This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft File: B3F1737E90F240D7ABB33C72F84D71482FE62679.mft (raw, json) Hash identifier: Fo8Un1Vn8P2veIZbvW9zmcGt4fSGE563X0zssjA78CI= Subject key identifier: 5F:2C:F6:1D:45:19:1A:6B:D5:34:89:F4:1F:E8:AF:33:53:DE:B3:66 Authority key identifier: B3:F1:73:7E:90:F2:40:D7:AB:B3:3C:72:F8:4D:71:48:2F:E6:26:79 Certificate issuer: /CN=B3F1737E90F240D7ABB33C72F84D71482FE62679 Certificate serial: 483116BE1C5E70A8EF2E4FE64AD92E4D2BBAE343 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/B3F1737E90F240D7ABB33C72F84D71482FE62679.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft Manifest number: D4 Signing time: Fri 05 Dec 2025 16:21:49 +0000 Manifest this update: Fri 05 Dec 2025 16:16:49 +0000 Manifest next update: Sat 06 Dec 2025 18:17:49 +0000 Files and hashes: 1: B3F1737E90F240D7ABB33C72F84D71482FE62679.crl (hash: SWeUObaLgrNYtpqoBO+6lClRpyfxjNOdu5/QcucNb70=) 2: 326130373a353463373a356666653a3a2f34382d3438203d3e20323135353737.roa (hash: FG+PaaelFQQTh0Pl3BlClI1RFrk+FdkeBozLHlfkasU=) 3: 326130373a353463373a353939393a3a2f34382d3438203d3e20323136343535.roa (hash: SvnI/kKkXn3yiVhNqVKN9Taah5WCLs8Rw+D4PBjSrbo=) 4: 326130373a353463373a353030303a3a2f33362d3336203d3e20323136343535.roa (hash: dERySCDhc3+rlKwMAYMhD9XvddhhgSjXbVZeRoj98gc=) 5: 326130373a353463373a356630303a3a2f34342d3434203d3e20323135353737.roa (hash: x50UL+Ve3n2XGikbTbQdFLaQIWslIjcJnasiyHq58lM=) 6: 326130373a353463373a356631303a3a2f34382d3438203d3e20323135353737.roa (hash: 7mCuwzfIey+Hcqy/Vhuj4zUx9bQcgkzpUeh+UNvlKO4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.crl rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/B3F1737E90F240D7ABB33C72F84D71482FE62679.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 10:33:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:31:16:be:1c:5e:70:a8:ef:2e:4f:e6:4a:d9:2e:4d:2b:ba:e3:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3F1737E90F240D7ABB33C72F84D71482FE62679 Validity Not Before: Dec 5 16:16:49 2025 GMT Not After : Dec 6 18:17:49 2025 GMT Subject: CN=5F2CF61D45191A6BD53489F41FE8AF3353DEB366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6c:fe:dc:1c:19:87:32:a4:9b:83:f8:40:ab: 3a:8b:44:0f:9c:58:7a:ae:9f:aa:48:41:46:40:7a: a9:b6:8c:ee:1b:92:02:c8:b9:49:68:3a:e6:df:7f: 8e:e3:78:3a:80:41:80:fa:f9:23:d5:76:9d:25:6a: b9:5f:cd:a8:51:24:f7:4a:67:20:41:c1:a3:67:5f: c3:9c:a9:05:85:e1:54:d7:15:85:00:55:b0:2c:29: e4:a5:87:0a:dd:42:6c:d1:b8:84:8a:2e:ee:9e:1f: 01:03:e8:c6:b9:10:ff:a2:be:8d:e5:42:92:ee:45: da:99:84:4a:2f:a3:41:fb:27:b6:2c:a6:ed:fe:23: a0:01:72:81:5e:b2:af:af:76:c7:0f:9e:64:13:3a: 4d:c5:71:b5:4e:aa:13:51:c4:0e:6a:fd:76:80:e8: 96:d1:c0:3b:22:56:63:af:88:68:e3:0d:7e:54:fb: 18:8b:aa:14:b9:04:7a:b0:f5:29:28:d2:7b:14:00: 59:83:95:c0:ac:12:13:a7:89:34:e3:92:66:29:6d: 55:2c:5a:47:e9:04:38:39:d6:84:cf:85:9e:13:76: 6c:0c:c0:9c:f9:8e:1e:69:16:52:e6:3e:78:da:69: 5c:39:3b:44:97:2b:81:a0:e3:3d:9f:4a:7e:02:1d: 8e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:2C:F6:1D:45:19:1A:6B:D5:34:89:F4:1F:E8:AF:33:53:DE:B3:66 X509v3 Authority Key Identifier: keyid:B3:F1:73:7E:90:F2:40:D7:AB:B3:3C:72:F8:4D:71:48:2F:E6:26:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/B3F1737E90F240D7ABB33C72F84D71482FE62679.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:f3:74:3c:43:f4:34:88:e4:89:7a:cb:84:73:63:c6:c5:e9: ba:bd:19:65:05:10:3e:db:a0:32:45:7b:e0:e7:96:11:f2:d7: 94:9d:a3:e7:cb:15:ce:c6:fa:ae:51:0b:4c:08:10:c1:4e:07: d4:6f:1a:d7:5d:d6:c3:fc:dc:0d:b3:53:db:a9:56:d6:c7:b7: 5d:64:27:78:fb:cc:2b:fd:f7:7e:fb:f8:32:16:4d:1a:d8:b3: 8b:c2:c3:7d:8f:1f:77:c5:b7:54:fb:cc:0f:5e:7f:f5:76:41: 48:7e:e0:19:78:d1:1d:6e:8a:73:7d:ac:44:fd:68:68:d0:c8: 7a:bf:cd:81:f0:f6:4b:cd:45:79:3e:58:ee:44:d1:ce:2d:ab: ea:34:28:f2:ac:b2:2b:8f:2d:ef:ba:30:b4:48:7e:98:c4:a6: 44:65:a3:66:bc:8e:8c:43:eb:97:42:2e:d4:24:40:1e:ed:51: 21:09:24:08:50:fd:72:20:c3:53:a0:7d:79:17:08:6f:88:cd: c9:06:6b:d4:be:85:b8:00:ad:74:cd:f2:c1:4c:c9:03:fa:eb: d0:94:b6:04:fd:e2:4a:df:a8:a3:1e:d6:56:0c:3a:df:3f:b5: ac:f1:a4:3d:45:26:5f:93:28:13:d2:34:28:93:21:4b:74:aa: f4:ee:e0:03 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUSDEWvhxecKjvLk/mStkuTSu640MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNGMTczN0U5MEYyNDBEN0FCQjMzQzcyRjg0RDcxNDgy RkU2MjY3OTAeFw0yNTEyMDUxNjE2NDlaFw0yNTEyMDYxODE3NDlaMDMxMTAvBgNV BAMTKDVGMkNGNjFENDUxOTFBNkJENTM0ODlGNDFGRThBRjMzNTNERUIzNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCobP7cHBmHMqSbg/hAqzqLRA+c WHqun6pIQUZAeqm2jO4bkgLIuUloOubff47jeDqAQYD6+SPVdp0larlfzahRJPdK ZyBBwaNnX8OcqQWF4VTXFYUAVbAsKeSlhwrdQmzRuISKLu6eHwED6Ma5EP+ivo3l QpLuRdqZhEovo0H7J7Yspu3+I6ABcoFesq+vdscPnmQTOk3FcbVOqhNRxA5q/XaA 6JbRwDsiVmOviGjjDX5U+xiLqhS5BHqw9Sko0nsUAFmDlcCsEhOniTTjkmYpbVUs WkfpBDg51oTPhZ4TdmwMwJz5jh5pFlLmPnjaaVw5O0SXK4Gg4z2fSn4CHY6xAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUXyz2HUUZGmvVNIn0H+ivM1Pes2YwHwYDVR0j BBgwFoAUs/FzfpDyQNerszxy+E1xSC/mJnkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTgyMWM0N2UtZTgxNS00MmRlLWJkNmItMTlhMmUxYWU1 NjRhLzIvQjNGMTczN0U5MEYyNDBEN0FCQjMzQzcyRjg0RDcxNDgyRkU2MjY3OS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvNC9CM0YxNzM3RTkwRjI0MEQ3QUJCMzNDNzJG ODRENzE0ODJGRTYyNjc5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzU4MjFjNDdlLWU4MTUtNDJkZS1iZDZiLTE5YTJlMWFlNTY0YS8yL0IzRjE3MzdF OTBGMjQwRDdBQkIzM0M3MkY4NEQ3MTQ4MkZFNjI2NzkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBo83Q8 Q/Q0iOSJesuEc2PGxem6vRllBRA+26AyRXvg55YR8teUnaPnyxXOxvquUQtMCBDB TgfUbxrXXdbD/NwNs1PbqVbWx7ddZCd4+8wr/fd++/gyFk0a2LOLwsN9jx93xbdU +8wPXn/1dkFIfuAZeNEdbopzfaxE/Who0Mh6v82B8PZLzUV5PljuRNHOLavqNCjy rLIrjy3vujC0SH6YxKZEZaNmvI6MQ+uXQi7UJEAe7VEhCSQIUP1yIMNToH15Fwhv iM3JBmvUvoW4AK10zfLBTMkD+uvQlLYE/eJK36ijHtZWDDrfP7Ws8aQ9RSZfkygT 0jQokyFLdKr07uAD -----END CERTIFICATE-----Generated at Fri Dec 5 19:15:04 2025 by rpki-client