This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft File: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft (raw, json) Hash identifier: 3PWjnDOEz28/G8I3jFkpJZNAcwE+uf25F+vK3Ep/wj8= Subject key identifier: CA:B9:8E:45:E9:4A:2E:50:50:A5:88:15:35:4B:E8:FB:FE:9F:13:B7 Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Certificate serial: 039FAC14240EE8C3DA593B2EA210DD607ADE8DDF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft Manifest number: 060F Signing time: Thu 18 Dec 2025 15:22:32 +0000 Manifest this update: Thu 18 Dec 2025 15:17:32 +0000 Manifest next update: Fri 19 Dec 2025 19:00:32 +0000 Files and hashes: 1: 3138352e3231332e3234332e302f32342d3234203d3e20323034393238.roa (hash: /82U/4ZCS1l7tEmRqZdiqoHQfHkAV0iGqgAdCf0IY6Q=) 2: 3138352e3133302e36332e302f32342d3234203d3e203332313831.roa (hash: krs6rxjGgkgxIC0XFsSJIDbJbJTaOxRVYKdhwP98j0o=) 3: 3138352e3231332e3234322e302f32342d3234203d3e203232343237.roa (hash: 2mJFb3j98iS3WwOyYDzT/44zu56P1Mt1+w22nAIK9Eo=) 4: 3138352e3234342e39352e302f32342d3234203d3e203136353039.roa (hash: tBBH3ivLD6QCOuz/zDI7JAWzO8l/tRZui9Xrn0qJpA4=) 5: 3138352e3133302e36302e302f32342d3234203d3e203131383738.roa (hash: O475B5YNr+mk4vbByMFVmoqbRTenx4kmx66C3HIfdsg=) 6: 33362e3235352e39322e302f32332d3234203d3e203139333138.roa (hash: FthEwpOIKT5rKWCqEXY9gMB5simU3azPQORqXvTeqVo=) 7: 33362e3235352e39322e302f32332d3234203d3e203230333236.roa (hash: uAr910mpCFzZrOxxImyBVxZ5bzjvqrL8T8981qvKdos=) 8: 3138352e3231332e3234332e302f32342d3234203d3e203330343536.roa (hash: aTFuiZRKSKlOcP1bFw/QEJGr9kwsAqFvqfR62oNQfMc=) 9: 3138352e3231332e3234302e302f32342d3234203d3e20323135373033.roa (hash: 5U9kh/Q1+pD8ktgLTSH2rTlmtF2qNT/hbi1XnCHITmo=) 10: 3138352e3133302e36312e302f32342d3234203d3e20323732363936.roa (hash: nzc+7vTx0fxusJ8QBUU0nZ0s/13eeYO5i8RfnoHHUhc=) 11: 3138352e3234342e39342e302f32342d3234203d3e20333937343233.roa (hash: RdOuxQjMUqkQryMcrXonWYYeJva5RY8rohAdG2ITJdw=) 12: 39312e3133322e3232372e302f32342d3234203d3e20323132333335.roa (hash: 4nM6t6s+oklrwoQsrohzelZ9jLVJM3XAMUC6E2raQWI=) 13: 3138352e3232392e3230302e302f32342d3234203d3e20313335343032.roa (hash: +dPRMdq4kTZhc1HP4XUoHFPE1GHvKzT91NAn4oQHjN8=) 14: 3138352e3131312e3138382e302f32342d3234203d3e203632353633.roa (hash: /OGL5Xocpa/mA4GEutGuQoiWc4p3DBj9VM0kpmdQZxo=) 15: 3138352e3234342e39352e302f32342d3234203d3e203134363138.roa (hash: BX+afd5v4CnQw1Csb+gERO9bOUf9cjiesQkq05EVznU=) 16: 3138352e3232392e3230322e302f32342d3234203d3e20323130303330.roa (hash: LqK97diQcFrb4344S9ThgI9qIfk24xWO2D6Fzod4ApM=) 17: 39312e3133322e3232372e302f32342d3234203d3e20323132333834.roa (hash: eh1Z74wbnDki2jWa8j9mKK2ooveQFWs0ccPHyRr5G7Y=) 18: 326130363a356563303a3a2f34382d3438203d3e20323034363933.roa (hash: 1uKLPQUne0QcXblB3NW5HCIymd03TIpdjdnWqSBKxm8=) 19: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl (hash: svfSqghg9N7WOTyNFoEOJLf+owTQVAB1zhZMpDkiC9c=) 20: 3138352e3232392e3230332e302f32342d3234203d3e20323034333939.roa (hash: o2s9iRRo/HWpVNV66/X3K8Nx40dZXcSQ+ar/RSKpLZ4=) 21: 3138352e3234342e39352e302f32342d3234203d3e203230343733.roa (hash: wcPx+O7KmTHA1Z17UF9VIIdo6IS06Ij+d7NLeipHdoU=) 22: 3138352e3232392e3230312e302f32342d3234203d3e20323030303137.roa (hash: ezbmX/yRe+yRvkLs/8FFZoupwCiBI67aZ+0JqkrMl4Q=) 23: 3138352e3133302e36322e302f32342d3234203d3e203239303636.roa (hash: cZvuOTu1xxenEkmS/lv/FbwQZVMqO/d4TmKYvwutnlA=) 24: 3138352e3231332e3234312e302f32342d3234203d3e203631323732.roa (hash: ZRXMJB81EQGqLoTW9rCPLjbdmz5JtoX/ioguz/yH9B4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:9f:ac:14:24:0e:e8:c3:da:59:3b:2e:a2:10:dd:60:7a:de:8d:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Validity Not Before: Dec 18 15:17:32 2025 GMT Not After : Dec 19 19:00:32 2025 GMT Subject: CN=CAB98E45E94A2E5050A58815354BE8FBFE9F13B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1c:30:d4:11:5d:8a:23:70:14:09:28:81:14: ea:f3:06:a4:b1:2b:73:3a:c7:a1:b2:23:a1:7b:b8: cf:09:d5:ae:5c:44:30:e2:cb:a4:86:20:c7:56:89: 41:10:f9:ef:ed:2f:8d:b6:f0:63:40:02:83:9c:4a: 2d:b5:60:df:5c:c6:d2:60:ab:f1:09:cb:0f:d2:31: bf:c8:26:cf:23:b0:99:3d:6d:af:9a:16:24:aa:82: c9:62:c9:07:b4:c7:1d:f1:1e:39:f9:00:13:02:2f: 46:d4:38:06:46:e5:2a:75:23:c1:1f:a9:52:73:d5: eb:ee:f4:71:30:51:c9:2f:2d:b1:6a:82:dd:98:bd: ef:e2:32:13:cd:fd:47:6a:bb:04:41:7f:9d:c6:12: 78:a2:2c:1a:12:e4:9d:70:ec:6e:21:c4:42:8d:65: 52:4e:3e:19:b0:33:bd:1f:25:ed:be:17:b9:23:ed: 7f:0f:d6:9b:b7:13:ac:a4:05:e2:75:a2:e5:4b:a8: b9:f3:0f:c1:90:e0:b5:c0:02:4b:9e:46:03:e2:01: e7:7f:f5:58:80:80:b5:87:d4:71:4f:38:ca:c5:38: 23:1b:03:e9:4f:eb:2e:25:62:21:0b:3b:81:7f:46: d0:f5:19:f5:ed:4a:a6:24:92:2c:d4:76:eb:e4:8d: f0:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:B9:8E:45:E9:4A:2E:50:50:A5:88:15:35:4B:E8:FB:FE:9F:13:B7 X509v3 Authority Key Identifier: keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:b8:c1:43:e4:01:8c:f7:f4:69:92:9b:da:07:b7:f3:2d:4c: c9:c3:1a:e4:a4:f0:39:d8:b9:f5:be:80:65:5b:3c:d6:19:2f: fc:4b:00:67:fe:71:6c:ae:1d:3e:d4:ab:47:9c:91:88:ce:cc: f6:1f:3e:49:03:95:25:8b:23:12:d4:50:34:92:d9:d1:05:fc: dc:6f:14:9c:0c:27:88:74:c4:fc:1e:bc:58:18:1c:1b:df:1f: 07:21:03:be:e1:43:80:49:a1:09:3f:bd:bc:14:0b:37:67:1c: 04:28:d7:26:f2:1b:2d:3b:05:59:64:10:3d:c2:21:8e:f5:07: 1e:9c:76:15:a9:1c:76:8d:c6:0e:a2:a7:f7:54:a6:84:a4:f5: 0a:30:37:5d:fb:c5:07:f7:88:bb:78:bc:6e:92:30:fe:89:08: 19:f3:6d:da:4c:e0:1b:14:35:62:cd:25:6d:31:e8:4d:80:18: 00:58:7d:39:57:ca:23:37:a8:c4:80:bc:7e:11:c9:73:bc:49: 34:e8:32:22:95:ed:04:e1:2b:d3:d4:ba:df:59:a2:f9:d0:54: 12:f9:0d:99:af:a1:18:61:dc:bb:3b:dd:90:dd:7d:87:a3:dc: 05:c0:bb:35:78:8e:8d:7b:9c:1a:50:79:57:2c:93:9b:5b:bc: d7:4b:12:cb -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUA5+sFCQO6MPaWTsuohDdYHrejd8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2U4NzBiOWE3MDAzYzRmZDljNTFiZDM1NGE5ZGVmYTNm Yjc3YjRhOTAeFw0yNTEyMTgxNTE3MzJaFw0yNTEyMTkxOTAwMzJaMDMxMTAvBgNV BAMTKENBQjk4RTQ1RTk0QTJFNTA1MEE1ODgxNTM1NEJFOEZCRkU5RjEzQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsHDDUEV2KI3AUCSiBFOrzBqSx K3M6x6GyI6F7uM8J1a5cRDDiy6SGIMdWiUEQ+e/tL4228GNAAoOcSi21YN9cxtJg q/EJyw/SMb/IJs8jsJk9ba+aFiSqgsliyQe0xx3xHjn5ABMCL0bUOAZG5Sp1I8Ef qVJz1evu9HEwUckvLbFqgt2Yve/iMhPN/UdquwRBf53GEniiLBoS5J1w7G4hxEKN ZVJOPhmwM70fJe2+F7kj7X8P1pu3E6ykBeJ1ouVLqLnzD8GQ4LXAAkueRgPiAed/ 9ViAgLWH1HFPOMrFOCMbA+lP6y4lYiELO4F/RtD1GfXtSqYkkizUduvkjfBjAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUyrmORelKLlBQpYgVNUvo+/6fE7cwHwYDVR0j BBgwFoAUPocLmnADxP2cUb01Sp3vo/t3tKkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzVkMThlODItNGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQy Mjc5LzAvM0U4NzBCOUE3MDAzQzRGRDlDNTFCRDM1NEE5REVGQTNGQjc3QjRBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1BvY0xtbkFEeFAyY1ViMDFTcDN2b190 M3RLay5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jNWQxOGU4Mi00 ZDY4LTQ1YTYtYTVkZi1jYWMxMTVhZDIyNzkvMC8zRTg3MEI5QTcwMDNDNEZEOUM1 MUJEMzU0QTlERUZBM0ZCNzdCNEE5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbbjBQ+QBjPf0aZKb2ge3 8y1MycMa5KTwOdi59b6AZVs81hkv/EsAZ/5xbK4dPtSrR5yRiM7M9h8+SQOVJYsj EtRQNJLZ0QX83G8UnAwniHTE/B68WBgcG98fByEDvuFDgEmhCT+9vBQLN2ccBCjX JvIbLTsFWWQQPcIhjvUHHpx2Fakcdo3GDqKn91SmhKT1CjA3XfvFB/eIu3i8bpIw /okIGfNt2kzgGxQ1Ys0lbTHoTYAYAFh9OVfKIzeoxIC8fhHJc7xJNOgyIpXtBOEr 09S631mi+dBUEvkNma+hGGHcuzvdkN19h6PcBcC7NXiOjXucGlB5VyyTm1u810sS yw== -----END CERTIFICATE-----Generated at Thu Dec 18 23:16:34 2025 by rpki-client