This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/2/514B8293389DEFDD9849D045DD45ECCF576747FA.mft
File: 514B8293389DEFDD9849D045DD45ECCF576747FA.mft (raw, json)
Hash identifier: vISML9KfMntcWQw5JJJF9m6jIn313kVrBS2nahv0ijM=
Subject key identifier: B0:E5:D6:06:EF:DB:F4:33:CB:1D:25:68:82:45:A9:3A:66:0C:09:17
Authority key identifier: 51:4B:82:93:38:9D:EF:DD:98:49:D0:45:DD:45:EC:CF:57:67:47:FA
Certificate issuer: /CN=514B8293389DEFDD9849D045DD45ECCF576747FA
Certificate serial: 7C5E09D0A3896C2B41CE6C7712EE55E932A024DF
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/514B8293389DEFDD9849D045DD45ECCF576747FA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/2/514B8293389DEFDD9849D045DD45ECCF576747FA.mft
Manifest number: 0B
Signing time: Thu 18 Dec 2025 17:02:06 +0000
Manifest this update: Thu 18 Dec 2025 16:57:06 +0000
Manifest next update: Fri 19 Dec 2025 20:27:06 +0000
Files and hashes: 1: 514B8293389DEFDD9849D045DD45ECCF576747FA.crl (hash: UoSFTqh/6yox8p5z6U2eFwRsdiZnD1G81XVlztAqE0E=)
2: 326130663a316363353a313630303a3a2f34302d3438203d3e20313939333130.roa (hash: oRud3MAKc35BhPQ/dECbRR4jBQu+j+D0nvvbv3UFhqw=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/2/514B8293389DEFDD9849D045DD45ECCF576747FA.crl
rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/2/514B8293389DEFDD9849D045DD45ECCF576747FA.mft
rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/514B8293389DEFDD9849D045DD45ECCF576747FA.cer
rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.crl
rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/75A838E02C61800F73D3019DE0A51F567B64BC0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/dag44CxhgA9z0wGd4KUfVntkvA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Dec 2025 17:17:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:5e:09:d0:a3:89:6c:2b:41:ce:6c:77:12:ee:55:e9:32:a0:24:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=514B8293389DEFDD9849D045DD45ECCF576747FA
Validity
Not Before: Dec 18 16:57:06 2025 GMT
Not After : Dec 19 20:27:06 2025 GMT
Subject: CN=B0E5D606EFDBF433CB1D25688245A93A660C0917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:21:dd:52:5d:4d:f5:77:9c:aa:36:ab:4b:fd:
09:56:04:d0:9e:cb:e3:b7:cd:0a:b9:d3:78:55:c9:
1a:98:b0:96:2f:c8:2c:7d:c5:45:76:6c:49:38:c9:
56:85:93:06:5a:dd:d1:3f:de:93:86:4f:6e:4e:19:
ae:e3:f6:88:d9:cc:e0:9a:7f:b7:1b:73:04:df:e9:
cd:46:b6:e1:b3:bd:3c:0f:1a:6c:b5:50:20:2e:bd:
8c:bf:1c:b6:64:40:5f:91:6d:b4:b4:5c:7c:43:f7:
2f:7f:fd:a7:8f:7f:93:37:e6:21:7c:79:36:aa:b5:
08:7e:98:e5:75:ab:29:ef:b9:b5:1b:09:aa:a9:81:
9a:a6:35:1f:9b:49:ab:60:52:4e:52:53:73:af:78:
d4:39:d9:dd:e0:80:aa:07:bb:b6:1e:84:77:4a:bc:
4d:b8:a7:28:31:54:ec:31:3b:d0:e1:7b:0e:7b:4a:
a0:2d:0e:94:b0:75:2e:e7:d3:61:63:6c:98:69:d7:
f3:92:47:4d:07:c1:83:b4:fc:64:50:72:37:bb:c6:
bf:b2:bd:f2:96:b0:d7:f1:f6:c1:c0:af:d6:3f:3a:
f5:0d:44:d4:a0:97:60:e3:91:fb:a8:19:34:5f:ef:
55:7a:08:f0:42:69:95:6e:25:a5:59:72:6f:86:0c:
a5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:E5:D6:06:EF:DB:F4:33:CB:1D:25:68:82:45:A9:3A:66:0C:09:17
X509v3 Authority Key Identifier:
keyid:51:4B:82:93:38:9D:EF:DD:98:49:D0:45:DD:45:EC:CF:57:67:47:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/2/514B8293389DEFDD9849D045DD45ECCF576747FA.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/514B8293389DEFDD9849D045DD45ECCF576747FA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/2/514B8293389DEFDD9849D045DD45ECCF576747FA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:34:1d:b8:ff:ca:58:ed:c5:d9:57:f7:f1:4a:e1:ec:14:67:
77:d6:7c:11:2c:c2:58:8c:00:5b:08:ac:9a:86:af:fb:8d:6b:
1c:ed:72:cc:28:d4:56:5c:5b:50:8b:94:03:5a:40:c9:91:57:
6a:5c:48:71:3c:d0:99:e3:69:14:f9:6d:41:37:1f:65:64:81:
04:b9:e6:4c:24:d6:cf:67:05:62:c3:01:9d:ee:bd:30:2c:fb:
85:f2:85:01:d4:aa:3b:06:3c:a2:72:b0:fb:45:95:fe:0f:3d:
5d:f4:d5:c0:50:01:a7:09:a3:73:41:5d:ad:97:39:22:0d:ae:
9c:42:0d:55:0e:04:a3:7b:37:cd:3b:5b:b0:78:83:43:5e:5c:
55:19:2d:21:b1:5c:26:3c:35:67:96:63:e6:bd:b0:8c:29:56:
68:0a:78:ad:e2:ff:73:c3:30:55:f7:a8:48:eb:ce:05:e1:b3:
90:00:e1:90:d1:f9:e9:3b:b2:ef:1e:f2:69:bc:16:b5:2b:7c:
6f:cc:f8:06:1f:8a:12:fa:87:96:b7:e3:43:eb:26:9b:4d:a7:
77:2b:52:6f:51:32:dd:a1:b3:14:6a:32:1f:cb:8d:bf:7f:ca:
d9:0b:e1:34:b1:8d:0c:47:0d:7b:46:45:84:54:10:75:50:55:
f1:bd:99:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 05:02:05 2025 by rpki-client