This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/2/AFF4C2C7543A73C42DFA94F9950C37BDC859D280.mft File: AFF4C2C7543A73C42DFA94F9950C37BDC859D280.mft (raw, json) Hash identifier: 180/8+I9iNMGmYpfUwUz2orwODTXbMqZbUXxdf2ZbnY= Subject key identifier: 2D:AB:34:8B:65:F8:90:EF:96:A0:16:C6:A2:B0:90:14:CF:BD:02:44 Authority key identifier: AF:F4:C2:C7:54:3A:73:C4:2D:FA:94:F9:95:0C:37:BD:C8:59:D2:80 Certificate issuer: /CN=AFF4C2C7543A73C42DFA94F9950C37BDC859D280 Certificate serial: 50ACD7369FE98C30D7E770B30D4F86643FD004E8 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/AFF4C2C7543A73C42DFA94F9950C37BDC859D280.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/2/AFF4C2C7543A73C42DFA94F9950C37BDC859D280.mft Manifest number: 3A Signing time: Fri 05 Dec 2025 19:13:27 +0000 Manifest this update: Fri 05 Dec 2025 19:08:27 +0000 Manifest next update: Sat 06 Dec 2025 21:13:27 +0000 Files and hashes: 1: AFF4C2C7543A73C42DFA94F9950C37BDC859D280.crl (hash: d8hICJUfCCH6TTFWzACGyMPQtY+0TWUXP63qWzHoNpM=) 2: 9F7042C3B38A2A4DAB756337122AD2B927DD6DE0.cer (hash: E9CNptHKWNvvuPC6W5ihJwZNW+cRtTj6Wt8oB63Ybug=) 3: 326130663a316363363a626162303a3a2f34342d3438203d3e20323034353335.roa (hash: 1+IhrNjfDlSrKMldoQWSJhujOmN03JwrltC4p7zGNeE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/2/AFF4C2C7543A73C42DFA94F9950C37BDC859D280.crl rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/2/AFF4C2C7543A73C42DFA94F9950C37BDC859D280.mft rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/AFF4C2C7543A73C42DFA94F9950C37BDC859D280.cer rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.mft rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 21:13:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:ac:d7:36:9f:e9:8c:30:d7:e7:70:b3:0d:4f:86:64:3f:d0:04:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFF4C2C7543A73C42DFA94F9950C37BDC859D280 Validity Not Before: Dec 5 19:08:27 2025 GMT Not After : Dec 6 21:13:27 2025 GMT Subject: CN=2DAB348B65F890EF96A016C6A2B09014CFBD0244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:7f:bf:7c:4c:1c:07:83:eb:a9:6e:11:c0:4b: 61:d0:c0:a5:89:cc:b4:17:09:f4:01:6b:28:b0:74: 9b:80:bb:42:41:f2:2b:1a:d3:34:42:f2:ed:b4:58: 4a:d4:dc:94:80:47:e9:c5:b9:1f:30:eb:88:1d:4d: 31:0b:2d:90:9d:d8:66:33:27:b8:b0:48:b1:0c:65: 2e:ce:8f:27:14:e9:cf:a7:0c:c8:bf:26:73:6a:d2: 83:8c:6a:4e:89:95:b3:dd:b2:9b:17:66:41:38:f7: f6:c6:af:3a:f5:af:da:80:7b:4e:42:24:a5:06:10: 2b:7f:b7:a5:d9:05:1d:e1:fc:b7:4c:e9:d5:02:22: 97:c0:a5:f8:17:46:5d:03:bf:d7:90:fb:8a:f9:3d: 64:3e:0b:56:a7:53:0a:e0:e7:54:73:77:ee:15:b9: 45:53:1b:96:9d:2d:f7:fb:73:15:26:83:3e:ef:7f: 83:b2:82:7d:4b:7e:cd:26:8b:bd:a4:8c:4d:50:de: f3:3b:e8:b8:d5:cc:e6:2c:65:52:3d:fe:ed:fe:43: 29:b5:e5:d5:39:88:52:2f:6b:c1:a0:a1:3b:6c:14: 61:7c:ba:b9:e3:69:2a:f3:1f:33:6e:df:0a:3a:c3: f7:04:3d:60:19:d1:b0:e6:d4:01:f3:34:61:7d:c2: 43:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:AB:34:8B:65:F8:90:EF:96:A0:16:C6:A2:B0:90:14:CF:BD:02:44 X509v3 Authority Key Identifier: keyid:AF:F4:C2:C7:54:3A:73:C4:2D:FA:94:F9:95:0C:37:BD:C8:59:D2:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/2/AFF4C2C7543A73C42DFA94F9950C37BDC859D280.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/AFF4C2C7543A73C42DFA94F9950C37BDC859D280.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/2/AFF4C2C7543A73C42DFA94F9950C37BDC859D280.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:d8:be:63:66:4e:e8:53:b9:8c:27:f0:94:cd:21:f7:19:de: fd:51:6d:1d:29:5c:59:b1:93:48:14:f0:eb:34:8c:d8:52:bd: 27:29:2b:e9:1b:d8:4e:d7:eb:8f:9c:a9:ff:e5:83:3e:58:e7: 82:ba:bf:e5:be:9a:3e:78:e6:01:46:49:d9:67:79:2d:58:74: c0:d5:08:be:0e:9a:9c:97:4d:43:cf:d3:4d:4b:38:54:86:f2: 41:45:b5:a8:c4:0f:59:52:6a:d5:a0:2a:1b:38:3a:29:87:8a: 6b:6a:13:ca:6c:87:ec:90:11:cb:d3:a6:dd:da:85:57:79:59: bb:5c:41:1b:1c:59:04:59:7a:e4:54:e4:77:e3:b9:ba:61:22: fb:92:b8:31:ff:64:dc:1f:2b:e4:35:f7:bf:5e:f3:66:3d:5d: 02:51:f5:03:20:db:91:f1:77:75:46:f7:13:df:1a:70:d4:28: 10:4d:92:2b:2f:b8:4c:2e:b9:d4:56:19:2d:65:67:49:52:bd: 79:df:2f:28:8c:f2:c9:ca:5b:f3:bc:66:0f:04:fe:d8:ee:44: 1d:18:93:e9:86:78:dc:e7:62:3b:d1:54:65:2d:26:f9:06:85: 7c:7b:05:3e:2d:63:4c:61:22:77:5c:2a:f3:16:39:20:07:bb: 7f:5c:cf:7b -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUUKzXNp/pjDDX53CzDU+GZD/QBOgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZGNEMyQzc1NDNBNzNDNDJERkE5NEY5OTUwQzM3QkRD ODU5RDI4MDAeFw0yNTEyMDUxOTA4MjdaFw0yNTEyMDYyMTEzMjdaMDMxMTAvBgNV BAMTKDJEQUIzNDhCNjVGODkwRUY5NkEwMTZDNkEyQjA5MDE0Q0ZCRDAyNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaf798TBwHg+upbhHAS2HQwKWJ zLQXCfQBayiwdJuAu0JB8isa0zRC8u20WErU3JSAR+nFuR8w64gdTTELLZCd2GYz J7iwSLEMZS7OjycU6c+nDMi/JnNq0oOMak6JlbPdspsXZkE49/bGrzr1r9qAe05C JKUGECt/t6XZBR3h/LdM6dUCIpfApfgXRl0Dv9eQ+4r5PWQ+C1anUwrg51Rzd+4V uUVTG5adLff7cxUmgz7vf4Oygn1Lfs0mi72kjE1Q3vM76LjVzOYsZVI9/u3+Qym1 5dU5iFIva8GgoTtsFGF8urnjaSrzHzNu3wo6w/cEPWAZ0bDm1AHzNGF9wkOHAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQULas0i2X4kO+WoBbGorCQFM+9AkQwHwYDVR0j BBgwFoAUr/TCx1Q6c8Qt+pT5lQw3vchZ0oAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODdkOGRiNzEtYTViZS00NjRjLWE4YjktOGI3YjM3NGFl M2ZhLzIvQUZGNEMyQzc1NDNBNzNDNDJERkE5NEY5OTUwQzM3QkRDODU5RDI4MC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMjZlYjEzNi00ZmU1LTRl NjEtYTRkOC1mMzQ1ZjUyYmMyNWQvMC9BRkY0QzJDNzU0M0E3M0M0MkRGQTk0Rjk5 NTBDMzdCREM4NTlEMjgwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzg3ZDhkYjcxLWE1YmUtNDY0Yy1hOGI5LThiN2IzNzRhZTNmYS8yL0FGRjRDMkM3 NTQzQTczQzQyREZBOTRGOTk1MEMzN0JEQzg1OUQyODAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA12L5j Zk7oU7mMJ/CUzSH3Gd79UW0dKVxZsZNIFPDrNIzYUr0nKSvpG9hO1+uPnKn/5YM+ WOeCur/lvpo+eOYBRknZZ3ktWHTA1Qi+Dpqcl01Dz9NNSzhUhvJBRbWoxA9ZUmrV oCobODoph4prahPKbIfskBHL06bd2oVXeVm7XEEbHFkEWXrkVOR347m6YSL7krgx /2TcHyvkNfe/XvNmPV0CUfUDINuR8Xd1RvcT3xpw1CgQTZIrL7hMLrnUVhktZWdJ Ur153y8ojPLJylvzvGYPBP7Y7kQdGJPphnjc52I70VRlLSb5BoV8ewU+LWNMYSJ3 XCrzFjkgB7t/XM97 -----END CERTIFICATE-----Generated at Sat Dec 6 09:42:10 2025 by rpki-client