This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
File: CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft (raw, json)
Hash identifier: LCqzR3X1vg7Qqj/NwlCSREcKmArl/VWMk05qt4traXA=
Subject key identifier: 0E:EC:75:A4:B7:0C:98:6D:79:D1:D1:71:C1:EF:A0:72:75:53:DB:EB
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 01F418AB2E29A4CD3D8AB5D8A4735C96F0AF426C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
Manifest number: 05D3
Signing time: Fri 19 Dec 2025 08:32:33 +0000
Manifest this update: Fri 19 Dec 2025 08:27:33 +0000
Manifest next update: Sat 20 Dec 2025 09:03:33 +0000
Files and hashes: 1: 34352e31332e3134382e302f32332d3233203d3e203632333837.roa (hash: 5EJNV4UhdWOuwnTNcgbmbjrtx0zc2Gwd0NznlniRrK0=)
2: 3137362e3132362e3130352e302f32342d3234203d3e20313532363732.roa (hash: ds/1M3gFH31reCXMtWJtKut2HrejgsPE/Ioz8CidATY=)
3: 3134362e31392e3231362e302f32342d3234203d3e20313334363737.roa (hash: r2VWTeXnfDWuim8gDU2ktI3y2NGYwT6ofTi2l1VlIzk=)
4: 3231332e352e3132382e302f32342d3234203d3e20313939303538.roa (hash: gEy9Oc8qQMzfRi3Vg23eKfgAotPRUQjE79aKVoo7YPw=)
5: 34352e382e3137332e302f32342d3234203d3e20323135303531.roa (hash: KTke8ZWqVLA3ANHJ800vvcDHEpQ20KNFTJcuTxVUvFI=)
6: 322e35382e38352e302f32342d3234203d3e20383334.roa (hash: tlmvzJ4yU5noW/rrvRUB30jWwtpRp8Or9JFg8aJLA6I=)
7: 3133302e3139332e37352e302f32342d3234203d3e20313938383833.roa (hash: X0vCJBzdFH4FS7gRUxhOxAXsLYNsOL4GffJBGoP62Nc=)
8: 3134362e31392e35332e302f32342d3234203d3e20313532363732.roa (hash: R9JC3sHytncw5nwNxoiEF3pniUcJV4GyDa9/Vt4/Lgk=)
9: 3138352e3231322e3131332e302f32342d3234203d3e20323032363738.roa (hash: 0I5n2Zxpd6ZVl5qO7efqO/5G3aMiaibcayoOxL2ddNw=)
10: 34352e382e3137332e302f32342d3234203d3e20323032363733.roa (hash: 5zwugYWKE+SXj7j9OQLYcPTCHp3CNiw9ZvtoZL3oq9E=)
11: 34352e36362e3134382e302f32342d3234203d3e203631333137.roa (hash: 9x1QRSqxq7oLu3gp885IDU4m85ilCP4ZqtuwIJ3/i80=)
12: 3133302e3139332e37352e302f32342d3234203d3e20323132383135.roa (hash: 0KfkzJx6v7WvN2jvvqOfF0fI8+Z91Ctb8PuaEX/6n0M=)
13: 3139332e33352e3232362e302f32342d3234203d3e203536393632.roa (hash: 4UgfT6p/2Q50B5wnsVKN4mv/hFd7RZLIZ15wgnKLY7k=)
14: 322e35382e38372e302f32342d3234203d3e20323634343039.roa (hash: mkGL2Y74THGESksATgz18aFujAfAh2hZzUMM/zMEgtE=)
15: 3231322e31382e3131362e302f32342d3234203d3e203139343337.roa (hash: 2oZavsRfA1Q40x9PaOnupB4Ub1RzFaGZLNyIg+RCt6s=)
16: 36322e332e31382e302f32342d3234203d3e20323136323931.roa (hash: Mv5UcVUln6H+m2ppbCqxuT1Ft1vn2bxsaMxY5fGcRzU=)
17: 34352e36362e3135312e302f32342d3234203d3e20333933393432.roa (hash: WkX/VhOIB2Xh55Xo8/0X7WB7DxjTEctJTPIyu/NmXnQ=)
18: 3133302e3139332e37352e302f32342d3234203d3e20323135373237.roa (hash: DfFd6UBLBkplTu5ftGj8Fsf1wrwJQPF9A4xQAHF4/X8=)
19: CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl (hash: qJsCawJvk1XRozqmKTyObd+eTuBbGMknHTFUu4rsBBs=)
20: 38392e3130372e392e302f32342d3234203d3e20313534303439.roa (hash: W8Nr5Pu7VW6wiorrg4hzFmpLYlb8TxaBJrzhK/IwqPg=)
21: 34352e31332e3135302e302f32342d3234203d3e2039323934.roa (hash: GNXJYPkhU5PAMN0CYYnBrOwVIuiyCeBKcANNAOXiG4w=)
22: 34352e31332e3135312e302f32342d3234203d3e20323135373033.roa (hash: aPdRk0yj6WHAWMnGbb2l+kFCRQlNzfB9p5fiHofDu7s=)
23: 3134362e31392e3231352e302f32342d3234203d3e203432383331.roa (hash: iRYq59bmQokDL09C0IXxdPyvoOhAH6U1C6tDW9/0QSs=)
24: 3231322e32342e3132372e302f32342d3234203d3e203136323736.roa (hash: Rs7w/chVuiM2q/eQlWg7hYcTj07lMXsGjRzGrKCmtq8=)
25: 3138352e3235312e32332e302f32342d3234203d3e20323030303137.roa (hash: 1nHeHr5ez78VSQCwBDXobb8Hijb3cSpgsJnQt2+b4+w=)
26: 322e35382e38342e302f32342d3234203d3e20323136323231.roa (hash: U1S3You+fAZhVhvcdrRdWu8kGCzRG+R0tCv8DlClNys=)
27: 34352e36362e3135302e302f32342d3234203d3e20333937333733.roa (hash: 5DUJVA+pSWGfl0obwZfoWi9lZoQLdECnA4H9VJT+xbw=)
28: 38332e3133382e35302e302f32342d3234203d3e20333936303236.roa (hash: X0JUgkm7bWAXyQ4SYkYDH/4wFz74Xhku1L5c/GFGAX0=)
29: 3137362e3132362e3130352e302f32342d3234203d3e20313432313131.roa (hash: BtY1Y1S506xUDGL3HPYJouh8HE8Bfu5LiAut28ETk7w=)
30: 34352e382e3137352e302f32342d3234203d3e2037353632.roa (hash: gPOJ5OYy4C3HcRMZFW4SHF49vn1yyv2a5aCn7ZHuj8I=)
31: 34352e382e3137322e302f32342d3234203d3e20323035373333.roa (hash: 1rINDmT9fsbaOlLLqeJ7eTf+zBwneu4N6jBRg+Yc4gc=)
32: 34352e31332e3134392e302f32342d3234203d3e203631333137.roa (hash: Q3PPUlB/JvHRLRIa7IieyrUl/m1wHR8wutqNN0xNel0=)
33: 3231322e31382e3131352e302f32342d3234203d3e20323135323234.roa (hash: 3xKezHtI+fBhKmdU9ku1wV8BXxr20U7aYSfVPGdTqek=)
34: 36322e3132322e3138362e302f32342d3234203d3e203631333137.roa (hash: gCbw4t50he127cuIH8e7X9edy5RGT/dSqPZYrNWwgUg=)
35: 36322e3132322e3138352e302f32342d3234203d3e20333937343233.roa (hash: xE+Kag7RYYIC/6Gdcunr8SGE54x+vaEZMv3MSSvdWDk=)
36: 3133302e3139332e37352e302f32342d3234203d3e20323136313539.roa (hash: OScz32SKWiRDIr+bw6qduusJprZYMrHU3JDPa1ynUL8=)
37: 3133302e3139332e37352e302f32342d3234203d3e2035353131.roa (hash: /BJwUN9ogW9gUI5fEpq5TqdItx+gr05E4PzR5YVIKUQ=)
38: 322e35382e38372e302f32342d3234203d3e203631353936.roa (hash: M45ljxfpitcFdQWEd3Fma8ldSrrzn4db+RAFQgTFz/E=)
39: 34352e36362e3134392e302f32342d3234203d3e20323132323338.roa (hash: UYRhWU2YtAQySXQJqSHhc8PkHnSqANYorHfiKIAiPmA=)
40: 3134362e31392e3231352e302f32342d3234203d3e20323036323136.roa (hash: bpy3XEt/Glb0ctRVcD/5DBdI9ndCLAP4MyfQv0tMcPQ=)
41: 3134362e31392e35332e302f32342d3234203d3e20313432313131.roa (hash: 65asAzRxJvDe1YCujUmWbIiKCzT1TU5iNap0EoVkO3Y=)
42: 36322e332e31382e302f32342d3234203d3e20323136323232.roa (hash: xpvX4DbRPgQDl25Wd7lh+sIK3ZuIxEe17qogwqcSmAY=)
43: 34352e382e3137342e302f32342d3234203d3e2037353632.roa (hash: M0Bu6CLDPFxg3KYMEJy4xB3uyzQGHvj9eJ5j3Kf1CaE=)
44: 3134362e31392e32322e302f32342d3234203d3e2039323934.roa (hash: 4ThssK8ksZD7mFwPOIttfQuPgXi87SmagzrwaTeHUHI=)
45: 322e35382e38362e302f32342d3234203d3e203432383331.roa (hash: Ga9fSUVi9MuY7PSZ+TJisDhWnGoWEZ4TH7+EN9QxZpk=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Dec 2025 09:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:f4:18:ab:2e:29:a4:cd:3d:8a:b5:d8:a4:73:5c:96:f0:af:42:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Dec 19 08:27:33 2025 GMT
Not After : Dec 20 09:03:33 2025 GMT
Subject: CN=0EEC75A4B70C986D79D1D171C1EFA0727553DBEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6d:b7:b0:ec:30:fb:15:53:fa:db:2d:76:0e:
60:73:96:5b:8a:19:e7:ba:d0:82:eb:d9:82:af:a4:
41:39:84:17:21:4b:9e:7d:c8:e8:56:cc:22:67:59:
d0:6e:4b:f7:46:6a:1a:28:65:13:1a:03:36:77:0a:
fe:be:bf:1b:c3:cb:1c:e7:b3:bb:63:c9:5a:1d:bd:
a2:f6:ca:49:18:b3:55:ee:64:fd:4e:d1:76:37:52:
9b:7d:76:75:cb:42:73:0a:ea:ba:56:f9:3b:ef:5d:
51:7b:2d:88:6b:18:d2:1f:6b:5f:19:1e:eb:5c:83:
32:41:f5:38:50:a1:f9:4f:9d:32:07:9f:e6:89:c7:
ed:fa:96:28:62:84:9e:b2:56:69:66:2b:b9:4c:a9:
db:76:54:11:e5:42:1c:fe:b7:0f:0c:60:18:48:cc:
a5:f2:e0:1c:cd:bc:99:e3:4e:cf:04:60:33:0c:5b:
c6:ea:38:d7:ae:1d:ab:c5:74:bb:64:22:c1:a9:5b:
ac:e9:c0:f8:46:0d:b8:8b:2e:ee:7a:79:3e:75:fa:
ab:2b:87:8a:d2:06:ac:78:68:08:f2:94:b4:76:61:
39:f5:2d:68:bb:41:6a:a3:3d:4a:32:8b:27:ea:22:
0d:8f:fd:40:05:c3:31:55:e4:f5:b9:9d:0f:aa:d9:
c2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:EC:75:A4:B7:0C:98:6D:79:D1:D1:71:C1:EF:A0:72:75:53:DB:EB
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:ba:17:e6:5d:84:16:45:aa:c6:b2:a6:12:98:5a:44:95:62:
52:7c:4d:8c:c7:16:8e:47:16:7d:e6:1f:3f:0b:22:a2:0a:3c:
d6:3b:b3:9a:55:0f:51:89:63:32:4e:c9:a5:fa:82:c0:34:93:
86:29:ed:cc:1e:a3:ae:fc:7a:0e:78:61:f8:33:35:45:83:b9:
e9:92:af:29:ff:a5:65:e5:c1:36:cf:30:8d:2e:6c:eb:6b:40:
aa:6a:f7:14:9e:af:0c:03:8e:03:f6:47:1b:df:bd:08:1f:2b:
7f:95:f1:21:e5:83:a4:c3:29:0c:69:9d:7a:11:79:3e:b0:42:
72:28:55:fb:10:f7:1e:9e:d4:f1:60:90:8f:0c:8b:43:aa:29:
71:4b:15:6a:12:08:6c:d1:25:e8:07:00:0d:d4:bc:ea:fc:3d:
4a:21:f9:52:9b:9a:68:4d:7e:5d:f9:dd:b0:06:64:78:5b:59:
98:6b:a0:4a:2c:0b:37:18:fe:bc:89:05:65:d4:7c:2c:73:1c:
fd:db:61:9f:8f:aa:a1:0f:a9:f9:7d:70:53:29:77:6b:7d:f6:
40:9f:ec:a1:19:30:b7:aa:0d:e4:f0:ce:f0:dd:b2:07:65:79:
45:09:0b:19:7e:c7:78:a3:7e:5d:ed:e6:0c:3a:0d:b0:8a:87:
59:84:05:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 18:46:18 2025 by rpki-client