: 4a:d9:6f:30:3c:c4:6c:0e:8d:0b:05:25:83:e0:ae: b6:d5:36:6a:ac:3d:e4:ba:f7:48:95:94:aa:29:38: 3b:e8:45:91:db:a6:6c:a8:7a:c9:aa:65:d4:2d:6d: a3:a4:0e:c2:43:06:1c:b1:51:7e:ef:aa:56:42:1f: 68:a6:0e:29:34:9e:29:dd:8b:60:9b:21:6a:56:30: 46:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:02:2D:10:93:2F:17:0C:81:5B:ED:15:B4:D4:EE:B4:1D:4B:8D:18 X509v3 Authority Key Identifier: keyid:D3:65:46:79:09:28:F4:4F:F7:4C:56:42:31:47:1F:A1:D8:D2:A9:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D36546790928F44FF74C564231471FA1D8D2A97B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:d0:bd:59:04:f5:6e:88:65:fc:8a:a4:5b:e2:1c:9f:c1:78: ad:7f:93:81:29:8c:c5:d3:da:12:f9:a5:7a:48:e5:81:c2:26: 1f:ae:53:28:89:88:79:90:dc:82:7e:0c:5a:d5:d4:94:7a:63: e1:30:57:bf:ab:02:e3:e8:54:f5:ff:e8:d7:ea:48:5e:71:c5: c9:e3:3c:b8:10:32:e5:97:e5:10:a3:ad:00:da:71:99:9a:54: bd:9f:c2:71:e8:8b:a3:22:07:6a:d7:fc:85:71:30:aa:0a:a6: 04:53:d5:ad:c0:f5:8e:06:76:31:5d:1a:12:af:9d:75:d0:c1: 4e:d9:b8:43:b8:f1:92:e8:44:99:ab:da:58:9b:24:dd:13:90: c4:96:27:f0:cd:41:a7:8e:47:e2:76:bf:ab:c6:72:09:a5:d0: 8c:8e:28:50:60:6b:8a:f5:c3:e5:91:78:16:17:77:c3:5a:57: 67:5f:ab:be:e7:6a:79:28:c5:87:96:0c:64:13:47:6c:09:08: 7d:33:f2:f4:be:41:cd:c4:d7:7b:fa:d6:57:9e:91:a9:47:4d: a3:62:7c:bf:d5:17:ea:c3:16:ee:f1:58:9c:5a:3a:ce:3c:ce: 91:54:d9:86:7d:b4:5e:3e:a9:60:11:e4:46:2b:da:52:c5:05: fb:0b:bd:8b -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUL/1c702IoLx/+uhqWzP7R55wo0UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM2NTQ2NzkwOTI4RjQ0RkY3NEM1NjQyMzE0NzFGQTFE OEQyQTk3QjAeFw0yNTEyMjAxNjAyMTJaFw0yNTEyMjExOTUyMTJaMDMxMTAvBgNV BAMTKEZDMDIyRDEwOTMyRjE3MEM4MTVCRUQxNUI0RDRFRUI0MUQ0QjhEMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXBoUzollqOD/6fDEdA3XKnnij 2wSGpITGiWRnlxriU1rodFxwME34i1IHMIQV3o1q/tBLN9h+/AczBCBiGyvCp5eC h/mRyDMM13lxSxyd706cWnptFkAf1KJ6SEd/CI2dmxetLOniHm4p/+PUgZswzDDz Ur7hD2W/f5PwjnJbRg+71tzOGqthIB2RBJtPmf4RObs7JX16atOgP8LW7CFTOWfm nrevqFYfhL/o19k6fYLvC0rZbzA8xGwOjQsFJYPgrrbVNmqsPeS690iVlKopODvo RZHbpmyoesmqZdQtbaOkDsJDBhyxUX7vqlZCH2imDik0nindi2CbIWpWMEapAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU/AItEJMvFwyBW+0VtNTutB1LjRgwHwYDVR0j BBgwFoAU02VGeQko9E/3TFZCMUcfodjSqXswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjg4NDQzMTgtMzVkNy00ODJlLWJiZDUtYjYyNGNmMGIy MDQxLzEvRDM2NTQ2NzkwOTI4RjQ0RkY3NEM1NjQyMzE0NzFGQTFEOEQyQTk3Qi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJiYi1mMDQ4LTRk ZTEtOTIwNi04ZDQwZjA3MTgwOGIvNi9EMzY1NDY3OTA5MjhGNDRGRjc0QzU2NDIz MTQ3MUZBMUQ4RDJBOTdCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2I4ODQ0MzE4LTM1ZDctNDgyZS1iYmQ1LWI2MjRjZjBiMjA0MS8xL0QzNjU0Njc5 MDkyOEY0NEZGNzRDNTY0MjMxNDcxRkExRDhEMkE5N0IubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBP0L1Z BPVuiGX8iqRb4hyfwXitf5OBKYzF09oS+aV6SOWBwiYfrlMoiYh5kNyCfgxa1dSU emPhMFe/qwLj6FT1/+jX6kheccXJ4zy4EDLll+UQo60A2nGZmlS9n8Jx6IujIgdq 1/yFcTCqCqYEU9WtwPWOBnYxXRoSr5110MFO2bhDuPGS6ESZq9pYmyTdE5DElifw zUGnjkfidr+rxnIJpdCMjihQYGuK9cPlkXgWF3fDWldnX6u+52p5KMWHlgxkE0ds CQh9M/L0vkHNxNd7+tZXnpGpR02jYny/1Rfqwxbu8VicWjrOPM6RVNmGfbRePqlg EeRGK9pSxQX7C72L -----END CERTIFICATE-----Generated at Sat Dec 20 20:42:39 2025 by rpki-client