This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft File: 2472949B3C234930DBE99B1B5CD5196AB16D151B.mft (raw, json) Hash identifier: SuIFp5lLYCBRc9PmH0j5esBay1Rq5Ac4n9m1JjU2PxU= Subject key identifier: A3:20:4D:65:0A:AE:71:16:08:63:D2:93:7F:20:9B:A8:88:CC:19:4F Authority key identifier: 24:72:94:9B:3C:23:49:30:DB:E9:9B:1B:5C:D5:19:6A:B1:6D:15:1B Certificate issuer: /CN=89d4f40fed1166159109937674aef0279ad039550feccf8d61 Certificate serial: 6380EABB4D4CD66AB24877261BD75B26E3E1CF6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft Manifest number: 034C Signing time: Sun 07 Dec 2025 19:19:04 +0000 Manifest this update: Sun 07 Dec 2025 19:14:04 +0000 Manifest next update: Mon 08 Dec 2025 23:07:04 +0000 Files and hashes: 1: 2472949B3C234930DBE99B1B5CD5196AB16D151B.crl (hash: VgaaRdHfyE8OQkH03uLcGGSCT0ZJhqmMWviDht1dg+Y=) 2: 323630323a663961323a3a2f34382d3438203d3e203436373636.roa (hash: UAkAddbwt9iFm85K1ELuBkLomLKwc7hMpyyYhhtNJsY=) 3: 32332e3137302e37322e302f32342d3234203d3e203436373636.roa (hash: hfPLPQW0RCv33ma51bvJk8w/CbhypODZthVk4Z+KIYw=) 4: 323630323a663961323a35353a3a2f34382d3438203d3e20313939353138.roa (hash: Lmh4khK9jqfGM7AgqtrinnAM2ubStxsQ/YZSUwbqCvU=) 5: 3139392e3234312e36302e302f32342d3234203d3e203436373636.roa (hash: 4ZYkW/+NAwrD1ELCwQxEXepcoE4Wv3XF1vCdQrX3iE0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.crl rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/3d9879da-145f-4f21-a7c3-da6b59a01625.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/3d9879da-145f-4f21-a7c3-da6b59a01625.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 23:07:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:80:ea:bb:4d:4c:d6:6a:b2:48:77:26:1b:d7:5b:26:e3:e1:cf:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89d4f40fed1166159109937674aef0279ad039550feccf8d61 Validity Not Before: Dec 7 19:14:04 2025 GMT Not After : Dec 8 23:07:04 2025 GMT Subject: CN=A3204D650AAE71160863D2937F209BA888CC194F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:50:e1:01:ca:71:a5:ca:d2:2a:0f:d3:4b:46: fe:94:10:d8:ca:78:e5:ee:36:d5:ae:e3:1a:1b:95: 3a:ab:f5:2a:ee:60:d7:93:e5:d2:5a:e8:d7:f5:8d: fa:f2:e3:44:ce:d4:8c:24:8e:62:0e:18:6a:30:ed: 95:8f:36:8b:d4:f9:44:ac:23:be:5a:d4:08:7e:3e: ac:aa:3b:b2:1c:4e:00:8c:84:c8:36:31:1f:0c:8e: c5:30:51:fb:e4:ef:ea:03:1f:49:53:e4:60:77:3f: 7e:35:cf:7a:d7:f9:e5:50:98:44:1c:23:4d:89:59: 38:39:11:a3:b3:b3:60:7f:b3:3e:16:45:15:10:66: b6:49:0f:6e:d7:49:40:0c:bc:d5:82:bf:0a:2c:39: ae:3e:e8:99:47:06:8f:f4:40:95:95:6e:db:07:f1: ee:15:1e:9a:36:02:13:db:8f:14:d8:c4:6a:6c:a3: 04:e3:0e:44:9d:3b:9d:ce:ec:91:37:f4:69:0a:88: 6c:ff:bd:31:ff:7e:38:72:07:ac:96:62:e8:1f:4d: f4:0d:a0:d1:0f:36:1e:6c:01:7e:97:ea:10:c5:0f: cd:c6:79:f5:37:e3:b5:f6:6c:de:5f:f7:21:22:f2: 0c:d6:a6:15:5a:6c:fa:ef:20:7c:ea:de:a5:d2:34: 21:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:20:4D:65:0A:AE:71:16:08:63:D2:93:7F:20:9B:A8:88:CC:19:4F X509v3 Authority Key Identifier: keyid:24:72:94:9B:3C:23:49:30:DB:E9:9B:1B:5C:D5:19:6A:B1:6D:15:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:13:ea:05:40:dc:f4:18:37:26:17:23:e4:40:53:76:c8:59: ba:ed:41:3d:55:f9:eb:3a:d9:1c:c9:ac:db:67:f3:46:75:30: b4:2f:01:ca:bf:29:6e:d3:de:6e:36:69:56:22:4c:48:85:21: 0c:30:18:dd:59:a0:9f:32:80:04:6d:ee:9f:8b:1c:04:83:7c: 1b:b7:e1:e5:61:6d:8e:f2:d7:1e:e1:74:11:fb:53:c4:5b:09: d7:b6:40:be:13:9a:1d:d4:7b:94:c0:b4:04:1e:ff:53:0f:2f: 05:5e:e9:cd:85:7e:9d:8a:6d:19:86:a7:3f:3a:e8:e7:06:c6: 88:e0:90:04:09:98:38:9c:45:33:07:af:29:d1:3a:00:f3:88: bc:a7:68:cc:74:e5:32:45:e3:77:65:3c:5c:17:c9:9a:ef:d9: 64:fb:0c:1c:43:33:e1:45:d7:4a:97:7c:cb:1f:08:69:2b:38: 10:97:21:4c:28:2b:b3:8a:1f:5e:1f:73:96:9c:57:bd:04:cd: e6:cc:be:bb:88:2d:5e:c3:e8:bb:7b:8f:de:42:50:9b:87:b4: f8:82:bf:cc:f6:fa:ed:93:cb:d9:d9:87:c5:0b:46:c4:05:22: c4:b3:e6:c0:aa:75:44:84:6e:1c:77:e3:34:15:c9:74:a7:bd: 74:46:f3:58 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUY4Dqu01M1mqySHcmG9dbJuPhz2swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODlkNGY0MGZlZDExNjYxNTkxMDk5Mzc2NzRhZWYwMjc5 YWQwMzk1NTBmZWNjZjhkNjEwHhcNMjUxMjA3MTkxNDA0WhcNMjUxMjA4MjMwNzA0 WjAzMTEwLwYDVQQDEyhBMzIwNEQ2NTBBQUU3MTE2MDg2M0QyOTM3RjIwOUJBODg4 Q0MxOTRGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFDhAcpxpcrS Kg/TS0b+lBDYynjl7jbVruMaG5U6q/Uq7mDXk+XSWujX9Y368uNEztSMJI5iDhhq MO2VjzaL1PlErCO+WtQIfj6sqjuyHE4AjITINjEfDI7FMFH75O/qAx9JU+Rgdz9+ Nc961/nlUJhEHCNNiVk4ORGjs7Ngf7M+FkUVEGa2SQ9u10lADLzVgr8KLDmuPuiZ RwaP9ECVlW7bB/HuFR6aNgIT248U2MRqbKME4w5EnTudzuyRN/RpCohs/70x/344 cgeslmLoH030DaDRDzYebAF+l+oQxQ/Nxnn1N+O19mzeX/chIvIM1qYVWmz67yB8 6t6l0jQhhwIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFKMgTWUKrnEWCGPSk38gm6iI zBlPMB8GA1UdIwQYMBaAFCRylJs8I0kw2+mbG1zVGWqxbRUbMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3 LWI0MjgxOGNmNTBlOC82LzI0NzI5NDlCM0MyMzQ5MzBEQkU5OUIxQjVDRDUxOTZB QjE2RDE1MUIuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It NGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zZDk4NzlkYS0xNDVmLTRmMjEtYTdjMy1k YTZiNTlhMDE2MjUvODlkNGY0MGZlZDExNjYxNTkxMDk5Mzc2NzRhZWYwMjc5YWQw Mzk1NTBmZWNjZjhkNjEuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv ZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1MGU4LzYvMjQ3Mjk0OUIz QzIzNDkzMERCRTk5QjFCNUNENTE5NkFCMTZEMTUxQi5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBALMT6gVA 3PQYNyYXI+RAU3bIWbrtQT1V+es62RzJrNtn80Z1MLQvAcq/KW7T3m42aVYiTEiF IQwwGN1ZoJ8ygARt7p+LHASDfBu34eVhbY7y1x7hdBH7U8RbCde2QL4Tmh3Ue5TA tAQe/1MPLwVe6c2Ffp2KbRmGpz866OcGxojgkAQJmDicRTMHrynROgDziLynaMx0 5TJF43dlPFwXyZrv2WT7DBxDM+FF10qXfMsfCGkrOBCXIUwoK7OKH14fc5acV70E zebMvruILV7D6Lt7j95CUJuHtPiCv8z2+u2Ty9nZh8ULRsQFIsSz5sCqdUSEbhx3 4zQVyXSnvXRG81g= -----END CERTIFICATE-----Generated at Mon Dec 8 01:19:21 2025 by rpki-client