This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/1/497EA28AB98266097873E53DF89DA97C44267B14.mft File: 497EA28AB98266097873E53DF89DA97C44267B14.mft (raw, json) Hash identifier: 51755B8dZBdFAA1ywgtIFH/0iHOkDyg59ssZfJ1Bw0Q= Subject key identifier: A7:58:67:A1:EB:69:DC:A1:B9:C3:5C:CA:C3:1E:33:B2:56:55:74:D6 Authority key identifier: 49:7E:A2:8A:B9:82:66:09:78:73:E5:3D:F8:9D:A9:7C:44:26:7B:14 Certificate issuer: /CN=497EA28AB98266097873E53DF89DA97C44267B14 Certificate serial: 168708829D3B3BEBD220FF905B56CDD92E03263D Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/497EA28AB98266097873E53DF89DA97C44267B14.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/1/497EA28AB98266097873E53DF89DA97C44267B14.mft Manifest number: 09 Signing time: Sat 06 Dec 2025 03:59:33 +0000 Manifest this update: Sat 06 Dec 2025 03:54:33 +0000 Manifest next update: Sun 07 Dec 2025 07:21:33 +0000 Files and hashes: 1: 497EA28AB98266097873E53DF89DA97C44267B14.crl (hash: WZhMOWHK/M84xEFgM09UTzP8n+eAOxp/M0yoWaC7FXc=) 2: 326130623a346530373a6130303a3a2f34302d3438203d3e20323036363034.roa (hash: Z0wiDwjOy/qJoPdM0vEBmhECeV0C4KD9VuGJR2rdeyQ=) 3: 326130623a346530373a6138323a3a2f34382d3438203d3e20323133343133.roa (hash: Yk5Z2QdQDj75jwwjlnGFiqmjFqH+3db4GUAOQQkmNYQ=) 4: 326130623a346530373a6138333a3a2f34382d3438203d3e203534343937.roa (hash: ol46rLGaupl8698MsUXVt/+STdQLGSQrmvRqgsULKh4=) 5: 326130623a346530373a6166303a3a2f34342d3438203d3e20323035393431.roa (hash: /Qq1CCzeUDnpMPkGTcBOVvwEcVcmDJJcPUGetJPLC3A=) 6: 326130623a346530373a6138303a3a2f34382d3438203d3e20323133343133.roa (hash: WcvSssrcz6p3j3RDnhY3rE0tKoRiuN7l2GAwNqPEpJ8=) 7: 326130623a346530373a6165303a3a2f34342d3438203d3e20323037353637.roa (hash: 8EOjojOJFeyPSugKSirM3Pua5hnoqE/TLlkiB1/CgoM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/1/497EA28AB98266097873E53DF89DA97C44267B14.crl rsync://rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/1/497EA28AB98266097873E53DF89DA97C44267B14.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/497EA28AB98266097873E53DF89DA97C44267B14.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:22:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:87:08:82:9d:3b:3b:eb:d2:20:ff:90:5b:56:cd:d9:2e:03:26:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=497EA28AB98266097873E53DF89DA97C44267B14 Validity Not Before: Dec 6 03:54:33 2025 GMT Not After : Dec 7 07:21:33 2025 GMT Subject: CN=A75867A1EB69DCA1B9C35CCAC31E33B2565574D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:61:eb:66:d0:b2:11:8f:f1:e0:f9:4d:f2:07: aa:ec:33:a4:a9:a3:5c:ad:72:58:3e:1b:3f:d1:ca: a1:70:67:08:aa:0e:23:85:23:a9:38:6b:8a:3d:e1: 0e:ea:7b:e6:99:62:37:2f:c8:ff:f5:4b:f2:4d:a7: fa:aa:51:79:c4:9f:a0:3f:97:35:4b:91:06:94:7b: b4:f4:3a:c2:63:a5:21:6f:a0:dc:3d:b9:61:aa:4d: a3:c9:5c:d3:b4:38:15:66:1e:e9:73:2a:54:82:c8: aa:e8:8c:13:9a:ef:78:d3:1a:52:33:f1:9f:09:20: ec:dc:4f:ab:e9:ba:67:84:95:f6:e7:9a:45:e6:35: e8:31:d3:d1:01:a0:fb:25:62:ff:b9:8f:3a:0d:50: 84:07:75:4c:a3:a9:9f:af:fc:ff:be:62:9b:a4:a9: 22:a5:06:94:31:22:b8:d3:6d:86:2d:48:0e:81:52: f5:fa:61:d2:ce:89:b5:bc:65:9d:5f:ef:c6:ca:8b: cb:15:d1:2a:38:81:9c:a3:b3:e7:7e:b5:b8:c5:c4: 71:f6:b6:47:c5:67:2e:2f:be:df:1e:8c:df:d8:e9: 8a:9e:d8:44:00:cc:c8:ae:6e:55:66:40:a5:61:d4: 04:1f:8c:fb:a2:aa:15:4f:d3:c8:67:63:b9:1e:7e: 54:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:58:67:A1:EB:69:DC:A1:B9:C3:5C:CA:C3:1E:33:B2:56:55:74:D6 X509v3 Authority Key Identifier: keyid:49:7E:A2:8A:B9:82:66:09:78:73:E5:3D:F8:9D:A9:7C:44:26:7B:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/1/497EA28AB98266097873E53DF89DA97C44267B14.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/497EA28AB98266097873E53DF89DA97C44267B14.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/1/497EA28AB98266097873E53DF89DA97C44267B14.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:65:90:07:37:fa:02:a8:a5:aa:7e:9b:24:51:76:5d:46:4e: 7c:16:f0:b6:62:e7:fd:8b:b3:04:cb:13:72:30:dd:c1:e1:c9: 70:34:3f:52:e3:38:7e:6a:29:75:a8:19:a8:45:7b:ea:18:b9: 85:d8:df:1f:4d:5c:65:2f:86:40:d9:cf:74:6b:fe:3a:54:bb: f0:ea:8b:89:06:18:07:c4:99:25:03:21:f8:21:0b:02:3f:4d: 44:c5:11:92:4f:04:a4:fa:6e:04:04:28:b0:58:ad:82:10:bd: ba:2e:51:40:70:db:24:fa:39:d2:e2:c8:bf:2d:95:ee:40:cb: 39:25:94:7b:27:7e:5b:b6:89:48:78:58:1b:cb:1e:fb:0e:04: f6:3f:66:13:31:56:8d:a6:a9:66:ef:88:ec:47:63:d3:9e:25: cc:ed:76:6b:f1:db:5b:be:14:13:ae:1d:b1:5e:26:d2:9a:85: d5:4e:1f:1b:00:ae:23:ff:a2:58:76:16:1c:56:06:8d:78:22: 80:e1:c6:91:80:1e:c1:b6:4c:96:7f:96:bc:fb:9c:59:06:52: 7f:39:9b:c6:bb:c9:e6:2e:37:1e:27:2d:0c:aa:52:57:d4:de: 7c:f0:99:4b:b2:d2:44:9b:54:65:34:81:20:59:f5:21:33:20: 78:db:39:e1 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUFocIgp07O+vSIP+QW1bN2S4DJj0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk3RUEyOEFCOTgyNjYwOTc4NzNFNTNERjg5REE5N0M0 NDI2N0IxNDAeFw0yNTEyMDYwMzU0MzNaFw0yNTEyMDcwNzIxMzNaMDMxMTAvBgNV BAMTKEE3NTg2N0ExRUI2OURDQTFCOUMzNUNDQUMzMUUzM0IyNTY1NTc0RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiYetm0LIRj/Hg+U3yB6rsM6Sp o1ytclg+Gz/RyqFwZwiqDiOFI6k4a4o94Q7qe+aZYjcvyP/1S/JNp/qqUXnEn6A/ lzVLkQaUe7T0OsJjpSFvoNw9uWGqTaPJXNO0OBVmHulzKlSCyKrojBOa73jTGlIz 8Z8JIOzcT6vpumeElfbnmkXmNegx09EBoPslYv+5jzoNUIQHdUyjqZ+v/P++Ypuk qSKlBpQxIrjTbYYtSA6BUvX6YdLOibW8ZZ1f78bKi8sV0So4gZyjs+d+tbjFxHH2 tkfFZy4vvt8ejN/Y6Yqe2EQAzMiublVmQKVh1AQfjPuiqhVP08hnY7keflSpAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUp1hnoetp3KG5w1zKwx4zslZVdNYwHwYDVR0j BBgwFoAUSX6iirmCZgl4c+U9+J2pfEQmexQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjkwZTY4NjAtMzcyMS00OGM0LWEzZmUtMTFiMWYyYzBk ZjVmLzEvNDk3RUEyOEFCOTgyNjYwOTc4NzNFNTNERjg5REE5N0M0NDI2N0IxNC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvNDk3RUEyOEFCOTgyNjYwOTc4NzNFNTNERjg5REE5N0M0NDI2 N0IxNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iOTBlNjg2MC0z NzIxLTQ4YzQtYTNmZS0xMWIxZjJjMGRmNWYvMS80OTdFQTI4QUI5ODI2NjA5Nzg3 M0U1M0RGODlEQTk3QzQ0MjY3QjE0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU2WQBzf6Aqilqn6bJFF2 XUZOfBbwtmLn/YuzBMsTcjDdweHJcDQ/UuM4fmopdagZqEV76hi5hdjfH01cZS+G QNnPdGv+OlS78OqLiQYYB8SZJQMh+CELAj9NRMURkk8EpPpuBAQosFitghC9ui5R QHDbJPo50uLIvy2V7kDLOSWUeyd+W7aJSHhYG8se+w4E9j9mEzFWjaapZu+I7Edj 054lzO12a/HbW74UE64dsV4m0pqF1U4fGwCuI/+iWHYWHFYGjXgigOHGkYAewbZM ln+WvPucWQZSfzmbxrvJ5i43HictDKpSV9TefPCZS7LSRJtUZTSBIFn1ITMgeNs5 4Q== -----END CERTIFICATE-----Generated at Sat Dec 6 06:37:47 2025 by rpki-client