This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft
File: 13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft (raw, json)
Hash identifier: l85VIq22I559zF3Bi5BxoA6k6tNzCIu19dpi0vMlxFc=
Subject key identifier: 5A:B3:9A:DD:11:05:33:C2:8A:2B:4E:E5:51:17:38:7A:42:0D:63:28
Authority key identifier: 13:E1:A9:98:F7:7D:7C:1F:F2:95:5C:0B:68:8F:EB:FE:0F:81:96:EB
Certificate issuer: /CN=13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB
Certificate serial: 458DB1A6244CC98243677CBCC73CF3370727DF63
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft
Manifest number: 0175
Signing time: Sat 06 Dec 2025 00:02:26 +0000
Manifest this update: Fri 05 Dec 2025 23:57:26 +0000
Manifest next update: Sun 07 Dec 2025 01:16:26 +0000
Files and hashes: 1: 326131343a373538303a6432303a3a2f34342d3438203d3e20313939333130.roa (hash: MgcoEmS08l4kBvePsItue5HuyPIuQGylETDDY3NTtWk=)
2: 326131343a373538303a6431303a3a2f34342d3434203d3e20313939333130.roa (hash: d85Du7DNvyLWzCRKR6UAK4BxtZR8aY0O/ltb7NM7kI0=)
3: 326131343a373538303a6430303a3a2f34342d3434203d3e20313939333130.roa (hash: aLNGjeKxhB+lb52UO94MmUGLP8+twH+NGpyj/wZMn3g=)
4: 13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.crl (hash: +IuDLP0zbd9aiLAuEmhlsh0vEmWQBfyX2IVebmicArM=)
5: 326131343a373538303a6430303a3a2f34302d3438203d3e20313939333130.roa (hash: jIRO9mS3d6dPjcdQf+OkOGr/dNujGogdrEuPEpLgZJI=)
6: 326131343a373538303a6466303a3a2f34382d3438203d3e20323133373239.roa (hash: u/JR7/M6BcKICssdDR7j/sPwWvJTPX2G+FFLBgXrUyU=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.crl
rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Dec 2025 23:45:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:8d:b1:a6:24:4c:c9:82:43:67:7c:bc:c7:3c:f3:37:07:27:df:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB
Validity
Not Before: Dec 5 23:57:26 2025 GMT
Not After : Dec 7 01:16:26 2025 GMT
Subject: CN=5AB39ADD110533C28A2B4EE55117387A420D6328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ab:2d:e1:d5:a2:b9:17:42:d1:86:48:eb:46:
34:28:17:e2:39:6f:aa:c5:c4:99:e8:70:11:d3:e4:
b0:fb:2e:25:1a:81:7b:68:80:48:24:9e:8d:c2:19:
62:e8:fc:88:0a:e5:5a:c2:2b:80:18:d2:f9:28:bb:
73:49:f7:c0:82:3d:52:42:62:ee:53:ef:6f:de:41:
ab:2c:cb:ab:ee:9f:86:16:9b:50:c0:16:6f:ca:a6:
f9:32:87:5b:03:09:8a:ae:43:7e:82:3e:46:7f:a0:
08:5d:e7:b2:1a:4b:b2:86:cd:7f:51:22:39:b4:cb:
8a:bd:70:65:56:e5:bb:31:c8:73:a5:7b:b4:99:fc:
a6:0d:80:52:09:4a:35:ed:3e:3f:20:cb:e2:fb:b2:
d0:f0:55:4b:5a:3b:64:2c:58:10:f0:8b:18:f0:bd:
01:4d:33:2c:d1:a3:95:e4:12:ce:a1:15:6e:00:0a:
cb:cc:fd:c1:20:bc:14:eb:3d:4d:a7:29:aa:a4:0f:
55:72:b5:70:43:81:a8:8a:e6:bb:27:52:cf:c0:21:
cd:b7:be:7c:74:3d:b6:e4:15:6b:78:35:fd:ef:8f:
18:c7:23:2b:8b:b8:d6:93:ab:c1:39:95:ee:2f:fd:
92:ca:eb:7d:a8:3a:91:04:af:62:0f:84:8c:34:ca:
15:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B3:9A:DD:11:05:33:C2:8A:2B:4E:E5:51:17:38:7A:42:0D:63:28
X509v3 Authority Key Identifier:
keyid:13:E1:A9:98:F7:7D:7C:1F:F2:95:5C:0B:68:8F:EB:FE:0F:81:96:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/1/13E1A998F77D7C1FF2955C0B688FEBFE0F8196EB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:95:93:ab:67:93:5e:31:fb:70:40:2d:b4:60:e5:3c:eb:ed:
e1:f8:b9:0c:9a:ba:0d:16:9c:f1:5d:68:03:e6:ca:5d:be:5b:
60:a5:69:ba:24:fa:cb:df:49:fc:bf:37:04:e1:34:19:69:d8:
68:97:b4:ea:e0:7b:07:cb:d0:0f:bc:8a:fa:e6:5a:cf:a9:7f:
09:63:88:61:3f:a3:cb:2c:68:be:cf:1f:2c:28:f2:84:29:22:
1a:59:20:c1:aa:77:d7:b0:f9:f7:05:13:ab:1a:15:da:04:13:
fb:79:a0:91:a4:e3:3b:44:30:59:7e:7d:b9:96:26:52:e0:f4:
90:30:6f:f9:88:7f:64:f3:b7:1c:25:04:d2:63:a0:08:98:c8:
b9:11:aa:81:d0:82:ac:9e:dc:6e:ee:7d:02:52:fb:b8:fa:88:
c4:e4:58:ac:5e:81:9f:9a:0c:9c:1e:7e:bb:a8:82:2d:dc:88:
62:4b:4b:43:59:f1:5f:5d:d2:39:00:ed:17:1c:45:0e:dc:5c:
f5:e0:2b:5c:5f:d9:55:c2:67:dc:5b:db:64:e0:54:67:1e:04:
e9:23:cd:92:b6:b9:bd:9b:a0:80:ee:22:2f:49:cf:1b:aa:d4:
f6:d6:79:b2:d8:4a:82:74:61:94:6f:8f:92:71:58:9a:70:fe:
43:49:e1:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 06:48:51 2025 by rpki-client