This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft File: 3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft (raw, json) Hash identifier: 026MgKeAnibeFAuToBHjBumbZ7Egnfj5BCEDdhONumw= Subject key identifier: AF:32:18:FE:06:99:57:18:A5:AC:CB:47:09:2B:D7:4F:7B:06:B7:E2 Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B Certificate issuer: /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b Certificate serial: 3216A6B3393F5D13003130AC69186A15C6436F57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft Manifest number: 0147 Signing time: Fri 05 Dec 2025 22:56:17 +0000 Manifest this update: Fri 05 Dec 2025 22:51:17 +0000 Manifest next update: Sun 07 Dec 2025 00:21:17 +0000 Files and hashes: 1: AS984.roa (hash: eQR8F/SPw8nfrCj8a8wTgRQ1VhmflRdV4AZe+acggFQ=) 2: AS16276.roa (hash: 8gOCSZ6/iJtlzwAh66QsRIPS6rsfXl1KTOvL0+PSPO8=) 3: AS24940.roa (hash: 9llPOqU1kkKR3lcv6by46UJ3h/kj9YxcNOMcBr6oIUw=) 4: AS215607.roa (hash: vQRv5BmSOFGsTajry8eLp3+jDWkfvtysaErN48yeXcE=) 5: AS48266.roa (hash: wN58VW25Z+LecojZP+oOAtM/5chfYovrCCO/Cl8gTkE=) 6: AS63199.roa (hash: 12M/4rDEnNlu6NpcT1coUXqoQ04lDw3cZPaAu5+YbWM=) 7: AS7029.roa (hash: EQdsNpFUDlB6ynhRTbcYQBl7UF6yGjIXmjLtDYAN+1w=) 8: AS152179.roa (hash: CLoHb65khJ/xkZgyKfE4QHe9gx+LzXYYD8aDDeekOmU=) 9: AS13347.roa (hash: Vcr6EeUXObLLwMTr/P281IyX4fwZYhwUt1AVEFcBuD4=) 10: AS32132.roa (hash: AnbuErehQXFxV+kWQt2eul6q993RKYVkoz7/H8Ifyq0=) 11: AS3320.roa (hash: J0gCdn8aWPQr54/0F/uediEv8Z8fjukYJoHGgqTaPFs=) 12: AS5065.roa (hash: JGE9pcBF2Jpsr5+PtvnbT/gcrMiv31piwJgRI0akVTQ=) 13: AS202736.roa (hash: mvaFQ8VzOiSlC6osU1pagjFGEUjuXEDkXWP0QHArhMs=) 14: AS60128.roa (hash: LYwh4MoU7+i8XzsRvFs92IcyFCoJKzZY9vGXelEbElA=) 15: AS61244.roa (hash: rBybT6KNUveYSpFmW0LV7SLnrcp5d5Ac6NXXIFW7N3g=) 16: AS393942.roa (hash: 46l3bM7TWiGl0BQ1hT2AGGcKGBGq0dWoMtWX2ZzlhYQ=) 17: AS401776.roa (hash: ebLx46/uD/rPd1H9fx2yLVz5RrxFIjvh29qH51zn5WU=) 18: AS395793.roa (hash: V5JEB7lz8FwA4enu53vGQgB/6Qx37KJCclmB6l2ZUq0=) 19: 3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl (hash: 4ERAVHwj9sM4i1gTZZXuEQexxldJENofNsOOU6fqaLY=) 20: AS9304.roa (hash: AKSsIFJ9dIsTIbmq0ZJu8nzGzMGq4ZigbVERcSndunc=) 21: AS399073.roa (hash: 9W+8Rej68EJTWmEEI49+dSUZhcc+C37ptbroUQavDdM=) 22: AS197537.roa (hash: JP3hx/IAvQ4SgOvsKr86baQJpbUUMchlqabqd0xftz0=) 23: AS205886.roa (hash: sTiEMkgGikZqMsIZQnshE+5D76nt7ESMGpjidVFtNRc=) 24: AS214483.roa (hash: 6RqqmAQfiH5vxDsevnysTOwpoPe3+DXp3DMdAvOkobQ=) 25: AS57043.roa (hash: 5kt0gUPpPlXUEkEZgXCUZ1bMA7kcongFeMkYDKoEOqw=) 26: AS174.roa (hash: gSp0Qhfbko2L/Uwwa69PRUe0heBn9jeFBc7NNsYK+IQ=) 27: AS27463.roa (hash: Qa9G1fyPkPtivskG7RmcNp+V3FFUx0ZZAO5NHVFED+0=) 28: AS214271.roa (hash: Ryxr7X7Ltqo6eG8diqWyYYKBcmlEtpuVl7WOq2jpWd4=) 29: AS47690.roa (hash: ooqiQO4HpfGl3m9/7LtHIwFb/PWFu0EXUeXrqpQ+FtA=) 30: AS13335.roa (hash: d1T4k2GKdCN6l2wTM8AzWL9EUnZokcmdFZNLtewAX9k=) 31: AS210732.roa (hash: EmDXi9UctgaSCDq82zNTOg8zLFou2/aExhjh0/O5J3U=) 32: AS9009.roa (hash: 3Xt+kLkYr0AOLYU71hxVNM0goE/MIxNJEsmOva08MWQ=) 33: AS25198.roa (hash: b9MbLvUtyHaXut0tFiOSnxwmHL55kUIsxxQ3IoWLeZw=) 34: AS214025.roa (hash: QQrQzSCf1RokpR1jZpI0uXRdVOPLg7PuMKRznUH/3LY=) 35: AS137409.roa (hash: Y9UvfHoHT/x96pt+KFD1GFP/gX4ktFwFm+kigGEhsmM=) 36: AS834.roa (hash: UWkdU0vH8+PhxAHZJ+2GSIx/plPaHT4p3d2PoitVyug=) 37: AS60123.roa (hash: QtgZXfsHBEnogO7UuZmZIr/ZqG9Z8/NgNBqi4sK9HBo=) 38: AS206781.roa (hash: u5AtvuN8DZoybC5jmpdLGiJIsJAgQ1te19Ty/6LaNP8=) 39: AS208545.roa (hash: QaFp0CtwymMb26LzXqGktL2J3jbDSYF8yfVJZ7bGYbw=) 40: AS8820.roa (hash: 37NLowiuT9jy/dagftAxkW62Xv5potfYYsy61mpYIOM=) 41: AS212238.roa (hash: 0IyslS3CG8KwMKdb6hG7WmS6/jX6BN24to036ny5Oec=) 42: AS5650.roa (hash: Js0jrGQQyIbg26/8AZigTW/NGuPFZW8fhpgPYAsdnV8=) 43: AS42831.roa (hash: uuKI3/yP2w4woZt9biKewlb0tCO9hThIqZOmRiy7DQo=) 44: AS203446.roa (hash: oqoiqzh1+ViDUf4HKID2vR8MgIa8o5lwgPwsNCMr93E=) 45: AS207821.roa (hash: duP/7c0JhJ943FShftflbTsUFfvdFJVpDpIIC2INpqY=) 46: AS20326.roa (hash: bjlCs1cn8SZvrAA+XVOeFzTEEDwkFKKTeVLvOLa+FN0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:21:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:16:a6:b3:39:3f:5d:13:00:31:30:ac:69:18:6a:15:c6:43:6f:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b Validity Not Before: Dec 5 22:51:17 2025 GMT Not After : Dec 7 00:21:17 2025 GMT Subject: CN=AF3218FE06995718A5ACCB47092BD74F7B06B7E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:87:42:99:34:ec:61:2b:bc:1d:02:3c:b0:5f: 3c:ba:64:a9:ac:7e:08:58:de:70:dc:82:2f:0b:b6: 27:0b:40:dc:34:0a:04:eb:95:93:bf:ff:28:d6:a5: d5:77:8a:0b:08:9f:da:53:ad:12:8a:0a:73:3f:10: a0:c6:a8:5e:9a:f2:f9:3c:b2:5a:64:fd:b2:96:0f: 1f:04:16:17:3f:3a:50:6a:ab:96:81:da:f5:35:ea: f8:cd:fe:d5:50:3b:11:56:14:bf:e3:d0:9f:96:67: 71:d8:f7:5b:33:fa:a7:e2:e9:d5:db:fb:12:62:fe: 04:66:bc:39:c8:0d:24:30:ce:b0:b6:43:54:61:28: 16:d9:15:77:bc:4b:29:6e:34:f2:52:2f:6c:fc:18: 9b:9b:43:4a:13:7c:90:14:f8:62:e6:48:fe:57:8f: fe:e9:75:2c:d7:24:cf:b6:6f:24:f0:19:f2:cf:0c: 2b:f8:e0:6c:6d:d1:e1:cd:25:bc:e2:d8:46:e8:bf: cf:a0:fa:53:62:6d:4a:15:0d:78:9f:14:69:ad:40: 05:c0:39:a6:b5:4b:79:13:88:78:18:2f:25:ea:e3: b8:4c:c5:94:90:37:f5:5d:a9:bc:d6:d8:bd:7f:57: 71:da:e6:19:e1:2e:d1:93:52:52:7a:a1:74:d7:2a: ac:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:32:18:FE:06:99:57:18:A5:AC:CB:47:09:2B:D7:4F:7B:06:B7:E2 X509v3 Authority Key Identifier: keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:84:ea:27:09:a5:a5:3b:10:56:29:41:97:04:45:40:01:2d: 02:59:9c:ea:7d:07:c6:c2:52:d3:12:98:26:83:e8:01:9a:b8: ac:28:f0:a3:8d:7b:3d:d6:7d:71:ce:cb:48:6c:67:bf:f0:f7: 30:d0:47:7a:29:65:25:2a:d7:3a:af:6e:07:53:f2:78:dd:2f: 5e:10:34:d3:64:b9:d7:db:0d:8d:89:69:a1:5d:84:12:c4:01: 15:85:3c:da:b4:52:f8:67:a8:23:5f:d1:fc:c5:05:9c:7f:da: 66:e9:c5:a4:38:96:0a:7d:2f:31:f2:e8:72:33:43:f3:87:9f: 1b:8f:f9:58:cb:fa:18:fc:95:e0:08:85:94:43:34:0f:e2:9b: 1d:1c:0f:c8:1b:89:9e:78:ce:a9:90:c5:2b:f9:1c:66:da:ee: 9e:c9:89:e4:18:e1:25:89:dc:75:43:e7:7b:32:da:24:c9:51: 99:d7:34:8c:47:33:6c:9a:b1:5b:1f:09:c3:f7:20:86:3c:9a: fc:bd:d8:24:ec:52:cf:af:42:43:1c:e7:94:a0:a1:7d:ff:66: 0b:34:82:54:78:32:34:cb:72:5d:82:71:40:21:65:36:e5:94: b3:3a:b9:ba:98:ee:e1:46:d9:f1:4a:0c:73:eb:96:91:d0:d7: 07:c1:9a:a3 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUMhamszk/XRMAMTCsaRhqFcZDb1cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2ZlY2NiMTdiZTUxZWU1OWVjNzRkNjRlZWQ5MTdlMjIx ZWUyOGExYjAeFw0yNTEyMDUyMjUxMTdaFw0yNTEyMDcwMDIxMTdaMDMxMTAvBgNV BAMTKEFGMzIxOEZFMDY5OTU3MThBNUFDQ0I0NzA5MkJENzRGN0IwNkI3RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSh0KZNOxhK7wdAjywXzy6ZKms fghY3nDcgi8LticLQNw0CgTrlZO//yjWpdV3igsIn9pTrRKKCnM/EKDGqF6a8vk8 slpk/bKWDx8EFhc/OlBqq5aB2vU16vjN/tVQOxFWFL/j0J+WZ3HY91sz+qfi6dXb +xJi/gRmvDnIDSQwzrC2Q1RhKBbZFXe8SyluNPJSL2z8GJubQ0oTfJAU+GLmSP5X j/7pdSzXJM+2byTwGfLPDCv44Gxt0eHNJbzi2Ebov8+g+lNibUoVDXifFGmtQAXA Oaa1S3kTiHgYLyXq47hMxZSQN/VdqbzW2L1/V3Ha5hnhLtGTUlJ6oXTXKqwJAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUrzIY/gaZVxilrMtHCSvXT3sGt+IwHwYDVR0j BBgwFoAUP+zLF75R7lnsdNZO7ZF+Ih7iihswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjJkYjc1NTUtOWFhNC00OTgzLTkzMTYtNzM4MDlkZDM1 NGJjLzAvM0ZFQ0NCMTdCRTUxRUU1OUVDNzRENjRFRUQ5MTdFMjIxRUUyOEExQi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1AtekxGNzVSN2xuc2ROWk83WkYtSWg3 aWlocy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yMmRiNzU1NS05 YWE0LTQ5ODMtOTMxNi03MzgwOWRkMzU0YmMvMC8zRkVDQ0IxN0JFNTFFRTU5RUM3 NEQ2NEVFRDkxN0UyMjFFRTI4QTFCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbYTqJwmlpTsQVilBlwRF QAEtAlmc6n0HxsJS0xKYJoPoAZq4rCjwo417PdZ9cc7LSGxnv/D3MNBHeillJSrX Oq9uB1PyeN0vXhA002S519sNjYlpoV2EEsQBFYU82rRS+GeoI1/R/MUFnH/aZunF pDiWCn0vMfLocjND84efG4/5WMv6GPyV4AiFlEM0D+KbHRwPyBuJnnjOqZDFK/kc ZtrunsmJ5BjhJYncdUPnezLaJMlRmdc0jEczbJqxWx8Jw/cghjya/L3YJOxSz69C QxznlKChff9mCzSCVHgyNMtyXYJxQCFlNuWUszq5upju4UbZ8UoMc+uWkdDXB8Ga ow== -----END CERTIFICATE-----Generated at Sat Dec 6 07:49:14 2025 by rpki-client