This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft File: 3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft (raw, json) Hash identifier: pu5HSmfSsq89owqmoGV972AfLAUJktSP1ckmOVq75VY= Subject key identifier: 1D:DA:E4:48:C8:9B:8B:E9:D3:8B:7D:C4:B8:2D:13:76:DA:2E:57:59 Authority key identifier: 3F:CD:3A:83:9E:A1:41:7F:D9:88:F3:DD:FD:04:54:19:7F:AA:F4:7A Certificate issuer: /CN=324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b Certificate serial: 4A882297647E7DE712E32482104E820278CBBE50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft Manifest number: 023C Signing time: Sun 21 Dec 2025 01:48:40 +0000 Manifest this update: Sun 21 Dec 2025 01:43:40 +0000 Manifest next update: Mon 22 Dec 2025 02:05:40 +0000 Files and hashes: 1: 32332e3139312e34302e302f32342d3234203d3e203236393534.roa (hash: S3jzo3eG6y4PI2K8QRCs4He73uG95vDRz8jaxjn2rIA=) 2: 3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl (hash: ckEZgIvSGitC5XAn2f8ZY0a/SdLxc9QY9OFJV4yTwbM=) 3: 3133302e31322e39332e302f32342d3234203d3e203236393534.roa (hash: vVLMMj/up4t8BoR2x4+9T6jLFKzm1RRXCwaLQiGBGUU=) 4: 323630323a663764653a3a2f34302d3438203d3e203236393534.roa (hash: nc0OfcCKdw/6xTqKkcylPBA4tjafxEa+iXIGeRNqKAA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 02:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:88:22:97:64:7e:7d:e7:12:e3:24:82:10:4e:82:02:78:cb:be:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b Validity Not Before: Dec 21 01:43:40 2025 GMT Not After : Dec 22 02:05:40 2025 GMT Subject: CN=1DDAE448C89B8BE9D38B7DC4B82D1376DA2E5759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c4:a0:61:01:5d:3c:7d:b5:d0:eb:c6:e5:82: e7:12:15:e6:8f:99:97:82:20:a3:a0:c4:89:47:71: 28:31:0e:c0:52:3c:51:2c:8c:28:b0:2e:fb:cb:49: 0e:a6:37:71:78:35:f5:fa:c0:63:b4:d4:de:e1:8e: 7f:c3:89:8f:6d:38:ce:e4:f7:a9:9d:ba:79:ae:60: 72:16:98:6f:16:dc:29:c6:82:0a:2c:5a:1c:db:81: b9:02:5f:1c:c4:cf:93:12:88:76:51:32:89:87:95: 8b:90:4d:a1:9f:d9:85:a8:e9:ae:83:66:37:5b:19: 4e:14:a2:b9:bc:a9:d7:0e:74:3a:fb:71:3d:a6:1e: 9c:36:1b:2a:6f:f5:12:83:81:33:33:3d:9b:3a:49: e3:e6:90:d6:b8:63:89:88:63:29:27:ab:01:b1:29: 6c:61:73:66:3c:9d:4f:f3:91:cf:66:0b:f8:38:ed: f6:29:8a:de:26:dd:bd:24:5f:11:ea:5d:39:af:52: cb:33:ee:62:c2:d1:6f:b0:1f:22:3e:6b:1b:cd:2d: 5b:d5:c4:34:fc:41:b1:36:4e:a8:01:27:a7:ab:bc: 0f:a5:9c:a6:a7:0f:c6:66:e5:34:7a:0f:3a:e2:1e: 47:7b:64:9f:ce:e9:07:a3:4c:99:63:06:41:a9:ba: 82:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:DA:E4:48:C8:9B:8B:E9:D3:8B:7D:C4:B8:2D:13:76:DA:2E:57:59 X509v3 Authority Key Identifier: keyid:3F:CD:3A:83:9E:A1:41:7F:D9:88:F3:DD:FD:04:54:19:7F:AA:F4:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:0b:51:81:c4:75:10:b8:f8:92:94:2d:2e:81:02:cb:45:d3: cc:a6:94:1a:20:67:a2:90:aa:4c:a9:70:e6:7a:6f:0e:8e:82: 45:5d:a4:4b:26:a7:95:3e:8e:f6:0d:e6:d7:35:1d:1e:d3:6a: 2a:bb:64:01:33:ab:65:1b:e6:35:91:79:af:ca:3c:2d:b2:98: 50:0a:dc:be:cd:3d:d5:b6:21:db:98:25:75:ff:b3:d8:be:c2: 79:8a:36:be:22:82:ca:73:90:cc:84:3f:3e:61:6b:73:b3:77: e3:88:bc:7b:6e:ab:21:04:6a:4d:60:69:68:32:b6:69:05:01: 43:8b:6b:cf:e7:15:24:74:28:c1:2b:82:de:88:fc:99:f1:19: bd:02:d6:6f:30:af:ad:9b:92:84:f3:ab:5a:95:a0:d0:7c:f2: 6a:7a:00:cd:e4:55:af:f2:31:ec:1e:b3:2d:6a:5b:b2:f6:49: 97:2f:43:e7:cd:b6:ae:d2:e7:7b:7f:2d:b1:70:ec:9f:d4:d9: f8:60:b9:00:78:b9:e2:1a:a4:05:58:8a:5e:61:0d:c8:3e:30: 7f:95:45:1d:a1:97:9e:43:3b:eb:f3:ab:76:3e:56:3d:61:e4: fe:36:7b:65:9b:4a:f0:15:e8:22:3d:b4:3c:ac:06:14:73:6b: 9f:40:47:f6 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUSogil2R+fecS4ySCEE6CAnjLvlAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMzI0ZmZlMzlhOThhMDE0NmI1MDNkOGEwMTVjYTJjMmU3 NjdjZjNkMGI5ZmRlNjIzMWIwHhcNMjUxMjIxMDE0MzQwWhcNMjUxMjIyMDIwNTQw WjAzMTEwLwYDVQQDEygxRERBRTQ0OEM4OUI4QkU5RDM4QjdEQzRCODJEMTM3NkRB MkU1NzU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscSgYQFdPH21 0OvG5YLnEhXmj5mXgiCjoMSJR3EoMQ7AUjxRLIwosC77y0kOpjdxeDX1+sBjtNTe 4Y5/w4mPbTjO5Pepnbp5rmByFphvFtwpxoIKLFoc24G5Al8cxM+TEoh2UTKJh5WL kE2hn9mFqOmug2Y3WxlOFKK5vKnXDnQ6+3E9ph6cNhsqb/USg4EzMz2bOknj5pDW uGOJiGMpJ6sBsSlsYXNmPJ1P85HPZgv4OO32KYreJt29JF8R6l05r1LLM+5iwtFv sB8iPmsbzS1b1cQ0/EGxNk6oASenq7wPpZympw/GZuU0eg864h5He2SfzukHo0yZ YwZBqbqC3QIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFB3a5EjIm4vp04t9xLgtE3ba LldZMB8GA1UdIwQYMBaAFD/NOoOeoUF/2Yjz3f0EVBl/qvR6MA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5 LTBhYjcwZTQ4MTViYi8xLzNGQ0QzQTgzOUVBMTQxN0ZEOTg4RjNEREZEMDQ1NDE5 N0ZBQUY0N0EuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYt NDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81MWNkOTlmNy0yZjQyLTRkZWMtYjJjNi0w OWJhZmFhMzc4MGUvMzI0ZmZlMzlhOThhMDE0NmI1MDNkOGEwMTVjYTJjMmU3Njdj ZjNkMGI5ZmRlNjIzMWIuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv NzNiOGVjMDEtOGJhNS00NzlmLWEyMjktMGFiNzBlNDgxNWJiLzEvM0ZDRDNBODM5 RUExNDE3RkQ5ODhGM0RERkQwNDU0MTk3RkFBRjQ3QS5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJ8LUYHE dRC4+JKULS6BAstF08ymlBogZ6KQqkypcOZ6bw6OgkVdpEsmp5U+jvYN5tc1HR7T aiq7ZAEzq2Ub5jWRea/KPC2ymFAK3L7NPdW2IduYJXX/s9i+wnmKNr4igspzkMyE Pz5ha3Ozd+OIvHtuqyEEak1gaWgytmkFAUOLa8/nFSR0KMErgt6I/JnxGb0C1m8w r62bkoTzq1qVoNB88mp6AM3kVa/yMewesy1qW7L2SZcvQ+fNtq7S53t/LbFw7J/U 2fhguQB4ueIapAVYil5hDcg+MH+VRR2hl55DO+vzq3Y+Vj1h5P42e2WbSvAV6CI9 tDysBhRza59AR/Y= -----END CERTIFICATE-----Generated at Sun Dec 21 15:18:35 2025 by rpki-client