This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft File: 521525856CBBA6D9D2254221C280DC930734AAB8.mft (raw, json) Hash identifier: RbTBiD0qacWTdb6uRLl3XN14Zi3doW2FUxPV4VB3ezU= Subject key identifier: 41:ED:3A:60:FD:7A:5D:D0:49:E9:35:93:66:B0:7B:3E:28:57:40:74 Authority key identifier: 52:15:25:85:6C:BB:A6:D9:D2:25:42:21:C2:80:DC:93:07:34:AA:B8 Certificate issuer: /CN=521525856CBBA6D9D2254221C280DC930734AAB8 Certificate serial: 2DDB6F64CDBCC0339B1D1C1F7496F53117166983 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/521525856CBBA6D9D2254221C280DC930734AAB8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft Manifest number: D0 Signing time: Fri 05 Dec 2025 21:43:48 +0000 Manifest this update: Fri 05 Dec 2025 21:38:48 +0000 Manifest next update: Sat 06 Dec 2025 23:22:48 +0000 Files and hashes: 1: 326130363a613030333a623030623a3a2f34382d3438203d3e20323030363736.roa (hash: kunZD4UEEwcG2nc99Wb+xz1yK+IdIm7SjegbAra8chc=) 2: 326130363a613030333a3a2f34382d3438203d3e20323030363736.roa (hash: PNV+6g1yuxZfiOErO1rlD/OjvHSDnl045B3ycAeUEw8=) 3: 326130363a613030333a313333373a3a2f34382d3438203d3e20323030363736.roa (hash: qr/bfrnor+1gB61vuOA1czljaK/VRJBauBs1U2EbENw=) 4: 521525856CBBA6D9D2254221C280DC930734AAB8.crl (hash: DtnHXtIzzkLZZjuwKUxVntnVQsqjQmrOh44rEmfdOkw=) 5: 326130363a613030333a666666663a3a2f34382d3438203d3e203530373535.roa (hash: HVzJ9R68GMwZO9EL/DI2ZLp1a+F6uNrFmfl8+YGeZKc=) 6: 39342e32342e3130382e302f32342d3234203d3e20323030363736.roa (hash: hbkkIcLL2dVYKU+9BKXYxvOgTE4cVlfb37zj8sIKpS0=) 7: 326130363a613030333a313131313a3a2f34382d3438203d3e20323030363736.roa (hash: rOXq6KopS7nNrxLenr0thMMbHkGjihkrbeGzvVQ4fNc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.crl rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/521525856CBBA6D9D2254221C280DC930734AAB8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:22:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:db:6f:64:cd:bc:c0:33:9b:1d:1c:1f:74:96:f5:31:17:16:69:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521525856CBBA6D9D2254221C280DC930734AAB8 Validity Not Before: Dec 5 21:38:48 2025 GMT Not After : Dec 6 23:22:48 2025 GMT Subject: CN=41ED3A60FD7A5DD049E9359366B07B3E28574074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ea:a7:dc:73:98:2b:fa:90:70:68:f2:41:ee: 0f:86:a2:d5:93:e7:95:2a:54:77:0f:9d:8a:d3:46: cb:06:a7:73:94:8b:ba:43:bd:ac:70:ef:33:0d:fa: c8:73:c0:33:1d:e0:bc:a9:ee:df:10:cc:82:b3:a6: 4d:8b:f4:b9:ba:a0:97:78:27:71:90:eb:8d:cf:08: 39:61:a8:c8:cc:e2:32:ce:3f:dd:70:93:7e:a6:54: 38:4d:c4:20:c5:e5:b6:fd:70:a6:20:9d:70:e5:94: d4:e3:ad:ab:a4:69:ee:7a:8d:76:30:38:69:26:3e: 74:91:48:a4:b3:b9:77:94:9b:b4:9c:84:77:2e:5c: 2f:41:dc:1d:48:b5:65:08:63:68:6b:e6:8a:f8:21: 21:fa:a9:8b:3c:3a:79:88:59:60:89:ad:46:e1:7e: ba:22:2c:1c:c7:6b:38:3a:52:f6:8f:81:43:bb:c1: 43:77:f9:9d:02:a9:a3:f6:69:c0:27:80:d0:9c:73: b3:2e:4e:41:98:69:8e:88:8d:ce:a9:ae:ec:e0:30: 28:0c:da:d9:72:85:bb:7f:6b:4b:57:bf:7a:23:e8: b1:d6:83:df:14:29:e1:38:da:1b:16:1e:ed:34:94: ad:0e:bd:2e:66:8a:b9:5a:89:49:d2:52:ad:84:53: a4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:ED:3A:60:FD:7A:5D:D0:49:E9:35:93:66:B0:7B:3E:28:57:40:74 X509v3 Authority Key Identifier: keyid:52:15:25:85:6C:BB:A6:D9:D2:25:42:21:C2:80:DC:93:07:34:AA:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/521525856CBBA6D9D2254221C280DC930734AAB8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/4/521525856CBBA6D9D2254221C280DC930734AAB8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:e6:d4:c9:5a:b6:61:5c:95:a1:3c:6c:88:20:60:cf:4d:32: 4b:7d:94:5f:74:60:71:5c:9e:87:cd:6b:52:9f:f2:6e:2b:38: ff:0e:ad:7e:d0:0e:f1:d7:45:e4:29:56:79:4e:02:51:ea:fb: 84:41:d0:c7:61:1e:6f:15:53:95:b8:ed:0a:05:d1:ea:02:0f: 61:e3:ee:a5:a0:66:79:91:86:50:f0:fc:26:fa:c6:52:af:7a: 2f:df:d0:8e:87:8d:19:d4:fa:c7:5e:6f:a7:76:8b:cc:c6:e2: b3:db:91:8d:ef:f0:63:1d:e5:2a:05:65:22:e4:9e:b2:5e:53: 01:69:a1:20:38:fe:63:44:f3:1a:40:6a:d5:69:66:10:05:67: 67:1f:bc:a5:06:7d:47:13:c3:cc:41:b1:ac:82:5f:e3:1f:49: 1e:4e:2c:49:93:91:cd:96:08:5f:21:15:39:0e:76:98:6e:86: 60:b0:64:16:02:9e:b9:d2:73:f0:09:84:85:4d:f6:8b:da:03: f3:ed:88:73:98:c3:5e:c8:10:13:04:7d:6c:d6:12:24:a8:ff: 6e:e5:23:fa:57:d4:a3:7f:24:8d:b6:6a:8b:ce:34:02:91:bb: 46:16:4f:ce:87:27:43:c5:1c:bf:79:a7:bb:9f:15:3f:54:13: e3:16:d9:d7 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIULdtvZM28wDObHRwfdJb1MRcWaYMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIxNTI1ODU2Q0JCQTZEOUQyMjU0MjIxQzI4MERDOTMw NzM0QUFCODAeFw0yNTEyMDUyMTM4NDhaFw0yNTEyMDYyMzIyNDhaMDMxMTAvBgNV BAMTKDQxRUQzQTYwRkQ3QTVERDA0OUU5MzU5MzY2QjA3QjNFMjg1NzQwNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB6qfcc5gr+pBwaPJB7g+GotWT 55UqVHcPnYrTRssGp3OUi7pDvaxw7zMN+shzwDMd4Lyp7t8QzIKzpk2L9Lm6oJd4 J3GQ643PCDlhqMjM4jLOP91wk36mVDhNxCDF5bb9cKYgnXDllNTjraukae56jXYw OGkmPnSRSKSzuXeUm7SchHcuXC9B3B1ItWUIY2hr5or4ISH6qYs8OnmIWWCJrUbh froiLBzHazg6UvaPgUO7wUN3+Z0CqaP2acAngNCcc7MuTkGYaY6Ijc6pruzgMCgM 2tlyhbt/a0tXv3oj6LHWg98UKeE42hsWHu00lK0OvS5mirlaiUnSUq2EU6Q3AgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUQe06YP16XdBJ6TWTZrB7PihXQHQwHwYDVR0j BBgwFoAUUhUlhWy7ptnSJUIhwoDckwc0qrgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFjYTNjYTYtMzRjYy00NzcyLWJhYzAtYTM1ZGQwMTk1 Y2U3LzQvNTIxNTI1ODU2Q0JCQTZEOUQyMjU0MjIxQzI4MERDOTMwNzM0QUFCOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNTIxNTI1ODU2Q0JCQTZEOUQyMjU0MjIxQzI4MERDOTMwNzM0 QUFCOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWNhM2NhNi0z NGNjLTQ3NzItYmFjMC1hMzVkZDAxOTVjZTcvNC81MjE1MjU4NTZDQkJBNkQ5RDIy NTQyMjFDMjgwREM5MzA3MzRBQUI4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiubUyVq2YVyVoTxsiCBg z00yS32UX3RgcVyeh81rUp/ybis4/w6tftAO8ddF5ClWeU4CUer7hEHQx2EebxVT lbjtCgXR6gIPYePupaBmeZGGUPD8JvrGUq96L9/QjoeNGdT6x15vp3aLzMbis9uR je/wYx3lKgVlIuSesl5TAWmhIDj+Y0TzGkBq1WlmEAVnZx+8pQZ9RxPDzEGxrIJf 4x9JHk4sSZORzZYIXyEVOQ52mG6GYLBkFgKeudJz8AmEhU32i9oD8+2Ic5jDXsgQ EwR9bNYSJKj/buUj+lfUo38kjbZqi840ApG7RhZPzocnQ8Ucv3mnu58VP1QT4xbZ 1w== -----END CERTIFICATE-----Generated at Sat Dec 6 14:57:30 2025 by rpki-client