This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.mft File: 87A4C84D4366DBB15A9090A55AA2DCEBA8723945.mft (raw, json) Hash identifier: z3JpTkqJ4IzhOu3oxKU/NRd3eG1ntu+AQDe8BRT3JsU= Subject key identifier: 7E:CC:54:F0:FF:F6:1A:3B:B3:0F:5D:3B:9B:5A:3C:C1:A6:0E:FE:95 Authority key identifier: 87:A4:C8:4D:43:66:DB:B1:5A:90:90:A5:5A:A2:DC:EB:A8:72:39:45 Certificate issuer: /CN=87A4C84D4366DBB15A9090A55AA2DCEBA8723945 Certificate serial: 5C9D2DCA3C3BBD6E14B57820F819306D553AA1B9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.mft Manifest number: 0147 Signing time: Fri 19 Dec 2025 06:05:32 +0000 Manifest this update: Fri 19 Dec 2025 06:00:32 +0000 Manifest next update: Sat 20 Dec 2025 09:48:32 +0000 Files and hashes: 1: 326131343a373538313a393930333a3a2f34382d3438203d3e20323134333434.roa (hash: /zrjZ0ZqEzRDQ5mOWK+S06L45z9UxNhwijRkpqGoHX0=) 2: 326131343a373538313a393966353a3a2f34382d3438203d3e20323134333434.roa (hash: WwRRTirG7edW5+geax/8pXpN1dZiLKdB/tgwh/uOeTM=) 3: 326131343a373538313a393939393a3a2f34382d3438203d3e20323134333434.roa (hash: gWNOGizaCWeT+eChfA6O1CcYgC4CppF3JVd8ZgY0qsY=) 4: 326131343a373538313a393966313a3a2f34382d3438203d3e20323134333434.roa (hash: eBRv+uDGLUqSp7a6GG/a9BPTN3/sPy8oPhg1ivi/5ik=) 5: 326131343a373538313a393930313a3a2f34382d3438203d3e20323134333434.roa (hash: i94AFUzw6e810fYgj7x6pZ8Yx8k5H6Glrkwkeys08UU=) 6: 326131343a373538313a393930323a3a2f34382d3438203d3e20323134333434.roa (hash: 3uRQGY7O+ZvtbHNtgC5MF4VJ4PR1W0vGtZuXeGQdfrI=) 7: 326131343a373538313a393938383a3a2f34382d3438203d3e20323134333434.roa (hash: oAguRb9pXNzPWjYX85q2YG/BjiE6PLmXVHXI0ai6PhQ=) 8: 326131343a373538313a393965653a3a2f34382d3438203d3e20323134333434.roa (hash: 3oBSnEnPYocyloNNfV7eH1ZnHXiKOV8dASwMij3b8+0=) 9: 326131343a373538313a393966343a3a2f34382d3438203d3e20323134333434.roa (hash: aT8cghtaGkqPEEByCDT3I1TbWDM5+v3iYF7i8PWrF94=) 10: 326131343a373538313a393930343a3a2f34382d3438203d3e20323134333434.roa (hash: Kr++/O1eWk2rhooTEwkNaOpIKHaAHhcWSp5UY9Du6eM=) 11: 87A4C84D4366DBB15A9090A55AA2DCEBA8723945.crl (hash: C/wpuzs+dm/VJrUG4h9Umct75v9V9j+LZzk5gBN6NsI=) 12: 326131343a373538313a393966333a3a2f34382d3438203d3e20323134333434.roa (hash: CfKfKnWr6AMoLiLfBVlrhneodY9KAu+Y1wDjsvoRWPk=) 13: 326131343a373538313a393930353a3a2f34382d3438203d3e20323134333434.roa (hash: 0tk68iktR4A+Tmx1ow+QCPfURRQdgNg7+hqUgrcV4SU=) 14: 326131343a373538313a393966323a3a2f34382d3438203d3e20323134333434.roa (hash: GgRgpO0cir6J2JIvLpFaBWDg0/fcSkJg//f6BlSBDCY=) Validation: Failed, CRL has expired Certificate: Data: Version: 3 (0x2) Serial Number: 5c:9d:2d:ca:3c:3b:bd:6e:14:b5:78:20:f8:19:30:6d:55:3a:a1:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87A4C84D4366DBB15A9090A55AA2DCEBA8723945 Validity Not Before: Dec 19 06:00:32 2025 GMT Not After : Dec 20 09:48:32 2025 GMT Subject: CN=7ECC54F0FFF61A3BB30F5D3B9B5A3CC1A60EFE95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:e5:62:80:25:6a:c6:19:2f:6e:c9:5f:2e:5f: c9:99:6e:ca:58:bd:98:69:ad:07:02:f6:e2:8b:88: df:d4:b2:3a:ae:c7:42:da:c9:fe:c1:d8:41:6b:85: 99:dc:36:e8:c7:b7:23:2e:a5:d0:b9:9e:68:95:f9: 94:9f:ac:11:29:df:10:fc:29:7d:cf:8f:db:36:d1: 6e:a7:31:23:3d:37:96:3a:cc:63:08:54:81:95:62: 26:89:e9:f9:65:0d:81:e7:16:74:5c:60:29:20:b0: 41:d6:f8:10:42:e6:29:e4:82:df:f0:1c:16:db:03: 61:26:9c:af:8f:cd:0d:d3:1b:13:ce:fe:6d:5a:fd: 17:d6:79:39:08:d2:48:dc:ae:85:38:9d:34:61:c3: f1:e3:79:b3:e3:f5:3b:99:fb:76:e0:8d:28:2a:d1: ab:7c:72:f6:eb:65:cc:f5:0a:c4:10:4d:85:01:48: e9:f4:53:d2:a5:db:ce:e4:a8:ec:ce:46:1e:9c:22: 7c:39:64:6b:74:a3:b7:d9:a2:3c:8f:34:30:e0:a9: 3f:4e:69:df:83:ff:8d:f1:d4:6b:c2:c9:87:b0:ea: 9d:81:d9:49:1d:fc:44:da:76:3c:bd:9b:37:83:a2: 7b:38:1a:49:48:a9:1a:0d:70:5f:a7:6a:cf:45:d6: 74:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:CC:54:F0:FF:F6:1A:3B:B3:0F:5D:3B:9B:5A:3C:C1:A6:0E:FE:95 X509v3 Authority Key Identifier: keyid:87:A4:C8:4D:43:66:DB:B1:5A:90:90:A5:5A:A2:DC:EB:A8:72:39:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:9c:a8:fd:28:30:ba:5f:9c:bc:82:9e:39:34:28:4e:a8:86: 03:f0:d1:cd:19:4e:9f:28:43:87:70:c1:55:70:71:fa:33:f6: 48:51:02:b8:ac:8e:2f:7a:4b:7b:ff:9e:8b:92:bd:58:9c:a6: 72:85:3c:fb:dc:43:25:b6:8d:35:e1:43:33:48:be:85:f2:54: 66:e9:7c:9b:0f:9c:04:f4:b3:f5:02:4e:c3:c6:03:97:54:79: 35:d5:84:85:2e:a8:0e:64:83:6f:20:ab:d3:ef:56:ee:a6:63: 8c:5f:b9:c0:ab:2a:70:c3:a7:38:26:b2:75:0f:8f:c8:a0:fa: 09:5e:9c:a7:90:dd:5b:f2:f0:15:9b:4f:e9:8a:1f:b7:2e:a6: 01:a3:6e:b2:ce:aa:74:72:84:0c:07:5d:0d:62:51:13:30:cf: 35:44:c6:bf:57:80:de:f4:c5:6b:1a:fe:96:19:32:da:40:6e: 08:fe:ed:d7:74:63:33:39:87:14:3e:f7:f1:65:94:c0:1f:08: 48:c6:ec:59:ec:82:ce:5d:ed:47:92:96:62:71:2d:54:1a:59: 72:68:c2:b3:df:c1:75:03:a5:fb:29:9b:1d:56:38:d7:81:b1: d0:67:ef:a6:d8:c4:e5:0e:41:86:d6:24:86:41:aa:b0:96:32: 3a:bf:c5:b0 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUXJ0tyjw7vW4UtXgg+BkwbVU6obkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdBNEM4NEQ0MzY2REJCMTVBOTA5MEE1NUFBMkRDRUJB ODcyMzk0NTAeFw0yNTEyMTkwNjAwMzJaFw0yNTEyMjAwOTQ4MzJaMDMxMTAvBgNV BAMTKDdFQ0M1NEYwRkZGNjFBM0JCMzBGNUQzQjlCNUEzQ0MxQTYwRUZFOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn5WKAJWrGGS9uyV8uX8mZbspY vZhprQcC9uKLiN/Usjqux0Layf7B2EFrhZncNujHtyMupdC5nmiV+ZSfrBEp3xD8 KX3Pj9s20W6nMSM9N5Y6zGMIVIGVYiaJ6fllDYHnFnRcYCkgsEHW+BBC5inkgt/w HBbbA2EmnK+PzQ3TGxPO/m1a/RfWeTkI0kjcroU4nTRhw/HjebPj9TuZ+3bgjSgq 0at8cvbrZcz1CsQQTYUBSOn0U9Kl287kqOzORh6cInw5ZGt0o7fZojyPNDDgqT9O ad+D/43x1GvCyYew6p2B2Ukd/ETadjy9mzeDons4GklIqRoNcF+nas9F1nQlAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUfsxU8P/2GjuzD107m1o8waYO/pUwHwYDVR0j BBgwFoAUh6TITUNm27FakJClWqLc66hyOUUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTVkNGMwMGItZDEwNS00OTA2LWI5ODEtMWQwMzQzZTMw MWRhLzEvODdBNEM4NEQ0MzY2REJCMTVBOTA5MEE1NUFBMkRDRUJBODcyMzk0NS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84N0E0Qzg0RDQzNjZEQkIxNUE5MDkwQTU1 QUEyRENFQkE4NzIzOTQ1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2E1ZDRjMDBiLWQxMDUtNDkwNi1iOTgxLTFkMDM0M2UzMDFkYS8xLzg3QTRDODRE NDM2NkRCQjE1QTkwOTBBNTVBQTJEQ0VCQTg3MjM5NDUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCXnKj9 KDC6X5y8gp45NChOqIYD8NHNGU6fKEOHcMFVcHH6M/ZIUQK4rI4vekt7/56Lkr1Y nKZyhTz73EMlto014UMzSL6F8lRm6XybD5wE9LP1Ak7DxgOXVHk11YSFLqgOZINv IKvT71bupmOMX7nAqypww6c4JrJ1D4/IoPoJXpynkN1b8vAVm0/pih+3LqYBo26y zqp0coQMB10NYlETMM81RMa/V4De9MVrGv6WGTLaQG4I/u3XdGMzOYcUPvfxZZTA HwhIxuxZ7ILOXe1HkpZicS1UGllyaMKz38F1A6X7KZsdVjjXgbHQZ++m2MTlDkGG 1iSGQaqwljI6v8Ww -----END CERTIFICATE-----Generated at Sun Jan 25 20:08:26 2026 by rpki-client