This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft File: 3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft (raw, json) Hash identifier: fyJrj2gbqYltDBMIxMop6aMjugHqJrcjYiaKMeaTAKM= Subject key identifier: 49:EF:FF:8E:4A:9E:AF:91:5F:65:8F:AA:F1:5A:F4:53:2E:EE:84:0E Authority key identifier: 3F:CD:3A:83:9E:A1:41:7F:D9:88:F3:DD:FD:04:54:19:7F:AA:F4:7A Certificate issuer: /CN=324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b Certificate serial: 166CF38CED5E5D69FC01F22BCFFD5C492E1ABFB0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft Manifest number: 0237 Signing time: Wed 17 Dec 2025 13:43:34 +0000 Manifest this update: Wed 17 Dec 2025 13:38:34 +0000 Manifest next update: Thu 18 Dec 2025 14:46:34 +0000 Files and hashes: 1: 3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl (hash: vEb5SwkbnJt91yLI8diFcCeLwB0k0AldUabe27BDDEs=) 2: 32332e3139312e34302e302f32342d3234203d3e203236393534.roa (hash: S3jzo3eG6y4PI2K8QRCs4He73uG95vDRz8jaxjn2rIA=) 3: 3133302e31322e39332e302f32342d3234203d3e203236393534.roa (hash: vVLMMj/up4t8BoR2x4+9T6jLFKzm1RRXCwaLQiGBGUU=) 4: 323630323a663764653a3a2f34302d3438203d3e203236393534.roa (hash: nc0OfcCKdw/6xTqKkcylPBA4tjafxEa+iXIGeRNqKAA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Dec 2025 14:46:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:6c:f3:8c:ed:5e:5d:69:fc:01:f2:2b:cf:fd:5c:49:2e:1a:bf:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b Validity Not Before: Dec 17 13:38:34 2025 GMT Not After : Dec 18 14:46:34 2025 GMT Subject: CN=49EFFF8E4A9EAF915F658FAAF15AF4532EEE840E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0a:e9:94:df:b3:f9:32:49:d8:3e:f2:4f:a8: 0e:45:7a:a0:84:56:d8:e5:f2:11:ef:b9:06:12:bb: 94:1e:c4:8d:11:1f:bc:ce:63:46:af:74:37:22:21: a6:49:0c:45:1a:8e:ea:70:be:4b:2e:5b:31:7b:6b: 90:24:71:e4:9b:95:d8:1d:8e:3d:8c:13:ad:23:d9: 1e:6f:15:d1:42:63:ef:03:6e:8a:90:b1:28:27:13: 55:5d:d7:e5:11:ea:3e:a0:6a:8f:34:ab:74:da:c7: ab:35:34:10:53:ba:9a:17:0f:55:73:f5:fd:08:89: 99:27:ea:8b:63:9a:a7:49:02:26:8f:b4:d9:9f:73: 0f:c6:b9:c6:31:6d:48:f8:d1:01:fc:66:ff:9c:42: 98:84:03:81:b0:39:7a:c6:56:a1:52:ff:0e:65:f2: a6:34:fa:c9:b0:68:1a:57:fa:35:d5:cc:c2:84:01: 28:e6:75:0e:72:b7:fd:26:be:5d:16:e9:50:c7:98: c0:24:52:ae:be:ab:02:91:9e:f5:f2:ea:42:27:a0: a1:7a:60:c5:6a:15:ca:29:92:b3:a8:c4:69:cc:dd: 4a:4b:3a:a5:52:c6:48:a8:ea:28:fe:24:be:a1:86: 4d:cc:a7:b7:c5:1c:f1:d6:ff:b0:11:4c:35:6f:e7: 4a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:EF:FF:8E:4A:9E:AF:91:5F:65:8F:AA:F1:5A:F4:53:2E:EE:84:0E X509v3 Authority Key Identifier: keyid:3F:CD:3A:83:9E:A1:41:7F:D9:88:F3:DD:FD:04:54:19:7F:AA:F4:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:1b:33:f5:22:78:0e:14:85:94:ab:2a:1a:c1:e2:a8:bc:d7: fb:6e:8d:88:96:a4:a3:1d:8f:d0:35:dc:aa:6c:27:49:ca:b0: de:06:bc:77:19:af:78:4c:f1:f8:74:a6:58:69:62:e9:93:5f: 2d:03:e7:8c:15:6d:3d:a1:aa:d6:07:f6:2e:5d:19:9e:83:36: fe:37:fc:10:a9:fd:5e:e6:82:8f:62:b7:ee:2b:65:17:05:41: 09:35:de:88:f2:e0:98:06:40:7d:c8:fc:89:79:d6:14:b5:f0: 3c:dd:8e:7f:92:de:39:5e:c1:cb:1c:72:17:43:51:bc:4d:1b: 31:74:b0:66:2c:54:1b:76:14:b5:ad:09:0a:50:93:ec:a0:ab: 6c:ba:8b:4f:d7:cc:7f:67:17:17:3a:e2:0d:51:4f:f5:2f:ff: 5f:05:09:ff:70:8d:86:5d:85:b5:93:c2:3c:3a:5d:4a:7f:90: 5c:94:97:f5:fe:5e:78:47:91:4e:de:6f:35:aa:c7:70:96:bb: 9d:55:8f:4a:3a:1b:4a:0d:f0:c6:95:0f:39:fd:9d:fb:47:9a: 12:5d:f3:41:bc:66:4d:50:ab:1b:c4:dd:a7:66:0d:be:46:f6: 27:6b:4e:5a:44:5f:67:17:4f:3f:33:c2:5a:7e:5c:11:ce:28: ea:80:24:b9 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUFmzzjO1eXWn8AfIrz/1cSS4av7AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMzI0ZmZlMzlhOThhMDE0NmI1MDNkOGEwMTVjYTJjMmU3 NjdjZjNkMGI5ZmRlNjIzMWIwHhcNMjUxMjE3MTMzODM0WhcNMjUxMjE4MTQ0NjM0 WjAzMTEwLwYDVQQDEyg0OUVGRkY4RTRBOUVBRjkxNUY2NThGQUFGMTVBRjQ1MzJF RUU4NDBFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgrplN+z+TJJ 2D7yT6gORXqghFbY5fIR77kGEruUHsSNER+8zmNGr3Q3IiGmSQxFGo7qcL5LLlsx e2uQJHHkm5XYHY49jBOtI9kebxXRQmPvA26KkLEoJxNVXdflEeo+oGqPNKt02ser NTQQU7qaFw9Vc/X9CImZJ+qLY5qnSQImj7TZn3MPxrnGMW1I+NEB/Gb/nEKYhAOB sDl6xlahUv8OZfKmNPrJsGgaV/o11czChAEo5nUOcrf9Jr5dFulQx5jAJFKuvqsC kZ718upCJ6ChemDFahXKKZKzqMRpzN1KSzqlUsZIqOoo/iS+oYZNzKe3xRzx1v+w EUw1b+dKWwIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFEnv/45Knq+RX2WPqvFa9FMu 7oQOMB8GA1UdIwQYMBaAFD/NOoOeoUF/2Yjz3f0EVBl/qvR6MA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5 LTBhYjcwZTQ4MTViYi8xLzNGQ0QzQTgzOUVBMTQxN0ZEOTg4RjNEREZEMDQ1NDE5 N0ZBQUY0N0EuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYt NDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81MWNkOTlmNy0yZjQyLTRkZWMtYjJjNi0w OWJhZmFhMzc4MGUvMzI0ZmZlMzlhOThhMDE0NmI1MDNkOGEwMTVjYTJjMmU3Njdj ZjNkMGI5ZmRlNjIzMWIuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv NzNiOGVjMDEtOGJhNS00NzlmLWEyMjktMGFiNzBlNDgxNWJiLzEvM0ZDRDNBODM5 RUExNDE3RkQ5ODhGM0RERkQwNDU0MTk3RkFBRjQ3QS5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAG4bM/Ui eA4UhZSrKhrB4qi81/tujYiWpKMdj9A13KpsJ0nKsN4GvHcZr3hM8fh0plhpYumT Xy0D54wVbT2hqtYH9i5dGZ6DNv43/BCp/V7mgo9it+4rZRcFQQk13ojy4JgGQH3I /Il51hS18Dzdjn+S3jlewcscchdDUbxNGzF0sGYsVBt2FLWtCQpQk+ygq2y6i0/X zH9nFxc64g1RT/Uv/18FCf9wjYZdhbWTwjw6XUp/kFyUl/X+XnhHkU7ebzWqx3CW u51Vj0o6G0oN8MaVDzn9nftHmhJd80G8Zk1QqxvE3admDb5G9idrTlpEX2cXTz8z wlp+XBHOKOqAJLk= -----END CERTIFICATE-----Generated at Wed Dec 17 16:37:06 2025 by rpki-client