This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/1/497EA28AB98266097873E53DF89DA97C44267B14.mft File: 497EA28AB98266097873E53DF89DA97C44267B14.mft (raw, json) Hash identifier: Z1EFOuvJYJGfmmPkLMPyPOj6IUmBw/04sNmjI4Rnex4= Subject key identifier: 31:F3:5E:04:91:4C:60:EF:FB:8F:27:0E:98:2E:08:ED:01:D3:51:17 Authority key identifier: 49:7E:A2:8A:B9:82:66:09:78:73:E5:3D:F8:9D:A9:7C:44:26:7B:14 Certificate issuer: /CN=497EA28AB98266097873E53DF89DA97C44267B14 Certificate serial: 06944F381A0CA6BDB6D9CB1B53AE75B01C977809 Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/497EA28AB98266097873E53DF89DA97C44267B14.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/1/497EA28AB98266097873E53DF89DA97C44267B14.mft Manifest number: 08 Signing time: Fri 05 Dec 2025 09:24:33 +0000 Manifest this update: Fri 05 Dec 2025 09:19:33 +0000 Manifest next update: Sat 06 Dec 2025 11:56:33 +0000 Files and hashes: 1: 326130623a346530373a6138333a3a2f34382d3438203d3e203534343937.roa (hash: ol46rLGaupl8698MsUXVt/+STdQLGSQrmvRqgsULKh4=) 2: 326130623a346530373a6138323a3a2f34382d3438203d3e20323133343133.roa (hash: Yk5Z2QdQDj75jwwjlnGFiqmjFqH+3db4GUAOQQkmNYQ=) 3: 326130623a346530373a6138303a3a2f34382d3438203d3e20323133343133.roa (hash: WcvSssrcz6p3j3RDnhY3rE0tKoRiuN7l2GAwNqPEpJ8=) 4: 326130623a346530373a6166303a3a2f34342d3438203d3e20323035393431.roa (hash: /Qq1CCzeUDnpMPkGTcBOVvwEcVcmDJJcPUGetJPLC3A=) 5: 497EA28AB98266097873E53DF89DA97C44267B14.crl (hash: MonpThZ9KOafQWpGDMnrkAS5a/NXwnMBEM3ErdL5liI=) 6: 326130623a346530373a6165303a3a2f34342d3438203d3e20323037353637.roa (hash: 8EOjojOJFeyPSugKSirM3Pua5hnoqE/TLlkiB1/CgoM=) 7: 326130623a346530373a6130303a3a2f34302d3438203d3e20323036363034.roa (hash: Z0wiDwjOy/qJoPdM0vEBmhECeV0C4KD9VuGJR2rdeyQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/1/497EA28AB98266097873E53DF89DA97C44267B14.crl rsync://rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/1/497EA28AB98266097873E53DF89DA97C44267B14.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/497EA28AB98266097873E53DF89DA97C44267B14.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 04:39:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:94:4f:38:1a:0c:a6:bd:b6:d9:cb:1b:53:ae:75:b0:1c:97:78:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=497EA28AB98266097873E53DF89DA97C44267B14 Validity Not Before: Dec 5 09:19:33 2025 GMT Not After : Dec 6 11:56:33 2025 GMT Subject: CN=31F35E04914C60EFFB8F270E982E08ED01D35117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:5e:e2:9a:2d:7b:69:d5:c1:92:4d:c5:c9:73: e9:1a:76:c2:22:de:b1:2f:36:b1:2d:ee:aa:60:9b: 7e:b1:86:88:d1:e5:bf:ca:00:0e:48:cd:d8:02:5a: 2e:da:1f:d3:6e:bd:8b:1d:e9:f6:a5:2f:90:45:a1: 3d:03:5e:cb:3d:38:3f:fa:ca:fc:bf:01:41:d0:0b: 94:35:54:e4:76:41:f1:93:7f:ef:0d:a4:55:e5:84: de:52:84:90:f4:7b:6e:ad:e9:ac:78:6c:d0:a1:a9: a9:e7:cf:63:8b:e2:ba:f4:a7:50:a5:e5:0d:60:ee: 60:d1:de:5b:b1:11:9b:06:b2:3d:de:c9:8b:c2:0d: b2:dc:23:dc:51:29:3f:4d:3f:9b:51:bc:e9:e0:a9: 17:b2:2d:bd:b5:47:1e:68:96:bf:d6:97:55:bb:47: b8:07:08:39:a9:ff:61:30:93:ea:42:5c:d5:3d:bc: 45:3e:57:96:29:e6:34:f3:2c:c4:4f:05:d9:f2:c1: 8d:1c:5c:2c:8e:fb:57:12:1b:43:0d:16:c6:f3:13: fa:91:f9:70:28:6e:1e:b5:a6:1c:df:ad:2c:c0:d0: 24:47:37:66:f6:e9:1d:eb:43:4c:aa:12:d7:f9:5e: 55:38:0d:80:4f:ef:25:52:62:95:08:c7:61:19:c6: f9:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:F3:5E:04:91:4C:60:EF:FB:8F:27:0E:98:2E:08:ED:01:D3:51:17 X509v3 Authority Key Identifier: keyid:49:7E:A2:8A:B9:82:66:09:78:73:E5:3D:F8:9D:A9:7C:44:26:7B:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/1/497EA28AB98266097873E53DF89DA97C44267B14.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/497EA28AB98266097873E53DF89DA97C44267B14.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/1/497EA28AB98266097873E53DF89DA97C44267B14.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:96:b6:cb:48:dc:24:bd:71:21:cb:7b:a0:3b:1b:0d:82:d0: 5a:ea:98:96:d5:fe:ff:6b:10:2e:3e:ae:1b:10:40:95:28:91: 7d:ae:f3:36:39:08:5b:5f:77:ba:f3:7a:fc:42:1c:cf:e6:17: 7e:9b:46:be:d2:bf:48:a4:5a:1e:71:81:a5:1a:ce:36:63:06: 09:6b:fe:5e:e6:56:9a:e9:f1:cf:5d:2c:e5:98:03:1f:52:da: db:0b:20:ae:8e:ac:74:bc:c2:f2:c7:28:33:d5:0c:3c:4e:30: 2d:0c:b9:66:f4:e6:19:80:29:b8:d8:19:3a:4c:63:36:8d:52: 00:4a:87:b0:9b:aa:0b:0e:a3:2a:8c:f1:9a:25:5c:9a:64:f9: 38:f0:b9:8e:4f:d8:39:be:ea:b9:b2:9b:60:9c:e5:e2:d3:57: 0b:6e:16:dd:6d:a2:da:5e:36:9f:76:ad:6e:bc:dc:8a:72:0a: d9:9a:49:5a:c8:b6:25:55:51:04:d2:ef:44:40:9b:52:77:79: 9e:5b:23:9b:7f:e3:8c:82:b2:22:21:e2:cc:15:4b:ad:9b:be: 2f:b9:14:09:28:af:e3:7e:e2:00:f8:75:fb:41:ef:9e:3f:40: 0a:42:f1:48:13:fe:9a:d2:5e:a1:d4:22:fa:46:4b:1e:9b:08: 90:ad:6a:53 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUBpRPOBoMpr222csbU651sByXeAkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk3RUEyOEFCOTgyNjYwOTc4NzNFNTNERjg5REE5N0M0 NDI2N0IxNDAeFw0yNTEyMDUwOTE5MzNaFw0yNTEyMDYxMTU2MzNaMDMxMTAvBgNV BAMTKDMxRjM1RTA0OTE0QzYwRUZGQjhGMjcwRTk4MkUwOEVEMDFEMzUxMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXXuKaLXtp1cGSTcXJc+kadsIi 3rEvNrEt7qpgm36xhojR5b/KAA5IzdgCWi7aH9NuvYsd6falL5BFoT0DXss9OD/6 yvy/AUHQC5Q1VOR2QfGTf+8NpFXlhN5ShJD0e26t6ax4bNChqannz2OL4rr0p1Cl 5Q1g7mDR3luxEZsGsj3eyYvCDbLcI9xRKT9NP5tRvOngqReyLb21Rx5olr/Wl1W7 R7gHCDmp/2Ewk+pCXNU9vEU+V5Yp5jTzLMRPBdnywY0cXCyO+1cSG0MNFsbzE/qR +XAobh61phzfrSzA0CRHN2b26R3rQ0yqEtf5XlU4DYBP7yVSYpUIx2EZxvmxAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUMfNeBJFMYO/7jycOmC4I7QHTURcwHwYDVR0j BBgwFoAUSX6iirmCZgl4c+U9+J2pfEQmexQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjkwZTY4NjAtMzcyMS00OGM0LWEzZmUtMTFiMWYyYzBk ZjVmLzEvNDk3RUEyOEFCOTgyNjYwOTc4NzNFNTNERjg5REE5N0M0NDI2N0IxNC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvNDk3RUEyOEFCOTgyNjYwOTc4NzNFNTNERjg5REE5N0M0NDI2 N0IxNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iOTBlNjg2MC0z NzIxLTQ4YzQtYTNmZS0xMWIxZjJjMGRmNWYvMS80OTdFQTI4QUI5ODI2NjA5Nzg3 M0U1M0RGODlEQTk3QzQ0MjY3QjE0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiZa2y0jcJL1xIct7oDsb DYLQWuqYltX+/2sQLj6uGxBAlSiRfa7zNjkIW193uvN6/EIcz+YXfptGvtK/SKRa HnGBpRrONmMGCWv+XuZWmunxz10s5ZgDH1La2wsgro6sdLzC8scoM9UMPE4wLQy5 ZvTmGYApuNgZOkxjNo1SAEqHsJuqCw6jKozxmiVcmmT5OPC5jk/YOb7qubKbYJzl 4tNXC24W3W2i2l42n3atbrzcinIK2ZpJWsi2JVVRBNLvRECbUnd5nlsjm3/jjIKy IiHizBVLrZu+L7kUCSiv437iAPh1+0Hvnj9ACkLxSBP+mtJeodQi+kZLHpsIkK1q Uw== -----END CERTIFICATE-----Generated at Fri Dec 5 20:26:59 2025 by rpki-client