This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft File: B3D0280F500695A43204251C9830454CA8A2E7AC.mft (raw, json) Hash identifier: LTE++k/lbbLDkuZiJ/pn9f61WyJbBPymGYtHaPXKC8A= Subject key identifier: 85:5A:F6:C8:9B:4E:7D:BF:A7:A4:D8:C2:39:75:C6:C0:79:96:73:D2 Authority key identifier: B3:D0:28:0F:50:06:95:A4:32:04:25:1C:98:30:45:4C:A8:A2:E7:AC Certificate issuer: /CN=b3d0280f500695a43204251c9830454ca8a2e7ac Certificate serial: 1769F35537A0541544A9BB3CBBD3786B1C975289 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft Manifest number: 02FF Signing time: Wed 03 Dec 2025 19:26:05 +0000 Manifest this update: Wed 03 Dec 2025 19:21:05 +0000 Manifest next update: Thu 04 Dec 2025 22:53:05 +0000 Files and hashes: 1: 3138352e3138362e32362e302f32342d3234203d3e20323135373033.roa (hash: 64uxD3jQtXWcavfYFljDhJHJgbOPhGll/0DiDk/jIuA=) 2: 3138352e3138362e32352e302f32342d3234203d3e20323133373732.roa (hash: KbS5MjAty6bkNu2TCkQpJN6TOq9xU7ustWBHWVtQeSQ=) 3: 3138352e3138362e32352e302f32342d3234203d3e203135343430.roa (hash: zbKaWYwmjPPC167P5YL6I94JcPZEWN0HKnmqpfcR9u4=) 4: B3D0280F500695A43204251C9830454CA8A2E7AC.crl (hash: Tp3DbCT+NxUoSxmYG0LPuBvnEIyC1l9NXwcuN9T0tQY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.crl rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 22:53:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:69:f3:55:37:a0:54:15:44:a9:bb:3c:bb:d3:78:6b:1c:97:52:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3d0280f500695a43204251c9830454ca8a2e7ac Validity Not Before: Dec 3 19:21:05 2025 GMT Not After : Dec 4 22:53:05 2025 GMT Subject: CN=855AF6C89B4E7DBFA7A4D8C23975C6C0799673D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:17:22:61:64:8f:b9:1e:fc:8d:d5:99:ed:3a: 1b:b0:cb:92:6e:2c:7a:36:1a:ec:15:2b:85:07:b7: 1f:be:88:71:8a:60:02:b9:b0:46:f0:e0:2b:a4:27: 1f:a0:f1:f9:a6:93:c4:0c:c3:63:f6:1d:86:b4:d6: 18:da:91:0a:b8:15:12:d8:c0:dc:6e:90:42:9f:e1: 14:9c:ad:97:20:eb:f2:2a:d4:a7:13:1e:f7:d2:76: 08:c9:cc:c5:a1:82:8a:c5:10:50:e0:c2:82:a7:75: 66:5a:f6:2d:c6:bb:cf:cd:1f:d2:06:7b:34:9b:e7: 2b:6d:09:a7:8f:94:5a:00:2a:03:3f:36:5f:7f:7f: 7f:87:2e:ce:8f:cf:e7:d1:8b:38:cc:b7:de:d6:0f: 7b:61:7c:1a:73:4a:02:bd:39:cf:25:99:52:cf:97: 01:e1:f8:86:34:80:bd:92:2d:46:50:b2:7f:60:3f: 8e:96:84:10:c4:57:aa:71:87:8d:b7:6f:52:b2:b7: 78:20:ac:e5:6b:32:84:87:f3:92:de:13:2b:f0:a0: bd:de:43:ce:38:01:04:c2:49:f3:b6:ce:24:5a:d7: 25:a5:4a:c5:c8:fe:fc:9a:2b:9e:c1:b4:3c:4b:1f: df:a7:a8:9b:52:7a:06:0f:4f:11:4b:12:70:9a:f1: 35:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:5A:F6:C8:9B:4E:7D:BF:A7:A4:D8:C2:39:75:C6:C0:79:96:73:D2 X509v3 Authority Key Identifier: keyid:B3:D0:28:0F:50:06:95:A4:32:04:25:1C:98:30:45:4C:A8:A2:E7:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:47:ec:08:70:c3:c3:f9:cd:68:5d:fb:fa:71:ed:71:37:35: 73:8e:84:1b:91:41:27:78:de:e8:bb:2e:08:49:0c:9d:dc:0f: 88:df:9f:d2:f9:ed:ee:28:7d:29:c9:9a:d0:5f:fc:6c:7d:f8: ba:6e:e3:58:d6:a7:46:76:a0:47:16:79:bf:cb:0b:5f:3f:b1: 20:89:6f:f2:29:78:ce:db:84:f5:c9:56:84:44:b7:a1:e9:90: dd:c6:75:8c:a1:50:83:72:cc:5e:38:9c:cc:cf:07:78:1b:35: 79:9b:fd:23:4d:f5:63:da:2c:68:5b:85:a5:ee:1b:4a:8d:0d: f4:1b:d0:ef:23:91:d2:a7:db:4e:d5:55:2f:d6:c5:9f:31:e1: f1:e1:a6:d2:78:48:06:0c:57:49:18:52:bd:b5:1b:b3:b5:06: 05:21:6e:aa:33:f0:13:dd:42:4e:04:59:25:cf:3d:31:fb:7a: 10:6e:27:35:fb:ac:77:ba:8a:fd:ec:91:63:24:aa:0f:d2:21: 07:99:68:9d:39:3a:03:12:6a:a6:bb:7b:15:ac:3c:81:d0:a7: 43:3f:93:5a:bd:be:b9:9a:0b:5d:2e:41:48:83:04:b5:9f:6f: 9d:a2:72:cc:40:37:c6:d9:99:0b:5a:55:16:af:15:3b:d0:ef: 77:42:65:21 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUF2nzVTegVBVEqbs8u9N4axyXUokwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjNkMDI4MGY1MDA2OTVhNDMyMDQyNTFjOTgzMDQ1NGNh OGEyZTdhYzAeFw0yNTEyMDMxOTIxMDVaFw0yNTEyMDQyMjUzMDVaMDMxMTAvBgNV BAMTKDg1NUFGNkM4OUI0RTdEQkZBN0E0RDhDMjM5NzVDNkMwNzk5NjczRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZFyJhZI+5HvyN1ZntOhuwy5Ju LHo2GuwVK4UHtx++iHGKYAK5sEbw4CukJx+g8fmmk8QMw2P2HYa01hjakQq4FRLY wNxukEKf4RScrZcg6/Iq1KcTHvfSdgjJzMWhgorFEFDgwoKndWZa9i3Gu8/NH9IG ezSb5yttCaePlFoAKgM/Nl9/f3+HLs6Pz+fRizjMt97WD3thfBpzSgK9Oc8lmVLP lwHh+IY0gL2SLUZQsn9gP46WhBDEV6pxh423b1Kyt3ggrOVrMoSH85LeEyvwoL3e Q844AQTCSfO2ziRa1yWlSsXI/vyaK57BtDxLH9+nqJtSegYPTxFLEnCa8TURAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUhVr2yJtOfb+npNjCOXXGwHmWc9IwHwYDVR0j BBgwFoAUs9AoD1AGlaQyBCUcmDBFTKii56wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODdhZTI1ZjMtNzA2Yi00N2VkLWJiNzQtNDY2ODRhZTBl ZjJiLzAvQjNEMDI4MEY1MDA2OTVBNDMyMDQyNTFDOTgzMDQ1NENBOEEyRTdBQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3M5QW9EMUFHbGFReUJDVWNtREJGVEtp aTU2dy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84N2FlMjVmMy03 MDZiLTQ3ZWQtYmI3NC00NjY4NGFlMGVmMmIvMC9CM0QwMjgwRjUwMDY5NUE0MzIw NDI1MUM5ODMwNDU0Q0E4QTJFN0FDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAckfsCHDDw/nNaF37+nHt cTc1c46EG5FBJ3je6LsuCEkMndwPiN+f0vnt7ih9Kcma0F/8bH34um7jWNanRnag RxZ5v8sLXz+xIIlv8il4ztuE9clWhES3oemQ3cZ1jKFQg3LMXjiczM8HeBs1eZv9 I031Y9osaFuFpe4bSo0N9BvQ7yOR0qfbTtVVL9bFnzHh8eGm0nhIBgxXSRhSvbUb s7UGBSFuqjPwE91CTgRZJc89Mft6EG4nNfusd7qK/eyRYySqD9IhB5lonTk6AxJq prt7Faw8gdCnQz+TWr2+uZoLXS5BSIMEtZ9vnaJyzEA3xtmZC1pVFq8VO9Dvd0Jl IQ== -----END CERTIFICATE-----Generated at Thu Dec 4 08:14:39 2025 by rpki-client