This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft
File: 51917E722DB03952D9056BED2F6BD4BF98B78976.mft (raw, json)
Hash identifier: gqTxo3nVgKyDNCORgd7Pe+fypEpyx6q38bDCR/gUe6g=
Subject key identifier: FC:6F:40:11:0B:83:59:09:1B:6B:CD:4B:1C:1E:27:5D:8C:B0:09:DB
Authority key identifier: 51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76
Certificate issuer: /CN=51917E722DB03952D9056BED2F6BD4BF98B78976
Certificate serial: 54EE0814435096718884E6F94C4068D205F4EEF5
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft
Manifest number: 0129
Signing time: Fri 19 Dec 2025 18:04:54 +0000
Manifest this update: Fri 19 Dec 2025 17:59:54 +0000
Manifest next update: Sat 20 Dec 2025 18:38:54 +0000
Files and hashes: 1: 326131343a373538303a666635313a3a2f34382d3438203d3e20323039373130.roa (hash: KcfiSDiqDvlLOqfaLqph9s6F4NvpySAcmNFiwDriyms=)
2: 326131343a373538303a666635323a3a2f34382d3438203d3e20323039373130.roa (hash: vs66PWFM6L/hirNyhIXTRaz65c001j+IhkCdp8VdfS4=)
3: 326131343a373538303a666635303a3a2f34382d3438203d3e20323039373130.roa (hash: RhrZumuCHn+6y3yZr34sdgh4sb8kS47/Ka9E3B3UluQ=)
4: 326131343a373538303a3530303a3a2f34302d3430203d3e20323039373130.roa (hash: UtWLjV2JD6X8emwUC9bu8RyXGCD7bzymrTBVIEkaVv8=)
5: 326131343a373538303a666635353a3a2f34382d3438203d3e20323039373130.roa (hash: 5weylF9E+kZUqdJn7nMGLccAIkWjUNuo5MqarqyfkO8=)
6: 326131343a373538303a666635333a3a2f34382d3438203d3e20323039373130.roa (hash: UpFVw7x1NBf/Uix4G0zJEj+QV4riL3tEIjso5GywhOU=)
7: 326131343a373538303a666635363a3a2f34382d3438203d3e20323039373130.roa (hash: SwKF9ZgurLBB1Omp9sHNYZoTnYJ/E2ALGPkMC5kD1BA=)
8: 326131343a373538303a666635343a3a2f34382d3438203d3e20323039373130.roa (hash: i7VkbN6Rb5CnHlmR8BF2dlC+Uq3PFV4wJTcaolWAu+U=)
9: 326131343a373538303a3530303a3a2f34322d3432203d3e203331383938.roa (hash: 7z5RoyaJRkP9nx99eQ4HknE9KjY7eFLuMQrU4NhLP9s=)
10: 51917E722DB03952D9056BED2F6BD4BF98B78976.crl (hash: TDvQFnE0e7TDNaJPYuGj+yICUrjTdVpBrDRGqYRIENY=)
11: 326131343a373538303a666635303a3a2f34342d3434203d3e20323039373130.roa (hash: SHYewRnAEyfHeIS/ErCy1dNpuo8kVPzhKkgjNNzYVkM=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl
rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Dec 2025 18:38:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:ee:08:14:43:50:96:71:88:84:e6:f9:4c:40:68:d2:05:f4:ee:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51917E722DB03952D9056BED2F6BD4BF98B78976
Validity
Not Before: Dec 19 17:59:54 2025 GMT
Not After : Dec 20 18:38:54 2025 GMT
Subject: CN=FC6F40110B8359091B6BCD4B1C1E275D8CB009DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f9:1b:2c:e4:96:08:c7:cd:43:da:26:d8:95:
21:f1:1a:6a:98:7b:f2:db:e9:2c:cb:f1:b9:0e:92:
24:b5:8a:3e:3e:77:10:c8:eb:8e:3e:65:77:92:bc:
da:19:58:6c:21:d7:b3:67:ab:e4:fa:bf:c3:1f:10:
b6:9e:26:d7:11:95:a0:94:5a:24:5f:e1:a3:89:61:
9b:4e:ac:7f:da:30:2f:66:2d:8e:10:8e:69:bf:c6:
0e:29:75:77:c1:2e:52:98:da:0c:00:1e:aa:60:a7:
70:33:a9:24:51:15:b1:e0:ba:e8:a5:be:30:4c:74:
03:06:b9:bb:d5:e1:eb:f1:05:a5:5d:2d:46:0d:a2:
b6:ac:cb:01:9a:ea:2b:9c:ff:e9:ea:52:c8:6f:f6:
f2:bc:3b:f2:0c:13:ee:19:bc:d2:50:24:15:b3:01:
2e:65:a0:9e:f5:10:14:7e:2a:23:e0:79:af:ce:fc:
99:b3:d3:fc:a4:88:57:29:09:91:ba:ee:ee:31:94:
75:80:9e:fb:9d:65:38:b8:b1:16:a9:1a:74:38:5a:
ba:4b:e7:65:56:4a:93:26:3c:c1:0f:12:2f:3b:1f:
75:5a:5b:a8:87:e5:8c:bd:89:a3:d9:1a:22:d7:b5:
6f:1d:00:e9:14:a9:40:36:4a:50:1f:e3:e2:d0:cb:
d4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:6F:40:11:0B:83:59:09:1B:6B:CD:4B:1C:1E:27:5D:8C:B0:09:DB
X509v3 Authority Key Identifier:
keyid:51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:00:34:10:44:02:9e:fa:7c:d4:07:e4:04:41:47:3e:5c:98:
22:bf:e5:09:2b:31:9a:d8:11:f1:b7:50:7b:28:85:5b:44:ed:
24:bd:5c:5f:04:07:29:ea:43:a0:cf:48:f5:f6:56:27:a1:36:
b0:98:a0:76:82:4b:08:d4:5f:36:7a:b8:57:c0:dc:0d:db:96:
d7:a6:d9:6b:e3:a0:88:44:9b:e6:30:80:5b:14:3c:f9:6d:b8:
99:10:11:5c:e5:8b:b6:99:fa:ad:d0:39:d8:40:26:c5:c6:0a:
ae:30:7c:fa:52:5c:41:dd:63:e5:46:01:a9:b6:9a:cd:e8:c0:
f9:d2:a0:a2:28:cb:25:8a:7f:ac:d3:15:52:5a:a9:13:cb:17:
fb:b4:67:54:ec:cb:96:25:96:03:8e:05:25:68:72:80:51:be:
b7:d8:5a:8b:56:d8:97:80:6f:d3:d8:54:3d:5b:88:f6:76:dc:
c2:e6:e8:09:fa:09:22:8c:83:da:f8:94:9d:bd:d5:b8:32:45:
b2:62:4e:ab:51:af:4a:d6:e5:5e:49:dd:37:8b:36:01:72:c6:
30:4e:53:90:78:17:80:9c:bc:05:f0:24:04:5b:69:26:c8:7f:
2f:0f:be:bf:93:89:b7:0d:d9:ab:04:6a:9c:bf:f7:26:bb:7d:
f5:68:57:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 08:46:36 2025 by rpki-client