This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.mft File: 5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.mft (raw, json) Hash identifier: Ddqbytcorxqgh75WHGPrtiZAqP/jqABUvG8Pzak4hVo= Subject key identifier: 0F:33:E2:67:34:48:0A:EE:8A:F3:87:1C:70:D6:04:8A:26:95:FC:88 Authority key identifier: 5F:BB:D0:F3:D7:B8:1E:8A:FD:99:E5:A3:4B:67:83:4D:D3:CD:13:C9 Certificate issuer: /CN=5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9 Certificate serial: 37B2030F7BE69C9B6DD9C309DF6D3F1796017127 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.mft Manifest number: 1B Signing time: Fri 05 Dec 2025 15:33:40 +0000 Manifest this update: Fri 05 Dec 2025 15:28:40 +0000 Manifest next update: Sat 06 Dec 2025 19:11:40 +0000 Files and hashes: 1: 326130363a313238333a383930333a3a2f34382d3438203d3e20323133343133.roa (hash: hfsX7O4ssow2aXydnwN9zYa6SNNgkh4xqDb4M6RjByw=) 2: 326130363a313238333a383930343a3a2f34382d3438203d3e20323134373632.roa (hash: +ucDYfCsKINgleLYp642WIR5LEPN0kWQYDVnDQaA83s=) 3: 326130363a313238333a383930613a3a2f34382d3438203d3e20323136333637.roa (hash: HuUH/JYH1vthyPEN3kexTHE/fhKQ1xn353p6qv+mYJg=) 4: 5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.crl (hash: Q9LqYSvbL5LHVP9s/cgZJsSrcn75H3nMhCWruBLLwvQ=) 5: 326130363a313238333a383966303a3a2f34342d3434203d3e20323134303333.roa (hash: uXHhm0ZjjPodrKnjp4qW+YTDv1/Z29fczrFjmi+w+J4=) 6: 326130363a313238333a383930313a3a2f34382d3438203d3e20323134323035.roa (hash: cPNCLrbwdymPiqlNCY/iKCMb0/zZMwnLL5M7UNRh5H0=) 7: 326130363a313238333a383930303a3a2f34302d3430203d3e20323133343133.roa (hash: 0gYE6skrisUrM06D53bvZrZFAv0EfqoV+nCI7G9OKOs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.crl rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.mft rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 14:45:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:b2:03:0f:7b:e6:9c:9b:6d:d9:c3:09:df:6d:3f:17:96:01:71:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9 Validity Not Before: Dec 5 15:28:40 2025 GMT Not After : Dec 6 19:11:40 2025 GMT Subject: CN=0F33E26734480AEE8AF3871C70D6048A2695FC88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:64:44:d0:21:54:3d:f8:93:29:b2:5a:39:88: 91:64:c0:12:35:1a:a2:b5:96:1e:63:44:d1:96:58: 71:7f:4c:0f:7d:78:5f:94:32:c5:6f:b1:15:47:f0: 6a:af:18:b3:42:62:8d:b8:5f:1d:d0:6a:76:f2:82: f1:0b:44:bd:17:2c:ee:d2:9c:a2:bf:fc:95:55:28: 11:9f:23:c9:ad:f1:35:4e:5a:73:fa:8b:d5:31:e9: a5:d0:de:66:64:81:d5:eb:07:2d:b6:9a:ab:63:8d: 09:62:ec:d5:d1:3a:04:6e:0c:22:ac:60:76:ed:75: d1:7a:54:84:28:4c:ea:84:ec:6a:88:98:47:2d:3c: 28:fe:91:b1:9d:b9:e2:dc:dc:5c:85:2e:6f:9f:4d: b4:15:db:23:32:89:7e:db:3e:5a:c1:e2:86:ca:7a: 32:bb:1b:b3:39:d1:27:f0:64:fe:2d:de:18:66:a6: d7:56:84:e4:05:3f:19:3a:5e:c3:8a:95:2b:40:df: 85:8e:4f:2e:0d:5a:eb:e1:21:d3:0a:ef:19:40:08: 4c:28:42:fe:f4:26:f2:b1:ae:f9:37:60:77:10:71: 94:d3:08:a5:84:2d:40:31:f2:f4:67:cb:09:83:ea: 85:2e:3c:88:81:fe:f4:85:6c:3b:f1:5e:47:27:46: 3c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:33:E2:67:34:48:0A:EE:8A:F3:87:1C:70:D6:04:8A:26:95:FC:88 X509v3 Authority Key Identifier: keyid:5F:BB:D0:F3:D7:B8:1E:8A:FD:99:E5:A3:4B:67:83:4D:D3:CD:13:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:d4:4f:de:cd:53:9b:b2:07:d1:7b:e3:ec:02:6d:18:c4:58: d3:2d:fd:7f:70:05:e7:09:8c:eb:27:9f:e9:d7:d3:b9:1b:f9: f5:95:4c:61:5a:20:1c:19:30:93:b4:6f:98:b5:8a:07:b1:49: 67:f3:ba:f6:f9:84:23:0c:0b:36:27:7d:16:d3:ea:18:7f:db: 1c:17:36:6e:76:3c:6e:0b:0f:78:2f:f8:a6:b8:d1:f3:a1:8f: 21:57:9e:0d:69:bb:c1:6f:3d:92:8a:26:5a:98:9d:3d:92:47: be:03:eb:86:eb:10:0f:a4:60:12:08:ff:0f:b4:05:bc:8a:09: 85:67:e0:a5:5f:48:53:11:42:73:73:e7:c5:73:a3:94:35:d6: 81:c6:47:56:70:f4:f6:0f:31:86:af:81:96:a4:54:5e:0d:cc: 80:6d:84:f4:bf:da:67:79:e8:af:fd:45:12:8c:9f:fe:17:c7: a0:ae:45:29:fa:a6:44:5f:54:8c:0e:71:fe:ec:4b:1d:5d:e6: a6:84:50:04:2a:5f:74:66:5e:97:02:37:cc:99:2a:57:03:3b: 4c:ac:f0:a6:c4:e6:45:69:0e:0a:aa:55:8d:59:7e:1c:04:a0: 9e:a6:dd:73:9f:ab:91:82:2f:53:0f:89:f6:ef:44:9e:f0:93: ac:d4:77:c3 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUN7IDD3vmnJtt2cMJ320/F5YBcScwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZCQkQwRjNEN0I4MUU4QUZEOTlFNUEzNEI2NzgzNERE M0NEMTNDOTAeFw0yNTEyMDUxNTI4NDBaFw0yNTEyMDYxOTExNDBaMDMxMTAvBgNV BAMTKDBGMzNFMjY3MzQ0ODBBRUU4QUYzODcxQzcwRDYwNDhBMjY5NUZDODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3ZETQIVQ9+JMpslo5iJFkwBI1 GqK1lh5jRNGWWHF/TA99eF+UMsVvsRVH8GqvGLNCYo24Xx3QanbygvELRL0XLO7S nKK//JVVKBGfI8mt8TVOWnP6i9Ux6aXQ3mZkgdXrBy22mqtjjQli7NXROgRuDCKs YHbtddF6VIQoTOqE7GqImEctPCj+kbGdueLc3FyFLm+fTbQV2yMyiX7bPlrB4obK ejK7G7M50SfwZP4t3hhmptdWhOQFPxk6XsOKlStA34WOTy4NWuvhIdMK7xlACEwo Qv70JvKxrvk3YHcQcZTTCKWELUAx8vRnywmD6oUuPIiB/vSFbDvxXkcnRjw5AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUDzPiZzRICu6K84cccNYEiiaV/IgwHwYDVR0j BBgwFoAUX7vQ89e4Hor9meWjS2eDTdPNE8kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzhlNjE2MTEtM2IwYi00MWNlLTg4Y2QtZTU2MDM1M2Y2 OTQyLzEvNUZCQkQwRjNEN0I4MUU4QUZEOTlFNUEzNEI2NzgzNEREM0NEMTNDOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJiYi1mMDQ4LTRk ZTEtOTIwNi04ZDQwZjA3MTgwOGIvNi81RkJCRDBGM0Q3QjgxRThBRkQ5OUU1QTM0 QjY3ODM0REQzQ0QxM0M5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzc4ZTYxNjExLTNiMGItNDFjZS04OGNkLWU1NjAzNTNmNjk0Mi8xLzVGQkJEMEYz RDdCODFFOEFGRDk5RTVBMzRCNjc4MzRERDNDRDEzQzkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBX1E/e zVObsgfRe+PsAm0YxFjTLf1/cAXnCYzrJ5/p19O5G/n1lUxhWiAcGTCTtG+YtYoH sUln87r2+YQjDAs2J30W0+oYf9scFzZudjxuCw94L/imuNHzoY8hV54NabvBbz2S iiZamJ09kke+A+uG6xAPpGASCP8PtAW8igmFZ+ClX0hTEUJzc+fFc6OUNdaBxkdW cPT2DzGGr4GWpFReDcyAbYT0v9pneeiv/UUSjJ/+F8egrkUp+qZEX1SMDnH+7Esd XeamhFAEKl90Zl6XAjfMmSpXAztMrPCmxOZFaQ4KqlWNWX4cBKCept1zn6uRgi9T D4n270Se8JOs1HfD -----END CERTIFICATE-----Generated at Sat Dec 6 07:41:44 2025 by rpki-client