This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft
File: 78D65D4A22DF705BEED7B3432FBE48A356597724.mft (raw, json)
Hash identifier: Wdz56/BymLWt6GcMK20zenFp0rxPx5YTEjyV6SpUxYg=
Subject key identifier: B2:74:FA:36:5B:F4:43:B9:6A:14:83:4D:5D:C3:91:FD:31:FC:3C:FE
Authority key identifier: 78:D6:5D:4A:22:DF:70:5B:EE:D7:B3:43:2F:BE:48:A3:56:59:77:24
Certificate issuer: /CN=78d65d4a22df705beed7b3432fbe48a356597724
Certificate serial: 35ED5D084820901DE6E20DA51D62DE78B53DC7A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft
Manifest number: A5
Signing time: Sat 20 Dec 2025 05:57:34 +0000
Manifest this update: Sat 20 Dec 2025 05:52:34 +0000
Manifest next update: Sun 21 Dec 2025 08:35:34 +0000
Files and hashes: 1: 38302e38332e3138382e302f32342d3234203d3e203634323637.roa (hash: Zn2fU/zf/URUjzPX4k5UlzylOiLYtLrcrJVzOaLXmd8=)
2: 323030313a346365383a3a2f32392d3239203d3e203539373136.roa (hash: CgDSfpo0IftLrA7o4eNAILZADKAHzaR3sZbqAdusdP4=)
3: 38302e38332e3139302e302f32342d3234203d3e203634323637.roa (hash: e7OjSlp/jABhHoAxV0NvuSo5CYOdNcptQrwcU0YPf4I=)
4: 323030313a346365383a3a2f33322d3332203d3e20323530.roa (hash: zJJBd2Rg1C8mF3Brr7ZPVnCCMMdyplxley/QZ6Up3Cg=)
5: 38302e38332e3138342e302f32322d3232203d3e203539373136.roa (hash: olHSbZHs/2t98PZjXMrMMRiZVSEe6IbSK97ATG0UHJ0=)
6: 38302e38332e3138382e302f32322d3234203d3e20333937363330.roa (hash: we+BIDcecMDdhb3LTIFwBqfI4/tuGmFvD0wy77xN0HU=)
7: 78D65D4A22DF705BEED7B3432FBE48A356597724.crl (hash: IL6lCaB0wsqwLmQulnB2DTn8QlxN4B8hrHM49g2ZhIs=)
8: 3138352e3139302e3232382e302f32332d3234203d3e203332313332.roa (hash: jVr1HOM/vAQFN9/2YcEKEGs7D1zQDrdtbTvacM//wP0=)
9: 3138352e36392e322e302f32342d3234203d3e203539373136.roa (hash: C4vtZUJ4sSvWQ2xt2gUpLOR/9kh093F6GFa+cSWJX6U=)
10: 38302e38332e3139312e302f32342d3234203d3e203534323532.roa (hash: t/r9GueVtBRqkEzG5ECpDmGAbhT8tQffnXyVbWMfuP8=)
11: 38302e38332e3138392e302f32342d3234203d3e20333937363330.roa (hash: buBr0nPzFwtnExYzKZ33K40LR3ws0xsbE+PF1JfUozA=)
12: 38302e38332e3138382e302f32322d3234203d3e203534323532.roa (hash: oxLxEjiJHAfR5sb7doKgFq8fOEt0To+nubINa8ThuEA=)
13: 38302e38332e3138382e302f32322d3234203d3e203634323637.roa (hash: usGVmfBSjshsI+jZ0UI5vbfRCtEIbFpWtlpk5JhJZu8=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.crl
rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft
rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 08:35:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:ed:5d:08:48:20:90:1d:e6:e2:0d:a5:1d:62:de:78:b5:3d:c7:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78d65d4a22df705beed7b3432fbe48a356597724
Validity
Not Before: Dec 20 05:52:34 2025 GMT
Not After : Dec 21 08:35:34 2025 GMT
Subject: CN=B274FA365BF443B96A14834D5DC391FD31FC3CFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:24:a3:c4:4b:03:62:f1:ae:18:67:0a:fa:60:
d8:ba:36:ec:a8:ed:25:bc:71:d1:d8:d2:c9:10:2d:
97:0b:25:54:f1:9f:7b:fa:49:ba:66:2b:69:f4:65:
28:22:08:ef:9f:cc:69:77:7e:e8:6c:1a:de:8e:43:
c3:6f:d9:27:6a:d3:ca:ad:fa:22:fa:36:02:2b:90:
97:a3:d8:71:ab:12:7c:ed:ff:bb:04:6e:98:77:58:
ad:dc:2c:65:c9:8b:cc:48:b2:41:94:d6:c7:5a:3f:
f6:44:9a:2e:36:5d:d1:32:53:b7:6c:cc:c2:59:b0:
f9:95:98:e6:69:f6:a3:30:e5:ab:a4:0c:d1:63:34:
ba:2b:30:2c:83:06:bc:67:90:03:0b:10:b6:cc:6b:
37:78:e6:10:a4:fa:b7:c3:2e:43:ef:ef:39:c7:13:
9f:0c:eb:af:80:29:e2:f6:3c:ce:cb:b2:89:94:d8:
e8:04:ff:da:fa:3e:48:6c:cd:9b:4b:10:fe:fe:77:
d8:b9:ed:93:04:98:92:92:9b:a3:eb:ac:df:09:e8:
8d:4b:3b:fc:32:f9:39:17:7d:fd:31:4f:62:b6:ab:
f3:ca:30:2c:3c:4f:3a:c7:68:89:da:c2:7c:f9:9d:
d7:5c:ef:e6:61:d1:6a:54:09:99:ef:60:27:ee:0c:
e1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:74:FA:36:5B:F4:43:B9:6A:14:83:4D:5D:C3:91:FD:31:FC:3C:FE
X509v3 Authority Key Identifier:
keyid:78:D6:5D:4A:22:DF:70:5B:EE:D7:B3:43:2F:BE:48:A3:56:59:77:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNZdSiLfcFvu17NDL75Io1ZZdyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8925ad15-af0b-45cd-b883-1a058fa0eba1/0/78D65D4A22DF705BEED7B3432FBE48A356597724.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:63:c2:8a:90:e3:ed:ea:be:f7:1d:55:3e:73:0f:a1:66:8b:
37:36:20:88:d7:28:07:87:17:75:3d:6c:ab:57:dd:b9:11:18:
96:ff:1e:ea:be:20:4f:ac:11:7f:8c:37:72:81:63:77:23:0d:
0d:c1:3f:6b:47:8b:ef:50:00:f3:78:0c:38:a0:f5:6f:f0:c3:
54:49:97:bb:bf:b4:74:a6:ac:3d:ed:bc:c3:52:06:c6:be:20:
e5:c9:c8:0c:6e:e9:49:ac:03:03:48:0a:a2:ad:6a:0a:88:31:
b9:c8:17:93:8f:51:45:7c:84:e6:fc:87:fd:0f:a5:58:5f:9b:
60:a6:3b:70:05:ba:f9:c0:96:a6:8e:a2:0a:0e:c4:e3:1f:19:
96:15:01:2a:32:84:29:fd:51:4c:9d:ef:ac:c1:07:d6:01:57:
c5:9c:4e:ee:71:d6:db:61:2c:ad:ac:86:8c:b8:ff:2d:86:80:
75:21:98:b1:56:61:fa:45:fd:11:d0:23:f3:36:7f:fd:c0:6c:
b7:45:7b:1a:76:91:90:04:6e:e9:40:a5:85:1b:7f:37:90:a2:
a5:ae:30:75:40:9c:a3:e7:10:a7:9a:61:a8:15:64:f0:df:b5:
65:97:51:50:82:29:30:b8:00:17:8f:db:42:c1:a3:9b:73:05:
4a:b2:8b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 22:29:58 2025 by rpki-client