This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft File: 2472949B3C234930DBE99B1B5CD5196AB16D151B.mft (raw, json) Hash identifier: 1buNquUSKjS996mMZ7MoXaKYriENiEC8omzGf4xka+g= Subject key identifier: B3:6B:0B:31:18:A6:F3:6D:B6:23:C2:FC:CF:E9:6F:D3:47:29:0A:A0 Authority key identifier: 24:72:94:9B:3C:23:49:30:DB:E9:9B:1B:5C:D5:19:6A:B1:6D:15:1B Certificate issuer: /CN=89d4f40fed1166159109937674aef0279ad039550feccf8d61 Certificate serial: 776AF901BD1E8E1783F2859B37FFC57D7E80E9D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft Manifest number: 034A Signing time: Sat 06 Dec 2025 09:24:04 +0000 Manifest this update: Sat 06 Dec 2025 09:19:04 +0000 Manifest next update: Sun 07 Dec 2025 10:29:04 +0000 Files and hashes: 1: 2472949B3C234930DBE99B1B5CD5196AB16D151B.crl (hash: 5Bf13lRc53LoGC4VCv9TzPSLCzY+R908MtBpvJ58FaQ=) 2: 3139392e3234312e36302e302f32342d3234203d3e203436373636.roa (hash: 4ZYkW/+NAwrD1ELCwQxEXepcoE4Wv3XF1vCdQrX3iE0=) 3: 323630323a663961323a35353a3a2f34382d3438203d3e20313939353138.roa (hash: Lmh4khK9jqfGM7AgqtrinnAM2ubStxsQ/YZSUwbqCvU=) 4: 32332e3137302e37322e302f32342d3234203d3e203436373636.roa (hash: hfPLPQW0RCv33ma51bvJk8w/CbhypODZthVk4Z+KIYw=) 5: 323630323a663961323a3a2f34382d3438203d3e203436373636.roa (hash: UAkAddbwt9iFm85K1ELuBkLomLKwc7hMpyyYhhtNJsY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.crl rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/3d9879da-145f-4f21-a7c3-da6b59a01625.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/3d9879da-145f-4f21-a7c3-da6b59a01625.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 10:29:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:6a:f9:01:bd:1e:8e:17:83:f2:85:9b:37:ff:c5:7d:7e:80:e9:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89d4f40fed1166159109937674aef0279ad039550feccf8d61 Validity Not Before: Dec 6 09:19:04 2025 GMT Not After : Dec 7 10:29:04 2025 GMT Subject: CN=B36B0B3118A6F36DB623C2FCCFE96FD347290AA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:91:a6:c4:60:da:89:36:31:c2:3a:99:aa:08: 6f:f5:73:15:49:6d:ff:b9:78:63:ab:79:23:76:b8: 90:0f:1b:ab:00:d7:18:b0:62:b4:d8:77:75:1c:be: 84:cb:3e:a0:ae:e5:68:ba:6e:ef:ff:08:d2:0d:c9: 34:d7:f6:01:55:da:b8:53:b4:bb:57:80:d1:31:dc: 65:00:6d:25:12:10:19:26:c0:94:57:dc:67:46:f8: e5:45:2e:fd:de:02:bb:50:5f:d1:83:1b:46:94:80: d1:77:53:4c:72:2b:46:da:c8:7f:56:5d:d0:26:54: 59:86:4d:e0:b0:8f:21:c4:46:9c:5b:31:fe:49:f2: 11:6d:5b:89:a8:b6:f8:9c:a1:1b:97:02:fe:24:fa: 5b:6d:a8:59:a5:1f:ed:ea:ee:ce:5c:5d:21:b7:6f: f6:31:0a:7b:1e:e2:9b:aa:75:54:74:76:67:21:9b: 0e:b8:e6:c5:2e:37:e5:71:d4:3f:42:ef:64:8e:6c: d0:d2:ff:12:50:ee:79:ef:1d:78:da:02:39:e4:ef: 4e:25:b2:77:49:92:21:d2:a2:c6:50:33:bb:8b:71: f8:f1:36:b0:76:04:0a:cf:57:be:58:bb:97:9b:43: 59:3c:34:08:89:b5:3c:98:7b:48:11:44:13:bd:10: 85:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:6B:0B:31:18:A6:F3:6D:B6:23:C2:FC:CF:E9:6F:D3:47:29:0A:A0 X509v3 Authority Key Identifier: keyid:24:72:94:9B:3C:23:49:30:DB:E9:9B:1B:5C:D5:19:6A:B1:6D:15:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3d9879da-145f-4f21-a7c3-da6b59a01625/89d4f40fed1166159109937674aef0279ad039550feccf8d61.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/6/2472949B3C234930DBE99B1B5CD5196AB16D151B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:62:af:40:b7:c5:65:a4:69:54:a7:c4:36:07:ac:00:a0:fc: 9b:c0:b2:12:13:3d:1f:79:88:4a:3d:83:30:0b:d9:96:a7:ab: 8d:dc:e1:38:a1:9d:22:c9:c9:d4:bb:c5:9e:04:0c:93:d4:f6: f5:fb:88:0b:b4:e5:cf:ed:8e:0f:ab:17:91:d4:39:f4:27:f0: 80:74:43:7f:96:cd:36:98:8b:39:3f:a1:21:28:0c:9d:76:bb: 4d:ef:fd:c1:42:f7:52:37:9f:17:ab:27:1f:63:9d:15:04:6e: fe:4e:4a:83:86:52:c9:54:99:1e:f2:b2:9b:68:0c:24:b6:bc: 2f:aa:b2:42:df:e2:5d:b6:51:74:1a:b9:c6:e2:f2:9e:38:5a: 32:9b:02:b5:a0:30:d6:4a:6b:9c:df:23:79:d5:b4:29:89:52: 27:8f:da:00:7a:a2:a2:10:2b:00:94:60:81:40:d1:3e:48:c7: ff:93:9f:af:4b:99:ed:e3:36:fd:80:b8:53:86:62:52:a8:b3: 59:60:0e:a6:21:e8:dc:c8:04:19:83:48:0c:39:ad:6f:50:d9: dd:59:d3:40:4d:78:cd:4b:34:c5:ba:69:5c:60:97:e0:5d:f2: ef:cb:ce:cb:0c:18:79:81:d9:5e:a6:06:ff:60:53:dc:21:dd: 3f:59:ea:ab -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUd2r5Ab0ejheD8oWbN//FfX6A6dcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODlkNGY0MGZlZDExNjYxNTkxMDk5Mzc2NzRhZWYwMjc5 YWQwMzk1NTBmZWNjZjhkNjEwHhcNMjUxMjA2MDkxOTA0WhcNMjUxMjA3MTAyOTA0 WjAzMTEwLwYDVQQDEyhCMzZCMEIzMTE4QTZGMzZEQjYyM0MyRkNDRkU5NkZEMzQ3 MjkwQUEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJGmxGDaiTYx wjqZqghv9XMVSW3/uXhjq3kjdriQDxurANcYsGK02Hd1HL6Eyz6gruVoum7v/wjS Dck01/YBVdq4U7S7V4DRMdxlAG0lEhAZJsCUV9xnRvjlRS793gK7UF/RgxtGlIDR d1NMcitG2sh/Vl3QJlRZhk3gsI8hxEacWzH+SfIRbVuJqLb4nKEblwL+JPpbbahZ pR/t6u7OXF0ht2/2MQp7HuKbqnVUdHZnIZsOuObFLjflcdQ/Qu9kjmzQ0v8SUO55 7x142gI55O9OJbJ3SZIh0qLGUDO7i3H48TawdgQKz1e+WLuXm0NZPDQIibU8mHtI EUQTvRCFxQIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFLNrCzEYpvNttiPC/M/pb9NH KQqgMB8GA1UdIwQYMBaAFCRylJs8I0kw2+mbG1zVGWqxbRUbMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3 LWI0MjgxOGNmNTBlOC82LzI0NzI5NDlCM0MyMzQ5MzBEQkU5OUIxQjVDRDUxOTZB QjE2RDE1MUIuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It NGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zZDk4NzlkYS0xNDVmLTRmMjEtYTdjMy1k YTZiNTlhMDE2MjUvODlkNGY0MGZlZDExNjYxNTkxMDk5Mzc2NzRhZWYwMjc5YWQw Mzk1NTBmZWNjZjhkNjEuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv ZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1MGU4LzYvMjQ3Mjk0OUIz QzIzNDkzMERCRTk5QjFCNUNENTE5NkFCMTZEMTUxQi5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAItir0C3 xWWkaVSnxDYHrACg/JvAshITPR95iEo9gzAL2Zanq43c4TihnSLJydS7xZ4EDJPU 9vX7iAu05c/tjg+rF5HUOfQn8IB0Q3+WzTaYizk/oSEoDJ12u03v/cFC91I3nxer Jx9jnRUEbv5OSoOGUslUmR7ysptoDCS2vC+qskLf4l22UXQaucbi8p44WjKbArWg MNZKa5zfI3nVtCmJUieP2gB6oqIQKwCUYIFA0T5Ix/+Tn69Lme3jNv2AuFOGYlKo s1lgDqYh6NzIBBmDSAw5rW9Q2d1Z00BNeM1LNMW6aVxgl+Bd8u/LzssMGHmB2V6m Bv9gU9wh3T9Z6qs= -----END CERTIFICATE-----Generated at Sat Dec 6 16:42:37 2025 by rpki-client