This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft
File: 307456E03A11DBB48443E93538958B15B4E9E0F0.mft (raw, json)
Hash identifier: 1eowK1RHfsWmAYgg3RWbz/44uCO5aV4P6bthleGqNto=
Subject key identifier: 53:1D:64:08:98:B4:BA:27:CE:5E:42:A3:F9:93:72:2E:32:C7:37:10
Authority key identifier: 30:74:56:E0:3A:11:DB:B4:84:43:E9:35:38:95:8B:15:B4:E9:E0:F0
Certificate issuer: /CN=307456E03A11DBB48443E93538958B15B4E9E0F0
Certificate serial: 08F3DA2BD2C4B676C4BBA7A522FAB07A4B2FF8EF
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/307456E03A11DBB48443E93538958B15B4E9E0F0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft
Manifest number: CE
Signing time: Sun 21 Dec 2025 04:39:14 +0000
Manifest this update: Sun 21 Dec 2025 04:34:14 +0000
Manifest next update: Mon 22 Dec 2025 05:55:14 +0000
Files and hashes: 1: 307456E03A11DBB48443E93538958B15B4E9E0F0.crl (hash: YLYQkNYXJPRmI24X+fUTpDN25r3PT6eghaG1YZPfSHw=)
2: 3130332e3133392e38382e302f32342d3234203d3e20323134383039.roa (hash: aBp6U2aVMH3hSM5eeFVi+p63pJd0WYDoQYC72uEJ/w8=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.crl
rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/307456E03A11DBB48443E93538958B15B4E9E0F0.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Dec 2025 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:f3:da:2b:d2:c4:b6:76:c4:bb:a7:a5:22:fa:b0:7a:4b:2f:f8:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307456E03A11DBB48443E93538958B15B4E9E0F0
Validity
Not Before: Dec 21 04:34:14 2025 GMT
Not After : Dec 22 05:55:14 2025 GMT
Subject: CN=531D640898B4BA27CE5E42A3F993722E32C73710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cf:82:16:90:d7:b7:61:99:90:3b:76:38:e6:
8e:b3:d8:ec:e4:3c:af:aa:49:45:64:54:92:50:d0:
3a:15:64:91:2a:08:3a:17:23:d4:bc:64:b9:3d:10:
7e:94:5a:b8:67:d6:24:be:32:a1:0d:3b:af:62:2c:
36:f0:98:e3:e5:7a:af:be:16:df:8e:7d:dc:cc:84:
73:3a:36:53:86:a7:78:50:59:20:89:60:fa:ee:a2:
ac:ad:20:32:83:dd:73:ea:d4:14:de:a8:38:f7:78:
47:89:c0:75:7d:6e:1f:03:a4:2a:0c:f7:36:83:ca:
bd:48:46:43:81:bf:20:8a:a8:fb:1a:41:df:d4:ff:
df:81:8f:d9:74:c3:2f:2d:2b:01:0b:97:72:04:bf:
0b:97:e2:1a:3f:a4:f8:6c:df:a1:99:56:dc:6d:1d:
a5:96:79:2d:bf:7d:5e:e5:87:12:36:8a:e3:9f:8d:
1c:c4:0c:e5:67:3c:c6:5d:49:40:1a:2a:26:7f:28:
33:ec:7f:b3:1f:a5:b5:ac:ed:6a:8c:b5:50:37:35:
0e:f6:b8:31:e5:ac:4d:3e:7c:28:e3:f8:8b:f1:35:
7e:ee:94:af:b5:99:26:5f:ef:21:82:0f:dc:27:df:
5d:4b:df:de:e7:24:2a:f6:2d:f1:8f:13:a2:c6:68:
cb:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:1D:64:08:98:B4:BA:27:CE:5E:42:A3:F9:93:72:2E:32:C7:37:10
X509v3 Authority Key Identifier:
keyid:30:74:56:E0:3A:11:DB:B4:84:43:E9:35:38:95:8B:15:B4:E9:E0:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/307456E03A11DBB48443E93538958B15B4E9E0F0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:de:33:86:b5:5e:12:e2:be:2f:07:c8:8f:1d:75:f3:a9:1f:
b4:17:56:c7:19:30:c4:8a:89:8b:3f:ce:be:85:c3:bf:db:ce:
3c:ea:3c:98:0d:06:a2:6d:15:a4:69:2e:d0:9e:77:b6:f1:cf:
5c:0d:f8:75:78:cc:89:b8:99:98:10:4c:64:cb:14:cc:8d:9b:
4e:54:80:4c:b6:f0:c9:dd:4d:b1:8b:26:9d:21:6e:15:d8:53:
14:09:d7:16:67:8c:5c:47:00:3a:05:0a:96:8f:f1:b8:58:e6:
60:98:92:26:04:d6:4e:e7:74:ee:14:89:b2:75:fc:36:26:d6:
57:a1:9e:a6:e7:c7:55:f7:5a:6e:bb:7d:5f:9b:f2:1b:82:75:
ef:79:1f:56:e5:df:36:78:3a:47:87:27:b4:70:ad:38:1f:45:
2b:98:01:41:1f:0f:be:04:4d:bd:49:44:16:9e:76:50:88:7f:
1b:6a:3e:48:05:99:f3:15:d0:06:49:5f:bc:01:69:ec:67:e0:
78:bf:1c:e7:08:0d:30:83:9a:ee:a8:cf:9e:98:d8:b8:3e:a8:
31:25:34:5b:0a:11:05:e1:7a:f3:f6:38:f3:52:05:b9:ef:ed:
55:73:71:84:4c:38:36:9a:0d:c9:bf:db:89:06:fc:d1:00:95:
f6:50:a7:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 08:20:30 2025 by rpki-client