This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft File: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft (raw, json) Hash identifier: qdb40ZzvTXXdPzyGfyHgyT8EH1T8+yrdHRheh71WbPc= Subject key identifier: 34:F2:B4:91:96:E8:54:C0:0F:16:8C:39:0B:36:B8:D2:9F:77:68:AD Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Certificate serial: 2D42AD38A4AD7028A49BB9EAAE7AD467A7E8A781 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft Manifest number: 0606 Signing time: Thu 11 Dec 2025 21:31:37 +0000 Manifest this update: Thu 11 Dec 2025 21:26:37 +0000 Manifest next update: Fri 12 Dec 2025 23:18:37 +0000 Files and hashes: 1: 3138352e3231332e3234332e302f32342d3234203d3e203330343536.roa (hash: aTFuiZRKSKlOcP1bFw/QEJGr9kwsAqFvqfR62oNQfMc=) 2: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl (hash: W4oGSxNX2qllUTq8/9Jso0PAt25WaKlOhBUpM+tbS9I=) 3: 3138352e3232392e3230302e302f32342d3234203d3e20313335343032.roa (hash: +dPRMdq4kTZhc1HP4XUoHFPE1GHvKzT91NAn4oQHjN8=) 4: 3138352e3231332e3234312e302f32342d3234203d3e203631323732.roa (hash: ZRXMJB81EQGqLoTW9rCPLjbdmz5JtoX/ioguz/yH9B4=) 5: 3138352e3133302e36322e302f32342d3234203d3e203239303636.roa (hash: cZvuOTu1xxenEkmS/lv/FbwQZVMqO/d4TmKYvwutnlA=) 6: 3138352e3131312e3138382e302f32342d3234203d3e203632353633.roa (hash: /OGL5Xocpa/mA4GEutGuQoiWc4p3DBj9VM0kpmdQZxo=) 7: 3138352e3133302e36312e302f32342d3234203d3e20323732363936.roa (hash: nzc+7vTx0fxusJ8QBUU0nZ0s/13eeYO5i8RfnoHHUhc=) 8: 3138352e3234342e39352e302f32342d3234203d3e203134363138.roa (hash: BX+afd5v4CnQw1Csb+gERO9bOUf9cjiesQkq05EVznU=) 9: 3138352e3232392e3230312e302f32342d3234203d3e20323030303137.roa (hash: ezbmX/yRe+yRvkLs/8FFZoupwCiBI67aZ+0JqkrMl4Q=) 10: 3138352e3234342e39342e302f32342d3234203d3e20333937343233.roa (hash: RdOuxQjMUqkQryMcrXonWYYeJva5RY8rohAdG2ITJdw=) 11: 3138352e3232392e3230322e302f32342d3234203d3e20323130303330.roa (hash: LqK97diQcFrb4344S9ThgI9qIfk24xWO2D6Fzod4ApM=) 12: 3138352e3231332e3234322e302f32342d3234203d3e203232343237.roa (hash: 2mJFb3j98iS3WwOyYDzT/44zu56P1Mt1+w22nAIK9Eo=) 13: 3138352e3234342e39352e302f32342d3234203d3e203136353039.roa (hash: tBBH3ivLD6QCOuz/zDI7JAWzO8l/tRZui9Xrn0qJpA4=) 14: 326130363a356563303a3a2f34382d3438203d3e20323034363933.roa (hash: 1uKLPQUne0QcXblB3NW5HCIymd03TIpdjdnWqSBKxm8=) 15: 39312e3133322e3232372e302f32342d3234203d3e20323132333335.roa (hash: 4nM6t6s+oklrwoQsrohzelZ9jLVJM3XAMUC6E2raQWI=) 16: 33362e3235352e39322e302f32332d3234203d3e203230333236.roa (hash: uAr910mpCFzZrOxxImyBVxZ5bzjvqrL8T8981qvKdos=) 17: 33362e3235352e39322e302f32332d3234203d3e203139333138.roa (hash: FthEwpOIKT5rKWCqEXY9gMB5simU3azPQORqXvTeqVo=) 18: 3138352e3231332e3234302e302f32342d3234203d3e20323135373033.roa (hash: 5U9kh/Q1+pD8ktgLTSH2rTlmtF2qNT/hbi1XnCHITmo=) 19: 3138352e3133302e36302e302f32342d3234203d3e203131383738.roa (hash: O475B5YNr+mk4vbByMFVmoqbRTenx4kmx66C3HIfdsg=) 20: 3138352e3232392e3230332e302f32342d3234203d3e20323034333939.roa (hash: o2s9iRRo/HWpVNV66/X3K8Nx40dZXcSQ+ar/RSKpLZ4=) 21: 39312e3133322e3232372e302f32342d3234203d3e20323132333834.roa (hash: eh1Z74wbnDki2jWa8j9mKK2ooveQFWs0ccPHyRr5G7Y=) 22: 3138352e3234342e39352e302f32342d3234203d3e203230343733.roa (hash: wcPx+O7KmTHA1Z17UF9VIIdo6IS06Ij+d7NLeipHdoU=) 23: 3138352e3133302e36332e302f32342d3234203d3e203332313831.roa (hash: krs6rxjGgkgxIC0XFsSJIDbJbJTaOxRVYKdhwP98j0o=) 24: 3138352e3231332e3234332e302f32342d3234203d3e20323034393238.roa (hash: /82U/4ZCS1l7tEmRqZdiqoHQfHkAV0iGqgAdCf0IY6Q=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:18:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:42:ad:38:a4:ad:70:28:a4:9b:b9:ea:ae:7a:d4:67:a7:e8:a7:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Validity Not Before: Dec 11 21:26:37 2025 GMT Not After : Dec 12 23:18:37 2025 GMT Subject: CN=34F2B49196E854C00F168C390B36B8D29F7768AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:08:32:ae:c1:bb:d6:36:87:41:8a:c1:a8:16: 15:e9:89:41:ad:4a:91:89:fa:b8:a9:f3:99:2b:21: 5e:0f:b1:07:67:2f:c9:e2:b3:ad:6e:14:14:9f:04: 6d:f3:f4:c6:ab:18:17:a6:96:22:ff:98:35:06:78: 5b:cf:7a:36:5f:07:48:ca:9d:0f:dc:44:fc:c6:f4: 2b:64:f8:ae:2d:7f:66:7b:b8:b6:9d:16:83:4f:46: a2:4b:cc:91:b4:ab:84:10:9c:0a:98:ec:fe:2d:ec: d2:5a:c7:40:d4:2b:38:da:0c:0a:3e:5a:18:54:dd: db:e2:c5:8e:ba:05:83:56:96:2f:e2:65:9a:10:06: a3:3f:f6:cf:91:e8:c2:38:17:2a:25:15:f8:44:6b: 63:27:a5:61:e8:fe:58:d5:0b:fe:ac:46:fe:3c:d3: a7:bb:82:5a:32:e2:c2:90:33:5f:f2:c8:83:28:f9: 5f:cf:8f:02:44:fb:84:8a:cd:45:0f:4a:8d:59:4b: 5d:6b:43:66:e7:fd:3f:1b:96:8e:da:ca:56:cd:0d: 93:1f:03:7f:c0:49:93:45:8e:3c:7a:b9:ca:65:1e: 2a:24:f4:5c:7b:a6:ee:cd:a6:23:e0:da:ec:67:45: b2:c0:d6:8e:83:16:b1:c6:15:70:df:73:84:bc:60: 0f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:F2:B4:91:96:E8:54:C0:0F:16:8C:39:0B:36:B8:D2:9F:77:68:AD X509v3 Authority Key Identifier: keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:00:64:4a:8e:80:e7:61:8b:21:bf:e0:09:cc:6c:d7:22:6e: 18:a7:d9:98:06:13:b2:1b:de:73:8c:86:38:d3:6c:da:ff:e9: f1:8c:77:c1:2a:90:10:05:a5:d7:9d:41:11:6d:be:f4:c3:bc: 4b:d6:26:78:e8:fd:06:ea:d6:2a:8e:5c:da:8a:4a:20:4a:c4: ac:e2:c0:64:08:74:68:9c:71:83:79:ec:aa:50:03:7f:31:82: c6:35:6b:e5:79:52:1b:83:2c:f6:bb:01:2e:64:a5:4a:fc:d9: 00:7d:3a:db:3e:cb:c8:b2:d1:6d:9d:28:ab:48:9c:55:b6:72: b3:b8:b3:91:a5:01:0e:98:28:e0:65:39:6c:b2:1e:f0:cc:d0: d5:3c:28:3b:94:6d:44:f2:89:cf:b1:9b:93:f1:71:ba:75:e0: 00:f0:42:28:30:40:3c:78:da:fb:c6:e9:8c:6b:04:d6:54:31: ad:b0:30:bb:e9:c0:dd:ad:ca:8f:5e:17:24:13:6b:c5:80:71: 6c:87:fa:aa:ed:c5:3f:87:25:e6:9e:5f:db:c5:91:7a:59:fe: c3:a5:67:8d:2b:ee:74:f2:67:7b:83:8d:fa:02:15:28:cb:cb: 0c:e8:c1:de:19:c2:49:2f:42:64:78:5e:87:d7:e0:25:24:a2: 9a:dd:5d:ec -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIULUKtOKStcCikm7nqrnrUZ6fop4EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2U4NzBiOWE3MDAzYzRmZDljNTFiZDM1NGE5ZGVmYTNm Yjc3YjRhOTAeFw0yNTEyMTEyMTI2MzdaFw0yNTEyMTIyMzE4MzdaMDMxMTAvBgNV BAMTKDM0RjJCNDkxOTZFODU0QzAwRjE2OEMzOTBCMzZCOEQyOUY3NzY4QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuCDKuwbvWNodBisGoFhXpiUGt SpGJ+rip85krIV4PsQdnL8nis61uFBSfBG3z9MarGBemliL/mDUGeFvPejZfB0jK nQ/cRPzG9Ctk+K4tf2Z7uLadFoNPRqJLzJG0q4QQnAqY7P4t7NJax0DUKzjaDAo+ WhhU3dvixY66BYNWli/iZZoQBqM/9s+R6MI4FyolFfhEa2MnpWHo/ljVC/6sRv48 06e7gloy4sKQM1/yyIMo+V/PjwJE+4SKzUUPSo1ZS11rQ2bn/T8blo7aylbNDZMf A3/ASZNFjjx6ucplHiok9Fx7pu7NpiPg2uxnRbLA1o6DFrHGFXDfc4S8YA8jAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUNPK0kZboVMAPFow5Cza40p93aK0wHwYDVR0j BBgwFoAUPocLmnADxP2cUb01Sp3vo/t3tKkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzVkMThlODItNGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQy Mjc5LzAvM0U4NzBCOUE3MDAzQzRGRDlDNTFCRDM1NEE5REVGQTNGQjc3QjRBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1BvY0xtbkFEeFAyY1ViMDFTcDN2b190 M3RLay5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jNWQxOGU4Mi00 ZDY4LTQ1YTYtYTVkZi1jYWMxMTVhZDIyNzkvMC8zRTg3MEI5QTcwMDNDNEZEOUM1 MUJEMzU0QTlERUZBM0ZCNzdCNEE5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcABkSo6A52GLIb/gCcxs 1yJuGKfZmAYTshvec4yGONNs2v/p8Yx3wSqQEAWl151BEW2+9MO8S9YmeOj9BurW Ko5c2opKIErErOLAZAh0aJxxg3nsqlADfzGCxjVr5XlSG4Ms9rsBLmSlSvzZAH06 2z7LyLLRbZ0oq0icVbZys7izkaUBDpgo4GU5bLIe8MzQ1TwoO5RtRPKJz7Gbk/Fx unXgAPBCKDBAPHja+8bpjGsE1lQxrbAwu+nA3a3Kj14XJBNrxYBxbIf6qu3FP4cl 5p5f28WReln+w6VnjSvudPJne4ON+gIVKMvLDOjB3hnCSS9CZHheh9fgJSSimt1d 7A== -----END CERTIFICATE-----Generated at Fri Dec 12 14:19:54 2025 by rpki-client