This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
File: 5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft (raw, json)
Hash identifier: d7kWB8rhjb/m0y3xjPmlSfzrlO0ZBWY3NIVcjJk8PeU=
Subject key identifier: 28:17:DB:70:98:08:E3:81:19:7B:FB:52:7D:3F:68:F5:73:86:2E:79
Authority key identifier: 5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68
Certificate issuer: /CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
Certificate serial: 1D91564B4D9EC048848C41E48FEBE27697049F42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
Manifest number: 01BE
Signing time: Sat 06 Dec 2025 00:39:49 +0000
Manifest this update: Sat 06 Dec 2025 00:34:49 +0000
Manifest next update: Sun 07 Dec 2025 04:06:49 +0000
Files and hashes: 1: 326131343a333863303a3a2f32392d3239203d3e20333936303634.roa (hash: izH2bRAdoHB65ZOfP1RgM/881EkkTABDPPywFSiQ9f4=)
2: 3139342e3131372e36392e302f32342d3234203d3e20333936303634.roa (hash: uPzNQdfiTlC1R9B5J33ZDfQAHE+DMHweR/VNt7ogg2k=)
3: 326131343a333863303a323a3a2f34382d3438203d3e20323135323438.roa (hash: e6DNGKmUmYh4KhA4h67tF7nM55oym+8oQ84yYdEmy64=)
4: 326131343a333863303a333a3a2f34382d3438203d3e20323135323438.roa (hash: rQvL6z8yuqUS7v24/Ra9en3S8KmIgkMtv1rcn8o1sfA=)
5: 326131343a333863303a313a3a2f34382d3438203d3e20333936303634.roa (hash: hT2vS1KxZCIrrbIeX36lXo5PB7z3bFiXrMszQcpSghE=)
6: 326131343a333863303a3130343a3a2f34382d3438203d3e20323135323438.roa (hash: QZeJi0O4ini6QNF1syA5gZ8HehGzsGo0INWd9T4WodA=)
7: 326131343a333863303a313a3a2f34382d3438203d3e20323135323438.roa (hash: hYvWm7RFlZS1l2LX8NsvpkNf0MsxvPiQn7slmgwssck=)
8: 326131343a333863303a3130343a3a2f34382d3438203d3e20333936303634.roa (hash: uQC+ycpajw6LG1MwmEH2bQGDaDjqft9mY/Ula5mB0Rs=)
9: 3130332e3134392e3136382e302f32342d3234203d3e20323135323438.roa (hash: RPFyh+9f4VeLKwhSKFsibkww2V1WrimAJUdSq1OTL10=)
10: 3130332e3134392e3136382e302f32342d3234203d3e20333936303634.roa (hash: +yFHbjFdcl3OkH9bM82B/wbQvRBlEBGqJ0LTOyulC0Q=)
11: AS215248.asa (hash: OBxCaFtmon5RTxGYauxtwJ5Vaj/O+PNWdAKZ74euDqI=)
12: 326131343a333863303a3a2f32392d3239203d3e20323135323438.roa (hash: aQBGW4UwEpZw1viUGTiicR7R7bF3eHxKluau3FSxHVQ=)
13: 326131343a333863303a333a3a2f34382d3438203d3e20333936303634.roa (hash: RQOZ0GeuB2hc8N96mezhBhXKeCrh7X17R4TSsdmASyE=)
14: 5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl (hash: g1drCnV+T3iJIpQDr52tTGV+xD8R+dsjoqtAdTGQnF8=)
15: 3139342e3131372e36392e302f32342d3234203d3e20323135323438.roa (hash: EqbKHazBpNo/bx4pclFyuqidomfYzdI+MjCRoDSagrM=)
16: 326131343a333863303a323a3a2f34382d3438203d3e20333936303634.roa (hash: b3AvMY9Sl1B0jVsJOJivHhqGlksNlQ/JV9muHKrGSGQ=)
17: 3130332e3134392e3136392e302f32342d3234203d3e203630373831.roa (hash: M972A2zux5bp2vtM/yV/ifXNBlJMRB7g6qDIDzpgNsU=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl
rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Dec 2025 20:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:91:56:4b:4d:9e:c0:48:84:8c:41:e4:8f:eb:e2:76:97:04:9f:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
Validity
Not Before: Dec 6 00:34:49 2025 GMT
Not After : Dec 7 04:06:49 2025 GMT
Subject: CN=2817DB709808E381197BFB527D3F68F573862E79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:40:f2:1c:fb:98:0b:66:e2:58:b6:0d:20:88:
12:19:79:93:36:97:bd:ca:61:a3:e4:11:7f:ed:34:
08:c9:ae:8d:2a:0f:5e:a0:65:09:ba:16:11:6f:03:
f3:42:a1:81:70:51:e6:fa:5b:44:30:82:66:49:d4:
b7:2e:e6:75:30:b6:da:82:30:54:91:8d:25:ac:2c:
81:cb:07:56:b4:32:16:14:76:ec:24:4c:a9:be:2c:
fc:3f:7d:b7:1a:fd:4a:7f:a1:8f:18:b4:66:40:29:
5d:ed:03:07:0c:1a:4a:fc:50:cd:7a:5e:54:8c:13:
d2:2b:79:37:ea:a4:01:40:d2:12:7a:18:1f:3d:03:
9b:84:cf:31:26:c6:c4:97:97:a9:bc:56:b2:33:b3:
5d:c9:e0:78:01:59:5e:2c:2f:80:45:cf:1e:ae:22:
20:82:8e:4e:b1:88:db:7e:f4:c0:8f:5d:a4:5d:8f:
ac:50:38:d4:0b:29:9c:1c:db:2f:03:e7:e7:77:6e:
86:11:93:f2:8f:1e:a3:51:49:44:3c:4b:e6:ab:0f:
ea:fc:94:ee:d8:76:9c:83:ce:ed:85:d8:c6:3b:5d:
ec:62:f7:4d:bc:fc:f6:8a:2c:bb:af:ec:de:c8:0a:
25:22:8e:c3:83:c4:2c:62:21:c8:01:9d:e3:19:35:
f4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:17:DB:70:98:08:E3:81:19:7B:FB:52:7D:3F:68:F5:73:86:2E:79
X509v3 Authority Key Identifier:
keyid:5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:bc:ce:6e:ff:8e:9e:67:de:99:3c:07:e0:e8:f5:08:d6:59:
a1:e5:2e:6c:a2:1c:0a:6d:16:5f:3d:f0:fa:3f:fb:5f:de:19:
ee:9e:1e:77:69:b0:5d:fe:23:5f:c3:13:4f:8c:d3:d8:57:83:
33:95:c0:8a:04:cc:17:7c:5e:41:55:29:5e:75:49:81:f7:c9:
66:99:ce:69:e4:d2:c0:77:77:c9:e4:bc:0a:e7:7c:6c:eb:b7:
d4:e0:f2:8f:cd:12:8c:c3:75:88:0e:76:71:68:76:1a:55:ac:
63:eb:40:63:82:b1:97:84:68:34:47:9c:ae:a0:20:91:e2:41:
74:89:35:75:6b:2d:9c:24:25:d8:ce:47:a1:14:67:b8:f0:1f:
a0:c7:72:d3:7d:0a:32:16:bc:5e:e1:67:c4:93:19:e0:8f:8c:
b3:cf:7c:21:e7:8d:ef:83:42:fa:3f:49:5a:b3:c6:35:48:00:
84:d5:fd:03:0d:96:1e:0d:e0:c7:05:32:26:3b:c3:59:9f:7b:
15:6d:70:27:3f:09:8f:ed:f1:58:0f:45:1d:da:e5:57:0f:70:
2f:2a:94:76:11:ba:c4:c6:25:58:e8:20:c3:a3:93:5a:71:ec:
0c:64:24:45:03:50:fd:37:5a:59:ae:2b:49:7e:c3:f3:05:65:
5f:6f:f8:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 04:58:31 2025 by rpki-client