This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft File: B3C078E149D9741434FD8877AB4CED46DC2720DA.mft (raw, json) Hash identifier: UOa10wUbEMBo+aRW+3iLuS77E1dY5TVb5aCh/hHY69g= Subject key identifier: 63:D8:1E:D9:1A:96:EB:70:65:B2:51:4B:1F:25:C3:89:EA:96:87:87 Authority key identifier: B3:C0:78:E1:49:D9:74:14:34:FD:88:77:AB:4C:ED:46:DC:27:20:DA Certificate issuer: /CN=b3c078e149d9741434fd8877ab4ced46dc2720da Certificate serial: 4DA81D3CF7E6B3D31B36D3E6EFD5A9292924C1D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft Manifest number: 0359 Signing time: Sat 06 Dec 2025 19:36:58 +0000 Manifest this update: Sat 06 Dec 2025 19:31:58 +0000 Manifest next update: Sun 07 Dec 2025 22:18:58 +0000 Files and hashes: 1: AS215147.asa (hash: GjsvLtdFoDUTAXomZoavpdPPd8CJuRsD46c0/yYhSME=) 2: B3C078E149D9741434FD8877AB4CED46DC2720DA.crl (hash: KVemHQnyVVSuig38FASRglSl6u7cbBvtELMJyGZC5Xs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 22:18:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:a8:1d:3c:f7:e6:b3:d3:1b:36:d3:e6:ef:d5:a9:29:29:24:c1:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3c078e149d9741434fd8877ab4ced46dc2720da Validity Not Before: Dec 6 19:31:58 2025 GMT Not After : Dec 7 22:18:58 2025 GMT Subject: CN=63D81ED91A96EB7065B2514B1F25C389EA968787 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b5:21:06:6a:7f:e3:82:bf:cb:c0:d9:d4:04: f4:ef:36:78:c1:77:ed:1d:f4:57:f0:4a:76:e1:1a: d1:7e:6b:4e:ff:b4:ac:39:5d:51:96:dd:03:b8:e4: 45:a4:31:a0:ac:5c:f1:6b:bc:2d:dd:2e:18:76:76: fc:ff:9a:0b:2a:a8:f5:24:08:99:7c:63:a0:fc:bf: 76:e3:86:d5:7f:b8:c3:1c:81:d0:09:34:39:a6:81: 76:60:43:d0:dd:e8:ec:55:75:5d:92:38:98:e4:ea: 36:cd:0e:a2:a0:0c:b1:6b:87:80:f5:e6:ca:54:0c: c4:a9:49:7e:8c:0e:cc:1d:53:72:27:02:e8:0f:d5: 44:76:9b:15:5b:5b:3b:f5:b4:f1:06:32:de:2b:81: aa:d4:a5:d0:6e:6c:50:24:e3:2e:37:28:ad:92:4b: 17:a8:4f:6e:2e:9b:ce:02:1f:ae:7f:75:b6:79:f1: c1:d1:6c:f9:3f:03:f6:6f:a2:73:6b:98:b0:56:e2: f1:90:cf:9d:2b:f1:bc:bd:67:b5:9f:18:fc:70:2a: 99:06:c9:f6:35:06:b1:cc:5f:7e:e4:d0:58:39:0f: 53:64:6a:15:c3:4e:a2:df:15:6c:90:b6:cb:ad:69: 79:1a:80:7c:6a:f9:ac:1c:2a:00:6a:e0:a4:71:17: c0:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:D8:1E:D9:1A:96:EB:70:65:B2:51:4B:1F:25:C3:89:EA:96:87:87 X509v3 Authority Key Identifier: keyid:B3:C0:78:E1:49:D9:74:14:34:FD:88:77:AB:4C:ED:46:DC:27:20:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:60:9f:c9:8e:b6:a1:70:ef:4f:cb:9f:13:0a:ef:bf:23:93: 53:a9:50:ea:6f:e8:9a:64:6b:5a:c8:bb:86:6d:13:5a:2c:66: 17:2d:bb:7f:08:2c:cb:bc:e9:42:6a:10:1e:5a:35:32:57:25: eb:9c:80:c6:b3:d2:ce:19:b2:ae:4f:78:fa:15:c4:c8:3b:e2: d5:c9:05:66:56:20:67:da:5f:6a:7b:4d:05:53:4b:ca:db:be: e2:ce:7c:6c:55:cd:e8:74:6e:23:da:bc:d9:56:c2:4d:0e:84: d3:28:f7:28:87:63:da:f4:f9:3f:0e:31:63:2b:6e:30:e3:b8: ca:67:e7:e4:bf:95:1d:d7:f7:46:0a:01:89:c7:a4:5a:bc:4e: f2:56:d7:66:89:6a:f1:ba:d5:63:95:41:79:84:4e:b7:88:a3: 39:7c:85:9d:7d:00:fa:36:df:46:19:33:fe:69:ea:a1:0f:8a: 6b:8a:60:f1:d0:f5:79:63:05:8e:16:46:f2:96:05:1d:89:e2: 9c:47:f4:31:0f:ff:1f:fb:01:42:22:32:3c:5c:3f:12:25:3b: c6:b5:73:de:10:29:d2:6b:f3:23:4b:58:54:21:61:76:78:da: 05:b9:23:d9:a3:aa:d0:6f:86:c3:d8:96:99:8f:20:67:8f:a9: d7:41:28:12 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUTagdPPfms9MbNtPm79WpKSkkwdUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjNjMDc4ZTE0OWQ5NzQxNDM0ZmQ4ODc3YWI0Y2VkNDZk YzI3MjBkYTAeFw0yNTEyMDYxOTMxNThaFw0yNTEyMDcyMjE4NThaMDMxMTAvBgNV BAMTKDYzRDgxRUQ5MUE5NkVCNzA2NUIyNTE0QjFGMjVDMzg5RUE5Njg3ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCktSEGan/jgr/LwNnUBPTvNnjB d+0d9FfwSnbhGtF+a07/tKw5XVGW3QO45EWkMaCsXPFrvC3dLhh2dvz/mgsqqPUk CJl8Y6D8v3bjhtV/uMMcgdAJNDmmgXZgQ9Dd6OxVdV2SOJjk6jbNDqKgDLFrh4D1 5spUDMSpSX6MDswdU3InAugP1UR2mxVbWzv1tPEGMt4rgarUpdBubFAk4y43KK2S SxeoT24um84CH65/dbZ58cHRbPk/A/ZvonNrmLBW4vGQz50r8by9Z7WfGPxwKpkG yfY1BrHMX37k0Fg5D1NkahXDTqLfFWyQtsutaXkagHxq+awcKgBq4KRxF8CDAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUY9ge2RqW63BlslFLHyXDieqWh4cwHwYDVR0j BBgwFoAUs8B44UnZdBQ0/Yh3q0ztRtwnINowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzAvQjNDMDc4RTE0OUQ5NzQxNDM0RkQ4ODc3QUI0Q0VENDZEQzI3MjBEQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3M4QjQ0VW5aZEJRMF9ZaDNxMHp0UnR3 bklOby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJiYi1m MDQ4LTRkZTEtOTIwNi04ZDQwZjA3MTgwOGIvMC9CM0MwNzhFMTQ5RDk3NDE0MzRG RDg4NzdBQjRDRUQ0NkRDMjcyMERBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACmCfyY62oXDvT8ufEwrv vyOTU6lQ6m/ommRrWsi7hm0TWixmFy27fwgsy7zpQmoQHlo1Mlcl65yAxrPSzhmy rk94+hXEyDvi1ckFZlYgZ9pfantNBVNLytu+4s58bFXN6HRuI9q82VbCTQ6E0yj3 KIdj2vT5Pw4xYytuMOO4ymfn5L+VHdf3RgoBicekWrxO8lbXZolq8brVY5VBeYRO t4ijOXyFnX0A+jbfRhkz/mnqoQ+Ka4pg8dD1eWMFjhZG8pYFHYninEf0MQ//H/sB QiIyPFw/EiU7xrVz3hAp0mvzI0tYVCFhdnjaBbkj2aOq0G+Gw9iWmY8gZ4+p10Eo Eg== -----END CERTIFICATE-----Generated at Sun Dec 7 14:28:26 2025 by rpki-client