This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft
File: 06DB699D191D4B0289910C88E99CF94A671142F5.mft (raw, json)
Hash identifier: FRQWQZp97E8pT9tYoTCnTqgJYChL+99qezdwUA8QTxo=
Subject key identifier: BF:E3:24:D2:9E:55:B5:3F:3A:98:3A:A1:CA:5F:A9:BF:AB:FC:29:73
Authority key identifier: 06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5
Certificate issuer: /CN=06DB699D191D4B0289910C88E99CF94A671142F5
Certificate serial: 70EBD9951E19F877DB4E2B77F45148B7CB9254ED
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft
Manifest number: D8
Signing time: Fri 05 Dec 2025 11:34:32 +0000
Manifest this update: Fri 05 Dec 2025 11:29:32 +0000
Manifest next update: Sat 06 Dec 2025 13:19:32 +0000
Files and hashes: 1: 06DB699D191D4B0289910C88E99CF94A671142F5.crl (hash: aYQUGf/8nHxQwpbjWTScECzuu8c6tC4qKFfpidwH3nQ=)
2: 326130363a396634313a313030303a3a2f34342d3438203d3e20323035383338.roa (hash: AZY42IY279tP8q55kCb+OP1wLi+9ejrODI15M2jhRhg=)
3: 326130363a396634313a613930303a3a2f34382d3438203d3e20323037363832.roa (hash: UqjWSUv2XiZdDsdQ0uOndREGc/szQ2JnxQlbZ2ADckI=)
4: 5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer (hash: vr0IDnvMrQlAIKTPbmc9XgADtBREMeozkPpGVjOFGr4=)
5: 326130363a396634313a613930313a3a2f34382d3438203d3e20323035383338.roa (hash: TZFInP0XSpkR7gzjfw2R3ov4SaV+J0Kzbqc0lAbOzbM=)
6: 38332e3134322e33312e302f32342d3234203d3e20323135303835.roa (hash: K8xHXu8PBNylpSXaMswB01W3KM9JQNKdf8F+yOiMZUQ=)
7: 326130363a396634313a3a2f33322d3332203d3e20323135303835.roa (hash: oQiFmCDOiC8wMUPyhseeYgHp6yjZLGbjApAcNJ0LBoc=)
8: 326130363a396634313a363936393a3a2f34382d3438203d3e20323132323432.roa (hash: oZMKPe8zIqKXDWE+ceP6ZovC366mkj//dk5ag6RqSYo=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl
rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Dec 2025 13:19:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:eb:d9:95:1e:19:f8:77:db:4e:2b:77:f4:51:48:b7:cb:92:54:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06DB699D191D4B0289910C88E99CF94A671142F5
Validity
Not Before: Dec 5 11:29:32 2025 GMT
Not After : Dec 6 13:19:32 2025 GMT
Subject: CN=BFE324D29E55B53F3A983AA1CA5FA9BFABFC2973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:fa:59:03:c9:e6:d4:72:8c:53:a5:29:c5:8b:
ef:5e:17:05:84:c4:48:b8:47:af:a3:60:4e:0e:e5:
7e:94:76:7c:82:01:9e:73:cc:6e:de:fb:d0:7e:51:
73:ea:5e:68:9f:2d:fc:cd:99:1e:65:ba:df:41:05:
50:da:e3:37:7e:ec:49:e6:3a:48:fa:ad:6e:ef:28:
dc:1d:d4:79:c2:d7:f8:88:d0:57:59:1b:da:14:cb:
bf:20:69:4a:7b:47:fc:ba:4c:19:f0:ca:29:52:a7:
da:ec:14:66:44:69:75:f4:a7:79:c1:48:8a:dc:0b:
18:f7:97:47:b8:c6:9e:df:91:3f:6b:31:c6:60:b7:
6f:f7:57:d4:0d:d7:e5:68:6b:dc:f5:d2:27:87:96:
82:ba:fc:94:12:02:78:4a:3c:35:7c:75:2c:bd:b8:
97:de:dc:48:a6:66:e5:d5:8c:c7:36:09:ee:88:e5:
5f:a8:71:f1:a1:e5:a3:b6:59:b7:75:90:20:6e:38:
e6:84:11:46:b6:44:19:e9:84:e2:17:4a:f6:8f:d6:
59:63:6b:82:8a:ab:26:9c:fb:2e:1e:4b:fa:e6:d0:
95:13:44:7d:9e:c3:de:0a:b5:80:29:d1:5d:21:67:
83:8b:15:28:0d:c3:35:7b:d6:3e:03:4f:c2:ca:89:
c0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E3:24:D2:9E:55:B5:3F:3A:98:3A:A1:CA:5F:A9:BF:AB:FC:29:73
X509v3 Authority Key Identifier:
keyid:06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:e9:11:9b:5e:f7:99:7c:de:c0:09:be:5b:29:f8:70:be:fb:
67:fd:81:21:f9:8b:d7:5d:1f:d1:c7:35:8d:84:93:89:f2:63:
79:f6:17:31:9f:ad:21:9a:b1:03:75:ba:32:49:6f:f8:8c:c9:
c2:36:ce:c9:46:f3:48:9c:1e:71:15:35:6d:12:17:cd:c1:3d:
48:16:9b:60:60:a4:a3:f2:12:7a:38:0a:55:ed:8a:01:7e:c0:
ae:37:9c:78:61:7d:f6:a4:78:49:61:49:ac:40:79:21:77:cb:
d4:88:2b:84:a0:57:74:4f:b0:2a:a2:e5:1f:0c:25:4d:ac:1d:
f1:b0:54:3e:d0:00:7f:c0:58:0a:53:f7:0a:95:1b:75:f2:06:
1c:ba:f5:9d:4e:f7:22:e4:15:0a:43:34:e5:e1:0e:fd:81:0b:
e4:41:0f:c8:c9:31:1c:f0:d7:38:88:c3:ca:4c:9a:c1:f3:fa:
b1:40:bd:05:e0:e8:70:9d:3c:3c:63:e6:0c:2b:dd:8e:a8:cb:
bc:32:ea:78:cc:5a:ff:e3:db:68:2d:f6:10:3d:e7:bb:33:b0:
7e:8a:cb:5d:b8:09:2f:23:3d:ea:b5:0f:11:91:36:7e:76:cf:
6b:3b:10:c8:49:c5:e9:fc:67:20:a3:2e:1a:7e:60:ee:49:87:
83:1f:53:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 06:58:47 2025 by rpki-client