This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
File: 5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft (raw, json)
Hash identifier: mgBejUOynctUETlfiShnqLeDQKJ5tzD8Iu6c+MALJ9k=
Subject key identifier: 33:37:B5:A0:D1:38:45:A7:6F:4A:EA:54:5C:05:66:8B:B9:3D:3C:B8
Authority key identifier: 5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68
Certificate issuer: /CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
Certificate serial: 0A7BF855628799997B116C76CB3D3A790A31E6A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
Manifest number: 01CE
Signing time: Thu 18 Dec 2025 06:09:44 +0000
Manifest this update: Thu 18 Dec 2025 06:04:44 +0000
Manifest next update: Fri 19 Dec 2025 06:32:44 +0000
Files and hashes: 1: 326131343a333863303a323a3a2f34382d3438203d3e20333936303634.roa (hash: b3AvMY9Sl1B0jVsJOJivHhqGlksNlQ/JV9muHKrGSGQ=)
2: 326131343a333863303a333a3a2f34382d3438203d3e20333936303634.roa (hash: RQOZ0GeuB2hc8N96mezhBhXKeCrh7X17R4TSsdmASyE=)
3: 3130332e3134392e3136392e302f32342d3234203d3e203630373831.roa (hash: M972A2zux5bp2vtM/yV/ifXNBlJMRB7g6qDIDzpgNsU=)
4: 3130332e3134392e3136382e302f32342d3234203d3e20333936303634.roa (hash: +yFHbjFdcl3OkH9bM82B/wbQvRBlEBGqJ0LTOyulC0Q=)
5: 3139342e3131372e36392e302f32342d3234203d3e20323135323438.roa (hash: EqbKHazBpNo/bx4pclFyuqidomfYzdI+MjCRoDSagrM=)
6: 326131343a333863303a3130343a3a2f34382d3438203d3e20333936303634.roa (hash: uQC+ycpajw6LG1MwmEH2bQGDaDjqft9mY/Ula5mB0Rs=)
7: 5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl (hash: ptQf5DVOFgUSyX4FToV2W+KhqNLpSJcGc4g6HHqM3y4=)
8: 326131343a333863303a323a3a2f34382d3438203d3e20323135323438.roa (hash: e6DNGKmUmYh4KhA4h67tF7nM55oym+8oQ84yYdEmy64=)
9: 3130332e3134392e3136382e302f32342d3234203d3e20323135323438.roa (hash: RPFyh+9f4VeLKwhSKFsibkww2V1WrimAJUdSq1OTL10=)
10: 326131343a333863303a3a2f32392d3239203d3e20333936303634.roa (hash: izH2bRAdoHB65ZOfP1RgM/881EkkTABDPPywFSiQ9f4=)
11: AS215248.asa (hash: OBxCaFtmon5RTxGYauxtwJ5Vaj/O+PNWdAKZ74euDqI=)
12: 3139342e3131372e36392e302f32342d3234203d3e20333936303634.roa (hash: uPzNQdfiTlC1R9B5J33ZDfQAHE+DMHweR/VNt7ogg2k=)
13: 326131343a333863303a313a3a2f34382d3438203d3e20323135323438.roa (hash: hYvWm7RFlZS1l2LX8NsvpkNf0MsxvPiQn7slmgwssck=)
14: 326131343a333863303a333a3a2f34382d3438203d3e20323135323438.roa (hash: rQvL6z8yuqUS7v24/Ra9en3S8KmIgkMtv1rcn8o1sfA=)
15: 326131343a333863303a3a2f32392d3239203d3e20323135323438.roa (hash: aQBGW4UwEpZw1viUGTiicR7R7bF3eHxKluau3FSxHVQ=)
16: 326131343a333863303a313a3a2f34382d3438203d3e20333936303634.roa (hash: hT2vS1KxZCIrrbIeX36lXo5PB7z3bFiXrMszQcpSghE=)
17: 326131343a333863303a3130343a3a2f34382d3438203d3e20323135323438.roa (hash: QZeJi0O4ini6QNF1syA5gZ8HehGzsGo0INWd9T4WodA=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl
rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Dec 2025 06:32:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:7b:f8:55:62:87:99:99:7b:11:6c:76:cb:3d:3a:79:0a:31:e6:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
Validity
Not Before: Dec 18 06:04:44 2025 GMT
Not After : Dec 19 06:32:44 2025 GMT
Subject: CN=3337B5A0D13845A76F4AEA545C05668BB93D3CB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7e:e8:43:d7:56:3d:37:7f:ad:29:d2:30:b5:
71:08:f9:62:96:34:9a:98:9c:05:f1:c2:de:7c:60:
c8:69:06:4a:5c:44:55:53:5a:76:46:b1:3e:8d:85:
bb:f0:d9:62:c4:95:a4:0b:5a:1b:70:51:99:d4:76:
40:09:da:4e:d3:84:66:06:e8:67:48:7b:b6:6d:ed:
01:bb:4e:50:55:be:45:8f:bb:59:d4:28:e6:85:20:
50:86:ca:aa:e3:c8:81:8f:d6:b9:a4:b9:aa:95:eb:
a2:06:aa:6b:ba:25:db:01:f0:51:d0:a7:d3:dd:93:
08:b3:8f:59:46:a0:eb:1a:66:79:fa:f4:2d:a9:35:
70:c5:0e:75:77:5b:8c:93:ec:71:27:38:41:07:62:
04:8c:44:ee:e7:d7:5a:a0:37:c1:c6:2c:0f:d7:c5:
5d:e2:5c:a6:d0:73:64:21:37:ab:25:36:4f:7f:15:
b4:46:8e:2f:bb:18:e3:12:67:c3:67:fc:bc:3a:e7:
1a:b8:26:d2:11:c0:74:ef:ac:13:1b:b9:fd:3d:c4:
b5:37:22:26:4b:5f:e4:ac:af:50:0d:c9:44:8b:0e:
fc:64:27:f1:45:90:5d:a3:00:85:74:46:9d:1c:3b:
34:e0:9e:88:05:24:22:77:d9:f5:4f:b0:40:5a:9a:
86:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:37:B5:A0:D1:38:45:A7:6F:4A:EA:54:5C:05:66:8B:B9:3D:3C:B8
X509v3 Authority Key Identifier:
keyid:5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:34:ef:5e:fe:08:b5:58:f6:2c:72:a6:d9:88:68:08:cd:31:
83:da:dd:7e:e6:28:b2:64:b7:4f:ca:98:11:68:70:d5:55:67:
5f:10:90:9f:f5:ce:39:44:c5:d9:af:31:d7:6b:f5:03:33:b2:
b6:ab:60:b9:61:ae:22:cb:f9:00:8a:a6:d1:fe:ff:77:d1:e9:
fa:23:4b:1e:0b:c7:85:b3:43:fe:81:58:8b:5c:97:50:50:19:
4d:dc:a5:c2:2c:47:67:b6:e8:cf:80:d4:d0:55:35:d1:34:b7:
42:41:25:33:0b:45:44:98:06:8b:73:e4:2f:f0:b3:bf:85:2b:
0c:cd:e0:e0:19:53:54:8e:08:d8:c8:5a:c6:c3:93:fe:e1:cf:
1d:60:62:f4:ad:36:2c:11:76:f2:02:5b:49:b9:f3:15:76:6e:
b6:fb:f1:1e:74:66:39:e9:c7:9a:89:ca:04:60:44:c1:ba:cc:
89:b6:e9:8d:1d:e6:40:ce:74:1b:b3:85:2f:43:65:c6:b7:03:
73:e3:8b:50:ba:66:47:de:bf:2a:e1:cf:f0:19:4e:96:66:98:
2f:86:e2:27:5d:73:40:96:b7:fd:37:e9:8e:65:f7:7f:1b:80:
53:7c:f4:51:b9:bf:08:a6:71:51:e0:8d:17:f9:0d:f9:4b:d6:
46:97:e6:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 19:06:46 2025 by rpki-client