This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.mft File: AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.mft (raw, json) Hash identifier: WkEKBVTBQAz5iRyG2bUaLAyey3aukbk5NzcVcYSOXws= Subject key identifier: BA:92:4C:88:97:BF:73:48:C2:5B:AB:E5:7C:A3:9F:88:49:97:78:EE Authority key identifier: AC:7F:9B:C3:0C:04:B3:A2:36:BD:F8:A4:30:86:9E:CA:1A:28:B3:24 Certificate issuer: /CN=AC7F9BC30C04B3A236BDF8A430869ECA1A28B324 Certificate serial: 4D262A7E713CD10C79A2B476A9C47A6E64A906BB Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.mft Manifest number: 1E Signing time: Sat 06 Dec 2025 15:49:27 +0000 Manifest this update: Sat 06 Dec 2025 15:44:27 +0000 Manifest next update: Sun 07 Dec 2025 16:44:27 +0000 Files and hashes: 1: AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.crl (hash: DJiUt1nT9MS3qXWpw0LCU9GbdglSt5bCcA0eP9jkUlw=) 2: 3230362e35332e302e302f32342d3234203d3e20323038393135.roa (hash: WAuGwGix52TOMRQkik+jyE1rcWEn8673KCYGvlhnhXY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.crl rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:26:2a:7e:71:3c:d1:0c:79:a2:b4:76:a9:c4:7a:6e:64:a9:06:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC7F9BC30C04B3A236BDF8A430869ECA1A28B324 Validity Not Before: Dec 6 15:44:27 2025 GMT Not After : Dec 7 16:44:27 2025 GMT Subject: CN=BA924C8897BF7348C25BABE57CA39F88499778EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:15:e6:4c:fb:73:9f:60:7d:c5:d8:97:b0:bf: 62:5e:de:2a:f5:5b:ad:05:49:72:cb:d4:ba:68:92: d1:39:db:b9:e5:27:dc:fe:6a:74:5b:3b:1e:9b:fd: d6:7b:b2:8b:24:19:7c:57:df:fa:76:3c:f9:f6:dc: 6f:62:a0:3a:00:17:19:68:1d:81:a8:fc:04:e5:80: 76:06:47:45:81:c3:a4:eb:6f:f8:3e:21:70:1f:9e: 46:0a:8b:19:44:82:04:99:9a:17:20:0d:50:72:fb: d1:4e:d5:bc:60:76:dc:33:a4:b1:d8:61:f3:38:72: 10:4a:4f:34:c2:50:db:39:9e:a9:49:e6:f2:a6:20: 1a:66:ed:71:99:e8:ca:34:8d:51:d1:f8:d0:d3:f0: dd:ff:57:69:6d:96:83:07:8e:89:7d:fc:79:0e:53: 48:9e:29:a7:07:5b:4b:f4:7a:33:0c:fb:a9:33:d8: 5f:e8:5a:c8:6d:31:61:17:68:95:50:ea:8a:aa:df: fd:41:a0:9d:e0:62:16:4e:6b:06:f0:cf:39:61:3a: ee:30:90:8f:84:7d:3d:84:e8:22:c2:69:88:17:96: 9f:34:34:4b:42:eb:d7:94:f1:9a:72:bc:f6:11:d2: 06:c7:09:81:49:a3:20:4a:39:2f:e9:5e:aa:26:ae: 7b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:92:4C:88:97:BF:73:48:C2:5B:AB:E5:7C:A3:9F:88:49:97:78:EE X509v3 Authority Key Identifier: keyid:AC:7F:9B:C3:0C:04:B3:A2:36:BD:F8:A4:30:86:9E:CA:1A:28:B3:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:13:fc:b9:6b:99:43:1e:3f:90:98:5f:bf:01:73:99:3e:c1: cc:d6:d2:af:3f:d4:21:9c:34:14:55:3e:48:02:4c:c7:70:b3: ab:d4:9e:1e:c8:40:09:77:ac:46:a9:13:44:39:3d:bc:81:bc: ec:a1:2e:b2:a1:67:5d:b0:c0:37:db:7e:fa:93:fb:c6:78:6e: 60:b2:e6:75:12:66:3c:1d:f2:e2:7c:f2:25:3b:a4:af:25:85: 1f:5b:d8:9e:58:ce:3a:42:03:9e:32:7a:10:f4:86:f9:cd:f6: 73:88:55:06:1b:58:89:a0:72:64:6b:cf:d7:1a:8f:25:9d:27: be:6e:b9:b5:6a:2a:54:bd:68:97:00:8b:41:df:9f:9d:50:f1: e6:4c:96:8c:5c:69:c0:c6:08:eb:75:fe:f7:14:0d:90:d3:28: 46:0d:86:30:0b:cd:69:3d:ae:6c:e5:85:07:73:8c:55:9e:ed: f3:96:52:26:22:0c:b1:07:3c:d1:fb:c7:5a:cd:67:f6:8f:71: 5b:88:38:19:fb:72:a2:06:da:29:d0:0e:0f:e9:55:cd:9e:7a: e3:44:db:b1:17:4b:54:c6:67:cc:13:6e:c1:2f:52:b1:80:c9: 09:0c:25:0c:12:d8:8f:d2:df:27:15:36:62:9a:5f:98:40:a4: b1:6d:83:17 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUTSYqfnE80Qx5orR2qcR6bmSpBrswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUM3RjlCQzMwQzA0QjNBMjM2QkRGOEE0MzA4NjlFQ0Ex QTI4QjMyNDAeFw0yNTEyMDYxNTQ0MjdaFw0yNTEyMDcxNjQ0MjdaMDMxMTAvBgNV BAMTKEJBOTI0Qzg4OTdCRjczNDhDMjVCQUJFNTdDQTM5Rjg4NDk5Nzc4RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgFeZM+3OfYH3F2Jewv2Je3ir1 W60FSXLL1LpoktE527nlJ9z+anRbOx6b/dZ7soskGXxX3/p2PPn23G9ioDoAFxlo HYGo/ATlgHYGR0WBw6Trb/g+IXAfnkYKixlEggSZmhcgDVBy+9FO1bxgdtwzpLHY YfM4chBKTzTCUNs5nqlJ5vKmIBpm7XGZ6Mo0jVHR+NDT8N3/V2ltloMHjol9/HkO U0ieKacHW0v0ejMM+6kz2F/oWshtMWEXaJVQ6oqq3/1BoJ3gYhZOawbwzzlhOu4w kI+EfT2E6CLCaYgXlp80NEtC69eU8ZpyvPYR0gbHCYFJoyBKOS/pXqomrnuNAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUupJMiJe/c0jCW6vlfKOfiEmXeO4wHwYDVR0j BBgwFoAUrH+bwwwEs6I2vfikMIaeyhoosyQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRjY2I0YjAtZTMwZS00MjZjLTg0ZGMtNDY0ZmQxODk5 MTE2LzEvQUM3RjlCQzMwQzA0QjNBMjM2QkRGOEE0MzA4NjlFQ0ExQTI4QjMyNC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvQUM3RjlCQzMwQzA0QjNBMjM2QkRGOEE0MzA4NjlFQ0ExQTI4 QjMyNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGNjYjRiMC1l MzBlLTQyNmMtODRkYy00NjRmZDE4OTkxMTYvMS9BQzdGOUJDMzBDMDRCM0EyMzZC REY4QTQzMDg2OUVDQTFBMjhCMzI0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlxP8uWuZQx4/kJhfvwFz mT7BzNbSrz/UIZw0FFU+SAJMx3Czq9SeHshACXesRqkTRDk9vIG87KEusqFnXbDA N9t++pP7xnhuYLLmdRJmPB3y4nzyJTukryWFH1vYnljOOkIDnjJ6EPSG+c32c4hV BhtYiaByZGvP1xqPJZ0nvm65tWoqVL1olwCLQd+fnVDx5kyWjFxpwMYI63X+9xQN kNMoRg2GMAvNaT2ubOWFB3OMVZ7t85ZSJiIMsQc80fvHWs1n9o9xW4g4Gftyogba KdAOD+lVzZ5640TbsRdLVMZnzBNuwS9SsYDJCQwlDBLYj9LfJxU2YppfmECksW2D Fw== -----END CERTIFICATE-----Generated at Sun Dec 7 00:10:29 2025 by rpki-client