This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft File: B3D0280F500695A43204251C9830454CA8A2E7AC.mft (raw, json) Hash identifier: SK632vtYcI1BYFBs0HIuJXESNV7QQq0rK/uGoC9Hyf4= Subject key identifier: 97:75:A3:D4:82:BC:D2:DB:AC:7C:5B:50:BF:E7:25:88:8C:BF:D7:B7 Authority key identifier: B3:D0:28:0F:50:06:95:A4:32:04:25:1C:98:30:45:4C:A8:A2:E7:AC Certificate issuer: /CN=b3d0280f500695a43204251c9830454ca8a2e7ac Certificate serial: 4EEBD8D3C5BCDB2136996B49DA15321D8C6EB8DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft Manifest number: 0302 Signing time: Sat 06 Dec 2025 00:06:17 +0000 Manifest this update: Sat 06 Dec 2025 00:01:17 +0000 Manifest next update: Sun 07 Dec 2025 03:24:17 +0000 Files and hashes: 1: B3D0280F500695A43204251C9830454CA8A2E7AC.crl (hash: Si5nmI/bC7ouOIb8PC+OMI4GnxOv8OMxDxPODLlzfn0=) 2: 3138352e3138362e32352e302f32342d3234203d3e20323133373732.roa (hash: KbS5MjAty6bkNu2TCkQpJN6TOq9xU7ustWBHWVtQeSQ=) 3: 3138352e3138362e32352e302f32342d3234203d3e203135343430.roa (hash: zbKaWYwmjPPC167P5YL6I94JcPZEWN0HKnmqpfcR9u4=) 4: 3138352e3138362e32362e302f32342d3234203d3e20323135373033.roa (hash: 64uxD3jQtXWcavfYFljDhJHJgbOPhGll/0DiDk/jIuA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.crl rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:eb:d8:d3:c5:bc:db:21:36:99:6b:49:da:15:32:1d:8c:6e:b8:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3d0280f500695a43204251c9830454ca8a2e7ac Validity Not Before: Dec 6 00:01:17 2025 GMT Not After : Dec 7 03:24:17 2025 GMT Subject: CN=9775A3D482BCD2DBAC7C5B50BFE725888CBFD7B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a2:a6:03:6e:29:d5:88:8a:b1:16:1f:26:2a: 3d:f8:e6:68:0c:5f:0f:82:ca:d0:5c:84:c6:d5:99: 37:15:5b:9e:c9:1c:eb:67:8e:64:9f:60:cd:c4:65: 5f:cb:1f:ed:d6:8a:1d:86:e6:9f:a5:40:04:db:f4: 70:c3:73:1a:dd:39:39:6a:90:c0:58:61:39:66:c7: 81:90:06:9b:32:10:96:50:9f:fa:b7:f9:9e:e5:9d: 07:c2:4d:8f:fd:6c:94:71:3f:b2:1c:34:1f:9c:d8: 7f:39:dc:78:9a:6d:63:a7:5b:af:16:71:d5:e8:55: e6:62:56:4d:ee:c2:6a:d7:43:7e:4c:bc:c3:e3:0f: 39:82:98:bb:03:cc:cc:27:ba:76:ad:20:83:0c:aa: 87:5f:a4:83:c4:71:58:4e:ff:b4:ab:5a:38:df:2e: 5e:40:29:b1:07:47:c4:56:8b:47:d2:9e:16:e9:2d: cb:06:77:98:14:c5:19:59:b0:04:bc:74:de:52:04: e5:9d:3b:ef:21:3c:4b:2a:fd:eb:32:e5:7d:57:e9: 9b:45:11:07:18:7e:1a:ea:88:87:31:da:69:6b:20: c2:60:6f:a1:8e:4a:0b:b2:6a:04:07:fa:68:51:65: 9b:08:27:f6:48:97:bd:e2:63:86:8e:14:bf:69:e9: f7:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:75:A3:D4:82:BC:D2:DB:AC:7C:5B:50:BF:E7:25:88:8C:BF:D7:B7 X509v3 Authority Key Identifier: keyid:B3:D0:28:0F:50:06:95:A4:32:04:25:1C:98:30:45:4C:A8:A2:E7:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:ff:b0:f3:39:61:de:4c:bd:a3:23:8e:ad:42:6d:3d:b5:5d: 46:aa:f6:3f:e6:51:c7:58:be:26:5a:e1:08:fc:09:1c:fc:fb: d0:7d:b6:b3:87:7b:8c:28:1f:27:35:8d:40:61:8a:e6:d6:1f: 5a:5d:2e:f9:f9:72:83:ec:65:28:a5:3a:2f:38:bb:dd:e1:c1: 41:80:a7:1d:25:e3:d8:6e:bb:25:a4:27:81:25:bb:48:a4:ec: 45:68:dd:c7:54:64:18:aa:de:e0:4b:0a:2b:e7:54:1a:04:c4: 12:92:80:80:58:c1:b9:dd:15:f9:fe:63:26:d6:ab:6c:1d:df: 3f:b3:59:fd:49:e6:52:12:fc:e3:a4:70:c4:1a:4c:c8:39:7f: a8:3b:be:12:fc:d2:7f:cf:17:40:60:a1:d3:1d:99:b0:ab:2c: fd:fb:9a:a2:72:ec:0f:06:19:0b:1d:fa:99:50:3e:8b:23:e4: 40:d8:90:f9:62:ac:c4:de:81:6f:d3:64:e6:b4:ff:80:5f:35: 6d:a9:66:80:93:df:6e:8b:72:0e:da:99:29:53:6e:d5:47:52: 6b:9a:e9:f9:b8:fb:7b:8e:4b:13:3d:a0:2c:f5:0d:6b:1d:0a: 50:72:14:0b:8b:a4:87:ff:26:89:d9:3b:8d:60:6b:23:90:c3: 72:4a:ca:eb -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUTuvY08W82yE2mWtJ2hUyHYxuuNswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjNkMDI4MGY1MDA2OTVhNDMyMDQyNTFjOTgzMDQ1NGNh OGEyZTdhYzAeFw0yNTEyMDYwMDAxMTdaFw0yNTEyMDcwMzI0MTdaMDMxMTAvBgNV BAMTKDk3NzVBM0Q0ODJCQ0QyREJBQzdDNUI1MEJGRTcyNTg4OENCRkQ3QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeoqYDbinViIqxFh8mKj345mgM Xw+CytBchMbVmTcVW57JHOtnjmSfYM3EZV/LH+3Wih2G5p+lQATb9HDDcxrdOTlq kMBYYTlmx4GQBpsyEJZQn/q3+Z7lnQfCTY/9bJRxP7IcNB+c2H853HiabWOnW68W cdXoVeZiVk3uwmrXQ35MvMPjDzmCmLsDzMwnunatIIMMqodfpIPEcVhO/7SrWjjf Ll5AKbEHR8RWi0fSnhbpLcsGd5gUxRlZsAS8dN5SBOWdO+8hPEsq/esy5X1X6ZtF EQcYfhrqiIcx2mlrIMJgb6GOSguyagQH+mhRZZsIJ/ZIl73iY4aOFL9p6ff/AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUl3Wj1IK80tusfFtQv+cliIy/17cwHwYDVR0j BBgwFoAUs9AoD1AGlaQyBCUcmDBFTKii56wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODdhZTI1ZjMtNzA2Yi00N2VkLWJiNzQtNDY2ODRhZTBl ZjJiLzAvQjNEMDI4MEY1MDA2OTVBNDMyMDQyNTFDOTgzMDQ1NENBOEEyRTdBQy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3M5QW9EMUFHbGFReUJDVWNtREJGVEtp aTU2dy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84N2FlMjVmMy03 MDZiLTQ3ZWQtYmI3NC00NjY4NGFlMGVmMmIvMC9CM0QwMjgwRjUwMDY5NUE0MzIw NDI1MUM5ODMwNDU0Q0E4QTJFN0FDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATf+w8zlh3ky9oyOOrUJt PbVdRqr2P+ZRx1i+JlrhCPwJHPz70H22s4d7jCgfJzWNQGGK5tYfWl0u+flyg+xl KKU6Lzi73eHBQYCnHSXj2G67JaQngSW7SKTsRWjdx1RkGKre4EsKK+dUGgTEEpKA gFjBud0V+f5jJtarbB3fP7NZ/UnmUhL846RwxBpMyDl/qDu+EvzSf88XQGCh0x2Z sKss/fuaonLsDwYZCx36mVA+iyPkQNiQ+WKsxN6Bb9Nk5rT/gF81balmgJPfboty DtqZKVNu1UdSa5rp+bj7e45LEz2gLPUNax0KUHIUC4ukh/8midk7jWBrI5DDckrK 6w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:11:40 2025 by rpki-client