This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft File: D36546790928F44FF74C564231471FA1D8D2A97B.mft (raw, json) Hash identifier: kFsEECKaBLo9AZJLrOk+NkfIMfURRFt5b26idEihxKM= Subject key identifier: 32:05:AB:39:C9:C9:D0:14:A9:72:2C:70:62:87:38:8B:47:31:67:DA Authority key identifier: D3:65:46:79:09:28:F4:4F:F7:4C:56:42:31:47:1F:A1:D8:D2:A9:7B Certificate issuer: /CN=D36546790928F44FF74C564231471FA1D8D2A97B Certificate serial: 4DC629FB71821EB247D55D2A57668814893DEAF7 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D36546790928F44FF74C564231471FA1D8D2A97B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft Manifest number: 26 Signing time: Fri 05 Dec 2025 15:28:40 +0000 Manifest this update: Fri 05 Dec 2025 15:23:40 +0000 Manifest next update: Sat 06 Dec 2025 16:25:40 +0000 Files and hashes: 1: 326130363a313238333a626434303a3a2f34322d313238203d3e20323130373936.roa (hash: Uw0Yd63FHiLbrVWXi+u/Khr5x1SAZF46bRDWajH7ZJ4=) 2: D36546790928F44FF74C564231471FA1D8D2A97B.crl (hash: olNB4nbgk2tH8eEA+qsjmWQg6Zupk+GxKlwe9PnwhRE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.crl rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D36546790928F44FF74C564231471FA1D8D2A97B.cer rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 16:25:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:c6:29:fb:71:82:1e:b2:47:d5:5d:2a:57:66:88:14:89:3d:ea:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D36546790928F44FF74C564231471FA1D8D2A97B Validity Not Before: Dec 5 15:23:40 2025 GMT Not After : Dec 6 16:25:40 2025 GMT Subject: CN=3205AB39C9C9D014A9722C706287388B473167DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f5:04:ba:05:b1:55:ca:08:e5:82:a5:9a:90: b0:fe:f7:f9:c0:86:17:86:63:1d:69:82:aa:e8:0f: 58:77:0b:db:88:2a:72:74:ce:41:c6:e8:78:ad:66: ec:53:cd:bc:14:82:82:63:6f:14:59:c0:26:85:45: 09:34:2d:23:28:4b:3b:2b:f1:1c:5d:6e:d3:b6:93: a5:84:37:4e:5e:d1:cd:75:a5:91:ac:0d:a0:e3:00: 4a:e7:17:00:e9:0e:59:d1:d4:d1:dd:4f:3d:63:cc: fe:6f:ab:94:89:b5:3b:01:4e:3f:41:de:ed:ec:d1: 15:01:38:13:8d:48:67:94:ab:40:f2:11:0d:06:78: 7e:44:0e:03:18:ae:5a:01:f8:e0:b0:54:1c:8f:fe: 68:11:fb:04:5b:53:0b:2c:1e:df:89:c8:30:e8:b8: 1c:e6:ea:7c:b1:88:a4:a4:73:51:37:3f:11:41:a6: 3e:8c:58:4e:04:dd:1b:d1:79:c2:50:0d:4d:1e:3b: 41:b0:03:53:cf:a4:8f:10:01:4b:eb:7c:9e:4f:95: 83:1f:fb:70:66:8e:7e:40:e7:3f:64:6b:73:4c:19: 2f:ca:af:a7:fc:1a:a3:5b:17:d0:33:6e:8c:13:2b: 2f:b0:6a:03:c2:a3:2d:01:b2:49:d7:e4:b4:b9:08: b8:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:05:AB:39:C9:C9:D0:14:A9:72:2C:70:62:87:38:8B:47:31:67:DA X509v3 Authority Key Identifier: keyid:D3:65:46:79:09:28:F4:4F:F7:4C:56:42:31:47:1F:A1:D8:D2:A9:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D36546790928F44FF74C564231471FA1D8D2A97B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:0d:2e:49:ef:1c:22:4a:13:db:3a:97:2d:8c:ad:aa:58:19: 47:74:08:6a:44:01:8e:a3:f9:55:b7:d5:40:cd:60:24:a7:a5: d6:ac:2d:ba:07:ef:8d:04:b3:f8:8c:f0:74:e1:4e:f9:d1:f0: d9:9f:03:95:fe:bd:23:65:5d:f4:a3:b0:00:6e:e1:a8:ac:76: 7a:3d:14:3d:30:ce:75:83:62:95:10:b0:fd:c6:27:d8:a3:e9: 26:52:6d:d1:9d:a9:a4:68:ff:78:96:f8:f8:c3:62:9f:44:75: 15:56:e9:0a:1c:09:8b:d6:f3:bc:57:d4:5c:e6:25:5a:f7:10: e1:5f:2b:86:59:7b:98:4b:a0:af:fb:96:28:5e:82:e1:bd:c1: 22:f5:5b:5c:f7:1e:7e:d4:71:34:96:aa:07:16:de:9e:2a:69: f2:6b:fc:28:99:1b:96:da:9c:03:2a:a8:39:34:f1:1f:16:53: 1a:4f:2a:75:08:25:5a:20:9e:c6:3a:f8:4f:2a:c2:3e:fc:d2: 8a:42:4f:05:10:bb:48:8f:52:a0:95:83:b3:55:c1:ae:18:e1: 3d:a2:b8:b8:74:7e:a8:a5:5d:a5:bb:e0:9f:0a:0b:0f:58:4e: 89:4d:e0:c4:a3:55:a0:88:e6:dc:a1:84:2d:56:11:28:0b:17: 0f:f6:21:fa -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUTcYp+3GCHrJH1V0qV2aIFIk96vcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM2NTQ2NzkwOTI4RjQ0RkY3NEM1NjQyMzE0NzFGQTFE OEQyQTk3QjAeFw0yNTEyMDUxNTIzNDBaFw0yNTEyMDYxNjI1NDBaMDMxMTAvBgNV BAMTKDMyMDVBQjM5QzlDOUQwMTRBOTcyMkM3MDYyODczODhCNDczMTY3REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb9QS6BbFVygjlgqWakLD+9/nA hheGYx1pgqroD1h3C9uIKnJ0zkHG6HitZuxTzbwUgoJjbxRZwCaFRQk0LSMoSzsr 8RxdbtO2k6WEN05e0c11pZGsDaDjAErnFwDpDlnR1NHdTz1jzP5vq5SJtTsBTj9B 3u3s0RUBOBONSGeUq0DyEQ0GeH5EDgMYrloB+OCwVByP/mgR+wRbUwssHt+JyDDo uBzm6nyxiKSkc1E3PxFBpj6MWE4E3RvRecJQDU0eO0GwA1PPpI8QAUvrfJ5PlYMf +3Bmjn5A5z9ka3NMGS/Kr6f8GqNbF9AzbowTKy+wagPCoy0BsknX5LS5CLjbAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUMgWrOcnJ0BSpcixwYoc4i0cxZ9owHwYDVR0j BBgwFoAU02VGeQko9E/3TFZCMUcfodjSqXswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjg4NDQzMTgtMzVkNy00ODJlLWJiZDUtYjYyNGNmMGIy MDQxLzEvRDM2NTQ2NzkwOTI4RjQ0RkY3NEM1NjQyMzE0NzFGQTFEOEQyQTk3Qi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJiYi1mMDQ4LTRk ZTEtOTIwNi04ZDQwZjA3MTgwOGIvNi9EMzY1NDY3OTA5MjhGNDRGRjc0QzU2NDIz MTQ3MUZBMUQ4RDJBOTdCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2I4ODQ0MzE4LTM1ZDctNDgyZS1iYmQ1LWI2MjRjZjBiMjA0MS8xL0QzNjU0Njc5 MDkyOEY0NEZGNzRDNTY0MjMxNDcxRkExRDhEMkE5N0IubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDSDS5J 7xwiShPbOpctjK2qWBlHdAhqRAGOo/lVt9VAzWAkp6XWrC26B++NBLP4jPB04U75 0fDZnwOV/r0jZV30o7AAbuGorHZ6PRQ9MM51g2KVELD9xifYo+kmUm3RnamkaP94 lvj4w2KfRHUVVukKHAmL1vO8V9Rc5iVa9xDhXyuGWXuYS6Cv+5YoXoLhvcEi9Vtc 9x5+1HE0lqoHFt6eKmnya/womRuW2pwDKqg5NPEfFlMaTyp1CCVaIJ7GOvhPKsI+ /NKKQk8FELtIj1KglYOzVcGuGOE9ori4dH6opV2lu+CfCgsPWE6JTeDEo1WgiObc oYQtVhEoCxcP9iH6 -----END CERTIFICATE-----Generated at Sat Dec 6 08:50:36 2025 by rpki-client