This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft
File: E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft (raw, json)
Hash identifier: fEAtDTMxH3EzWRxUZhnmyipmHyx3aFs1Indkr2GxC5U=
Subject key identifier: EA:74:E0:04:81:F8:97:FD:55:FA:56:BC:9A:84:93:E9:06:D8:0A:DF
Authority key identifier: E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
Certificate issuer: /CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Certificate serial: 584026EB06940BAEE0D90DE9284FFCDDDA2D32E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft
Manifest number: 013D
Signing time: Sat 20 Dec 2025 12:07:34 +0000
Manifest this update: Sat 20 Dec 2025 12:02:34 +0000
Manifest next update: Sun 21 Dec 2025 12:31:34 +0000
Files and hashes: 1: 39312e3233322e39392e302f32342d3234203d3e20313937353337.roa (hash: G+mgzv7tRhUfmSaRumVwyhbJ8nNvEA0s859L61Ejv18=)
2: 3138352e3136322e3137392e302f32342d3234203d3e203132383734.roa (hash: Oev3T5PHjGnxWqjgwbUH88tHYEWPx4hW7vlkYnxUh4c=)
3: 34352e3134392e3135342e302f32342d3234203d3e20323132343737.roa (hash: ElvQJHHMZyjhqFtZ4eXubU55AwJuUHlB5VPhchi0zEY=)
4: 3138352e33332e32362e302f32342d3234203d3e20323132363039.roa (hash: +Uou40uKN3P8LL5yuWZGR768rlaEfbKR2VYxApN71AA=)
5: 3138352e3132332e3135382e302f32342d3234203d3e203239383032.roa (hash: TLiGnJOFD2b+z4uS2pKNa+Gc2aYGJ4ZFIaexiybn7wo=)
6: 34352e3134392e3135322e302f32342d3234203d3e203235313630.roa (hash: F5qAcWfgptgKaaDsmY0iSSOR+nBZv9RYAI/0kq8SYl8=)
7: 34352e3134392e3135332e302f32342d3234203d3e20323635393139.roa (hash: kgIiY2hKU4E4tRDz3OnYpx84hUJKrY7sZF8oMbsebok=)
8: 3139342e39392e3135362e302f32342d3234203d3e203232343237.roa (hash: rIB6LZlyDY4ccd8aiBOUspQRAkgz2Qkx5QliZapGW3w=)
9: E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl (hash: jS8lT1AYPjQRwUB+YvnfSlHz3OLIwCpPu5hEFFrR1zQ=)
10: 3138352e3132332e3135392e302f32342d3234203d3e20333936333536.roa (hash: 8ymSE6/IZ4mS3/jdg4jdCuqPIOO7MFcCnM1/lcLJutM=)
11: 3138352e3136322e3137362e302f32342d3234203d3e203537303433.roa (hash: SVrpMsQaq2+Of1pyWLABKDNguVH/um78jdJjsg2PZXk=)
12: 39312e3233312e3132362e302f32342d3234203d3e2035363530.roa (hash: it6kdqtvQIR1fmnyxGg95/2ozlg9ybLYZncNwT8sS4M=)
13: 34352e3134392e3135332e302f32342d3234203d3e203133333335.roa (hash: oW4WynaArlYMwXoVGq9L68dOfSrJj8wnnWqrszCEjBM=)
14: 3138382e39342e3139312e302f32342d3234203d3e203236333833.roa (hash: KVgKufhzMCzuYPXRdj1v2nCOHhTInMxlTivgHzFkAcY=)
15: 38392e3135302e34392e302f32342d3234203d3e20323037343833.roa (hash: UHfALFZeGaG39fIDYXNUOima3HE5nXGXgn3i20cHJr0=)
16: 3138352e3132332e3135362e302f32342d3234203d3e20323133323832.roa (hash: HI1VX16qX1LTsAjuvQN0eR8x1ZQ2WlG9l18ZWZhTnXQ=)
17: 3138382e39342e3139312e302f32342d3234203d3e203537303433.roa (hash: 8styg8XghivByqecwh8GqtE8kKwAeHdMu50Ggf4sImQ=)
18: 3138352e3132332e3135372e302f32342d3234203d3e203533333536.roa (hash: lHbHKjkzEHNG8HMgZvfO2b7EsuiOvBYyEIHvvUxLyMU=)
19: 34352e3134392e3135322e302f32342d3234203d3e20323134313433.roa (hash: ZqsnAbwfQsSLAO15y/hQmlAKLget/IE+XAeE4Nr5/8I=)
20: 3138352e3233342e3130302e302f32342d3234203d3e203335363631.roa (hash: 7IoW8V7sYCxYnK3GpV+L+iywqaWF/MSER2M0Aaj+ktk=)
21: 3138352e3136322e3137382e302f32342d3234203d3e2032393134.roa (hash: s1bbd6LyvYQrZ11FtU3Xa/oNq7QSAV2j6DcxJrrwcV0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl
rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 09:56:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:40:26:eb:06:94:0b:ae:e0:d9:0d:e9:28:4f:fc:dd:da:2d:32:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Validity
Not Before: Dec 20 12:02:34 2025 GMT
Not After : Dec 21 12:31:34 2025 GMT
Subject: CN=EA74E00481F897FD55FA56BC9A8493E906D80ADF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c2:b0:f4:95:05:87:8d:20:04:a4:dd:eb:05:
af:b4:6a:95:0a:d1:e2:f1:02:58:52:16:8c:ae:05:
a6:f0:35:f5:a9:d8:ad:b2:e9:6c:f9:6b:4e:9c:89:
bf:8d:77:35:b9:30:3a:e9:a5:08:8f:04:53:15:e6:
ac:83:4a:fd:0c:55:34:22:78:ba:76:33:f6:70:aa:
3b:f9:c2:95:09:72:00:7f:83:83:75:76:67:ed:ca:
ed:f6:3a:cc:15:10:d6:18:46:ba:8c:86:84:48:bc:
fe:78:46:13:69:20:cf:c1:63:4f:1f:8d:52:5d:7b:
21:65:92:8d:2a:93:0f:0d:8b:50:6a:23:67:49:ad:
35:d0:47:b2:e2:ad:42:63:ba:b6:4d:bf:db:48:bf:
97:ee:20:5b:2b:05:6a:44:e7:1a:d3:7c:60:2c:f9:
6f:86:9f:ec:f9:99:bc:bb:90:55:d8:8f:c7:b8:31:
a2:30:ca:78:b5:67:20:63:32:69:35:93:e0:4b:3b:
00:b2:5f:a3:fd:97:6b:17:8f:94:aa:d2:04:42:7c:
54:90:9e:25:3c:e7:bc:e0:09:c3:f4:93:34:ba:5b:
83:74:6d:6e:88:e7:a4:31:b8:95:73:86:f9:eb:45:
c4:44:6e:08:db:f4:33:79:bf:3e:92:e5:bc:e5:06:
34:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:74:E0:04:81:F8:97:FD:55:FA:56:BC:9A:84:93:E9:06:D8:0A:DF
X509v3 Authority Key Identifier:
keyid:E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:1a:33:37:62:b1:da:92:de:60:c6:a3:81:57:fb:ad:9c:25:
f3:9e:a8:16:91:9a:b2:9c:64:35:38:5a:77:33:d0:8f:8e:4a:
7e:01:0f:71:d3:b1:5d:4a:fd:68:fb:12:f4:cb:82:a7:23:9f:
74:33:fc:42:2f:ea:10:ac:ea:13:10:11:ea:30:27:83:39:8d:
62:30:59:53:a0:b6:94:d2:d9:6a:51:5b:e6:db:cc:cf:97:80:
2b:35:cf:33:62:fe:32:5f:c4:02:5f:e7:30:db:9e:df:9a:9a:
db:10:29:05:78:fe:c8:13:45:61:62:a2:d2:8c:09:b5:b7:3f:
8b:83:71:04:47:4d:df:f6:9e:3a:ec:5e:fd:26:e9:13:27:00:
43:31:bf:91:69:99:37:6a:57:89:2e:61:56:df:56:96:02:48:
e5:4c:5a:78:17:01:c0:3f:9d:e0:75:5a:05:c7:94:02:4c:97:
65:1a:65:06:ea:39:7b:85:03:92:7f:3f:59:f7:4e:85:4c:51:
04:3c:f0:56:a5:b2:48:56:af:e9:8a:c3:4a:2a:01:0e:e9:7a:
e8:10:d8:2d:79:64:04:4d:23:a3:56:f2:61:07:b2:00:d8:3d:
ad:ef:2a:ac:4d:6c:35:26:b0:19:d2:e0:f7:11:b9:99:be:08:
00:41:51:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 16:03:44 2025 by rpki-client