This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.mft File: 258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.mft (raw, json) Hash identifier: 2HOlaDWbvC5WIHnzo4kKWGPP7jcZpAknn98bMEM46y0= Subject key identifier: EE:F9:8D:A1:68:DD:EF:E6:A8:F3:02:35:0E:18:F7:F1:3F:1C:8C:2C Authority key identifier: 25:8D:1C:E0:CB:76:A9:86:E5:6C:7A:90:A6:6B:A7:DC:72:F5:95:2A Certificate issuer: /CN=258D1CE0CB76A986E56C7A90A66BA7DC72F5952A Certificate serial: 52CEB838204A8863F4AD7CEE3CD34BC77A638DA9 Authority info access: rsync://rpki.axivora.net/repo/Axivora-Net/2/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.mft Manifest number: 3D Signing time: Sun 07 Dec 2025 19:19:41 +0000 Manifest this update: Sun 07 Dec 2025 19:14:41 +0000 Manifest next update: Mon 08 Dec 2025 19:57:41 +0000 Files and hashes: 1: 326131343a373538303a3737373a3a2f34382d3438203d3e203136353039.roa (hash: xvnqSl1qLoVMIEzXN9sXRb87iGsN7N/pVeZWynFQufE=) 2: 326131343a373538303a3737303a3a2f34342d3438203d3e20323133383931.roa (hash: woLwL0VEJzWnepdsx0zvpMFwwJXef1WYeYkaz1KcaHg=) 3: 326131343a373538303a3737353a3a2f34382d3438203d3e203134363138.roa (hash: MfUF2laHihcgibdMapv7JAFGkNEIH6JIdDfIW/lhqFE=) 4: 326131343a373538303a3737353a3a2f34382d3438203d3e203136353039.roa (hash: LbzBckLICgXq7UKYaeP/CXL1PXD0JCr+a84omRC/7VY=) 5: 258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.crl (hash: BJFtRvqO2M3Y4cezyhDGBbJOLYQBDHYiNmIVmq+ppi4=) 6: 326131343a373538303a3737373a3a2f34382d3438203d3e203134363138.roa (hash: RTK2m9QZnNSKC5ZVcuz7+tdRZKTs7/hzcAu/hXd2ZTc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.crl rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.mft rsync://rpki.axivora.net/repo/Axivora-Net/2/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.cer rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.crl rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 19:57:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:ce:b8:38:20:4a:88:63:f4:ad:7c:ee:3c:d3:4b:c7:7a:63:8d:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=258D1CE0CB76A986E56C7A90A66BA7DC72F5952A Validity Not Before: Dec 7 19:14:41 2025 GMT Not After : Dec 8 19:57:41 2025 GMT Subject: CN=EEF98DA168DDEFE6A8F302350E18F7F13F1C8C2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:cd:7e:12:b6:bf:90:da:eb:1d:9a:14:b5:71: e8:85:66:c6:50:7a:91:4f:91:84:de:05:23:f1:2d: b4:3d:04:af:bd:7d:cb:c1:13:7b:55:85:e7:73:01: 11:87:a7:9b:a9:82:16:5f:9b:3d:19:7c:2b:a9:aa: 83:18:b6:a6:36:be:29:85:c9:2f:1e:fc:e5:5b:d8: 71:a0:c3:c1:65:e0:88:39:37:9e:4c:0c:56:4f:32: be:50:fe:9d:2b:08:16:64:db:39:da:73:24:4f:a7: f2:be:5f:bc:8a:74:17:06:88:c1:65:94:d4:ce:44: ff:6e:f7:85:d0:a0:53:b0:28:61:ac:9f:9f:ff:6a: 1f:db:30:18:71:53:37:a5:36:45:96:55:84:42:0e: 4c:f2:95:5a:4d:cc:bb:32:48:5b:2d:48:9c:cb:22: 67:26:a1:2d:f4:e8:98:c0:f9:13:8e:b9:39:b7:a8: 13:67:a9:89:61:59:8b:f3:66:a9:ca:16:0f:e7:ca: 66:84:13:af:7e:dd:ad:9c:f3:e5:f8:9d:1a:a3:88: 20:ff:5b:24:c3:6e:ab:c2:a7:d1:aa:5a:86:28:52: 8f:99:82:61:48:f9:4d:31:64:ea:5f:5b:84:ed:b4: df:da:45:7b:38:03:2f:c9:c4:7d:43:3e:5c:3f:06: 49:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:F9:8D:A1:68:DD:EF:E6:A8:F3:02:35:0E:18:F7:F1:3F:1C:8C:2C X509v3 Authority Key Identifier: keyid:25:8D:1C:E0:CB:76:A9:86:E5:6C:7A:90:A6:6B:A7:DC:72:F5:95:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.axivora.net/repo/Axivora-Net/2/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:32:7a:c3:98:7b:52:57:66:69:71:55:1b:79:8d:f3:b4:49: 3e:e7:bf:dd:0d:d4:2f:83:65:d3:8d:f5:4a:82:d8:c3:cb:d7: 45:77:f0:f4:76:61:cd:7d:94:f7:82:98:a5:2c:5d:aa:f3:5d: 43:9b:45:44:80:39:f0:84:b9:37:3a:32:a1:c0:57:53:a0:83: 2f:2d:72:61:f1:e0:ae:46:dc:99:68:94:74:a1:a2:8f:b8:8a: 46:d7:74:77:5a:a7:52:69:f7:f2:da:4a:39:f9:ff:be:bb:93: 5d:d0:58:1b:28:95:b4:de:68:87:a5:03:f0:24:a8:bb:2c:3d: 4f:c1:1b:32:e8:86:f9:b1:71:b9:11:71:bb:7f:30:b1:c4:8f: 3f:e0:38:f7:3a:c1:67:7b:d0:f0:49:ce:19:bb:c9:8d:62:fc: c3:75:7e:a7:4d:7c:d9:c5:02:8f:f1:41:c6:79:1e:38:52:71: 6c:ee:77:fd:13:7a:be:d2:1b:4f:b8:6f:13:29:d0:b3:3e:c7: 16:ae:a9:de:7c:78:86:e5:af:b1:61:12:51:b3:16:2a:46:be: 21:6f:8d:77:4b:46:13:50:2b:fc:28:f8:82:15:e7:82:9e:d9: a0:6b:81:3d:ed:dd:81:fd:e8:e3:37:88:38:db:c5:b4:04:53: ac:f9:e8:7e -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgIUUs64OCBKiGP0rXzuPNNLx3pjjakwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU4RDFDRTBDQjc2QTk4NkU1NkM3QTkwQTY2QkE3REM3 MkY1OTUyQTAeFw0yNTEyMDcxOTE0NDFaFw0yNTEyMDgxOTU3NDFaMDMxMTAvBgNV BAMTKEVFRjk4REExNjhEREVGRTZBOEYzMDIzNTBFMThGN0YxM0YxQzhDMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClzX4Str+Q2usdmhS1ceiFZsZQ epFPkYTeBSPxLbQ9BK+9fcvBE3tVhedzARGHp5upghZfmz0ZfCupqoMYtqY2vimF yS8e/OVb2HGgw8Fl4Ig5N55MDFZPMr5Q/p0rCBZk2znacyRPp/K+X7yKdBcGiMFl lNTORP9u94XQoFOwKGGsn5//ah/bMBhxUzelNkWWVYRCDkzylVpNzLsySFstSJzL ImcmoS306JjA+ROOuTm3qBNnqYlhWYvzZqnKFg/nymaEE69+3a2c8+X4nRqjiCD/ WyTDbqvCp9GqWoYoUo+ZgmFI+U0xZOpfW4TttN/aRXs4Ay/JxH1DPlw/BknzAgMB AAGjggJXMIICUzAdBgNVHQ4EFgQU7vmNoWjd7+ao8wI1Dhj38T8cjCwwHwYDVR0j BBgwFoAUJY0c4Mt2qYblbHqQpmun3HL1lSowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDNmZDBiNzYtNzI0My00YjI2LTk3NjAtY2MwN2I5NGJm ZTIzLzEvMjU4RDFDRTBDQjc2QTk4NkU1NkM3QTkwQTY2QkE3REM3MkY1OTUyQS5j cmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3luYzovL3Jwa2kuYXhp dm9yYS5uZXQvcmVwby9BeGl2b3JhLU5ldC8yLzI1OEQxQ0UwQ0I3NkE5ODZFNTZD N0E5MEE2NkJBN0RDNzJGNTk1MkEuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9z aXRvcnkvMDNmZDBiNzYtNzI0My00YjI2LTk3NjAtY2MwN2I5NGJmZTIzLzEvMjU4 RDFDRTBDQjc2QTk4NkU1NkM3QTkwQTY2QkE3REM3MkY1OTUyQS5tZnQwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG BAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEB AIoyesOYe1JXZmlxVRt5jfO0ST7nv90N1C+DZdON9UqC2MPL10V38PR2Yc19lPeC mKUsXarzXUObRUSAOfCEuTc6MqHAV1Oggy8tcmHx4K5G3JlolHShoo+4ikbXdHda p1Jp9/LaSjn5/767k13QWBsolbTeaIelA/AkqLssPU/BGzLohvmxcbkRcbt/MLHE jz/gOPc6wWd70PBJzhm7yY1i/MN1fqdNfNnFAo/xQcZ5HjhScWzud/0Ter7SG0+4 bxMp0LM+xxauqd58eIblr7FhElGzFipGviFvjXdLRhNQK/wo+IIV54Ke2aBrgT3t 3YH96OM3iDjbxbQEU6z56H4= -----END CERTIFICATE-----Generated at Mon Dec 8 12:22:33 2025 by rpki-client