This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/1/497EA28AB98266097873E53DF89DA97C44267B14.mft File: 497EA28AB98266097873E53DF89DA97C44267B14.mft (raw, json) Hash identifier: bf9uH1hElVBkW08R6es+dVq3UPaNvP5E8Mf/SvBwKlA= Subject key identifier: 83:EF:31:AC:49:C3:7E:1B:50:FE:06:0C:87:7F:6D:D7:D5:11:6E:ED Authority key identifier: 49:7E:A2:8A:B9:82:66:09:78:73:E5:3D:F8:9D:A9:7C:44:26:7B:14 Certificate issuer: /CN=497EA28AB98266097873E53DF89DA97C44267B14 Certificate serial: 1260FD103D1D3DCD1E758BC6ABEB7B719C166271 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/497EA28AB98266097873E53DF89DA97C44267B14.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/1/497EA28AB98266097873E53DF89DA97C44267B14.mft Manifest number: 21 Signing time: Sat 20 Dec 2025 09:05:05 +0000 Manifest this update: Sat 20 Dec 2025 09:00:05 +0000 Manifest next update: Sun 21 Dec 2025 10:50:05 +0000 Files and hashes: 1: 326130623a346530373a6138313a3a2f34382d3438203d3e20323036363034.roa (hash: S61Lzy+ER9+PYL/15hZfM6Wz3/4ZpjIU1q+7uDcU8nU=) 2: 326130623a346530373a6165303a3a2f34342d3438203d3e20323037353637.roa (hash: 8EOjojOJFeyPSugKSirM3Pua5hnoqE/TLlkiB1/CgoM=) 3: 326130623a346530373a6130303a3a2f34302d3438203d3e20323036363034.roa (hash: Z0wiDwjOy/qJoPdM0vEBmhECeV0C4KD9VuGJR2rdeyQ=) 4: 497EA28AB98266097873E53DF89DA97C44267B14.crl (hash: wJ2a9WpIcdQELEwrPOM36g49p2K10FV06MjaYcy6lOw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/1/497EA28AB98266097873E53DF89DA97C44267B14.crl rsync://rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/1/497EA28AB98266097873E53DF89DA97C44267B14.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/497EA28AB98266097873E53DF89DA97C44267B14.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:50:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:60:fd:10:3d:1d:3d:cd:1e:75:8b:c6:ab:eb:7b:71:9c:16:62:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=497EA28AB98266097873E53DF89DA97C44267B14 Validity Not Before: Dec 20 09:00:05 2025 GMT Not After : Dec 21 10:50:05 2025 GMT Subject: CN=83EF31AC49C37E1B50FE060C877F6DD7D5116EED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d8:ed:ec:52:6b:71:58:29:be:f1:6c:ff:96: f8:33:af:c9:c7:d9:23:58:a3:c2:91:35:bd:e5:55: 09:eb:f4:3f:62:61:3e:42:e1:ed:6f:db:7c:07:53: 49:1a:f3:f7:d4:64:36:96:92:0a:bc:4b:f3:a0:d9: ec:d1:3c:90:71:9c:49:06:79:5e:be:0c:21:16:d6: 53:c5:cd:49:7f:4a:e2:10:88:97:e5:ac:e2:a5:1b: 6f:6e:05:2f:22:ad:8d:04:09:c5:ef:e9:fd:73:99: b2:d3:e0:52:28:7b:96:4d:e4:56:cd:c1:c7:66:32: ca:58:6b:a2:db:a1:c8:31:72:c8:9f:d0:00:dd:18: ef:aa:f6:76:45:7f:6e:7c:91:b9:6b:63:08:5a:bf: d5:6c:0b:11:91:be:86:ff:b2:a2:32:3f:03:61:83: 15:ae:74:80:21:76:90:7b:fb:ca:7e:24:99:80:76: 7f:65:b1:d2:bd:15:85:39:2b:be:e7:e0:13:01:8b: 87:68:9a:94:76:34:04:8e:a2:7f:9d:5c:fc:8d:48: f3:dd:b8:fa:8e:16:ef:08:d5:38:9c:08:d5:2d:61: 3c:c5:c6:26:70:37:7e:1b:e1:95:45:2f:cc:5d:c6: 46:c3:a3:76:c2:de:10:4e:04:ca:19:de:96:cf:c6: 78:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:EF:31:AC:49:C3:7E:1B:50:FE:06:0C:87:7F:6D:D7:D5:11:6E:ED X509v3 Authority Key Identifier: keyid:49:7E:A2:8A:B9:82:66:09:78:73:E5:3D:F8:9D:A9:7C:44:26:7B:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/1/497EA28AB98266097873E53DF89DA97C44267B14.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/497EA28AB98266097873E53DF89DA97C44267B14.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/1/497EA28AB98266097873E53DF89DA97C44267B14.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:3a:23:6a:89:eb:04:bd:97:33:f5:ed:69:54:6e:96:96:af: 16:09:08:3b:4e:1b:c1:35:25:2d:5e:1d:cc:5e:eb:e8:6d:48: 6e:d6:f6:10:60:9a:ea:c0:e4:aa:a2:e8:ef:55:74:a3:2c:30: 89:45:1b:71:b2:f0:2c:f0:a5:54:65:ef:b1:2b:4f:a7:58:06: 42:92:c7:1b:79:6b:5b:f5:50:e8:92:27:d7:ad:ef:c2:95:55: 5e:ae:a0:1b:02:8d:2f:b2:a1:58:46:52:33:5f:95:b8:15:27: 8a:93:fc:25:5f:77:c7:94:82:f7:f9:b6:19:6a:7b:c7:72:c0: 6a:2f:11:64:26:b3:fe:cb:87:98:ea:85:f7:78:e5:9d:c1:9b: 18:10:3a:67:ce:bf:42:a8:5c:a2:e0:1e:53:5c:ea:34:2c:61: 26:55:5e:02:7b:8b:b1:fe:c7:22:24:6c:dc:8b:47:98:f5:57: 5d:ee:5c:c5:01:59:a8:d1:62:87:30:fd:bf:2b:9f:96:f9:ad: 1e:f2:3c:b3:a1:6f:4f:53:7e:ef:18:7d:88:d1:5b:b0:e6:cc: 98:78:ba:e2:0d:11:0c:59:a0:76:77:82:f4:21:91:5d:ff:65: 61:5f:e3:42:f0:96:8a:e2:9b:60:da:6a:19:6f:6b:7f:8d:74: e6:97:76:b9 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUEmD9ED0dPc0edYvGq+t7cZwWYnEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk3RUEyOEFCOTgyNjYwOTc4NzNFNTNERjg5REE5N0M0 NDI2N0IxNDAeFw0yNTEyMjAwOTAwMDVaFw0yNTEyMjExMDUwMDVaMDMxMTAvBgNV BAMTKDgzRUYzMUFDNDlDMzdFMUI1MEZFMDYwQzg3N0Y2REQ3RDUxMTZFRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj2O3sUmtxWCm+8Wz/lvgzr8nH 2SNYo8KRNb3lVQnr9D9iYT5C4e1v23wHU0ka8/fUZDaWkgq8S/Og2ezRPJBxnEkG eV6+DCEW1lPFzUl/SuIQiJflrOKlG29uBS8irY0ECcXv6f1zmbLT4FIoe5ZN5FbN wcdmMspYa6Lbocgxcsif0ADdGO+q9nZFf258kblrYwhav9VsCxGRvob/sqIyPwNh gxWudIAhdpB7+8p+JJmAdn9lsdK9FYU5K77n4BMBi4dompR2NASOon+dXPyNSPPd uPqOFu8I1TicCNUtYTzFxiZwN34b4ZVFL8xdxkbDo3bC3hBOBMoZ3pbPxnhzAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUg+8xrEnDfhtQ/gYMh39t19URbu0wHwYDVR0j BBgwFoAUSX6iirmCZgl4c+U9+J2pfEQmexQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjkwZTY4NjAtMzcyMS00OGM0LWEzZmUtMTFiMWYyYzBk ZjVmLzEvNDk3RUEyOEFCOTgyNjYwOTc4NzNFNTNERjg5REE5N0M0NDI2N0IxNC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvNDk3RUEyOEFCOTgyNjYwOTc4NzNFNTNERjg5REE5N0M0NDI2 N0IxNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iOTBlNjg2MC0z NzIxLTQ4YzQtYTNmZS0xMWIxZjJjMGRmNWYvMS80OTdFQTI4QUI5ODI2NjA5Nzg3 M0U1M0RGODlEQTk3QzQ0MjY3QjE0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOjojaonrBL2XM/XtaVRu lpavFgkIO04bwTUlLV4dzF7r6G1Ibtb2EGCa6sDkqqLo71V0oywwiUUbcbLwLPCl VGXvsStPp1gGQpLHG3lrW/VQ6JIn163vwpVVXq6gGwKNL7KhWEZSM1+VuBUnipP8 JV93x5SC9/m2GWp7x3LAai8RZCaz/suHmOqF93jlncGbGBA6Z86/QqhcouAeU1zq NCxhJlVeAnuLsf7HIiRs3ItHmPVXXe5cxQFZqNFihzD9vyuflvmtHvI8s6FvT1N+ 7xh9iNFbsObMmHi64g0RDFmgdneC9CGRXf9lYV/jQvCWiuKbYNpqGW9rf4105pd2 uQ== -----END CERTIFICATE-----Generated at Sun Dec 21 03:20:42 2025 by rpki-client