This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft File: 0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft (raw, json) Hash identifier: Wc+CYDFo0t3xyeDqshyDBB6X4+adiC3/Nddx9MfyQHE= Subject key identifier: 44:02:B2:A6:08:CC:DD:45:45:71:4E:AA:7C:71:6E:E2:18:7C:C1:68 Authority key identifier: 0A:FD:B7:22:2B:9E:BA:33:A6:5E:29:BB:E3:F2:9D:7C:5F:4B:09:B9 Certificate issuer: /CN=0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9 Certificate serial: 0811E89B87BBFE43D1467196ED072AB06A308635 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft Manifest number: CC Signing time: Sat 06 Dec 2025 04:21:39 +0000 Manifest this update: Sat 06 Dec 2025 04:16:39 +0000 Manifest next update: Sun 07 Dec 2025 04:29:39 +0000 Files and hashes: 1: 0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.crl (hash: BI/HkbSih10Gh1JnaDawIrvKhY3qTe6vMugw7TZQ9N4=) 2: 326130373a353463313a663030303a3a2f33362d3438203d3e20323038343533.roa (hash: PoxwFIHy8kdey2mlHnL1hmx4hhF1/GhCPxY1mv6kDWE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.crl rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:11:e8:9b:87:bb:fe:43:d1:46:71:96:ed:07:2a:b0:6a:30:86:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9 Validity Not Before: Dec 6 04:16:39 2025 GMT Not After : Dec 7 04:29:39 2025 GMT Subject: CN=4402B2A608CCDD4545714EAA7C716EE2187CC168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c7:dc:1b:78:ea:e2:68:31:fd:48:fe:7a:64: da:35:9a:5f:8f:b0:0f:3b:4a:3d:ee:6f:81:a3:12: 4a:4c:54:ca:bd:dc:15:e2:6c:ce:b3:38:74:25:2b: 82:fa:b9:46:a0:84:07:71:b3:4d:84:b8:3c:35:25: 18:c6:74:17:c3:1e:9a:2c:45:0b:47:42:5f:16:a3: 45:0a:29:69:4c:2f:85:00:64:8c:37:7a:eb:d0:46: 40:e0:a8:39:2b:0f:26:19:d1:cc:1b:a9:5d:89:da: ec:5c:0d:ba:3e:ae:06:9b:67:83:4b:32:31:a0:7f: 9f:fc:47:37:23:dc:6f:ab:71:ed:85:48:7c:e2:0f: f7:f1:51:25:c3:20:7a:9b:b6:c3:6f:fe:21:67:87: 4c:56:32:c7:8f:5e:aa:b6:aa:dc:8c:bf:21:78:a5: a4:0e:7e:eb:7d:7c:7f:3a:2c:6f:bc:c4:17:a6:35: 30:f2:9a:f8:cd:10:f3:2b:6d:2a:39:1d:6e:cd:c1: 68:0e:6a:10:33:f3:88:f5:1e:29:80:cb:0d:05:60: 9f:8c:c3:6e:19:51:15:ff:e7:43:69:15:f2:fe:63: 72:6a:63:c9:d0:b9:99:a7:55:85:d9:33:a3:8b:5b: 18:a6:b7:64:30:61:96:bb:70:12:04:c1:e5:31:1b: ba:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:02:B2:A6:08:CC:DD:45:45:71:4E:AA:7C:71:6E:E2:18:7C:C1:68 X509v3 Authority Key Identifier: keyid:0A:FD:B7:22:2B:9E:BA:33:A6:5E:29:BB:E3:F2:9D:7C:5F:4B:09:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/3/0AFDB7222B9EBA33A65E29BBE3F29D7C5F4B09B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:28:0a:91:e6:d8:a2:0d:d9:8e:9b:72:1d:97:86:fe:27:53: c6:91:83:5d:f9:be:f8:c5:39:7f:ad:98:9b:b8:9a:e5:22:9c: 0c:cc:7b:c1:f5:79:5b:66:10:ca:c9:02:44:d4:2d:18:a0:49: e0:9f:74:a6:a5:b9:9a:dc:e5:a9:98:ab:30:1d:78:5c:7d:ab: ac:88:de:5f:57:61:74:b8:9e:27:d4:a4:08:ab:9f:8e:a2:a1: 0f:fa:ea:ee:2d:2f:d0:bb:7c:1f:bc:b1:51:14:77:f2:78:ec: 1b:f9:53:7a:8b:02:1f:22:10:2a:9a:39:e3:c1:05:9f:1b:b9: 61:18:43:14:3a:58:6e:8d:23:89:29:32:09:f2:1d:f1:4c:b8: c5:63:20:54:54:25:c1:a9:58:3a:7f:e3:0e:bd:a2:00:99:72: 30:89:67:57:1d:ad:b5:69:9a:2d:96:32:90:70:30:a2:4f:38: 85:85:9e:ee:a5:f9:3a:50:b5:16:dc:93:4b:b8:67:d9:a2:b2: ae:2e:2d:72:14:a9:7b:bd:f1:07:dd:26:b8:75:00:81:aa:a2: dc:47:7e:0e:8e:38:d2:41:bc:67:70:5b:d0:50:b4:8b:88:fc: 64:c8:7f:c6:70:b4:60:36:b5:67:a1:d6:f5:85:27:c5:f6:ac: b6:3f:3a:91 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUCBHom4e7/kPRRnGW7QcqsGowhjUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEFGREI3MjIyQjlFQkEzM0E2NUUyOUJCRTNGMjlEN0M1 RjRCMDlCOTAeFw0yNTEyMDYwNDE2MzlaFw0yNTEyMDcwNDI5MzlaMDMxMTAvBgNV BAMTKDQ0MDJCMkE2MDhDQ0RENDU0NTcxNEVBQTdDNzE2RUUyMTg3Q0MxNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsx9wbeOriaDH9SP56ZNo1ml+P sA87Sj3ub4GjEkpMVMq93BXibM6zOHQlK4L6uUaghAdxs02EuDw1JRjGdBfDHpos RQtHQl8Wo0UKKWlML4UAZIw3euvQRkDgqDkrDyYZ0cwbqV2J2uxcDbo+rgabZ4NL MjGgf5/8Rzcj3G+rce2FSHziD/fxUSXDIHqbtsNv/iFnh0xWMsePXqq2qtyMvyF4 paQOfut9fH86LG+8xBemNTDymvjNEPMrbSo5HW7NwWgOahAz84j1HimAyw0FYJ+M w24ZURX/50NpFfL+Y3JqY8nQuZmnVYXZM6OLWximt2QwYZa7cBIEweUxG7p/AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQURAKypgjM3UVFcU6qfHFu4hh8wWgwHwYDVR0j BBgwFoAUCv23IiueujOmXim74/KdfF9LCbkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE0NzZkNjItOWNmYS00ODcxLWEyZDktZmFkZjU3ODFj MTFiLzMvMEFGREI3MjIyQjlFQkEzM0E2NUUyOUJCRTNGMjlEN0M1RjRCMDlCOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvNC8wQUZEQjcyMjJCOUVCQTMzQTY1RTI5QkJF M0YyOUQ3QzVGNEIwOUI5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcxNDc2ZDYyLTljZmEtNDg3MS1hMmQ5LWZhZGY1NzgxYzExYi8zLzBBRkRCNzIy MkI5RUJBMzNBNjVFMjlCQkUzRjI5RDdDNUY0QjA5QjkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCQKAqR 5tiiDdmOm3Idl4b+J1PGkYNd+b74xTl/rZibuJrlIpwMzHvB9XlbZhDKyQJE1C0Y oEngn3Smpbma3OWpmKswHXhcfausiN5fV2F0uJ4n1KQIq5+OoqEP+uruLS/Qu3wf vLFRFHfyeOwb+VN6iwIfIhAqmjnjwQWfG7lhGEMUOlhujSOJKTIJ8h3xTLjFYyBU VCXBqVg6f+MOvaIAmXIwiWdXHa21aZotljKQcDCiTziFhZ7upfk6ULUW3JNLuGfZ orKuLi1yFKl7vfEH3Sa4dQCBqqLcR34OjjjSQbxncFvQULSLiPxkyH/GcLRgNrVn odb1hSfF9qy2PzqR -----END CERTIFICATE-----Generated at Sat Dec 6 07:49:12 2025 by rpki-client