This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.mft File: 5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.mft (raw, json) Hash identifier: g4Gqi09IiUzZ7X0ixaf3RWQTwKR2h+wbOJE1ZQ3l2vg= Subject key identifier: 41:EE:36:0D:22:86:CE:B0:5D:65:69:88:98:06:78:A7:21:62:40:6D Authority key identifier: 5F:BB:D0:F3:D7:B8:1E:8A:FD:99:E5:A3:4B:67:83:4D:D3:CD:13:C9 Certificate issuer: /CN=5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9 Certificate serial: 54F36B2D0CA23B506818967C101B0A7B4C55E03F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.mft Manifest number: 19 Signing time: Thu 04 Dec 2025 06:21:03 +0000 Manifest this update: Thu 04 Dec 2025 06:16:03 +0000 Manifest next update: Fri 05 Dec 2025 06:36:03 +0000 Files and hashes: 1: 5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.crl (hash: i5o0cE8qWGCJuWl1HcJYZPrgcQN17ZvLDQHTfPXMj64=) 2: 326130363a313238333a383930343a3a2f34382d3438203d3e20323134373632.roa (hash: +ucDYfCsKINgleLYp642WIR5LEPN0kWQYDVnDQaA83s=) 3: 326130363a313238333a383930303a3a2f34302d3430203d3e20323133343133.roa (hash: 0gYE6skrisUrM06D53bvZrZFAv0EfqoV+nCI7G9OKOs=) 4: 326130363a313238333a383930333a3a2f34382d3438203d3e20323133343133.roa (hash: hfsX7O4ssow2aXydnwN9zYa6SNNgkh4xqDb4M6RjByw=) 5: 326130363a313238333a383930613a3a2f34382d3438203d3e20323136333637.roa (hash: HuUH/JYH1vthyPEN3kexTHE/fhKQ1xn353p6qv+mYJg=) 6: 326130363a313238333a383930313a3a2f34382d3438203d3e20323134323035.roa (hash: cPNCLrbwdymPiqlNCY/iKCMb0/zZMwnLL5M7UNRh5H0=) 7: 326130363a313238333a383966303a3a2f34342d3434203d3e20323134303333.roa (hash: uXHhm0ZjjPodrKnjp4qW+YTDv1/Z29fczrFjmi+w+J4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.crl rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.mft rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:f3:6b:2d:0c:a2:3b:50:68:18:96:7c:10:1b:0a:7b:4c:55:e0:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9 Validity Not Before: Dec 4 06:16:03 2025 GMT Not After : Dec 5 06:36:03 2025 GMT Subject: CN=41EE360D2286CEB05D656988980678A72162406D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:53:97:fa:6f:41:02:6c:0e:f5:be:6a:28:02: 6c:b6:5d:c7:b4:a5:60:a6:4e:8e:b3:f4:ce:2a:ab: 93:6d:d9:c0:33:6b:08:d4:8f:42:5d:72:e9:6d:09: d8:3d:04:a4:bc:ce:ee:e3:82:1c:5d:2a:71:57:82: 07:5b:02:91:fb:13:57:8f:c1:9d:23:01:30:b1:ec: 52:c5:21:1f:a9:34:77:ed:97:a2:f8:e8:14:db:c1: 22:06:9c:aa:17:9b:c8:2b:ca:c3:a6:15:01:b5:33: d5:e4:7c:eb:70:6c:b8:d8:1d:af:17:14:5b:fb:f8: e0:17:e1:41:09:95:7a:e7:ef:04:a0:1f:f5:05:21: 4e:74:3a:d4:dc:52:4d:b1:d8:b8:c5:cd:5f:7f:7b: e3:e5:f3:88:d5:86:4e:1f:f2:bd:9c:f6:2b:c2:44: 17:b7:6e:c2:18:f2:47:b5:2c:b5:38:40:be:b2:32: da:1a:9e:ef:40:73:e5:72:43:f2:94:65:ac:bb:ff: cb:52:1b:1e:1e:21:c7:1c:a6:0f:41:2b:69:d9:02: 9f:d4:c9:92:7f:0c:40:86:d4:3e:c8:57:19:e7:f8: ee:89:5c:4e:15:a3:6b:8d:fa:c9:c4:44:8d:7c:51: 07:0a:e9:a4:4e:51:6c:a8:ea:c1:d6:d0:2f:e4:5e: 04:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:EE:36:0D:22:86:CE:B0:5D:65:69:88:98:06:78:A7:21:62:40:6D X509v3 Authority Key Identifier: keyid:5F:BB:D0:F3:D7:B8:1E:8A:FD:99:E5:A3:4B:67:83:4D:D3:CD:13:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:19:79:08:89:18:3b:e8:21:0c:37:a9:fc:07:61:80:59:3a: 29:56:3c:11:b9:46:76:0f:7f:d9:42:5b:03:e3:4f:49:eb:49: 6e:5b:9a:db:15:6e:ac:58:ca:de:0e:e1:d7:fc:b9:51:0e:00: f6:05:96:c5:5e:b0:82:ef:b3:7c:4f:75:5d:19:f7:46:31:11: 00:d3:48:67:e9:f8:68:fe:00:57:d4:36:fc:77:9b:6d:0f:8b: 80:68:84:0b:b7:24:96:44:88:cc:61:0a:ec:e0:5d:09:cf:f8: 1a:79:ca:28:fe:81:b3:07:fc:ff:76:85:52:67:75:8b:e1:93: bb:b4:53:df:c8:bc:6d:48:b0:ac:35:e1:3a:0f:fc:9e:c5:1e: e5:2a:9d:dd:f8:f7:81:76:fa:47:40:0a:9f:09:37:93:10:58: 77:78:b0:84:1e:38:32:61:dc:68:aa:6a:d8:eb:e9:a8:aa:ac: 81:1c:0d:62:44:bb:28:c1:e3:a8:ce:b8:1d:0b:fb:40:9b:77: d8:4b:fd:f6:41:17:a3:24:59:8d:10:1c:ac:6e:d5:d3:db:8e: da:65:1d:60:e9:7c:e3:e6:28:1a:56:da:bf:bc:ce:d0:78:6d: fc:2e:47:97:aa:96:bf:08:f6:02:bc:4f:ae:d4:1e:23:fc:f9: 0e:6d:d3:c9 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUVPNrLQyiO1BoGJZ8EBsKe0xV4D8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZCQkQwRjNEN0I4MUU4QUZEOTlFNUEzNEI2NzgzNERE M0NEMTNDOTAeFw0yNTEyMDQwNjE2MDNaFw0yNTEyMDUwNjM2MDNaMDMxMTAvBgNV BAMTKDQxRUUzNjBEMjI4NkNFQjA1RDY1Njk4ODk4MDY3OEE3MjE2MjQwNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvU5f6b0ECbA71vmooAmy2Xce0 pWCmTo6z9M4qq5Nt2cAzawjUj0JdcultCdg9BKS8zu7jghxdKnFXggdbApH7E1eP wZ0jATCx7FLFIR+pNHftl6L46BTbwSIGnKoXm8grysOmFQG1M9XkfOtwbLjYHa8X FFv7+OAX4UEJlXrn7wSgH/UFIU50OtTcUk2x2LjFzV9/e+Pl84jVhk4f8r2c9ivC RBe3bsIY8ke1LLU4QL6yMtoanu9Ac+VyQ/KUZay7/8tSGx4eIcccpg9BK2nZAp/U yZJ/DECG1D7IVxnn+O6JXE4Vo2uN+snERI18UQcK6aROUWyo6sHW0C/kXgR3AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUQe42DSKGzrBdZWmImAZ4pyFiQG0wHwYDVR0j BBgwFoAUX7vQ89e4Hor9meWjS2eDTdPNE8kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzhlNjE2MTEtM2IwYi00MWNlLTg4Y2QtZTU2MDM1M2Y2 OTQyLzEvNUZCQkQwRjNEN0I4MUU4QUZEOTlFNUEzNEI2NzgzNEREM0NEMTNDOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJiYi1mMDQ4LTRk ZTEtOTIwNi04ZDQwZjA3MTgwOGIvNi81RkJCRDBGM0Q3QjgxRThBRkQ5OUU1QTM0 QjY3ODM0REQzQ0QxM0M5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzc4ZTYxNjExLTNiMGItNDFjZS04OGNkLWU1NjAzNTNmNjk0Mi8xLzVGQkJEMEYz RDdCODFFOEFGRDk5RTVBMzRCNjc4MzRERDNDRDEzQzkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB2GXkI iRg76CEMN6n8B2GAWTopVjwRuUZ2D3/ZQlsD409J60luW5rbFW6sWMreDuHX/LlR DgD2BZbFXrCC77N8T3VdGfdGMREA00hn6fho/gBX1Db8d5ttD4uAaIQLtySWRIjM YQrs4F0Jz/gaecoo/oGzB/z/doVSZ3WL4ZO7tFPfyLxtSLCsNeE6D/yexR7lKp3d +PeBdvpHQAqfCTeTEFh3eLCEHjgyYdxoqmrY6+moqqyBHA1iRLsoweOozrgdC/tA m3fYS/32QRejJFmNEBysbtXT247aZR1g6Xzj5igaVtq/vM7QeG38LkeXqpa/CPYC vE+u1B4j/PkObdPJ -----END CERTIFICATE-----Generated at Thu Dec 4 08:27:55 2025 by rpki-client