This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft
File: 307456E03A11DBB48443E93538958B15B4E9E0F0.mft (raw, json)
Hash identifier: 3rcONfnlZJ3rDIGCNKUM5EIOqpLkky+G1YKRweq14vU=
Subject key identifier: 9C:F1:79:04:31:A6:52:6B:A0:84:91:2E:43:E0:9C:73:58:28:B6:63
Authority key identifier: 30:74:56:E0:3A:11:DB:B4:84:43:E9:35:38:95:8B:15:B4:E9:E0:F0
Certificate issuer: /CN=307456E03A11DBB48443E93538958B15B4E9E0F0
Certificate serial: 2758C74F58EC45B0C0D26A059AA03C6D10B8E525
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/307456E03A11DBB48443E93538958B15B4E9E0F0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft
Manifest number: BA
Signing time: Fri 05 Dec 2025 19:13:53 +0000
Manifest this update: Fri 05 Dec 2025 19:08:53 +0000
Manifest next update: Sat 06 Dec 2025 22:51:53 +0000
Files and hashes: 1: 307456E03A11DBB48443E93538958B15B4E9E0F0.crl (hash: x8sIAgBl9ME1hAiBC0PZhIJP52cQHlX6QpS0I8QOU+w=)
2: 3130332e3133392e38382e302f32342d3234203d3e20323134383039.roa (hash: aBp6U2aVMH3hSM5eeFVi+p63pJd0WYDoQYC72uEJ/w8=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.crl
rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/307456E03A11DBB48443E93538958B15B4E9E0F0.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Dec 2025 20:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:58:c7:4f:58:ec:45:b0:c0:d2:6a:05:9a:a0:3c:6d:10:b8:e5:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307456E03A11DBB48443E93538958B15B4E9E0F0
Validity
Not Before: Dec 5 19:08:53 2025 GMT
Not After : Dec 6 22:51:53 2025 GMT
Subject: CN=9CF1790431A6526BA084912E43E09C735828B663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ec:07:3a:d0:02:44:b8:35:d3:88:a7:4a:ec:
9a:b0:cf:80:d2:ea:23:65:8c:da:31:54:52:06:f7:
4b:ae:99:b1:10:29:e4:d2:63:c8:6a:9c:f9:c2:15:
fc:4b:a7:30:92:04:28:c0:51:86:b6:35:dd:2d:19:
23:f0:6c:c2:05:86:53:52:60:30:87:30:1e:6b:64:
8f:0e:a5:02:9a:9b:e4:72:e2:17:cd:d4:b1:3a:12:
45:17:b3:e3:ea:e0:96:8b:fc:f2:a0:6e:05:fa:76:
1f:22:7f:eb:96:37:1d:8d:86:20:a2:a1:b3:c9:9e:
96:bc:c0:a8:a2:0f:44:39:12:27:82:b8:23:be:60:
5a:ab:59:ac:95:b1:ff:54:e2:95:7d:8c:e0:77:2c:
1f:71:c9:98:50:4b:30:c6:9b:e7:6b:c0:0d:38:be:
2f:3b:48:7d:03:24:1b:59:d9:19:f0:e9:44:10:ea:
b9:fc:43:f4:c3:5e:46:91:63:4a:a4:9d:3d:da:10:
3f:31:0a:1f:fe:77:3e:ca:a3:c6:a0:d5:4c:b7:00:
11:04:dd:64:da:7d:ba:dc:00:c3:26:e8:f1:38:06:
54:77:28:ec:8c:ff:69:fa:06:4f:43:c9:37:83:95:
70:e3:eb:d4:aa:61:61:c2:29:09:d9:3f:98:22:28:
97:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:F1:79:04:31:A6:52:6B:A0:84:91:2E:43:E0:9C:73:58:28:B6:63
X509v3 Authority Key Identifier:
keyid:30:74:56:E0:3A:11:DB:B4:84:43:E9:35:38:95:8B:15:B4:E9:E0:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/307456E03A11DBB48443E93538958B15B4E9E0F0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:98:e2:72:d8:db:00:d4:a7:63:de:fd:c5:cb:61:62:44:f8:
25:cb:e8:8e:8b:b3:15:5d:a1:3c:3a:92:25:72:3f:19:de:08:
32:e3:a7:94:93:29:ee:cb:cc:bd:fa:19:2d:93:8c:fc:3d:8a:
da:52:19:ab:bc:c9:4f:39:69:33:66:30:ae:da:84:48:e3:98:
1a:8b:2c:ba:89:20:b0:13:01:ec:9f:89:16:38:c6:11:1f:9f:
90:68:08:ea:61:e5:c7:a8:92:43:14:09:3d:c4:35:ac:40:9a:
c4:f0:9b:14:79:49:23:ef:cc:80:e1:b4:5b:77:fc:e5:1f:4a:
80:ad:e3:f1:f4:bf:33:9a:94:d3:7f:af:54:d2:16:ec:d2:84:
7d:9a:75:c9:1d:bd:f9:b7:f8:36:29:61:6c:a3:6e:34:43:17:
a6:3c:88:a3:1a:33:b9:1d:b0:f8:93:f9:c9:1e:a8:61:e3:a0:
84:28:a3:71:4e:99:31:c2:40:9c:52:22:08:e6:42:94:9d:b2:
71:f8:68:4b:b2:79:35:51:f2:c2:97:e8:7e:82:9f:b0:b4:20:
61:d3:e1:65:3b:b7:e0:14:47:0c:cd:db:64:dc:48:14:19:6e:
4f:f7:bf:9b:c3:06:a5:be:3a:63:f3:53:bd:b4:a0:79:76:72:
2f:1b:9d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 06:00:38 2025 by rpki-client