This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft
File: EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft (raw, json)
Hash identifier: LZp76wMwVtrzojrXdn/0EjxIfFP85SxSr5lDeEM7pWE=
Subject key identifier: DD:61:B2:D2:59:74:42:26:5D:D9:7C:61:05:6C:2C:3F:A7:FB:CC:7F
Authority key identifier: ED:B9:F3:E6:D8:E4:B5:7C:49:30:1A:A6:21:EF:1F:90:38:9E:05:7A
Certificate issuer: /CN=edb9f3e6d8e4b57c49301aa621ef1f90389e057a
Certificate serial: 01EF0787B36B18418A35CA0566277E91CB11076C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7bnz5tjktXxJMBqmIe8fkDieBXo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft
Manifest number: 0444
Signing time: Sat 06 Dec 2025 04:01:17 +0000
Manifest this update: Sat 06 Dec 2025 03:56:17 +0000
Manifest next update: Sun 07 Dec 2025 06:20:17 +0000
Files and hashes: 1: EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.crl (hash: NMEHVG3cdqaKZh4MbJJS831sN1/yy+X6MHEHisqwAnQ=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.crl
rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft
rsync://rpki.ripe.net/repository/DEFAULT/7bnz5tjktXxJMBqmIe8fkDieBXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 06:20:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:ef:07:87:b3:6b:18:41:8a:35:ca:05:66:27:7e:91:cb:11:07:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edb9f3e6d8e4b57c49301aa621ef1f90389e057a
Validity
Not Before: Dec 6 03:56:17 2025 GMT
Not After : Dec 7 06:20:17 2025 GMT
Subject: CN=DD61B2D2597442265DD97C61056C2C3FA7FBCC7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:66:1c:df:ec:6e:bb:c5:30:16:bf:9a:e1:07:
78:50:a5:67:d6:cd:ec:d5:06:8e:0d:49:20:2b:db:
9d:95:30:50:34:f7:f1:68:90:49:a3:e4:ee:d4:bd:
3b:2e:39:74:69:0c:06:71:c2:bb:1b:5d:3d:90:80:
f5:59:ca:f7:b1:1e:28:fa:7a:6f:f6:91:09:72:6b:
6a:87:0d:87:c0:09:15:3e:d2:63:de:bb:26:40:e2:
5a:d7:3f:7f:e0:7a:4b:0c:50:47:22:f0:ce:43:e1:
68:96:5f:e6:bf:24:5f:2d:80:78:6b:9e:e8:36:28:
50:f6:b1:e6:d7:0a:8f:22:84:7f:2d:af:df:49:f7:
45:2d:b7:0d:86:ef:79:d0:73:df:c3:25:46:c2:d0:
7c:05:c1:06:ae:58:55:f2:8c:c7:96:7a:60:2b:21:
bb:8d:ae:86:6a:25:b6:fe:be:7d:bd:4e:08:eb:72:
70:3e:d3:17:3a:3a:9e:dc:b4:cf:76:c9:e4:6c:b6:
85:88:e5:cd:af:ea:78:6e:fe:58:24:56:b0:21:57:
46:11:5e:56:6d:83:99:f4:3b:b1:d6:3d:fa:56:a4:
a1:90:9a:e1:06:21:f3:b3:70:15:dc:70:2a:c8:35:
10:17:03:7a:a8:4c:52:3f:aa:82:ac:a4:06:6d:ec:
96:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:61:B2:D2:59:74:42:26:5D:D9:7C:61:05:6C:2C:3F:A7:FB:CC:7F
X509v3 Authority Key Identifier:
keyid:ED:B9:F3:E6:D8:E4:B5:7C:49:30:1A:A6:21:EF:1F:90:38:9E:05:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bnz5tjktXxJMBqmIe8fkDieBXo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:17:ba:1d:23:d2:bb:ad:3b:dd:9e:57:28:e7:5f:57:45:28:
1a:8e:26:96:57:cb:66:73:29:43:2f:36:ff:c3:ee:1a:c9:98:
4e:97:0e:60:cd:e1:fd:4f:83:64:97:6f:56:06:e1:20:27:f3:
c5:b7:55:fd:c6:52:da:ed:ec:74:cb:c5:11:2d:84:f9:84:6b:
38:2d:d9:48:a2:5d:fa:07:8b:1a:e6:ea:ca:be:5f:fc:0e:1b:
38:10:b0:3f:c3:ab:58:ff:7d:a3:50:61:8d:69:b4:48:01:dd:
41:01:4a:81:17:c4:6c:5b:78:19:f1:99:68:4b:eb:0a:d0:f8:
da:71:21:81:98:91:74:ac:a7:0e:46:ef:ab:17:81:d7:28:87:
33:36:ae:44:42:d4:ae:d1:3d:38:96:7b:69:65:70:b6:b5:7e:
36:5f:05:ba:ff:a4:08:2a:53:d4:eb:d1:43:04:bc:b3:7a:a5:
d1:05:19:68:18:ad:ec:9b:4b:32:0e:8e:84:7e:4d:3a:51:f1:
2d:9a:d5:02:1b:b6:f5:2c:40:07:72:32:6b:70:6d:f7:d3:2b:
b0:47:54:47:a1:04:14:b0:51:2c:be:ea:36:0c:36:c0:a6:ba:
d4:7b:9f:2b:48:73:bb:22:26:45:d1:62:56:43:c0:0b:88:2f:
6f:ac:d4:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:43:59 2025 by rpki-client