This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.mft File: 5E5179BB1757068D7028510FEEB1177AA7CC8818.mft (raw, json) Hash identifier: ZaBTwa9DzujvLhUVLghL76LA+hkNxpZT4et/lfHFm5k= Subject key identifier: 23:95:7B:8D:21:0D:41:2C:FA:C2:CA:CF:CE:28:90:A5:A0:BC:A4:B3 Authority key identifier: 5E:51:79:BB:17:57:06:8D:70:28:51:0F:EE:B1:17:7A:A7:CC:88:18 Certificate issuer: /CN=5e5179bb1757068d7028510feeb1177aa7cc8818 Certificate serial: 7748E61078F8F28EDAE6E8C20546F476AAEE0B31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.mft Manifest number: 059E Signing time: Sat 06 Dec 2025 09:11:17 +0000 Manifest this update: Sat 06 Dec 2025 09:06:17 +0000 Manifest next update: Sun 07 Dec 2025 11:15:17 +0000 Files and hashes: 1: 3139322e3130392e31302e302f32342d3234203d3e203239383032.roa (hash: zPOJooX1SbIfEdoUfLmfFj+bOWKjqS7oznOqpFqjTp4=) 2: 3139322e3130392e31312e302f32342d3234203d3e203136323736.roa (hash: qRWEBAMqR9/oXRv8A+nfXFduPkpHZgx8k4TEVcf/LOk=) 3: 38332e3135302e3231382e302f32342d3234203d3e20313939343135.roa (hash: yCFgEcnTSAhMVf29HMHp04B1k4DqC3mlqJPDdmg8wFQ=) 4: 5E5179BB1757068D7028510FEEB1177AA7CC8818.crl (hash: 5LtpiErxuE213F65XlJn+hXyPQX1fMoOFIwbCcrAedI=) 5: 38332e3135302e3231372e302f32342d3234203d3e20323132353034.roa (hash: k8RY7QTEncAN/MOxUGAuMRRlssrdtl7ahwCsdlVrRY0=) 6: 38332e3135302e3231362e302f32322d3234203d3e203631333137.roa (hash: bA7vtpR0TyML0HjZJJdgMHPc1uK0jGA3YpWrjwZ8y+U=) 7: 38332e3135302e3231362e302f32342d3234203d3e203630353538.roa (hash: CNBsLk3b8bUsaLSMZ5OmCj7rjJ6VgS1iooePZAAZtvw=) 8: 38332e3135302e3231392e302f32342d3234203d3e203533333430.roa (hash: GXLgWx6Q3CLvfyeGG+4M+PXnBAwSeVlRcKDTfEKYkeQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.crl rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.mft rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:48:e6:10:78:f8:f2:8e:da:e6:e8:c2:05:46:f4:76:aa:ee:0b:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e5179bb1757068d7028510feeb1177aa7cc8818 Validity Not Before: Dec 6 09:06:17 2025 GMT Not After : Dec 7 11:15:17 2025 GMT Subject: CN=23957B8D210D412CFAC2CACFCE2890A5A0BCA4B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:64:39:54:1c:ea:75:07:64:57:73:42:ed:b9: b6:0c:0a:d1:d9:ef:58:55:00:4b:c3:9e:d8:57:e6: 76:a0:ec:2f:76:b1:09:45:90:12:f3:a6:5c:30:53: fe:cd:de:a4:06:74:f3:30:16:5a:f0:3d:5c:6d:af: 15:84:3a:0e:84:b8:c0:51:00:7d:3d:d0:4d:f4:55: d3:5d:a5:4a:ca:7f:7f:d8:78:e1:0e:49:18:6d:e8: ca:be:a1:15:4e:bb:cb:42:9a:e0:2d:d4:5c:0f:0a: 1d:47:72:71:c7:f1:c9:83:46:d5:ba:cc:30:2b:45: c8:e2:7f:4c:3b:65:3f:9b:ca:ca:b5:56:a6:f2:9b: 8a:d2:5a:8f:b1:3e:23:36:3f:f1:94:c9:56:2c:f7: 9c:96:d5:0a:f4:ad:a8:51:2f:ca:17:30:b0:d7:02: 74:58:72:94:1a:22:93:9a:cf:68:84:45:51:91:09: 53:fb:6d:e6:38:77:b7:ec:56:91:77:8f:ea:30:0a: 5f:7a:66:d4:87:73:36:3a:91:38:7d:f5:b1:42:28: 0e:26:24:57:7f:5b:cb:ae:29:22:3e:67:9a:1b:9c: da:76:02:f5:9d:2f:a9:6f:2a:57:d4:71:a0:00:ee: 18:25:42:12:4a:77:52:98:6e:00:46:1e:8a:86:94: 7e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:95:7B:8D:21:0D:41:2C:FA:C2:CA:CF:CE:28:90:A5:A0:BC:A4:B3 X509v3 Authority Key Identifier: keyid:5E:51:79:BB:17:57:06:8D:70:28:51:0F:EE:B1:17:7A:A7:CC:88:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:59:1d:24:53:39:ce:48:a7:f9:b6:0c:b7:ab:0e:40:0f:b1: 98:c8:cd:3c:09:2c:f8:63:29:50:70:a4:37:1d:23:42:15:1f: 51:ff:04:98:0c:2e:76:1b:a6:82:93:fc:87:ad:37:75:b2:96: e9:98:fb:87:2c:52:c9:17:a6:fe:cb:49:71:b8:98:a9:f0:01: ff:b5:24:62:72:d7:61:2a:ec:5f:45:7c:13:64:d8:57:a6:6a: 18:bf:7d:a9:d1:e9:cb:b0:65:16:20:a2:1a:03:ac:9d:ef:e1: 1b:f8:2e:f5:8f:37:fb:da:ee:7d:6d:68:06:45:fe:ff:98:a5: ba:c2:a0:56:b3:d7:44:97:88:9e:66:50:01:9a:6c:88:64:85: 0d:76:c6:d1:4c:fa:bb:8c:51:f5:fd:f3:d6:e7:50:d6:17:c0: 5f:59:e1:e4:1f:aa:18:3d:23:b4:13:d1:7a:e3:25:e4:67:7e: ec:ec:ca:83:b9:7f:54:71:85:38:31:75:3f:04:71:3c:99:4d: c6:4b:26:8f:de:d2:80:a2:6f:01:cb:58:5b:78:7e:dc:86:e2: ea:b2:3c:34:1a:ec:19:27:30:45:30:48:b1:65:13:f0:ba:81: 4d:94:78:42:25:00:73:89:36:b5:69:27:35:6b:03:12:d9:c9: b7:e7:f9:f6 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUd0jmEHj48o7a5ujCBUb0dqruCzEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWU1MTc5YmIxNzU3MDY4ZDcwMjg1MTBmZWViMTE3N2Fh N2NjODgxODAeFw0yNTEyMDYwOTA2MTdaFw0yNTEyMDcxMTE1MTdaMDMxMTAvBgNV BAMTKDIzOTU3QjhEMjEwRDQxMkNGQUMyQ0FDRkNFMjg5MEE1QTBCQ0E0QjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5ZDlUHOp1B2RXc0LtubYMCtHZ 71hVAEvDnthX5nag7C92sQlFkBLzplwwU/7N3qQGdPMwFlrwPVxtrxWEOg6EuMBR AH090E30VdNdpUrKf3/YeOEOSRht6Mq+oRVOu8tCmuAt1FwPCh1HcnHH8cmDRtW6 zDArRcjif0w7ZT+bysq1Vqbym4rSWo+xPiM2P/GUyVYs95yW1Qr0rahRL8oXMLDX AnRYcpQaIpOaz2iERVGRCVP7beY4d7fsVpF3j+owCl96ZtSHczY6kTh99bFCKA4m JFd/W8uuKSI+Z5obnNp2AvWdL6lvKlfUcaAA7hglQhJKd1KYbgBGHoqGlH6LAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUI5V7jSENQSz6wsrPziiQpaC8pLMwHwYDVR0j BBgwFoAUXlF5uxdXBo1wKFEP7rEXeqfMiBgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODNlNDc1N2YtZDM3Zi00ZmQ2LWE2OWItZDc0YmRkNmI4 N2RjLzAvNUU1MTc5QkIxNzU3MDY4RDcwMjg1MTBGRUVCMTE3N0FBN0NDODgxOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hsRjV1eGRYQm8xd0tGRVA3ckVYZXFm TWlCZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84M2U0NzU3Zi1k MzdmLTRmZDYtYTY5Yi1kNzRiZGQ2Yjg3ZGMvMC81RTUxNzlCQjE3NTcwNjhENzAy ODUxMEZFRUIxMTc3QUE3Q0M4ODE4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATVkdJFM5zkin+bYMt6sO QA+xmMjNPAks+GMpUHCkNx0jQhUfUf8EmAwudhumgpP8h603dbKW6Zj7hyxSyRem /stJcbiYqfAB/7UkYnLXYSrsX0V8E2TYV6ZqGL99qdHpy7BlFiCiGgOsne/hG/gu 9Y83+9rufW1oBkX+/5ilusKgVrPXRJeInmZQAZpsiGSFDXbG0Uz6u4xR9f3z1udQ 1hfAX1nh5B+qGD0jtBPReuMl5Gd+7OzKg7l/VHGFODF1PwRxPJlNxksmj97SgKJv ActYW3h+3Ibi6rI8NBrsGScwRTBIsWUT8LqBTZR4QiUAc4k2tWknNWsDEtnJt+f5 9g== -----END CERTIFICATE-----Generated at Sat Dec 6 11:05:24 2025 by rpki-client