This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft
File: 5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft (raw, json)
Hash identifier: 9HvtjlrzcgfjmvKkFE7mMRhnvMkwS1sT5fyni514Vhw=
Subject key identifier: 97:CF:50:83:43:35:47:43:3E:F0:09:08:A5:B1:31:45:AC:0F:6F:19
Authority key identifier: 5A:3F:78:19:35:3C:E0:FD:13:B8:FF:CD:CB:88:37:ED:0B:F5:91:5F
Certificate issuer: /CN=5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F
Certificate serial: 075CAB6F5C4D26F1298C16A51AFAB53ECD77DF46
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft
Manifest number: D3
Signing time: Sun 07 Dec 2025 05:54:34 +0000
Manifest this update: Sun 07 Dec 2025 05:49:34 +0000
Manifest next update: Mon 08 Dec 2025 08:23:34 +0000
Files and hashes: 1: 326130363a396634313a3130303a3a2f34302d3430203d3e20323134373233.roa (hash: sTs8O8KBp3/QEgTlhnDJhb+nhykdynr848iPv4Z/TIo=)
2: 5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl (hash: o2KnqKSzPwTqe9C959+AISFgS3yPpv5K0lU1FKKYzrk=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl
rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft
rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer
rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl
rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 23:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:5c:ab:6f:5c:4d:26:f1:29:8c:16:a5:1a:fa:b5:3e:cd:77:df:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F
Validity
Not Before: Dec 7 05:49:34 2025 GMT
Not After : Dec 8 08:23:34 2025 GMT
Subject: CN=97CF5083433547433EF00908A5B13145AC0F6F19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:db:cd:48:f4:cc:a2:cb:c8:ae:f7:7a:a7:d4:
1f:cf:48:f3:be:50:70:3a:75:ac:22:58:74:24:d9:
f4:17:18:8d:1e:08:76:d0:6a:3a:be:b4:36:4c:3e:
34:7f:98:12:d9:40:e4:f2:22:fe:48:af:ea:cf:02:
ad:ca:14:af:f6:d9:9f:f3:ff:c4:6e:d1:b4:4d:b7:
c2:83:c3:27:26:7d:ef:1c:99:6d:51:2f:78:d3:c9:
ee:0c:3a:33:25:af:47:8a:54:31:8d:9e:69:c5:6e:
de:14:c2:10:25:dc:0a:58:a5:47:fe:73:54:34:bf:
77:a5:c1:1e:11:87:6a:de:6f:79:fe:0d:6f:0c:d1:
49:0a:e4:41:a3:66:e2:12:9e:d2:25:87:37:f9:1f:
36:82:a0:1f:80:c8:61:0a:f1:6e:ba:6a:a6:32:23:
81:26:d1:89:be:1c:5b:fc:30:af:44:bd:df:e3:87:
9a:70:04:0c:7a:c0:a4:06:1a:53:c3:24:11:d9:e5:
94:f9:c0:56:c5:df:fc:76:68:e2:9e:dd:68:a8:82:
58:80:1f:3c:39:b8:46:9f:ef:dd:4c:9d:88:1d:e4:
fc:79:52:e8:7a:ae:06:d0:8d:a7:c9:c5:49:c7:f2:
63:37:da:01:18:f0:79:6e:be:8a:a7:b3:10:96:2b:
e8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:CF:50:83:43:35:47:43:3E:F0:09:08:A5:B1:31:45:AC:0F:6F:19
X509v3 Authority Key Identifier:
keyid:5A:3F:78:19:35:3C:E0:FD:13:B8:FF:CD:CB:88:37:ED:0B:F5:91:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:c8:46:ce:48:e8:c1:9f:f7:e8:0a:0a:83:57:1a:b2:54:56:
82:02:0a:03:04:47:51:d2:7f:9a:70:43:2c:37:4f:70:b0:d1:
d6:48:1c:7b:a7:73:9e:b0:26:e3:96:b6:57:71:39:99:31:60:
9e:1d:60:f2:17:ad:d4:b9:c4:9e:5b:21:69:17:c2:9f:53:15:
62:c1:bf:1a:52:93:7a:17:6e:4f:99:a4:df:54:63:20:33:2b:
c3:03:c5:87:db:b5:84:91:f6:fd:56:5a:fd:20:59:84:2a:09:
1d:37:d3:d4:7e:d4:e1:97:79:4d:27:a6:de:58:98:9b:08:d6:
8f:c2:86:d5:16:c5:94:00:4f:61:95:b6:ae:c4:13:45:42:44:
b5:15:ab:15:f1:93:f8:b2:9b:0e:41:6b:29:37:a3:81:ec:18:
67:be:fa:ca:a8:f1:c8:b2:4d:53:82:a5:ca:1c:40:6e:18:91:
09:00:12:b1:3a:40:58:8d:62:89:92:ed:34:31:fc:67:db:e1:
63:c5:86:9d:30:fc:ae:22:d1:a8:07:44:c0:e3:79:1c:17:52:
22:83:6c:f2:34:84:1a:09:3c:15:94:43:e3:6b:76:6d:34:68:
cb:df:9a:13:d1:2f:2c:9d:27:2e:4c:7a:52:35:59:05:1f:ba:
9b:06:7c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 09:00:31 2025 by rpki-client