This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft File: D36546790928F44FF74C564231471FA1D8D2A97B.mft (raw, json) Hash identifier: QlasN+DgtHqS6CIr14uNiJ4CqAG3lzC++N2F6g72v6Y= Subject key identifier: 92:D6:21:55:93:9A:E1:00:8D:2B:CD:5D:07:AB:DB:91:75:4C:97:8D Authority key identifier: D3:65:46:79:09:28:F4:4F:F7:4C:56:42:31:47:1F:A1:D8:D2:A9:7B Certificate issuer: /CN=D36546790928F44FF74C564231471FA1D8D2A97B Certificate serial: 68DDCE926B488368268DE977F8237F9572FB0E81 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D36546790928F44FF74C564231471FA1D8D2A97B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft Manifest number: 24 Signing time: Thu 04 Dec 2025 04:55:02 +0000 Manifest this update: Thu 04 Dec 2025 04:50:02 +0000 Manifest next update: Fri 05 Dec 2025 05:04:02 +0000 Files and hashes: 1: 326130363a313238333a626434303a3a2f34322d313238203d3e20323130373936.roa (hash: Uw0Yd63FHiLbrVWXi+u/Khr5x1SAZF46bRDWajH7ZJ4=) 2: D36546790928F44FF74C564231471FA1D8D2A97B.crl (hash: oBLCe33M7AWk3mxy+eq63PPlt+lHgvvJwmxvoMzC25Y=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.crl rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D36546790928F44FF74C564231471FA1D8D2A97B.cer rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:dd:ce:92:6b:48:83:68:26:8d:e9:77:f8:23:7f:95:72:fb:0e:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D36546790928F44FF74C564231471FA1D8D2A97B Validity Not Before: Dec 4 04:50:02 2025 GMT Not After : Dec 5 05:04:02 2025 GMT Subject: CN=92D62155939AE1008D2BCD5D07ABDB91754C978D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:83:bb:3e:67:29:0b:a5:44:4e:15:c7:74:08: 7e:52:77:68:cb:3a:e5:39:68:3f:cb:2e:6a:58:fa: 7e:47:bf:e0:83:96:ea:53:19:d7:3f:d1:15:50:4b: 33:8e:d9:b9:fe:4b:2c:f1:a0:1c:7f:8b:b6:1b:5b: a1:ef:30:39:e7:3e:49:60:fb:97:8f:15:22:ba:1e: a9:41:c5:8a:62:1b:e4:7f:56:21:4d:d1:15:df:be: ff:ee:17:5d:fa:93:ac:23:e6:2f:f4:d8:3b:b7:b6: 9b:bb:76:80:8d:77:5d:be:b3:53:1d:74:6c:91:e6: 29:af:51:bb:ac:80:f8:cd:6c:e2:94:a0:7f:c6:da: 31:9c:ad:bc:34:a5:eb:a6:61:97:7f:bf:35:82:c8: e6:03:19:48:52:6d:e0:90:9c:7d:bc:f1:cf:a3:5f: 2c:cd:4b:85:dc:b7:dd:07:3d:79:be:9a:d5:9a:f8: f8:2b:c2:6d:98:4a:37:d0:f1:6a:cc:1c:ac:3c:45: 57:51:fa:79:ec:1c:9f:c8:50:d1:20:ec:23:ac:db: 00:2b:2a:62:d0:fe:29:55:02:a3:11:db:6c:aa:9a: da:22:a8:bd:8d:3c:d5:f7:75:64:4b:6a:8a:02:f3: 9d:d7:55:53:e9:f3:22:0a:73:4a:48:c9:ee:81:95: 76:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:D6:21:55:93:9A:E1:00:8D:2B:CD:5D:07:AB:DB:91:75:4C:97:8D X509v3 Authority Key Identifier: keyid:D3:65:46:79:09:28:F4:4F:F7:4C:56:42:31:47:1F:A1:D8:D2:A9:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D36546790928F44FF74C564231471FA1D8D2A97B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:82:46:51:89:fb:ca:cb:32:07:7f:f0:21:23:9f:67:1d:d3: 35:f4:1c:26:7c:b1:cb:71:7c:f1:3f:1f:32:5b:ab:d4:8e:6b: 5b:24:1b:38:6f:33:c1:96:11:71:c7:d5:7a:f6:a1:3d:85:fc: da:a8:87:3c:52:4f:22:35:42:1f:ba:4f:e4:3b:09:2f:ab:29: 5c:8f:de:03:ac:f9:7c:3f:09:b9:f3:4d:7f:cf:6e:a7:eb:12: 51:68:4b:07:33:fd:28:e8:96:dc:dd:54:99:8e:7d:54:52:af: 25:0f:0d:1a:b7:46:26:b5:48:dc:cc:9f:97:38:26:c2:57:df: 49:3f:6b:5d:8f:79:05:57:4a:36:22:c0:e6:03:ee:6c:39:2b: 48:06:7a:e0:1c:17:4f:be:d2:8c:99:62:33:81:0d:98:96:c2: 52:15:a0:0d:75:bf:da:b6:2c:7a:cd:13:20:d2:c9:fa:57:f1: 13:97:7f:2c:11:cc:ec:5a:72:be:89:44:80:9e:37:0d:c9:7c: 0b:71:cf:ae:8d:ed:0a:76:94:d0:62:4b:42:d9:cf:35:bf:5e: 6a:4d:43:c0:62:1b:02:99:f1:90:a7:1d:77:75:24:66:0e:e4: c9:f7:5c:d5:85:25:03:6d:82:05:b0:36:d4:c5:0f:3e:85:51: 98:2d:bc:05 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUaN3OkmtIg2gmjel3+CN/lXL7DoEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM2NTQ2NzkwOTI4RjQ0RkY3NEM1NjQyMzE0NzFGQTFE OEQyQTk3QjAeFw0yNTEyMDQwNDUwMDJaFw0yNTEyMDUwNTA0MDJaMDMxMTAvBgNV BAMTKDkyRDYyMTU1OTM5QUUxMDA4RDJCQ0Q1RDA3QUJEQjkxNzU0Qzk3OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCng7s+ZykLpUROFcd0CH5Sd2jL OuU5aD/LLmpY+n5Hv+CDlupTGdc/0RVQSzOO2bn+SyzxoBx/i7YbW6HvMDnnPklg +5ePFSK6HqlBxYpiG+R/ViFN0RXfvv/uF136k6wj5i/02Du3tpu7doCNd12+s1Md dGyR5imvUbusgPjNbOKUoH/G2jGcrbw0peumYZd/vzWCyOYDGUhSbeCQnH288c+j XyzNS4Xct90HPXm+mtWa+Pgrwm2YSjfQ8WrMHKw8RVdR+nnsHJ/IUNEg7COs2wAr KmLQ/ilVAqMR22yqmtoiqL2NPNX3dWRLaooC853XVVPp8yIKc0pIye6BlXZdAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUktYhVZOa4QCNK81dB6vbkXVMl40wHwYDVR0j BBgwFoAU02VGeQko9E/3TFZCMUcfodjSqXswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjg4NDQzMTgtMzVkNy00ODJlLWJiZDUtYjYyNGNmMGIy MDQxLzEvRDM2NTQ2NzkwOTI4RjQ0RkY3NEM1NjQyMzE0NzFGQTFEOEQyQTk3Qi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJiYi1mMDQ4LTRk ZTEtOTIwNi04ZDQwZjA3MTgwOGIvNi9EMzY1NDY3OTA5MjhGNDRGRjc0QzU2NDIz MTQ3MUZBMUQ4RDJBOTdCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2I4ODQ0MzE4LTM1ZDctNDgyZS1iYmQ1LWI2MjRjZjBiMjA0MS8xL0QzNjU0Njc5 MDkyOEY0NEZGNzRDNTY0MjMxNDcxRkExRDhEMkE5N0IubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAJgkZR ifvKyzIHf/AhI59nHdM19BwmfLHLcXzxPx8yW6vUjmtbJBs4bzPBlhFxx9V69qE9 hfzaqIc8Uk8iNUIfuk/kOwkvqylcj94DrPl8Pwm5801/z26n6xJRaEsHM/0o6Jbc 3VSZjn1UUq8lDw0at0YmtUjczJ+XOCbCV99JP2tdj3kFV0o2IsDmA+5sOStIBnrg HBdPvtKMmWIzgQ2YlsJSFaANdb/atix6zRMg0sn6V/ETl38sEczsWnK+iUSAnjcN yXwLcc+uje0KdpTQYktC2c81v15qTUPAYhsCmfGQpx13dSRmDuTJ91zVhSUDbYIF sDbUxQ8+hVGYLbwF -----END CERTIFICATE-----Generated at Thu Dec 4 09:43:10 2025 by rpki-client