This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft
File: 24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft (raw, json)
Hash identifier: PF5lI4Kdxov/b70LNsY3uUxp0biKNaInL6e4Ob176eU=
Subject key identifier: B0:3C:4D:F0:82:EB:C8:88:A1:36:E0:82:4A:17:ED:EA:09:08:CD:88
Authority key identifier: 24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00
Certificate issuer: /CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00
Certificate serial: 3E62F71F1813B08C393778F9ABFBDB9C0D20EBEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft
Manifest number: 050F
Signing time: Fri 19 Dec 2025 11:57:33 +0000
Manifest this update: Fri 19 Dec 2025 11:52:33 +0000
Manifest next update: Sat 20 Dec 2025 13:31:33 +0000
Files and hashes: 1: 34362e3138332e33312e302f32342d3234203d3e20313734.roa (hash: 3Z7e+5TwzBef1b9VYHjpmL+5jzamN8gXYO/wLKWP7lA=)
2: 34362e3138332e32342e302f32342d3234203d3e20313432313436.roa (hash: U6sIE1tc5XNg8Vw7jnbxLLCNANnB9wH3voxb1FhuZwc=)
3: 24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl (hash: USYbXvyW5ix9AogXcR99DRjJ0KA/syra4Eg19LHOG9I=)
4: 34362e3138332e32362e302f32342d3234203d3e2039303039.roa (hash: ckwThy9Ftd6Jb/nTbj53dd12b3F3RSR9Etp8JSW5svM=)
5: 34362e3138332e32392e302f32342d3234203d3e2039333034.roa (hash: 4l3m4JRRITIOBfhSXA3v4T1Tc1t3gHbU2TsBgQabcVg=)
6: 34362e3138332e32352e302f32342d3234203d3e20323132323338.roa (hash: lxi2m0tJ4IwcIv1Qu/mxuwgzf8BGdtHdxfKNM9mKZEQ=)
7: 34362e3138332e33302e302f32342d3234203d3e203631333137.roa (hash: pxnqedD3kuwz1m+9x0q4e9R46P3xXGAP6tM7JZr4zqQ=)
8: 34362e3138332e32352e302f32342d3234203d3e203633303233.roa (hash: 4jq0qwMJqWtfRUuzz3vPyKHtua4FM5/8Y3cvVGfTKBM=)
9: 34362e3138332e32382e302f32342d3234203d3e203631333137.roa (hash: EQc8ZSWRYu3w3yABE1KT+uLZnchUtUDhUBMKc9gsz8U=)
10: 34362e3138332e32372e302f32342d3234203d3e20323132323338.roa (hash: MBTQi0HOcbTwY/4fQl+vTOHLOQ2FmR/EhBIZ6Dj3u14=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl
rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft
rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Dec 2025 13:31:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:62:f7:1f:18:13:b0:8c:39:37:78:f9:ab:fb:db:9c:0d:20:eb:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00
Validity
Not Before: Dec 19 11:52:33 2025 GMT
Not After : Dec 20 13:31:33 2025 GMT
Subject: CN=B03C4DF082EBC888A136E0824A17EDEA0908CD88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:be:86:59:11:b6:a3:05:55:bf:f6:56:47:5b:
3b:52:0e:4d:a2:aa:58:9f:fd:e4:69:5e:a5:9d:d0:
90:a4:d2:c8:65:06:e2:cb:c4:16:a8:89:ad:23:d3:
13:b0:03:2f:fb:2c:68:b5:2e:e5:35:14:65:ac:eb:
c5:b9:6c:ed:cf:b7:01:3e:d4:9c:0c:b0:ad:79:25:
19:cd:23:7d:10:7c:07:62:71:bb:30:15:4c:30:7a:
42:ee:18:da:db:59:cd:a4:c6:3e:78:b6:11:33:ae:
e7:d4:79:a9:c2:a2:1e:c9:f8:10:82:bd:06:4e:ed:
b5:db:db:36:29:31:2c:e6:c3:96:b1:26:94:ef:55:
61:d9:6f:96:09:ea:c0:16:39:39:a6:90:80:3f:a6:
68:93:cc:ec:1d:f0:24:0c:fd:fc:cf:2b:8e:4e:4f:
02:29:d2:13:dd:a9:c6:83:6f:b1:4d:97:a3:6c:03:
11:de:da:5c:fa:62:01:33:31:ee:a3:10:45:50:d3:
08:38:b0:de:1f:51:02:22:03:c7:74:98:f6:65:3f:
6d:b1:db:01:e2:1b:58:99:81:e5:2e:03:b8:d8:3f:
05:33:7c:f7:50:1e:fe:5a:82:06:9a:62:b2:96:6d:
2d:a8:52:bf:73:73:8e:72:25:6f:51:cc:63:16:1f:
06:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:3C:4D:F0:82:EB:C8:88:A1:36:E0:82:4A:17:ED:EA:09:08:CD:88
X509v3 Authority Key Identifier:
keyid:24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:42:18:0d:7c:56:d4:ae:46:53:58:03:cb:41:15:04:a0:96:
0f:2e:c2:ff:13:25:11:76:20:bc:8d:80:fa:ce:2f:9b:82:ed:
4e:2f:1b:23:18:7b:d1:de:65:80:94:a1:1e:83:e8:69:f2:9d:
ce:f6:4e:29:6b:91:5b:9e:b2:83:5b:94:5f:13:9b:e2:e3:d4:
30:2d:0d:1b:7e:82:f7:0c:f6:88:00:ac:7d:d4:12:05:29:37:
90:2f:3d:25:09:54:71:27:72:b9:57:88:b0:71:9f:0f:57:38:
06:be:94:92:8f:4d:e3:94:20:77:79:9e:d4:74:94:15:0b:3c:
7b:b0:59:3e:26:d3:7d:3b:f3:a9:a6:b5:73:b8:65:6e:48:32:
ac:5f:19:5e:27:1e:ca:ba:15:0b:6c:89:16:4d:af:a8:72:77:
73:0a:f8:08:c4:11:d2:6a:b5:4b:1b:ae:8a:65:b8:8f:6c:92:
ac:8b:30:58:4a:6a:f6:2a:86:e6:92:65:0b:6f:5c:c6:69:44:
7d:e6:c1:b6:a4:86:6c:b7:ab:34:58:f5:1e:8b:99:47:4b:5b:
77:ea:0d:d6:58:a5:ef:24:50:d5:62:46:af:53:18:90:f9:1f:
31:f4:00:16:92:35:48:a8:63:2d:25:73:db:c1:84:d1:37:fa:
cc:85:9a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 06:41:28 2025 by rpki-client