This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft
File: 8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft (raw, json)
Hash identifier: ZNYIBd4menZzAEJAqf7SnWiLzGiG4BQWky76tLXz31o=
Subject key identifier: 49:BB:D8:36:B4:EB:21:F7:E4:F3:57:A7:00:B6:DB:E0:97:8B:FA:E7
Authority key identifier: 8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C
Certificate issuer: /CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C
Certificate serial: 08D6C4FB7A984221C1ACC1B329180F40AD27380B
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft
Manifest number: 02B2
Signing time: Tue 09 Dec 2025 17:20:41 +0000
Manifest this update: Tue 09 Dec 2025 17:15:41 +0000
Manifest next update: Wed 10 Dec 2025 20:25:41 +0000
Files and hashes: 1: 326131343a373538313a343832303a3a2f34342d3438203d3e20323135323233.roa (hash: 8fwqZHGyIJyFYdJn0gwpv+qKZFLFFwexw2Z/QOknvfY=)
2: 326131343a373538313a343536303a3a2f34342d3438203d3e20323135313731.roa (hash: QP4KPs363lKNvbDMC91nWR64EDb9a5wYXaiiUC4k7Hs=)
3: 326131343a373538313a343535353a3a2f34382d3438203d3e20323136333735.roa (hash: JVdP0q01IdpmOHNHM/8N7QIeZGO9fY1B0zhs290wioo=)
4: 326131343a373538313a343535303a3a2f34342d3438203d3e20323136333735.roa (hash: 33Hc4k2qb/SFtHgCtF148ZPS40TPUk0mIWne3Kl1fjs=)
5: 326131343a373538313a343836303a3a2f34342d3438203d3e20313531353434.roa (hash: XJo8jS2djpRteJlKSIzBy0GSOcq3Jj/2wBDjV1PmcuQ=)
6: 326131343a373538313a343831303a3a2f34342d3438203d3e20323135363734.roa (hash: HscFYsQcMtvjpDQJk86+k68Lr7MoMlx0VU02QHyOcGk=)
7: 326131343a373538313a343635303a3a2f34342d3438203d3e20313335363539.roa (hash: 3t/0qmEuc7HUJ6jbuOuPnmd3ve4/XpcLhj4VdVBS4pk=)
8: 326131343a373538313a343835663a3a2f34382d3438203d3e20323135333739.roa (hash: LiQaiw5undZF8O9ZPrbB+SuBZXPDpvcvnNafAQKgteo=)
9: 326131343a373538313a343835303a3a2f34342d3438203d3e20323135333739.roa (hash: mgbh+id7sfJxNC8FBIA9w2AVClblyfoF7d8LLx0Ph9g=)
10: 326131343a373538313a343331303a3a2f34342d3438203d3e20323135313731.roa (hash: z2fbMMdTRhRUpcDHMD2rvY/J1s4P2i8N3FhzYltODNc=)
11: 326131343a373538313a343835633a3a2f34382d3438203d3e20313431303637.roa (hash: 9VIFUmaELJ+SuXK7+C+ONAUKoDB5ufOLiduhS88tcKE=)
12: 8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl (hash: zIx9l39rvPqrPWgkryDVEmnAMLSJaiSB4rhHf8YekoQ=)
13: 326131343a373538313a343834303a3a2f34342d3438203d3e20323135323839.roa (hash: IeK6ZG/g9V25xfR3xKZZdyq5xuMwonnHdhMMCLRMWBo=)
14: 326131343a373538313a343332303a3a2f34342d3438203d3e2039343232.roa (hash: gQv5NI8fa+cTBzk0tpepQG6QGKXWkVIlxityrSNAUjQ=)
15: 326131343a373538313a343030303a3a2f33362d3438203d3e203434383137.roa (hash: 06Oq8kkXsOv0rKoRYz/dx2UXUSYf9kyOjrjjxWn2c2o=)
16: 326131343a373538313a343731303a3a2f34342d3438203d3e20313439363930.roa (hash: rLVUcUxyRgJtw6VSAGlKyA8uqmBel4P5gDB+BMhpgCc=)
17: 326131343a373538313a343934303a3a2f34342d3434203d3e20323135313731.roa (hash: 7nhFTtPjQhKd1Ac2yjZIA1kYzFwc8dF19rkGkZd+QFk=)
18: 326131343a373538313a343835653a3a2f34382d3438203d3e20323134363737.roa (hash: iHR6gaBLhEeuJStOmjFzEe4Moo+lPwxxC1xTUcqx6g4=)
19: 326131343a373538313a343534303a3a2f34342d3438203d3e203434383137.roa (hash: lL21MUDpM3YDFXY+VNPjMEqMt9/EFafQb01ArsWLAjk=)
20: 326131343a373538313a343934303a3a2f34342d3438203d3e20313335363539.roa (hash: isp+v1bbWY3zX+eoFLAf4eK3r9/zMrMmocZ2PNCW2Rw=)
21: 326131343a373538313a343833303a3a2f34342d3438203d3e20323135323231.roa (hash: j14pv+Fih0N85ic38d12TDY0uRhDLdNY7cvkmnI17jw=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl
rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Dec 2025 20:25:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:d6:c4:fb:7a:98:42:21:c1:ac:c1:b3:29:18:0f:40:ad:27:38:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C
Validity
Not Before: Dec 9 17:15:41 2025 GMT
Not After : Dec 10 20:25:41 2025 GMT
Subject: CN=49BBD836B4EB21F7E4F357A700B6DBE0978BFAE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7c:ea:03:69:e5:ea:7f:41:34:01:e8:33:1e:
0c:ee:81:77:dc:e8:52:86:b5:15:9b:43:76:6e:81:
fa:5d:cb:a6:7c:eb:97:92:80:85:ec:c6:34:2e:b4:
6e:f5:6f:b2:cb:28:4d:a4:43:d6:b1:88:8b:48:70:
6e:44:e8:2b:90:cc:0a:5e:8b:c5:f2:a0:9c:41:74:
1e:27:e1:7d:bb:76:2d:b3:a9:66:f3:8c:0d:59:8a:
37:08:3d:73:4e:a4:85:d8:95:3b:d5:a6:15:3c:21:
c3:22:ec:30:15:54:1d:aa:5b:7f:10:fd:e0:94:28:
c5:f6:40:4f:6e:78:03:59:58:08:de:b7:99:ec:c0:
b0:73:82:0f:2d:1f:f7:1c:af:fa:ef:a1:a7:5f:3b:
f0:29:a8:11:71:4f:6f:c4:47:99:fa:d1:f8:23:97:
7d:25:2e:9f:de:e4:90:02:81:5d:fb:96:20:41:d1:
91:f5:3c:3b:3f:2f:ef:9a:6d:29:77:f5:0e:c5:49:
0a:d2:f9:11:14:89:ad:e1:ce:01:aa:48:80:b0:bd:
4e:d4:81:17:c9:e5:96:a1:61:f4:6e:7c:ac:c8:fa:
20:d9:4f:0b:d3:23:fb:79:af:35:5d:45:26:de:19:
f7:ed:7e:3b:05:22:7b:0e:54:ba:41:06:c9:76:02:
15:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:BB:D8:36:B4:EB:21:F7:E4:F3:57:A7:00:B6:DB:E0:97:8B:FA:E7
X509v3 Authority Key Identifier:
keyid:8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:e4:37:23:5d:bf:d5:77:5c:ff:43:92:59:86:32:20:cd:47:
ff:5c:32:e0:64:7b:4b:5d:c6:ad:a3:3b:2b:94:26:12:25:d1:
ba:70:2a:a4:8a:43:41:0f:d2:5e:90:7a:aa:72:94:2a:7c:1e:
06:97:87:0d:7a:e2:52:da:92:16:be:8c:c6:9d:70:28:f1:d0:
bc:64:ee:1d:ba:42:66:2c:8c:25:f4:eb:f9:22:be:74:96:57:
25:89:f4:d8:04:6e:29:9c:4b:2f:8e:29:6d:4f:74:9f:d7:9a:
f4:f0:c0:ee:df:40:8c:05:09:eb:a8:cb:b2:55:f4:82:12:39:
b0:32:2a:92:ef:ed:f7:00:bd:a9:9c:e2:b9:69:bb:70:30:55:
f3:b9:2f:dc:08:9f:d2:84:ff:7c:69:07:b1:6b:57:e0:22:39:
34:2a:4d:a2:ac:9e:f6:bf:bf:f7:88:fd:fc:e5:df:af:8e:ef:
01:70:35:82:32:26:17:17:b3:2b:99:ae:a1:a6:d1:23:29:23:
e7:ef:40:d0:90:e3:0e:dc:3e:d9:f2:00:b2:bf:20:07:18:87:
6b:05:e1:bf:a8:eb:72:03:a7:7e:4c:ef:06:ae:7c:57:0a:a3:
b0:f7:d0:ac:88:84:9d:2b:40:8a:5f:72:bb:06:69:a3:c7:7e:
2e:1d:12:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 12:05:32 2025 by rpki-client