This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft File: 5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft (raw, json) Hash identifier: 5ehpmskWl0/nYm6gDDFbmWXmdIx/B+5U3DGiEdzwu34= Subject key identifier: BA:BA:AC:20:51:97:12:3C:71:50:EE:59:8A:AF:5F:68:31:A3:69:BB Authority key identifier: 5A:3F:78:19:35:3C:E0:FD:13:B8:FF:CD:CB:88:37:ED:0B:F5:91:5F Certificate issuer: /CN=5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F Certificate serial: 16AF710608F6D221A3CF91042D90130710379CA1 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft Manifest number: E6 Signing time: Sun 21 Dec 2025 06:26:33 +0000 Manifest this update: Sun 21 Dec 2025 06:21:33 +0000 Manifest next update: Mon 22 Dec 2025 07:36:33 +0000 Files and hashes: 1: 5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl (hash: urKDVXjIiCu6W+or/WbUnHgKpJYn0BVYLq0WGL9yr2k=) 2: 326130363a396634313a3130303a3a2f34302d3430203d3e20323134373233.roa (hash: sTs8O8KBp3/QEgTlhnDJhb+nhykdynr848iPv4Z/TIo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:af:71:06:08:f6:d2:21:a3:cf:91:04:2d:90:13:07:10:37:9c:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F Validity Not Before: Dec 21 06:21:33 2025 GMT Not After : Dec 22 07:36:33 2025 GMT Subject: CN=BABAAC205197123C7150EE598AAF5F6831A369BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b8:ef:db:5f:60:b5:eb:05:0a:44:96:61:8f: 49:65:9f:2f:04:ae:86:5f:be:cb:ee:4c:71:4c:78: 6c:eb:7c:92:7c:71:d6:f3:19:b5:f2:a0:95:52:20: 4a:aa:26:22:e2:0e:8d:7c:c7:0c:fe:54:61:91:8d: b8:80:bc:2f:d0:55:4b:71:d5:4a:b8:de:5d:7d:e7: 92:72:1d:0c:e2:49:1b:50:24:67:66:1e:a5:71:4b: 5b:c0:13:b1:5a:b0:aa:97:bd:30:64:17:10:88:ec: cf:1e:5d:90:ba:53:2b:ef:76:20:64:2a:90:25:56: 85:10:23:c4:25:63:68:3f:fd:20:9d:99:81:56:3e: 75:ee:8c:83:71:43:49:33:bf:7b:7c:35:d7:31:26: d6:19:62:e2:9a:b3:21:f1:b5:31:32:80:00:40:69: 2e:55:25:3b:73:7e:c1:f5:ec:85:fc:b0:f1:f7:7f: 11:55:da:f8:1d:f2:5c:c6:8a:4b:d7:cc:3f:2d:56: fc:f1:46:9b:51:09:3c:1a:f2:f2:0f:02:89:60:7b: 37:2f:6b:cd:bc:ad:32:03:be:0c:c9:46:18:86:58: 10:f7:a0:ba:90:64:3c:53:49:82:68:d5:25:72:d9: 8e:58:46:ce:86:aa:c8:25:ef:1a:6f:76:e8:49:4f: 08:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:BA:AC:20:51:97:12:3C:71:50:EE:59:8A:AF:5F:68:31:A3:69:BB X509v3 Authority Key Identifier: keyid:5A:3F:78:19:35:3C:E0:FD:13:B8:FF:CD:CB:88:37:ED:0B:F5:91:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:f7:5e:3e:30:52:ad:db:73:fd:c8:8b:ef:fb:1b:fe:41:0e: 6a:45:9e:4d:ed:96:0c:ad:c1:ee:b0:dd:56:72:d4:1d:bb:70: 36:87:b5:36:00:40:b7:fe:79:a2:fe:fb:91:74:38:54:d2:51: 77:2e:41:ce:44:7d:b8:55:67:22:fb:0d:4f:a5:f8:df:fa:69: 96:19:a0:1e:92:77:53:46:58:a9:6d:4c:fc:71:c9:f1:5c:08: 82:ed:d4:ec:2c:ee:8a:c6:b2:b6:4b:b4:ae:08:18:ad:b2:be: 2c:57:b6:47:46:cf:7a:89:8a:47:4e:9e:1d:14:06:13:c3:9f: e4:b0:41:2b:81:9f:aa:8e:03:e4:f8:7a:d6:89:31:be:b9:99: 1c:b4:06:21:e5:8c:29:a3:e5:67:49:13:b9:a1:80:b5:69:f0: 0e:1d:42:8d:52:50:92:5b:fb:c1:54:2e:29:81:67:82:d1:30: 63:62:9b:38:c4:1a:41:8c:5c:27:ff:24:a9:0f:ff:70:4d:25: 95:1a:12:7c:c0:db:4f:31:40:20:b8:53:70:3c:a2:c4:7e:7a: f5:3e:14:d5:2b:02:57:2e:46:99:40:60:65:4f:c0:61:23:a9: 6b:7f:f5:86:6b:65:6c:fc:bf:e1:5b:7c:a5:0e:c2:15:d7:ec: b9:23:9c:e7 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUFq9xBgj20iGjz5EELZATBxA3nKEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUEzRjc4MTkzNTNDRTBGRDEzQjhGRkNEQ0I4ODM3RUQw QkY1OTE1RjAeFw0yNTEyMjEwNjIxMzNaFw0yNTEyMjIwNzM2MzNaMDMxMTAvBgNV BAMTKEJBQkFBQzIwNTE5NzEyM0M3MTUwRUU1OThBQUY1RjY4MzFBMzY5QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPuO/bX2C16wUKRJZhj0llny8E roZfvsvuTHFMeGzrfJJ8cdbzGbXyoJVSIEqqJiLiDo18xwz+VGGRjbiAvC/QVUtx 1Uq43l1955JyHQziSRtQJGdmHqVxS1vAE7FasKqXvTBkFxCI7M8eXZC6UyvvdiBk KpAlVoUQI8QlY2g//SCdmYFWPnXujINxQ0kzv3t8NdcxJtYZYuKasyHxtTEygABA aS5VJTtzfsH17IX8sPH3fxFV2vgd8lzGikvXzD8tVvzxRptRCTwa8vIPAolgezcv a828rTIDvgzJRhiGWBD3oLqQZDxTSYJo1SVy2Y5YRs6Gqsgl7xpvduhJTwjxAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUurqsIFGXEjxxUO5Ziq9faDGjabswHwYDVR0j BBgwFoAUWj94GTU84P0TuP/Ny4g37Qv1kV8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDdlNDU5MmUtMjNjMC00Y2NjLTk0ZGEtNmM5NTgwN2Y4 M2U3LzUvNUEzRjc4MTkzNTNDRTBGRDEzQjhGRkNEQ0I4ODM3RUQwQkY1OTE1Ri5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMDExOTQ0ZC03ZWIzLTRm NjMtYTE1OS1jZmYwMmMwMjZhYmYvMi81QTNGNzgxOTM1M0NFMEZEMTNCOEZGQ0RD Qjg4MzdFRDBCRjU5MTVGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q3ZTQ1OTJlLTIzYzAtNGNjYy05NGRhLTZjOTU4MDdmODNlNy81LzVBM0Y3ODE5 MzUzQ0UwRkQxM0I4RkZDRENCODgzN0VEMEJGNTkxNUYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBP914+ MFKt23P9yIvv+xv+QQ5qRZ5N7ZYMrcHusN1WctQdu3A2h7U2AEC3/nmi/vuRdDhU 0lF3LkHORH24VWci+w1Ppfjf+mmWGaAekndTRlipbUz8ccnxXAiC7dTsLO6KxrK2 S7SuCBitsr4sV7ZHRs96iYpHTp4dFAYTw5/ksEErgZ+qjgPk+HrWiTG+uZkctAYh 5Ywpo+VnSRO5oYC1afAOHUKNUlCSW/vBVC4pgWeC0TBjYps4xBpBjFwn/ySpD/9w TSWVGhJ8wNtPMUAguFNwPKLEfnr1PhTVKwJXLkaZQGBlT8BhI6lrf/WGa2Vs/L/h W3ylDsIV1+y5I5zn -----END CERTIFICATE-----Generated at Sun Dec 21 13:21:28 2025 by rpki-client