This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft File: 0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft (raw, json) Hash identifier: +0IqjYtMkK/eBStAcI3ZMf7nsn166lUqSZRyrgrJ1w0= Subject key identifier: 51:5F:BD:3A:AA:93:0E:DB:23:06:4E:1F:A8:03:C2:0F:17:81:90:87 Authority key identifier: 0A:FD:B7:22:2B:9E:BA:33:A6:5E:29:BB:E3:F2:9D:7C:5F:4B:09:B9 Certificate issuer: /CN=0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9 Certificate serial: 73D1CBC5942C0B3932CC303FB025B3C20A2DC457 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft Manifest number: DA Signing time: Tue 16 Dec 2025 01:41:39 +0000 Manifest this update: Tue 16 Dec 2025 01:36:39 +0000 Manifest next update: Wed 17 Dec 2025 04:25:39 +0000 Files and hashes: 1: 326130373a353463313a663030303a3a2f33362d3438203d3e20323038343533.roa (hash: PoxwFIHy8kdey2mlHnL1hmx4hhF1/GhCPxY1mv6kDWE=) 2: 0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.crl (hash: J1PzDzsy8nGlf5WITTi4/1dQ2JlYcGLfQ8swmmG8eTw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.crl rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 04:25:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:d1:cb:c5:94:2c:0b:39:32:cc:30:3f:b0:25:b3:c2:0a:2d:c4:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9 Validity Not Before: Dec 16 01:36:39 2025 GMT Not After : Dec 17 04:25:39 2025 GMT Subject: CN=515FBD3AAA930EDB23064E1FA803C20F17819087 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:05:15:1f:3e:6d:ba:9a:3d:9b:ea:de:f4:fd: 67:e1:5c:86:11:bf:1c:07:e7:97:e8:b7:17:d0:65: 22:b1:c4:3f:06:42:e6:82:54:c0:87:c9:24:9b:78: 02:54:d2:e8:fb:ae:bf:50:42:ff:ba:e3:de:e1:4d: da:aa:67:69:97:87:9d:97:fd:4a:73:06:bc:13:69: 83:78:b1:b5:5c:1a:0d:1f:4c:cf:37:97:34:7a:e2: 66:0f:ea:61:58:15:7d:c0:8d:44:76:2c:55:38:d1: 1d:f9:4d:ac:a8:1d:38:c0:cd:d1:f5:93:d3:83:fe: 6b:a3:a0:a6:31:f3:d5:09:0e:f4:fc:87:76:41:4e: 95:26:ad:6a:06:f1:19:2a:70:1e:7b:6a:c9:df:1c: 4f:ec:1b:11:f1:50:09:59:ba:cb:7f:cc:e7:d2:b9: 8f:08:25:5d:1c:78:68:7b:6e:0d:2e:5a:0f:7b:47: b7:c0:57:c7:07:9c:ef:f7:90:af:58:a8:dd:51:aa: bc:a8:6a:4b:cb:07:e4:66:c7:95:13:6a:88:f5:5e: 27:19:93:7d:05:fc:af:6d:2a:03:28:a8:e8:33:36: 16:30:88:56:99:71:4a:36:d9:32:99:03:27:1e:8d: ab:63:40:0e:14:3b:ec:09:8a:63:ac:ab:7f:f4:4b: a9:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:5F:BD:3A:AA:93:0E:DB:23:06:4E:1F:A8:03:C2:0F:17:81:90:87 X509v3 Authority Key Identifier: keyid:0A:FD:B7:22:2B:9E:BA:33:A6:5E:29:BB:E3:F2:9D:7C:5F:4B:09:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:18:cd:78:a2:5c:5d:77:25:29:3b:5f:31:7d:8f:2e:9c:44: 6d:b1:1f:1c:31:d7:0f:7e:c2:a3:1f:59:d0:26:f0:e5:26:07: 69:67:1b:8b:2d:69:33:10:bc:d3:20:63:fc:96:9d:a8:2a:95: 2b:47:0d:47:11:c7:1c:9e:84:c2:f5:38:2f:67:de:f5:f6:3c: fe:8f:2b:6a:86:f8:da:7b:4a:03:f2:1a:59:fc:d4:35:f4:4f: 86:fe:87:2b:46:51:d6:e3:13:79:a0:93:88:47:7d:2b:e9:3a: 5c:6c:c5:ab:85:9e:d4:b2:cf:4b:a0:25:d1:cf:4c:22:ef:36: 48:6f:54:89:fa:5d:c0:88:2a:7e:2f:3f:af:97:59:52:15:7e: f6:80:75:eb:a6:ca:31:d5:4c:b9:18:4a:90:ab:e1:a6:da:f0: 6e:22:20:5b:ff:5a:84:51:4a:5f:4b:fd:25:1f:54:86:f0:2e: 97:c6:ef:f8:6b:b9:23:44:c7:8a:13:56:4c:35:f8:63:ba:f6: ee:7c:52:07:9c:2a:e6:1f:3d:e7:fe:01:5b:a0:5b:8e:a6:46: 16:43:58:2f:f5:20:5e:72:94:8f:00:bb:b2:20:e8:85:20:ce: cc:9c:6a:a2:8c:05:fe:c5:a8:1f:3c:37:e7:41:36:bc:16:7e: d2:28:b5:a1 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUc9HLxZQsCzkyzDA/sCWzwgotxFcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEFGREI3MjIyQjlFQkEzM0E2NUUyOUJCRTNGMjlEN0M1 RjRCMDlCOTAeFw0yNTEyMTYwMTM2MzlaFw0yNTEyMTcwNDI1MzlaMDMxMTAvBgNV BAMTKDUxNUZCRDNBQUE5MzBFREIyMzA2NEUxRkE4MDNDMjBGMTc4MTkwODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8BRUfPm26mj2b6t70/WfhXIYR vxwH55fotxfQZSKxxD8GQuaCVMCHySSbeAJU0uj7rr9QQv+6497hTdqqZ2mXh52X /UpzBrwTaYN4sbVcGg0fTM83lzR64mYP6mFYFX3AjUR2LFU40R35TayoHTjAzdH1 k9OD/mujoKYx89UJDvT8h3ZBTpUmrWoG8RkqcB57asnfHE/sGxHxUAlZust/zOfS uY8IJV0ceGh7bg0uWg97R7fAV8cHnO/3kK9YqN1RqryoakvLB+Rmx5UTaoj1XicZ k30F/K9tKgMoqOgzNhYwiFaZcUo22TKZAycejatjQA4UO+wJimOsq3/0S6lzAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUUV+9OqqTDtsjBk4fqAPCDxeBkIcwHwYDVR0j BBgwFoAUCv23IiueujOmXim74/KdfF9LCbkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE0NzZkNjItOWNmYS00ODcxLWEyZDktZmFkZjU3ODFj MTFiLzMvMEFGREI3MjIyQjlFQkEzM0E2NUUyOUJCRTNGMjlEN0M1RjRCMDlCOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvNC8wQUZEQjcyMjJCOUVCQTMzQTY1RTI5QkJF M0YyOUQ3QzVGNEIwOUI5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcxNDc2ZDYyLTljZmEtNDg3MS1hMmQ5LWZhZGY1NzgxYzExYi8zLzBBRkRCNzIy MkI5RUJBMzNBNjVFMjlCQkUzRjI5RDdDNUY0QjA5QjkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC+GM14 olxddyUpO18xfY8unERtsR8cMdcPfsKjH1nQJvDlJgdpZxuLLWkzELzTIGP8lp2o KpUrRw1HEcccnoTC9TgvZ9719jz+jytqhvjae0oD8hpZ/NQ19E+G/ocrRlHW4xN5 oJOIR30r6TpcbMWrhZ7Uss9LoCXRz0wi7zZIb1SJ+l3AiCp+Lz+vl1lSFX72gHXr psox1Uy5GEqQq+Gm2vBuIiBb/1qEUUpfS/0lH1SG8C6Xxu/4a7kjRMeKE1ZMNfhj uvbufFIHnCrmHz3n/gFboFuOpkYWQ1gv9SBecpSPALuyIOiFIM7MnGqijAX+xagf PDfnQTa8Fn7SKLWh -----END CERTIFICATE-----Generated at Tue Dec 16 19:16:48 2025 by rpki-client