This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft File: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft (raw, json) Hash identifier: wBDGyMuLCgPVvhG1SGbj5rs2akdBCqLecXBn07SxG7Q= Subject key identifier: 17:6E:B5:0B:84:87:06:2E:BD:C7:F6:27:95:25:F9:8D:F0:D0:12:22 Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Certificate serial: 2DCB2CC1A01F0FF4A42F60DBD9AAF8B23C14B9D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft Manifest number: 05FF Signing time: Sat 06 Dec 2025 14:11:17 +0000 Manifest this update: Sat 06 Dec 2025 14:06:17 +0000 Manifest next update: Sun 07 Dec 2025 16:48:17 +0000 Files and hashes: 1: 3138352e3234342e39352e302f32342d3234203d3e203230343733.roa (hash: wcPx+O7KmTHA1Z17UF9VIIdo6IS06Ij+d7NLeipHdoU=) 2: 3138352e3234342e39342e302f32342d3234203d3e20333937343233.roa (hash: RdOuxQjMUqkQryMcrXonWYYeJva5RY8rohAdG2ITJdw=) 3: 3138352e3133302e36302e302f32342d3234203d3e203131383738.roa (hash: O475B5YNr+mk4vbByMFVmoqbRTenx4kmx66C3HIfdsg=) 4: 3138352e3231332e3234312e302f32342d3234203d3e203631323732.roa (hash: ZRXMJB81EQGqLoTW9rCPLjbdmz5JtoX/ioguz/yH9B4=) 5: 3138352e3232392e3230332e302f32342d3234203d3e20323034333939.roa (hash: o2s9iRRo/HWpVNV66/X3K8Nx40dZXcSQ+ar/RSKpLZ4=) 6: 3138352e3232392e3230322e302f32342d3234203d3e20323130303330.roa (hash: LqK97diQcFrb4344S9ThgI9qIfk24xWO2D6Fzod4ApM=) 7: 33362e3235352e39322e302f32332d3234203d3e203139333138.roa (hash: FthEwpOIKT5rKWCqEXY9gMB5simU3azPQORqXvTeqVo=) 8: 326130363a356563303a3a2f34382d3438203d3e20323034363933.roa (hash: 1uKLPQUne0QcXblB3NW5HCIymd03TIpdjdnWqSBKxm8=) 9: 39312e3133322e3232372e302f32342d3234203d3e20323132333834.roa (hash: eh1Z74wbnDki2jWa8j9mKK2ooveQFWs0ccPHyRr5G7Y=) 10: 3138352e3231332e3234332e302f32342d3234203d3e203330343536.roa (hash: aTFuiZRKSKlOcP1bFw/QEJGr9kwsAqFvqfR62oNQfMc=) 11: 3138352e3133302e36322e302f32342d3234203d3e203239303636.roa (hash: cZvuOTu1xxenEkmS/lv/FbwQZVMqO/d4TmKYvwutnlA=) 12: 3138352e3234342e39352e302f32342d3234203d3e203136353039.roa (hash: tBBH3ivLD6QCOuz/zDI7JAWzO8l/tRZui9Xrn0qJpA4=) 13: 3138352e3231332e3234302e302f32342d3234203d3e20323135373033.roa (hash: 5U9kh/Q1+pD8ktgLTSH2rTlmtF2qNT/hbi1XnCHITmo=) 14: 3138352e3232392e3230312e302f32342d3234203d3e20323030303137.roa (hash: ezbmX/yRe+yRvkLs/8FFZoupwCiBI67aZ+0JqkrMl4Q=) 15: 39312e3133322e3232372e302f32342d3234203d3e20323132333335.roa (hash: 4nM6t6s+oklrwoQsrohzelZ9jLVJM3XAMUC6E2raQWI=) 16: 3138352e3232392e3230302e302f32342d3234203d3e20313335343032.roa (hash: +dPRMdq4kTZhc1HP4XUoHFPE1GHvKzT91NAn4oQHjN8=) 17: 3138352e3133302e36312e302f32342d3234203d3e20323732363936.roa (hash: nzc+7vTx0fxusJ8QBUU0nZ0s/13eeYO5i8RfnoHHUhc=) 18: 3138352e3231332e3234332e302f32342d3234203d3e20323034393238.roa (hash: /82U/4ZCS1l7tEmRqZdiqoHQfHkAV0iGqgAdCf0IY6Q=) 19: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl (hash: pnkQ2naEU0XCxVcrECzN6WoPvzAbB+8xs79mC6SOQHs=) 20: 3138352e3131312e3138382e302f32342d3234203d3e203632353633.roa (hash: /OGL5Xocpa/mA4GEutGuQoiWc4p3DBj9VM0kpmdQZxo=) 21: 3138352e3231332e3234322e302f32342d3234203d3e203232343237.roa (hash: 2mJFb3j98iS3WwOyYDzT/44zu56P1Mt1+w22nAIK9Eo=) 22: 3138352e3234342e39352e302f32342d3234203d3e203134363138.roa (hash: BX+afd5v4CnQw1Csb+gERO9bOUf9cjiesQkq05EVznU=) 23: 3138352e3133302e36332e302f32342d3234203d3e203332313831.roa (hash: krs6rxjGgkgxIC0XFsSJIDbJbJTaOxRVYKdhwP98j0o=) 24: 33362e3235352e39322e302f32332d3234203d3e203230333236.roa (hash: uAr910mpCFzZrOxxImyBVxZ5bzjvqrL8T8981qvKdos=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:cb:2c:c1:a0:1f:0f:f4:a4:2f:60:db:d9:aa:f8:b2:3c:14:b9:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Validity Not Before: Dec 6 14:06:17 2025 GMT Not After : Dec 7 16:48:17 2025 GMT Subject: CN=176EB50B8487062EBDC7F6279525F98DF0D01222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:76:bf:74:c3:84:bc:63:67:50:54:6c:d1:9a: b0:65:1b:c9:75:ec:a7:ea:cf:1b:00:31:8a:a4:6f: 5b:ac:a6:a4:db:35:f4:12:93:e5:d4:0e:8d:68:26: 6e:49:fb:ee:84:fa:83:72:48:83:90:73:53:b8:9a: 8f:6d:f8:ef:72:9a:b8:70:f5:d7:19:07:33:24:85: 74:cd:48:b0:6b:81:2d:99:a8:4d:43:ed:f8:5f:76: e4:e9:6b:fc:59:6d:58:0c:52:eb:59:ab:cc:ba:d4: 5b:cc:22:d5:44:47:5e:74:45:97:e6:59:10:11:01: b9:68:e4:e0:e7:29:e2:e5:07:ed:c4:8b:bf:1c:81: e0:6d:cf:65:4e:ed:34:cc:c9:f2:19:b6:19:bc:b6: 34:83:0c:ce:8d:40:47:f9:85:4c:a2:81:63:59:45: 67:81:75:80:73:05:e4:56:20:14:71:f0:8f:66:9f: fc:7a:ae:e8:4e:ab:cd:04:b9:7f:9b:fa:d7:cd:e2: 0e:19:03:7b:55:73:a1:5c:b9:f7:12:07:63:51:72: 35:cc:e3:47:44:62:75:b4:2a:b8:1b:38:a8:25:56: cf:1f:ee:53:46:8c:c5:5d:0b:dc:1a:c7:95:e2:4f: 04:d0:35:12:af:c0:7a:da:c4:fe:99:cb:7d:75:11: 23:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:6E:B5:0B:84:87:06:2E:BD:C7:F6:27:95:25:F9:8D:F0:D0:12:22 X509v3 Authority Key Identifier: keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:15:55:f2:fd:26:34:d3:32:26:74:5e:ec:5c:5b:5a:45:dc: de:f0:7a:54:40:4c:e6:0e:d0:6d:b9:98:21:10:c1:83:f7:ae: f4:b8:83:1a:55:2e:84:4c:b2:f6:4f:58:0a:ac:c2:b2:82:9e: 60:07:11:5d:e7:74:a6:9f:26:26:fd:6f:fc:72:aa:89:1b:02: 69:7f:68:1e:68:ab:ec:29:44:a4:dd:63:7e:a0:22:0f:d4:25: d7:61:f5:53:5a:5b:7d:c9:e2:a0:10:c0:ec:fb:f0:aa:0b:9a: b7:8e:a1:53:8a:9d:74:c3:1c:82:e0:e7:75:0e:5a:11:c4:49: 96:f9:e7:d1:e6:b1:41:6b:ff:c1:92:53:c0:40:f2:77:38:fc: 22:5c:67:47:4e:e4:ed:92:4b:bb:ce:a5:99:6d:1a:f0:9b:48: 88:27:a6:4f:da:a4:e3:e3:97:2d:0c:f4:82:62:4a:42:3a:cb: ce:fd:9a:d1:b7:44:2a:58:3d:91:ba:a5:ba:d8:c7:50:6e:bf: 99:94:af:1d:f4:0a:92:f2:44:b1:e2:66:48:28:8a:81:e4:75: 18:a5:60:96:24:08:03:5e:ee:95:b6:0c:ff:86:4f:f4:d3:13: ab:81:4f:8e:a7:9a:98:ff:31:37:84:90:1b:4f:38:f4:b7:08: d7:a3:2e:30 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIULcsswaAfD/SkL2Db2ar4sjwUudYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2U4NzBiOWE3MDAzYzRmZDljNTFiZDM1NGE5ZGVmYTNm Yjc3YjRhOTAeFw0yNTEyMDYxNDA2MTdaFw0yNTEyMDcxNjQ4MTdaMDMxMTAvBgNV BAMTKDE3NkVCNTBCODQ4NzA2MkVCREM3RjYyNzk1MjVGOThERjBEMDEyMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJdr90w4S8Y2dQVGzRmrBlG8l1 7KfqzxsAMYqkb1uspqTbNfQSk+XUDo1oJm5J++6E+oNySIOQc1O4mo9t+O9ymrhw 9dcZBzMkhXTNSLBrgS2ZqE1D7fhfduTpa/xZbVgMUutZq8y61FvMItVER150RZfm WRARAblo5ODnKeLlB+3Ei78cgeBtz2VO7TTMyfIZthm8tjSDDM6NQEf5hUyigWNZ RWeBdYBzBeRWIBRx8I9mn/x6ruhOq80EuX+b+tfN4g4ZA3tVc6FcufcSB2NRcjXM 40dEYnW0KrgbOKglVs8f7lNGjMVdC9wax5XiTwTQNRKvwHraxP6Zy311ESNxAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUF261C4SHBi69x/YnlSX5jfDQEiIwHwYDVR0j BBgwFoAUPocLmnADxP2cUb01Sp3vo/t3tKkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzVkMThlODItNGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQy Mjc5LzAvM0U4NzBCOUE3MDAzQzRGRDlDNTFCRDM1NEE5REVGQTNGQjc3QjRBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1BvY0xtbkFEeFAyY1ViMDFTcDN2b190 M3RLay5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jNWQxOGU4Mi00 ZDY4LTQ1YTYtYTVkZi1jYWMxMTVhZDIyNzkvMC8zRTg3MEI5QTcwMDNDNEZEOUM1 MUJEMzU0QTlERUZBM0ZCNzdCNEE5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAshVV8v0mNNMyJnRe7Fxb WkXc3vB6VEBM5g7QbbmYIRDBg/eu9LiDGlUuhEyy9k9YCqzCsoKeYAcRXed0pp8m Jv1v/HKqiRsCaX9oHmir7ClEpN1jfqAiD9Ql12H1U1pbfcnioBDA7Pvwqguat46h U4qddMMcguDndQ5aEcRJlvnn0eaxQWv/wZJTwEDydzj8IlxnR07k7ZJLu86lmW0a 8JtIiCemT9qk4+OXLQz0gmJKQjrLzv2a0bdEKlg9kbqlutjHUG6/mZSvHfQKkvJE seJmSCiKgeR1GKVgliQIA17ulbYM/4ZP9NMTq4FPjqeamP8xN4SQG0849LcI16Mu MA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:54:21 2025 by rpki-client