This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft File: 521525856CBBA6D9D2254221C280DC930734AAB8.mft (raw, json) Hash identifier: 8fE1VRImqgfftVXc1+DN56Y0Nd4VPL2FHjEP+OuJ4Sg= Subject key identifier: B2:43:99:54:52:95:B0:F9:52:80:4B:C9:D2:44:C3:8E:12:37:9E:53 Authority key identifier: 52:15:25:85:6C:BB:A6:D9:D2:25:42:21:C2:80:DC:93:07:34:AA:B8 Certificate issuer: /CN=521525856CBBA6D9D2254221C280DC930734AAB8 Certificate serial: 54EE0977B2CC63B95670267C5B2BD73B9DD13223 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/521525856CBBA6D9D2254221C280DC930734AAB8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft Manifest number: BE Signing time: Sat 22 Nov 2025 10:23:06 +0000 Manifest this update: Sat 22 Nov 2025 10:18:06 +0000 Manifest next update: Sun 23 Nov 2025 13:39:06 +0000 Files and hashes: 1: 326130363a613030333a3a2f34382d3438203d3e20323030363736.roa (hash: PNV+6g1yuxZfiOErO1rlD/OjvHSDnl045B3ycAeUEw8=) 2: 326130363a613030333a313333373a3a2f34382d3438203d3e20323030363736.roa (hash: qr/bfrnor+1gB61vuOA1czljaK/VRJBauBs1U2EbENw=) 3: 326130363a613030333a313131313a3a2f34382d3438203d3e20323030363736.roa (hash: rOXq6KopS7nNrxLenr0thMMbHkGjihkrbeGzvVQ4fNc=) 4: 326130363a613030333a666666663a3a2f34382d3438203d3e203530373535.roa (hash: HVzJ9R68GMwZO9EL/DI2ZLp1a+F6uNrFmfl8+YGeZKc=) 5: 521525856CBBA6D9D2254221C280DC930734AAB8.crl (hash: eFqQ9+0l+S4+00gOF7TnOXItFFMspQvWLHLxgSenlIw=) 6: 39342e32342e3130382e302f32342d3234203d3e20323030363736.roa (hash: hbkkIcLL2dVYKU+9BKXYxvOgTE4cVlfb37zj8sIKpS0=) 7: 326130363a613030333a623030623a3a2f34382d3438203d3e20323030363736.roa (hash: kunZD4UEEwcG2nc99Wb+xz1yK+IdIm7SjegbAra8chc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.crl rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/521525856CBBA6D9D2254221C280DC930734AAB8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:ee:09:77:b2:cc:63:b9:56:70:26:7c:5b:2b:d7:3b:9d:d1:32:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521525856CBBA6D9D2254221C280DC930734AAB8 Validity Not Before: Nov 22 10:18:06 2025 GMT Not After : Nov 23 13:39:06 2025 GMT Subject: CN=B24399545295B0F952804BC9D244C38E12379E53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fb:f7:11:6c:e4:93:0f:ad:07:74:85:4e:30: 7e:a8:b4:64:11:1b:85:b0:8a:69:4c:d9:83:61:fb: d9:7c:96:12:70:4f:74:9f:3e:63:86:fa:b7:3b:bd: 52:22:1f:4f:11:9e:59:13:1a:6a:7d:59:49:8b:9f: 9e:0f:7d:be:7d:44:f0:62:26:13:60:c7:c0:16:f9: 17:dc:02:6e:b4:27:0c:6a:88:85:15:af:c3:ce:34: a7:81:78:34:1d:76:ab:d8:83:8e:1b:78:40:72:b8: 07:72:3c:4a:b3:e0:ae:e2:9e:c8:2d:64:08:39:14: 81:1d:01:49:b7:d6:e6:86:27:fb:6b:25:50:2a:1e: df:71:d2:46:6a:00:bf:42:c6:b4:76:40:b4:43:3e: 02:36:cf:2a:95:24:85:2a:c9:c9:f7:57:09:ba:1e: 74:d1:23:da:20:da:a7:32:ab:ce:21:8c:20:1b:99: 0b:73:b2:26:f2:9c:ae:9c:0b:8a:ec:53:6d:f9:22: 58:2b:cf:d8:2c:70:27:0c:55:02:81:7f:99:30:86: 6a:b0:6c:5b:28:3c:3e:47:4f:cf:40:f7:27:72:e7: 56:db:22:ee:8f:62:11:2f:6a:35:49:29:89:3c:a0: db:69:52:ed:9b:35:cc:c5:70:65:fd:7c:02:5f:81: c9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:43:99:54:52:95:B0:F9:52:80:4B:C9:D2:44:C3:8E:12:37:9E:53 X509v3 Authority Key Identifier: keyid:52:15:25:85:6C:BB:A6:D9:D2:25:42:21:C2:80:DC:93:07:34:AA:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/521525856CBBA6D9D2254221C280DC930734AAB8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:22:27:eb:07:c9:ed:5b:d3:8e:fc:e8:0f:c2:ba:10:65:e7: 60:e3:e0:46:bb:4f:8d:6c:bb:e3:1c:f6:b8:29:83:1a:f2:e0: a6:25:c1:2e:fa:17:e1:51:c8:cc:f3:58:8e:fd:2e:87:72:75: 1e:aa:26:3c:f7:5c:81:b5:86:2c:66:ce:39:20:6c:53:fd:ad: 6b:fe:2c:51:84:27:b3:d5:10:37:a7:73:8b:eb:26:f8:f7:46: d7:61:00:b5:d6:c8:3e:95:51:38:e6:bf:ef:58:1a:96:b3:20: 83:b1:d3:f0:b6:aa:03:f5:5c:86:8c:49:5b:c5:21:6e:cc:9f: a4:c6:23:4b:12:ec:2a:e6:a0:2b:a9:c0:99:2d:0b:43:85:03: 3d:65:a1:b5:e3:6d:b9:2e:b1:b7:92:30:5e:2a:a3:57:85:97: 70:7a:0a:ae:7c:4c:03:2f:43:7b:9f:ad:c7:11:03:bb:ae:39: 35:9c:82:ea:8f:6e:f6:c7:24:19:be:fa:de:e3:ae:ec:81:6f: 93:46:23:2a:50:08:54:00:44:88:d4:74:f9:39:05:f8:8e:15: 48:9a:17:d6:55:c6:7a:18:57:f3:68:09:23:b5:58:c3:29:6c: a0:fe:bd:19:45:6d:5c:fc:f4:c1:2b:15:f0:f8:33:fd:0c:25: 92:92:4f:94 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUVO4Jd7LMY7lWcCZ8WyvXO53RMiMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIxNTI1ODU2Q0JCQTZEOUQyMjU0MjIxQzI4MERDOTMw NzM0QUFCODAeFw0yNTExMjIxMDE4MDZaFw0yNTExMjMxMzM5MDZaMDMxMTAvBgNV BAMTKEIyNDM5OTU0NTI5NUIwRjk1MjgwNEJDOUQyNDRDMzhFMTIzNzlFNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo+/cRbOSTD60HdIVOMH6otGQR G4WwimlM2YNh+9l8lhJwT3SfPmOG+rc7vVIiH08RnlkTGmp9WUmLn54Pfb59RPBi JhNgx8AW+RfcAm60JwxqiIUVr8PONKeBeDQddqvYg44beEByuAdyPEqz4K7insgt ZAg5FIEdAUm31uaGJ/trJVAqHt9x0kZqAL9CxrR2QLRDPgI2zyqVJIUqycn3Vwm6 HnTRI9og2qcyq84hjCAbmQtzsibynK6cC4rsU235Ilgrz9gscCcMVQKBf5kwhmqw bFsoPD5HT89A9ydy51bbIu6PYhEvajVJKYk8oNtpUu2bNczFcGX9fAJfgcnfAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUskOZVFKVsPlSgEvJ0kTDjhI3nlMwHwYDVR0j BBgwFoAUUhUlhWy7ptnSJUIhwoDckwc0qrgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFjYTNjYTYtMzRjYy00NzcyLWJhYzAtYTM1ZGQwMTk1 Y2U3LzQvNTIxNTI1ODU2Q0JCQTZEOUQyMjU0MjIxQzI4MERDOTMwNzM0QUFCOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNTIxNTI1ODU2Q0JCQTZEOUQyMjU0MjIxQzI4MERDOTMwNzM0 QUFCOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWNhM2NhNi0z NGNjLTQ3NzItYmFjMC1hMzVkZDAxOTVjZTcvNC81MjE1MjU4NTZDQkJBNkQ5RDIy NTQyMjFDMjgwREM5MzA3MzRBQUI4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhyIn6wfJ7VvTjvzoD8K6 EGXnYOPgRrtPjWy74xz2uCmDGvLgpiXBLvoX4VHIzPNYjv0uh3J1HqomPPdcgbWG LGbOOSBsU/2ta/4sUYQns9UQN6dzi+sm+PdG12EAtdbIPpVROOa/71galrMgg7HT 8LaqA/VchoxJW8UhbsyfpMYjSxLsKuagK6nAmS0LQ4UDPWWhteNtuS6xt5IwXiqj V4WXcHoKrnxMAy9De5+txxEDu645NZyC6o9u9sckGb763uOu7IFvk0YjKlAIVABE iNR0+TkF+I4VSJoX1lXGehhX82gJI7VYwylsoP69GUVtXPz0wSsV8Pgz/QwlkpJP lA== -----END CERTIFICATE-----Generated at Sat Nov 22 21:55:39 2025 by rpki-client