This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft File: 0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft (raw, json) Hash identifier: tLea6AS+uvcLmfTS92gfGDZ47DRW0ZK7NvSqi/R4jaQ= Subject key identifier: 69:2E:04:04:10:64:22:9A:26:67:B2:C8:07:25:28:AC:E6:0A:3E:3A Authority key identifier: 0B:C6:D2:25:F0:CE:3E:60:77:12:A9:A9:8C:45:61:91:2F:34:32:B6 Certificate issuer: /CN=0BC6D225F0CE3E607712A9A98C4561912F3432B6 Certificate serial: 352352276C9056B8A02C85DD6B40A27B21A365FF Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft Manifest number: 9F Signing time: Sat 06 Dec 2025 03:54:27 +0000 Manifest this update: Sat 06 Dec 2025 03:49:27 +0000 Manifest next update: Sun 07 Dec 2025 05:35:27 +0000 Files and hashes: 1: 326130623a346530373a316330313a3a2f34382d3438203d3e20313531373034.roa (hash: VQpA5o0Pq6sWKS236BEYQWIKLgBdNGi2BEIwMERcePY=) 2: 0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl (hash: rd+re53liONudmeHt10loULt8SiL84zKXnK0IRKOj+M=) 3: 326130623a346530373a316330303a3a2f34382d3438203d3e20313531373034.roa (hash: GbSyn/a7s2Tct/cl+IXObaOaKJfLlKE/P5lfI5qam+k=) 4: 326130623a346530373a316330323a3a2f34382d3438203d3e20323133383632.roa (hash: /X68JagauxWyaFcSb3BbJbw5DWqXyP6Pe5X7avcQNQs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:22:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:23:52:27:6c:90:56:b8:a0:2c:85:dd:6b:40:a2:7b:21:a3:65:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BC6D225F0CE3E607712A9A98C4561912F3432B6 Validity Not Before: Dec 6 03:49:27 2025 GMT Not After : Dec 7 05:35:27 2025 GMT Subject: CN=692E04041064229A2667B2C8072528ACE60A3E3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5b:45:cc:76:17:87:ef:74:2b:6c:6d:9f:af: 71:bf:9c:6f:7d:f6:41:08:c6:f8:2e:c4:93:30:9c: be:86:ed:bb:40:bc:1e:88:60:5c:33:b6:f0:cf:d4: d5:c0:9c:a8:8f:69:21:8d:96:76:0b:fe:89:3e:32: e0:5d:71:d0:15:ec:74:e1:43:40:8a:7c:a5:41:c9: e7:b8:24:26:e2:5b:a1:14:9c:6a:fc:5d:85:3c:42: bc:03:79:f3:96:d2:51:e6:7a:35:1c:65:34:64:06: e3:9d:2d:7a:5c:e2:52:57:4d:44:e8:7d:51:f5:87: dc:24:bd:55:c3:cb:fd:eb:b3:a4:3d:1a:99:89:da: d8:51:a4:e4:11:3a:b8:8e:7d:9c:0f:0a:3d:3a:b5: 51:10:35:fc:d4:d2:1d:f4:0c:fa:89:e3:a1:ba:7e: 8e:b9:aa:d9:89:37:54:0a:2c:11:b3:3d:bc:8f:fb: 87:4d:b7:cb:b2:8d:82:d9:c7:f0:ed:42:84:94:4a: 61:71:50:cf:05:cd:96:cd:21:8b:db:7d:1c:c1:07: d6:04:ad:50:ef:2c:ac:e2:25:e1:31:5f:7d:0b:f3: bc:61:00:bf:c7:f6:91:e2:03:d0:a6:43:08:f4:0e: 57:33:c1:f0:80:04:68:e1:4a:15:68:80:7a:8d:ae: 35:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:2E:04:04:10:64:22:9A:26:67:B2:C8:07:25:28:AC:E6:0A:3E:3A X509v3 Authority Key Identifier: keyid:0B:C6:D2:25:F0:CE:3E:60:77:12:A9:A9:8C:45:61:91:2F:34:32:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:b7:30:5c:13:f4:95:79:b1:60:ec:12:fb:ca:97:30:c9:a9: 73:53:29:85:be:64:27:35:67:90:77:42:ca:8a:ff:c1:0f:b1: a8:f6:ff:69:1d:d0:c3:59:ac:1f:0b:f5:bb:c4:3c:a2:a4:3f: a8:95:f8:9a:24:0d:1e:8c:e6:c1:28:5a:3c:31:a2:21:a2:9f: d8:58:f0:2c:c8:dd:f3:98:6e:ac:a0:bb:a0:4c:cd:4b:ae:2f: 1b:e2:b9:5f:22:7a:35:64:37:a5:68:1b:b1:62:6e:07:53:13: fd:bb:54:c0:4b:8c:ae:9d:03:9a:52:f8:7c:2b:71:11:c4:71: 76:7a:eb:40:4e:8e:01:5b:1d:dc:96:17:25:e7:d7:d7:6e:81: 94:c0:39:4d:1c:eb:e2:94:0c:4e:9f:ce:ed:12:05:ad:c4:a7: cb:ed:8b:2d:03:a7:67:40:0c:70:53:b3:dd:54:00:d9:06:a4: 45:a2:3c:7d:08:d9:8d:b9:81:32:ec:e3:ab:29:db:ba:f5:b0: 35:0e:e4:eb:16:56:5d:7e:aa:45:7a:0f:8a:19:f3:3f:c3:7b: 5d:2c:58:94:17:4c:0a:96:ad:d4:a2:2c:30:ac:b2:9f:8e:7c: 01:1c:0d:0b:c7:2f:25:4d:a4:13:3b:54:d1:1b:6c:46:3f:34: dd:85:2e:6d -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUNSNSJ2yQVrigLIXda0CieyGjZf8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEy RjM0MzJCNjAeFw0yNTEyMDYwMzQ5MjdaFw0yNTEyMDcwNTM1MjdaMDMxMTAvBgNV BAMTKDY5MkUwNDA0MTA2NDIyOUEyNjY3QjJDODA3MjUyOEFDRTYwQTNFM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5W0XMdheH73QrbG2fr3G/nG99 9kEIxvguxJMwnL6G7btAvB6IYFwztvDP1NXAnKiPaSGNlnYL/ok+MuBdcdAV7HTh Q0CKfKVByee4JCbiW6EUnGr8XYU8QrwDefOW0lHmejUcZTRkBuOdLXpc4lJXTUTo fVH1h9wkvVXDy/3rs6Q9GpmJ2thRpOQROriOfZwPCj06tVEQNfzU0h30DPqJ46G6 fo65qtmJN1QKLBGzPbyP+4dNt8uyjYLZx/DtQoSUSmFxUM8FzZbNIYvbfRzBB9YE rVDvLKziJeExX30L87xhAL/H9pHiA9CmQwj0DlczwfCABGjhShVogHqNrjUJAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUaS4EBBBkIpomZ7LIByUorOYKPjowHwYDVR0j BBgwFoAUC8bSJfDOPmB3EqmpjEVhkS80MrYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTMxZTk3MjAtMGI2Mi00M2E4LThlMWYtMjMwNjg0ZWFm OWFmLzMvMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEyRjM0MzJCNi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvMEJDNkQyMjVGMENFM0U2MDc3MTJBOUE5OEM0NTYxOTEyRjM0 MzJCNi5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS81MzFlOTcyMC0w YjYyLTQzYTgtOGUxZi0yMzA2ODRlYWY5YWYvMy8wQkM2RDIyNUYwQ0UzRTYwNzcx MkE5QTk4QzQ1NjE5MTJGMzQzMkI2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALrcwXBP0lXmxYOwS+8qX MMmpc1Mphb5kJzVnkHdCyor/wQ+xqPb/aR3Qw1msHwv1u8Q8oqQ/qJX4miQNHozm wShaPDGiIaKf2FjwLMjd85hurKC7oEzNS64vG+K5XyJ6NWQ3pWgbsWJuB1MT/btU wEuMrp0DmlL4fCtxEcRxdnrrQE6OAVsd3JYXJefX126BlMA5TRzr4pQMTp/O7RIF rcSny+2LLQOnZ0AMcFOz3VQA2QakRaI8fQjZjbmBMuzjqynbuvWwNQ7k6xZWXX6q RXoPihnzP8N7XSxYlBdMCpat1KIsMKyyn458ARwNC8cvJU2kEztU0RtsRj803YUu bQ== -----END CERTIFICATE-----Generated at Sat Dec 6 16:06:27 2025 by rpki-client