This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft File: 31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft (raw, json) Hash identifier: QyV7MvetX6Cw5EuKB3sA35C6oTAYeDYZkT51JmLkbD0= Subject key identifier: 40:44:5A:52:48:C3:E3:93:8C:96:EA:73:AA:6C:D9:97:FA:2F:BC:8B Authority key identifier: 31:F7:6C:E2:EF:4D:02:0F:92:5E:37:D7:A9:D8:E3:53:98:C7:C0:17 Certificate issuer: /CN=31F76CE2EF4D020F925E37D7A9D8E35398C7C017 Certificate serial: 1AA3B5848131D26AF89E05E354A849E022D77C7E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft Manifest number: 4A Signing time: Sat 06 Dec 2025 20:35:30 +0000 Manifest this update: Sat 06 Dec 2025 20:30:30 +0000 Manifest next update: Sun 07 Dec 2025 21:45:30 +0000 Files and hashes: 1: 326131343a373538313a3738363a3a2f34382d3438203d3e20323034383731.roa (hash: d7JuEn5B8KAwVz8SpkU4AMcAJkaWbbl+bWkksQthj/k=) 2: 31F76CE2EF4D020F925E37D7A9D8E35398C7C017.crl (hash: mR4nOPJc86z277HpyMJrpr2Kk+d6BdYVKJvP1YAFv8M=) 3: 326131343a373538313a3730303a3a2f34382d3438203d3e20323034383731.roa (hash: u8e0eoyomRFMkD/JcQQfwJ+uqGsBt5QX6wzg4Fq5J9M=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.crl rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:45:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:a3:b5:84:81:31:d2:6a:f8:9e:05:e3:54:a8:49:e0:22:d7:7c:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31F76CE2EF4D020F925E37D7A9D8E35398C7C017 Validity Not Before: Dec 6 20:30:30 2025 GMT Not After : Dec 7 21:45:30 2025 GMT Subject: CN=40445A5248C3E3938C96EA73AA6CD997FA2FBC8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:6b:c6:23:e3:97:fb:8e:e1:f3:56:c8:cd:99: 57:95:4f:a4:25:c9:e4:b0:22:e1:42:38:bc:32:71: a6:68:f8:cb:36:9f:f1:73:3c:df:58:ac:dc:69:d4: 2c:a9:3b:32:21:98:b0:62:df:fc:f9:64:57:32:c7: 08:e5:ee:3e:93:c2:2b:0a:15:c7:06:b3:52:a7:f5: 12:b3:41:5a:ee:20:05:cd:1f:6b:79:77:8e:1d:d6: 0b:e1:f1:5c:da:bc:d8:d2:46:47:05:ce:7f:d3:f2: a9:70:aa:02:37:3a:47:66:df:ad:dc:66:2c:fc:f6: 41:a3:40:27:7a:5f:97:a6:97:dd:e6:3d:6b:8a:3a: 11:c9:01:bf:20:70:3c:d1:c6:d0:01:c3:81:c4:95: 01:f4:3e:77:20:da:64:c7:ff:92:2f:2d:d1:ad:be: 8c:05:c4:bc:56:cd:68:43:c4:85:15:a3:63:4d:9b: be:ff:f0:8d:35:ac:c2:89:47:74:c7:5f:7d:32:35: e7:5b:9f:55:e5:2c:d9:fc:e4:75:92:e9:ad:80:a0: ad:f1:cb:dd:0c:bb:3d:b2:5a:fe:84:bd:b4:2c:e3: a8:c5:ea:a7:6e:f9:64:89:62:8c:1f:92:84:3b:dc: 69:8e:4c:be:ba:c1:a6:a4:99:9a:2f:05:ae:5b:05: b1:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:44:5A:52:48:C3:E3:93:8C:96:EA:73:AA:6C:D9:97:FA:2F:BC:8B X509v3 Authority Key Identifier: keyid:31:F7:6C:E2:EF:4D:02:0F:92:5E:37:D7:A9:D8:E3:53:98:C7:C0:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebb6890d-0d6b-4ea9-a2ef-92d34a3ae64d/0/31F76CE2EF4D020F925E37D7A9D8E35398C7C017.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:2d:2c:fb:e5:cc:7b:9b:3f:a2:82:05:53:86:72:27:1c:6a: c8:e6:49:bd:bf:2d:eb:9f:8b:85:a3:62:57:55:52:fb:5c:91: 4b:9d:97:49:93:8f:16:f7:4f:7b:b8:73:3f:dd:f8:ea:59:29: 00:84:30:16:21:99:51:04:74:20:f2:b0:c6:60:f0:ac:a4:cb: 80:4b:3b:85:d5:83:44:59:f9:65:a5:38:84:a7:62:16:21:57: 7c:bf:51:d7:3c:bd:a8:42:be:c4:b9:96:e3:0a:db:f5:6a:54: b9:c3:1d:54:23:a9:e9:68:3c:dd:eb:e2:81:a9:17:fb:1a:39: 6c:e6:07:2f:34:15:ea:6c:fe:82:34:ac:f2:e4:03:10:f9:d5: 18:b2:b9:bd:6f:07:21:c4:1a:e8:0f:d1:21:9b:11:ea:74:50: 83:66:e0:c4:6a:4b:42:d9:cd:a2:af:82:ab:8b:84:88:76:eb: 30:55:68:6d:b1:22:82:a7:a5:6d:ac:62:2d:e5:35:bf:5d:bb: 81:3e:b2:2b:01:cc:c8:38:ff:24:16:98:da:48:7d:b4:7e:87: d5:a8:ce:ab:9b:a9:82:6c:ae:8d:42:39:42:b9:03:a2:dd:8e: 5e:bf:9f:00:08:55:b7:e1:5a:e2:d9:21:c3:40:d6:c1:2c:45: 78:59:f0:af -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUGqO1hIEx0mr4ngXjVKhJ4CLXfH4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFGNzZDRTJFRjREMDIwRjkyNUUzN0Q3QTlEOEUzNTM5 OEM3QzAxNzAeFw0yNTEyMDYyMDMwMzBaFw0yNTEyMDcyMTQ1MzBaMDMxMTAvBgNV BAMTKDQwNDQ1QTUyNDhDM0UzOTM4Qzk2RUE3M0FBNkNEOTk3RkEyRkJDOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTa8Yj45f7juHzVsjNmVeVT6Ql yeSwIuFCOLwycaZo+Ms2n/FzPN9YrNxp1CypOzIhmLBi3/z5ZFcyxwjl7j6TwisK FccGs1Kn9RKzQVruIAXNH2t5d44d1gvh8VzavNjSRkcFzn/T8qlwqgI3Okdm363c Ziz89kGjQCd6X5eml93mPWuKOhHJAb8gcDzRxtABw4HElQH0Pncg2mTH/5IvLdGt vowFxLxWzWhDxIUVo2NNm77/8I01rMKJR3THX30yNedbn1XlLNn85HWS6a2AoK3x y90Muz2yWv6EvbQs46jF6qdu+WSJYowfkoQ73GmOTL66waakmZovBa5bBbFXAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUQERaUkjD45OMlupzqmzZl/ovvIswHwYDVR0j BBgwFoAUMfds4u9NAg+SXjfXqdjjU5jHwBcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWJiNjg5MGQtMGQ2Yi00ZWE5LWEyZWYtOTJkMzRhM2Fl NjRkLzAvMzFGNzZDRTJFRjREMDIwRjkyNUUzN0Q3QTlEOEUzNTM5OEM3QzAxNy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zMUY3NkNFMkVGNEQwMjBGOTI1RTM3RDdB OUQ4RTM1Mzk4QzdDMDE3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2ViYjY4OTBkLTBkNmItNGVhOS1hMmVmLTkyZDM0YTNhZTY0ZC8wLzMxRjc2Q0Uy RUY0RDAyMEY5MjVFMzdEN0E5RDhFMzUzOThDN0MwMTcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBbLSz7 5cx7mz+iggVThnInHGrI5km9vy3rn4uFo2JXVVL7XJFLnZdJk48W9097uHM/3fjq WSkAhDAWIZlRBHQg8rDGYPCspMuASzuF1YNEWfllpTiEp2IWIVd8v1HXPL2oQr7E uZbjCtv1alS5wx1UI6npaDzd6+KBqRf7Gjls5gcvNBXqbP6CNKzy5AMQ+dUYsrm9 bwchxBroD9EhmxHqdFCDZuDEaktC2c2ir4Kri4SIduswVWhtsSKCp6VtrGIt5TW/ XbuBPrIrAczIOP8kFpjaSH20fofVqM6rm6mCbK6NQjlCuQOi3Y5ev58ACFW34Vri 2SHDQNbBLEV4WfCv -----END CERTIFICATE-----Generated at Sun Dec 7 10:27:58 2025 by rpki-client