This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.mft
File: 5E5179BB1757068D7028510FEEB1177AA7CC8818.mft (raw, json)
Hash identifier: /Hs3puCj6W7IIrWENyuhAq3cET5Q1uxZDijwSHAP2i8=
Subject key identifier: BB:75:C9:A9:7D:FD:B7:2C:8F:8A:CB:CA:05:3C:5D:39:76:DA:D5:03
Authority key identifier: 5E:51:79:BB:17:57:06:8D:70:28:51:0F:EE:B1:17:7A:A7:CC:88:18
Certificate issuer: /CN=5e5179bb1757068d7028510feeb1177aa7cc8818
Certificate serial: 203AB5884C769B67645D1829D97B0429FABC080D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.mft
Manifest number: 05AC
Signing time: Mon 15 Dec 2025 08:42:15 +0000
Manifest this update: Mon 15 Dec 2025 08:37:15 +0000
Manifest next update: Tue 16 Dec 2025 08:50:15 +0000
Files and hashes: 1: 3139322e3130392e31312e302f32342d3234203d3e203136323736.roa (hash: qRWEBAMqR9/oXRv8A+nfXFduPkpHZgx8k4TEVcf/LOk=)
2: 3139322e3130392e31302e302f32342d3234203d3e203239383032.roa (hash: zPOJooX1SbIfEdoUfLmfFj+bOWKjqS7oznOqpFqjTp4=)
3: 38332e3135302e3231362e302f32342d3234203d3e20383334.roa (hash: EBm40X3KjUETSjt3aOY0gb7euO7RTR4g317z8UFpEX0=)
4: 38332e3135302e3231392e302f32342d3234203d3e203533333430.roa (hash: GXLgWx6Q3CLvfyeGG+4M+PXnBAwSeVlRcKDTfEKYkeQ=)
5: 38332e3135302e3231382e302f32342d3234203d3e20313939343135.roa (hash: yCFgEcnTSAhMVf29HMHp04B1k4DqC3mlqJPDdmg8wFQ=)
6: 5E5179BB1757068D7028510FEEB1177AA7CC8818.crl (hash: /xXf3dspE/z6SoyvXR11aKIc9CcWeelghxYidUdtOZE=)
7: 38332e3135302e3231362e302f32322d3234203d3e203631333137.roa (hash: bA7vtpR0TyML0HjZJJdgMHPc1uK0jGA3YpWrjwZ8y+U=)
8: 38332e3135302e3231372e302f32342d3234203d3e20323132353034.roa (hash: k8RY7QTEncAN/MOxUGAuMRRlssrdtl7ahwCsdlVrRY0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.crl
rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.mft
rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Dec 2025 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:3a:b5:88:4c:76:9b:67:64:5d:18:29:d9:7b:04:29:fa:bc:08:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e5179bb1757068d7028510feeb1177aa7cc8818
Validity
Not Before: Dec 15 08:37:15 2025 GMT
Not After : Dec 16 08:50:15 2025 GMT
Subject: CN=BB75C9A97DFDB72C8F8ACBCA053C5D3976DAD503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6c:90:21:fd:4e:3e:d1:99:2a:bc:cd:7f:28:
1d:51:f3:1c:4a:84:ac:ab:b5:12:36:47:53:8e:b9:
31:b2:41:6d:03:c0:38:b5:59:91:e2:8e:7e:3d:9e:
96:ec:a5:65:58:e9:42:84:b2:41:8e:3d:1b:b3:4a:
14:72:b5:27:48:06:cf:2b:3d:77:df:31:a6:c7:c4:
76:0b:67:b3:12:d0:89:25:62:ef:2b:2a:eb:23:06:
c2:a2:3f:f5:82:1b:81:ac:f4:e5:d6:d1:be:0b:2f:
e2:14:31:3c:01:3b:51:71:73:68:86:61:5c:9b:83:
ef:ed:71:ed:f1:71:25:0b:c0:d2:b9:9a:89:11:3f:
68:48:c4:70:ac:c4:22:cc:76:d2:89:50:4f:13:5e:
ef:71:5a:23:05:8c:97:e1:a1:97:89:b4:ee:9e:94:
c1:b2:0e:bc:94:53:f9:73:3a:16:21:97:98:c4:81:
39:3b:dd:c6:05:c3:60:51:34:0b:c7:06:c3:ba:aa:
2f:79:e1:e1:47:a3:34:85:02:8f:06:15:8b:8d:d7:
90:8e:1c:75:d9:4b:97:7c:31:68:cc:d7:85:dc:c1:
d4:31:aa:4b:84:51:14:7b:a8:a3:ef:d0:61:22:dd:
24:c6:24:6f:ea:af:2a:20:66:78:57:c5:74:d4:cb:
f9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:75:C9:A9:7D:FD:B7:2C:8F:8A:CB:CA:05:3C:5D:39:76:DA:D5:03
X509v3 Authority Key Identifier:
keyid:5E:51:79:BB:17:57:06:8D:70:28:51:0F:EE:B1:17:7A:A7:CC:88:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:fa:74:f8:33:ca:c2:2b:30:e2:3c:0f:56:2d:e8:68:6a:af:
57:fe:91:b8:b5:ca:49:d6:24:db:21:09:d3:7e:e3:13:d6:65:
81:4a:ce:e5:f9:94:49:f7:14:77:0b:97:07:ca:ac:a7:65:3b:
12:ac:c1:2f:b6:63:fe:cc:90:f9:2a:ff:dc:f3:8b:b3:e7:85:
c8:8a:0f:d3:c8:04:1f:4b:f9:39:a2:78:cc:da:89:e6:33:d8:
76:05:b5:38:06:01:c6:bb:31:3e:6f:3a:87:51:5c:1f:98:f3:
0d:1b:85:a5:3d:b7:12:02:af:69:41:51:cd:31:b4:33:da:9d:
7c:02:86:d8:c3:58:44:d3:3c:c6:d5:dd:de:08:f3:0a:81:64:
f4:08:c9:6a:1d:be:4f:37:66:2e:99:5d:2c:be:20:71:72:3b:
10:1b:56:a0:47:da:3e:7e:3b:75:ae:f5:f5:fb:cb:28:a7:43:
8f:28:96:1d:3e:09:bd:6f:8d:10:62:84:93:0b:9d:ac:73:fc:
00:5c:f2:5d:0f:b8:b6:e6:97:22:3e:43:4c:ac:4a:d4:ec:67:
7b:f8:b9:16:c6:9c:64:dd:1e:82:61:2c:da:77:d8:7f:d4:32:
a9:79:bb:9a:e9:4e:fb:89:f0:ab:e3:34:61:f3:2d:dd:15:38:
25:d1:e6:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 15:32:25 2025 by rpki-client