This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft File: 637FD1BA3FED44454D6D7030247709D28DB3491A.mft (raw, json) Hash identifier: fzVER0C/EtMXLZfp9kZjOZdlYJnXskKv2KSe6duxC5k= Subject key identifier: 5D:A3:7E:83:F4:75:50:2B:0C:92:74:F8:E2:B1:E7:97:4D:1B:3D:E4 Authority key identifier: 63:7F:D1:BA:3F:ED:44:45:4D:6D:70:30:24:77:09:D2:8D:B3:49:1A Certificate issuer: /CN=637fd1ba3fed44454d6d7030247709d28db3491a Certificate serial: 595D7DFBD320ACFA857BC526364E4284D49E481E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft Manifest number: 0408 Signing time: Sat 06 Dec 2025 06:51:17 +0000 Manifest this update: Sat 06 Dec 2025 06:46:17 +0000 Manifest next update: Sun 07 Dec 2025 08:20:17 +0000 Files and hashes: 1: 3133392e32382e32342e302f32342d3234203d3e20323131343430.roa (hash: eR+xyo+zY+fM9l50cFs0swlGeIX2NljYGKvE5SQX83U=) 2: 3133392e32382e32352e302f32342d3234203d3e20323131343135.roa (hash: kj5wXeF4AQFWN9fpmE1MKtBmtMRLs1TA1rGuGr1+5eA=) 3: 3133392e32382e32362e302f32342d3234203d3e20313337343039.roa (hash: 4dsufrRZZT3ng/M0mUxRioQsmJP0ZwUerMNQTCdj11A=) 4: 3133392e32382e32352e302f32342d3234203d3e20323030303137.roa (hash: KTt7IBC5OKuP6muE0/6zCxuIwEkqcnypdMUhBFAyx18=) 5: 637FD1BA3FED44454D6D7030247709D28DB3491A.crl (hash: Nv78NrlFPStggj9rFBGjQaefZJnRSZm97nVcS0jl+hQ=) 6: 3133392e32382e32342e302f32342d3234203d3e20323132363039.roa (hash: Zbml066pXi3G2h7cDhaY/zBOXtPP1DXZek0hCHsXFhc=) 7: 3133392e32382e32372e302f32342d3234203d3e20323036313530.roa (hash: spk6NtqPTGXoBo4XJMsULHBo1PCje3tyvN9b3jHB/pA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.crl rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:5d:7d:fb:d3:20:ac:fa:85:7b:c5:26:36:4e:42:84:d4:9e:48:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=637fd1ba3fed44454d6d7030247709d28db3491a Validity Not Before: Dec 6 06:46:17 2025 GMT Not After : Dec 7 08:20:17 2025 GMT Subject: CN=5DA37E83F475502B0C9274F8E2B1E7974D1B3DE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f4:95:47:d0:25:4c:f1:59:8d:3e:a4:7e:74: 88:f5:c0:33:9a:eb:6c:49:41:55:35:d1:54:b0:9c: 35:f5:b9:cf:72:18:03:21:e0:77:7d:73:df:49:db: 7b:d5:bc:0f:54:d8:c2:a8:2f:80:d1:8c:e7:40:3b: 2b:4c:8c:65:81:d4:97:fe:a0:4d:0a:75:67:05:62: 8a:3c:d3:a3:2f:ec:c9:0f:ae:67:ed:e6:d3:8b:c2: 8d:84:72:50:7a:db:e0:6f:f3:a4:84:60:a9:9f:93: 28:2a:5e:f5:c6:65:11:92:9e:7f:c4:f6:52:8e:6c: fe:fa:44:f4:51:b8:ed:bc:6a:a5:63:fc:22:e7:fd: 79:df:7b:51:0f:92:89:e7:21:11:16:0f:c5:5c:5c: c0:7a:12:56:84:8f:60:22:6c:e6:2c:96:a4:fb:de: b9:09:5a:f2:35:4b:bb:ae:39:c8:a1:68:8f:24:f7: 26:e9:f8:68:b2:9e:9d:22:04:a0:ae:56:dc:94:bf: 86:04:67:c5:ee:b4:09:e1:a6:04:69:5e:fa:39:c2: 8e:cb:c0:e5:f3:98:b2:18:3e:3a:1d:4d:fc:25:9e: b2:b3:19:bd:3d:97:cc:e7:7f:5c:7b:c6:6f:bf:27: 25:88:94:bf:57:7b:3b:04:c5:46:0d:ee:48:32:9d: ef:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:A3:7E:83:F4:75:50:2B:0C:92:74:F8:E2:B1:E7:97:4D:1B:3D:E4 X509v3 Authority Key Identifier: keyid:63:7F:D1:BA:3F:ED:44:45:4D:6D:70:30:24:77:09:D2:8D:B3:49:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:5f:a3:3e:f2:bc:ce:25:08:9b:23:a1:fa:37:42:c1:a0:56: e6:02:5f:93:ed:a9:1e:7b:01:d5:8b:b1:42:42:dc:d6:51:f4: d6:87:a3:3d:9f:6e:34:72:c1:59:61:1c:c1:52:5d:d4:a3:ef: 6c:8f:d1:40:80:8b:d0:a0:34:cb:fb:8a:ab:54:00:1a:81:80: a9:54:f3:9c:90:f8:24:b9:65:c0:11:d6:58:a6:e5:c1:23:81: 01:ef:49:6c:65:80:99:c9:3a:db:97:e3:f5:5c:ad:40:ed:e2: 8b:44:1d:71:02:b7:7e:5e:4a:f2:27:97:e1:5b:52:f3:06:32: e8:d2:c9:db:88:89:1c:d3:f3:75:cc:88:67:2d:85:2e:22:61: f0:4e:c7:51:4a:12:bd:e0:01:7e:6c:d4:61:8e:73:58:f8:ef: d6:9b:41:f4:79:e2:b9:e9:20:8a:5d:31:11:06:07:40:b4:37: c1:16:e3:31:ff:ac:62:26:bf:a9:74:df:bc:b3:e6:d7:92:61: ad:f3:9b:be:5a:1a:4b:65:b8:b2:2d:b0:e6:10:00:ae:74:91: 92:56:73:c2:61:0d:39:ac:b5:d7:5c:b6:59:58:d5:57:e3:e3: 7b:14:33:08:4b:ed:99:f3:75:ec:ca:e3:d8:18:26:0d:70:dc: c8:1f:6c:44 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUWV19+9MgrPqFe8UmNk5ChNSeSB4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjM3ZmQxYmEzZmVkNDQ0NTRkNmQ3MDMwMjQ3NzA5ZDI4 ZGIzNDkxYTAeFw0yNTEyMDYwNjQ2MTdaFw0yNTEyMDcwODIwMTdaMDMxMTAvBgNV BAMTKDVEQTM3RTgzRjQ3NTUwMkIwQzkyNzRGOEUyQjFFNzk3NEQxQjNERTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC9JVH0CVM8VmNPqR+dIj1wDOa 62xJQVU10VSwnDX1uc9yGAMh4Hd9c99J23vVvA9U2MKoL4DRjOdAOytMjGWB1Jf+ oE0KdWcFYoo806Mv7MkPrmft5tOLwo2EclB62+Bv86SEYKmfkygqXvXGZRGSnn/E 9lKObP76RPRRuO28aqVj/CLn/Xnfe1EPkonnIREWD8VcXMB6ElaEj2AibOYslqT7 3rkJWvI1S7uuOcihaI8k9ybp+Giynp0iBKCuVtyUv4YEZ8XutAnhpgRpXvo5wo7L wOXzmLIYPjodTfwlnrKzGb09l8znf1x7xm+/JyWIlL9XezsExUYN7kgyne/JAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUXaN+g/R1UCsMknT44rHnl00bPeQwHwYDVR0j BBgwFoAUY3/Ruj/tREVNbXAwJHcJ0o2zSRowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTk0ZGY3MTQtZDM3ZC00OTQyLThlOTQtOTFkZDg1M2Vm N2UzLzAvNjM3RkQxQkEzRkVENDQ0NTRENkQ3MDMwMjQ3NzA5RDI4REIzNDkxQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1kzX1J1al90UkVWTmJYQXdKSGNKMG8y elNSby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hOTRkZjcxNC1k MzdkLTQ5NDItOGU5NC05MWRkODUzZWY3ZTMvMC82MzdGRDFCQTNGRUQ0NDQ1NEQ2 RDcwMzAyNDc3MDlEMjhEQjM0OTFBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAol+jPvK8ziUImyOh+jdC waBW5gJfk+2pHnsB1YuxQkLc1lH01oejPZ9uNHLBWWEcwVJd1KPvbI/RQICL0KA0 y/uKq1QAGoGAqVTznJD4JLllwBHWWKblwSOBAe9JbGWAmck625fj9VytQO3ii0Qd cQK3fl5K8ieX4VtS8wYy6NLJ24iJHNPzdcyIZy2FLiJh8E7HUUoSveABfmzUYY5z WPjv1ptB9Hniuekgil0xEQYHQLQ3wRbjMf+sYia/qXTfvLPm15JhrfObvloaS2W4 si2w5hAArnSRklZzwmENOay111y2WVjVV+PjexQzCEvtmfN17Mrj2BgmDXDcyB9s RA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:31:38 2025 by rpki-client