This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6073c95a-aac7-43ec-818b-1f42f62275f5/0/5AFF13D5A71CFB0DA38D8D3D81E13EAF40416A74.mft File: 5AFF13D5A71CFB0DA38D8D3D81E13EAF40416A74.mft (raw, json) Hash identifier: Bw70d+f7VqsHdlTk0vaCx2GXpdNOmbC4kNK1lI+H4+s= Subject key identifier: 7B:E6:76:64:6E:B3:97:45:0B:0B:0A:F7:52:BF:63:04:29:70:AB:E5 Authority key identifier: 5A:FF:13:D5:A7:1C:FB:0D:A3:8D:8D:3D:81:E1:3E:AF:40:41:6A:74 Certificate issuer: /CN=5aff13d5a71cfb0da38d8d3d81e13eaf40416a74 Certificate serial: 7429BEFAB5C5DF631CDB75FD20F04EA70559D8DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wv8T1acc-w2jjY09geE-r0BBanQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6073c95a-aac7-43ec-818b-1f42f62275f5/0/5AFF13D5A71CFB0DA38D8D3D81E13EAF40416A74.mft Manifest number: 04C6 Signing time: Sat 06 Dec 2025 05:26:17 +0000 Manifest this update: Sat 06 Dec 2025 05:21:17 +0000 Manifest next update: Sun 07 Dec 2025 05:32:17 +0000 Files and hashes: 1: 39312e3232392e3138302e302f32342d3234203d3e2036303739.roa (hash: +bVqrEMFd6OlmJt6OXUAm36lf7U27Wity5s8ggfbbQs=) 2: 5AFF13D5A71CFB0DA38D8D3D81E13EAF40416A74.crl (hash: qIK7HCKWR9wQ2EorBecbSllIIoyBDGsPEnMEo6KTlJs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6073c95a-aac7-43ec-818b-1f42f62275f5/0/5AFF13D5A71CFB0DA38D8D3D81E13EAF40416A74.crl rsync://rsync.paas.rpki.ripe.net/repository/6073c95a-aac7-43ec-818b-1f42f62275f5/0/5AFF13D5A71CFB0DA38D8D3D81E13EAF40416A74.mft rsync://rpki.ripe.net/repository/DEFAULT/Wv8T1acc-w2jjY09geE-r0BBanQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:29:be:fa:b5:c5:df:63:1c:db:75:fd:20:f0:4e:a7:05:59:d8:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5aff13d5a71cfb0da38d8d3d81e13eaf40416a74 Validity Not Before: Dec 6 05:21:17 2025 GMT Not After : Dec 7 05:32:17 2025 GMT Subject: CN=7BE676646EB397450B0B0AF752BF63042970ABE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:72:bd:b0:88:36:f2:9b:10:ae:5c:f7:b0:53: 16:d6:0f:ba:22:43:ed:51:da:42:46:e0:d3:70:73: 81:25:73:92:c0:bd:c1:8f:8c:71:23:80:32:65:91: e7:f0:28:2e:30:18:e3:50:79:f7:27:0c:8d:a7:07: 7d:5f:a9:64:15:d4:17:30:8d:5d:79:5f:f6:38:0e: 7f:c2:0d:23:67:24:ec:69:6b:96:d1:ae:16:df:07: 2c:c4:3a:3d:0f:56:fc:8a:37:67:fa:52:c9:75:0a: 4e:b2:20:b6:61:f4:33:6e:ac:9a:59:e5:15:27:df: 6d:77:de:8d:88:36:b1:66:23:dc:d5:a2:7d:82:5d: d1:46:ca:e2:92:53:a6:68:1e:51:91:39:77:a3:a9: c2:e5:fd:9b:57:ac:58:22:2a:5f:c9:c8:61:2b:23: 16:93:45:dc:bf:e0:fb:17:d6:18:24:b1:8f:7c:07: a7:2b:76:7f:1d:7f:23:cc:58:e7:fc:da:a2:d9:47: eb:3a:4e:33:6b:ed:b9:a4:8a:03:e5:2c:44:dc:16: 24:45:59:6f:cc:a1:53:b4:a8:da:4f:1f:7d:4b:d7: 6d:08:74:89:d3:e4:88:3e:f2:04:24:46:ce:40:00: 4d:ea:ea:be:31:eb:b1:e2:a5:bf:7c:60:66:d3:04: 8d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:E6:76:64:6E:B3:97:45:0B:0B:0A:F7:52:BF:63:04:29:70:AB:E5 X509v3 Authority Key Identifier: keyid:5A:FF:13:D5:A7:1C:FB:0D:A3:8D:8D:3D:81:E1:3E:AF:40:41:6A:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6073c95a-aac7-43ec-818b-1f42f62275f5/0/5AFF13D5A71CFB0DA38D8D3D81E13EAF40416A74.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wv8T1acc-w2jjY09geE-r0BBanQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6073c95a-aac7-43ec-818b-1f42f62275f5/0/5AFF13D5A71CFB0DA38D8D3D81E13EAF40416A74.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:f6:76:5a:66:b5:4b:56:ba:1e:15:4d:7a:a5:33:0a:48:87: 3b:9e:05:e5:a9:2f:2e:63:52:95:52:f9:09:61:e0:6f:32:9a: bf:e9:d0:78:2d:93:0f:ca:b7:d3:bc:c8:87:e3:9e:5e:22:ce: 05:18:ed:51:2b:b6:2a:30:11:bc:08:0d:ea:47:ae:40:ca:a6: a8:13:a3:4a:68:0b:78:fa:36:25:25:e1:7b:d5:a1:f0:56:fc: 71:8f:c0:6f:cd:5a:ca:ed:72:8d:c9:a8:ed:25:57:fc:f9:08: 52:1e:46:eb:16:db:04:25:56:23:fb:27:62:1c:89:21:f0:80: 20:b6:5e:10:54:c6:5f:4a:85:7e:e4:7d:62:2f:4b:21:fc:3a: b9:87:3d:e9:5c:b7:39:e5:b6:09:2f:ad:05:51:e8:fa:48:4a: 70:bd:86:f4:0c:e2:59:d2:67:2d:a1:28:a8:c3:c1:0e:81:e7: 57:2a:74:02:9e:b7:71:6b:29:00:85:3a:88:fd:92:d0:ec:ee: 5b:9d:8a:8e:7e:38:c5:da:7a:00:2d:6f:03:a3:76:e3:c7:30: 44:3c:89:09:a3:b4:31:6d:fb:39:65:d8:58:53:ab:e6:4f:a2: 5b:9c:cc:9e:5e:df:e9:c3:6f:d7:39:96:22:77:d4:f0:8d:e7: 19:01:0e:17 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUdCm++rXF32Mc23X9IPBOpwVZ2N4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWFmZjEzZDVhNzFjZmIwZGEzOGQ4ZDNkODFlMTNlYWY0 MDQxNmE3NDAeFw0yNTEyMDYwNTIxMTdaFw0yNTEyMDcwNTMyMTdaMDMxMTAvBgNV BAMTKDdCRTY3NjY0NkVCMzk3NDUwQjBCMEFGNzUyQkY2MzA0Mjk3MEFCRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIcr2wiDbymxCuXPewUxbWD7oi Q+1R2kJG4NNwc4Elc5LAvcGPjHEjgDJlkefwKC4wGONQefcnDI2nB31fqWQV1Bcw jV15X/Y4Dn/CDSNnJOxpa5bRrhbfByzEOj0PVvyKN2f6Usl1Ck6yILZh9DNurJpZ 5RUn32133o2INrFmI9zVon2CXdFGyuKSU6ZoHlGROXejqcLl/ZtXrFgiKl/JyGEr IxaTRdy/4PsX1hgksY98B6crdn8dfyPMWOf82qLZR+s6TjNr7bmkigPlLETcFiRF WW/MoVO0qNpPH31L120IdInT5Ig+8gQkRs5AAE3q6r4x67Hipb98YGbTBI1bAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUe+Z2ZG6zl0ULCwr3Ur9jBClwq+UwHwYDVR0j BBgwFoAUWv8T1acc+w2jjY09geE+r0BBanQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjA3M2M5NWEtYWFjNy00M2VjLTgxOGItMWY0MmY2MjI3 NWY1LzAvNUFGRjEzRDVBNzFDRkIwREEzOEQ4RDNEODFFMTNFQUY0MDQxNkE3NC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1d2OFQxYWNjLXcyampZMDlnZUUtcjBC QmFuUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82MDczYzk1YS1h YWM3LTQzZWMtODE4Yi0xZjQyZjYyMjc1ZjUvMC81QUZGMTNENUE3MUNGQjBEQTM4 RDhEM0Q4MUUxM0VBRjQwNDE2QTc0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQPZ2Wma1S1a6HhVNeqUz CkiHO54F5akvLmNSlVL5CWHgbzKav+nQeC2TD8q307zIh+OeXiLOBRjtUSu2KjAR vAgN6keuQMqmqBOjSmgLePo2JSXhe9Wh8Fb8cY/Ab81ayu1yjcmo7SVX/PkIUh5G 6xbbBCVWI/snYhyJIfCAILZeEFTGX0qFfuR9Yi9LIfw6uYc96Vy3OeW2CS+tBVHo +khKcL2G9AziWdJnLaEoqMPBDoHnVyp0Ap63cWspAIU6iP2S0OzuW52Kjn44xdp6 AC1vA6N248cwRDyJCaO0MW37OWXYWFOr5k+iW5zMnl7f6cNv1zmWInfU8I3nGQEO Fw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:50:02 2025 by rpki-client