This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft File: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft (raw, json) Hash identifier: ROax+yt8Th3tvutTqGcuVJ++v3ZrI9XRK/nEC+zanLE= Subject key identifier: 3D:1C:3A:BF:48:C6:6D:D6:99:C8:82:4A:1D:47:10:97:B6:04:A6:C0 Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Certificate serial: 3EF13CC63E3DB3295DAB29187031C1EE709593F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft Manifest number: 0610 Signing time: Fri 19 Dec 2025 11:02:33 +0000 Manifest this update: Fri 19 Dec 2025 10:57:33 +0000 Manifest next update: Sat 20 Dec 2025 12:12:33 +0000 Files and hashes: 1: 3138352e3131312e3138382e302f32342d3234203d3e203632353633.roa (hash: /OGL5Xocpa/mA4GEutGuQoiWc4p3DBj9VM0kpmdQZxo=) 2: 3138352e3133302e36322e302f32342d3234203d3e203239303636.roa (hash: cZvuOTu1xxenEkmS/lv/FbwQZVMqO/d4TmKYvwutnlA=) 3: 3138352e3231332e3234312e302f32342d3234203d3e203631323732.roa (hash: ZRXMJB81EQGqLoTW9rCPLjbdmz5JtoX/ioguz/yH9B4=) 4: 3138352e3231332e3234322e302f32342d3234203d3e203232343237.roa (hash: 2mJFb3j98iS3WwOyYDzT/44zu56P1Mt1+w22nAIK9Eo=) 5: 3138352e3234342e39352e302f32342d3234203d3e203136353039.roa (hash: tBBH3ivLD6QCOuz/zDI7JAWzO8l/tRZui9Xrn0qJpA4=) 6: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl (hash: CDnpe/qMIVTU66kD4wWIqiUMDOzWPLkRdCetXMkN+YQ=) 7: 3138352e3232392e3230302e302f32342d3234203d3e20313335343032.roa (hash: +dPRMdq4kTZhc1HP4XUoHFPE1GHvKzT91NAn4oQHjN8=) 8: 3138352e3234342e39342e302f32342d3234203d3e20333937343233.roa (hash: RdOuxQjMUqkQryMcrXonWYYeJva5RY8rohAdG2ITJdw=) 9: 3138352e3133302e36332e302f32342d3234203d3e203332313831.roa (hash: krs6rxjGgkgxIC0XFsSJIDbJbJTaOxRVYKdhwP98j0o=) 10: 3138352e3231332e3234302e302f32342d3234203d3e20323135373033.roa (hash: 5U9kh/Q1+pD8ktgLTSH2rTlmtF2qNT/hbi1XnCHITmo=) 11: 3138352e3234342e39352e302f32342d3234203d3e203230343733.roa (hash: wcPx+O7KmTHA1Z17UF9VIIdo6IS06Ij+d7NLeipHdoU=) 12: 326130363a356563303a3a2f34382d3438203d3e20323034363933.roa (hash: 1uKLPQUne0QcXblB3NW5HCIymd03TIpdjdnWqSBKxm8=) 13: 33362e3235352e39322e302f32332d3234203d3e203139333138.roa (hash: FthEwpOIKT5rKWCqEXY9gMB5simU3azPQORqXvTeqVo=) 14: 3138352e3231332e3234332e302f32342d3234203d3e20323034393238.roa (hash: /82U/4ZCS1l7tEmRqZdiqoHQfHkAV0iGqgAdCf0IY6Q=) 15: 33362e3235352e39322e302f32332d3234203d3e203230333236.roa (hash: uAr910mpCFzZrOxxImyBVxZ5bzjvqrL8T8981qvKdos=) 16: 3138352e3234342e39352e302f32342d3234203d3e203134363138.roa (hash: BX+afd5v4CnQw1Csb+gERO9bOUf9cjiesQkq05EVznU=) 17: 3138352e3133302e36302e302f32342d3234203d3e203131383738.roa (hash: O475B5YNr+mk4vbByMFVmoqbRTenx4kmx66C3HIfdsg=) 18: 3138352e3232392e3230312e302f32342d3234203d3e20323030303137.roa (hash: ezbmX/yRe+yRvkLs/8FFZoupwCiBI67aZ+0JqkrMl4Q=) 19: 3138352e3232392e3230332e302f32342d3234203d3e20323034333939.roa (hash: o2s9iRRo/HWpVNV66/X3K8Nx40dZXcSQ+ar/RSKpLZ4=) 20: 39312e3133322e3232372e302f32342d3234203d3e20323132333834.roa (hash: eh1Z74wbnDki2jWa8j9mKK2ooveQFWs0ccPHyRr5G7Y=) 21: 3138352e3231332e3234332e302f32342d3234203d3e203330343536.roa (hash: aTFuiZRKSKlOcP1bFw/QEJGr9kwsAqFvqfR62oNQfMc=) 22: 3138352e3232392e3230322e302f32342d3234203d3e20323130303330.roa (hash: LqK97diQcFrb4344S9ThgI9qIfk24xWO2D6Fzod4ApM=) 23: 3138352e3133302e36312e302f32342d3234203d3e20323732363936.roa (hash: nzc+7vTx0fxusJ8QBUU0nZ0s/13eeYO5i8RfnoHHUhc=) 24: 39312e3133322e3232372e302f32342d3234203d3e20323132333335.roa (hash: 4nM6t6s+oklrwoQsrohzelZ9jLVJM3XAMUC6E2raQWI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 12:12:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:f1:3c:c6:3e:3d:b3:29:5d:ab:29:18:70:31:c1:ee:70:95:93:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Validity Not Before: Dec 19 10:57:33 2025 GMT Not After : Dec 20 12:12:33 2025 GMT Subject: CN=3D1C3ABF48C66DD699C8824A1D471097B604A6C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:11:27:f7:8c:bd:b6:50:20:72:a2:48:89:72: 13:10:5e:15:90:ae:ee:a1:b3:db:ee:b5:6b:2e:36: c4:f2:7a:83:7c:a5:01:eb:92:9a:8b:f9:02:46:3e: e2:6f:d8:d7:57:e5:cc:be:78:e4:70:69:03:8c:46: 02:a7:4b:c9:92:c4:4a:bc:a1:9a:2d:2d:3a:b9:74: 38:67:fe:0d:7c:42:73:c9:1b:7b:34:29:b4:4c:ca: f5:91:93:21:fd:26:5a:55:f9:ba:02:ce:72:20:89: 5f:ba:0d:6d:2c:4c:0f:7f:34:09:b1:2f:64:17:b6: f6:b4:5e:dd:bf:95:63:5a:fb:e9:39:76:96:fc:2e: af:54:d3:dc:13:a8:92:eb:50:5f:bc:d5:b4:d2:05: 93:2f:86:30:f0:40:92:f3:6f:03:25:75:34:d0:ce: dd:39:50:ee:c0:5f:67:ac:e7:42:8c:c9:13:b3:b9: 77:a3:e3:b9:8e:55:c6:1b:0c:11:dc:4f:3e:36:4c: 8c:43:6c:37:0a:01:bc:fe:cf:3e:4e:d6:cc:40:0c: da:f5:22:6b:d6:8c:46:d5:8a:48:a4:bf:ed:af:1f: 20:cc:52:e1:4c:d9:1c:be:44:fd:fc:77:bf:6d:2e: 8a:55:e5:69:8e:36:58:3c:a4:c0:64:e1:88:81:40: ef:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:1C:3A:BF:48:C6:6D:D6:99:C8:82:4A:1D:47:10:97:B6:04:A6:C0 X509v3 Authority Key Identifier: keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:19:99:c6:bd:11:e7:f4:b4:ff:ba:d4:58:3c:c2:fc:81:28: 27:4b:6e:24:c9:b1:6e:1c:82:b3:24:8e:86:12:85:e1:25:d3: fd:8d:6d:5e:8f:9b:a3:f9:ee:fe:55:77:17:e5:d6:23:6f:0a: f9:3b:61:06:42:e0:7a:4b:c3:94:b2:9d:27:c8:42:09:35:16: d2:8d:79:36:7d:3e:4b:4a:11:1d:50:f3:33:75:9f:00:56:60: 9d:4f:2d:60:7c:78:cf:4c:40:ec:95:e1:15:4f:bc:c6:de:15: 2a:d0:8e:b9:cb:2d:35:e9:c0:bb:45:f2:46:6a:91:da:d7:ba: 06:7a:47:ad:0a:db:86:0f:77:f8:0f:34:a1:48:70:22:26:e8: ae:e7:f7:d5:2e:92:57:a6:7e:2f:33:81:30:5a:59:a8:91:4d: b0:95:f8:7c:bb:dd:00:44:b3:2a:66:6c:b6:56:07:9c:f1:c1: a1:8a:e6:b1:ac:e3:ca:4e:a7:c6:a5:8d:b0:61:d4:40:9e:94: 85:e6:73:6f:82:07:86:46:2b:43:ef:ee:09:4f:b0:b5:d9:0c: 1d:da:6e:69:ca:3f:5a:97:8a:e9:fb:bb:6e:0b:72:24:c6:b6: f2:9f:f5:ba:ed:19:52:c2:8f:51:30:5d:0d:9e:69:e1:4d:26: a4:18:92:83 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUPvE8xj49syldqykYcDHB7nCVk/cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2U4NzBiOWE3MDAzYzRmZDljNTFiZDM1NGE5ZGVmYTNm Yjc3YjRhOTAeFw0yNTEyMTkxMDU3MzNaFw0yNTEyMjAxMjEyMzNaMDMxMTAvBgNV BAMTKDNEMUMzQUJGNDhDNjZERDY5OUM4ODI0QTFENDcxMDk3QjYwNEE2QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtESf3jL22UCByokiJchMQXhWQ ru6hs9vutWsuNsTyeoN8pQHrkpqL+QJGPuJv2NdX5cy+eORwaQOMRgKnS8mSxEq8 oZotLTq5dDhn/g18QnPJG3s0KbRMyvWRkyH9JlpV+boCznIgiV+6DW0sTA9/NAmx L2QXtva0Xt2/lWNa++k5dpb8Lq9U09wTqJLrUF+81bTSBZMvhjDwQJLzbwMldTTQ zt05UO7AX2es50KMyROzuXej47mOVcYbDBHcTz42TIxDbDcKAbz+zz5O1sxADNr1 ImvWjEbVikikv+2vHyDMUuFM2Ry+RP38d79tLopV5WmONlg8pMBk4YiBQO8rAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUPRw6v0jGbdaZyIJKHUcQl7YEpsAwHwYDVR0j BBgwFoAUPocLmnADxP2cUb01Sp3vo/t3tKkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzVkMThlODItNGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQy Mjc5LzAvM0U4NzBCOUE3MDAzQzRGRDlDNTFCRDM1NEE5REVGQTNGQjc3QjRBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1BvY0xtbkFEeFAyY1ViMDFTcDN2b190 M3RLay5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jNWQxOGU4Mi00 ZDY4LTQ1YTYtYTVkZi1jYWMxMTVhZDIyNzkvMC8zRTg3MEI5QTcwMDNDNEZEOUM1 MUJEMzU0QTlERUZBM0ZCNzdCNEE5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMRmZxr0R5/S0/7rUWDzC /IEoJ0tuJMmxbhyCsySOhhKF4SXT/Y1tXo+bo/nu/lV3F+XWI28K+TthBkLgekvD lLKdJ8hCCTUW0o15Nn0+S0oRHVDzM3WfAFZgnU8tYHx4z0xA7JXhFU+8xt4VKtCO ucstNenAu0XyRmqR2te6BnpHrQrbhg93+A80oUhwIiboruf31S6SV6Z+LzOBMFpZ qJFNsJX4fLvdAESzKmZstlYHnPHBoYrmsazjyk6nxqWNsGHUQJ6UheZzb4IHhkYr Q+/uCU+wtdkMHdpuaco/WpeK6fu7bgtyJMa28p/1uu0ZUsKPUTBdDZ5p4U0mpBiS gw== -----END CERTIFICATE-----Generated at Sat Dec 20 00:52:42 2025 by rpki-client