This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/188078EA8ABD561E7C13EFCE9131BC671DE29F96.mft
File: 188078EA8ABD561E7C13EFCE9131BC671DE29F96.mft (raw, json)
Hash identifier: m2w8aSC+a+s0AMLB3lh97UVPwxfhR+Psw9iOfsOJyuM=
Subject key identifier: DE:33:C3:C2:B4:6C:D3:D8:28:A8:7D:3A:63:23:2D:BC:55:B2:15:C6
Authority key identifier: 18:80:78:EA:8A:BD:56:1E:7C:13:EF:CE:91:31:BC:67:1D:E2:9F:96
Certificate issuer: /CN=188078EA8ABD561E7C13EFCE9131BC671DE29F96
Certificate serial: 7AAB03BC0E6029EFF5EEBBD89FD5F1FB28A82EFD
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/188078EA8ABD561E7C13EFCE9131BC671DE29F96.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/188078EA8ABD561E7C13EFCE9131BC671DE29F96.mft
Manifest number: 16
Signing time: Sat 22 Nov 2025 18:53:31 +0000
Manifest this update: Sat 22 Nov 2025 18:48:31 +0000
Manifest next update: Sun 23 Nov 2025 19:03:31 +0000
Files and hashes: 1: 188078EA8ABD561E7C13EFCE9131BC671DE29F96.crl (hash: PntlI0vcJA7tuXozD3VR7o1ddB1cdwF3/pG9wO4NQ90=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/188078EA8ABD561E7C13EFCE9131BC671DE29F96.crl
rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/188078EA8ABD561E7C13EFCE9131BC671DE29F96.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/188078EA8ABD561E7C13EFCE9131BC671DE29F96.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Nov 2025 12:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:ab:03:bc:0e:60:29:ef:f5:ee:bb:d8:9f:d5:f1:fb:28:a8:2e:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=188078EA8ABD561E7C13EFCE9131BC671DE29F96
Validity
Not Before: Nov 22 18:48:31 2025 GMT
Not After : Nov 23 19:03:31 2025 GMT
Subject: CN=DE33C3C2B46CD3D828A87D3A63232DBC55B215C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fc:f5:4c:2d:e1:fc:56:99:a0:2b:38:5a:bf:
d2:56:05:46:fc:4f:57:fe:f9:1d:42:bf:a0:78:08:
de:ba:79:26:27:16:84:f2:a7:b8:93:c2:22:3e:ca:
5f:95:67:c1:96:4d:14:e1:68:8c:f8:2f:37:f9:22:
a1:61:41:2b:4b:a8:4f:fe:c5:e8:b3:76:8f:dd:e9:
53:dc:0b:23:e7:8b:bc:ce:0e:9b:7d:2f:49:b4:b5:
85:62:06:ef:ed:5a:1a:c3:ee:93:19:13:b1:ba:19:
90:88:d3:fa:88:d0:56:b3:0b:8d:ff:84:11:3b:81:
5b:ed:77:7b:5c:20:94:80:0d:f6:db:40:cd:13:60:
74:77:25:03:f1:d1:1a:84:09:08:78:bb:b2:ae:e9:
05:b0:d5:d6:b9:ec:18:4f:a4:3e:50:81:f1:0d:4c:
34:20:a7:0d:16:6b:56:3e:cb:bb:99:42:9f:5b:20:
9d:b4:ad:ea:16:c2:db:17:15:88:36:a8:2d:f2:f6:
37:20:e1:d0:ee:6c:06:b5:74:49:41:35:ab:3f:7d:
55:9c:d1:66:29:f3:02:d7:7b:71:f6:59:2d:2f:42:
5c:0f:6a:63:5a:f0:01:6f:60:92:f8:d7:c4:f8:f6:
76:e8:7b:f8:67:5f:b6:b4:6d:68:4c:3d:c5:35:d6:
d4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:33:C3:C2:B4:6C:D3:D8:28:A8:7D:3A:63:23:2D:BC:55:B2:15:C6
X509v3 Authority Key Identifier:
keyid:18:80:78:EA:8A:BD:56:1E:7C:13:EF:CE:91:31:BC:67:1D:E2:9F:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/188078EA8ABD561E7C13EFCE9131BC671DE29F96.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/188078EA8ABD561E7C13EFCE9131BC671DE29F96.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/188078EA8ABD561E7C13EFCE9131BC671DE29F96.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:ef:e8:8c:eb:c2:96:8c:04:a4:1f:19:72:2c:cb:6b:d7:07:
39:ae:ef:e8:b2:a2:c7:c6:ca:c7:33:50:87:e0:95:35:1a:5e:
29:e0:c7:71:83:ec:47:ef:29:cc:11:10:28:04:91:17:81:a7:
82:ac:11:f9:69:1c:a0:31:4f:10:5c:fb:91:90:4a:9e:a6:01:
9c:19:54:26:40:16:f5:17:51:6b:37:68:ae:68:e2:4f:a0:aa:
68:9d:dd:08:45:f9:4d:7b:ed:f3:b0:a2:82:5c:1b:38:cc:3c:
fd:4f:7b:ae:bc:5f:26:ca:b5:ba:05:b6:48:5d:94:7d:92:29:
eb:b8:ba:0d:78:c5:19:8a:93:bc:03:20:2e:a4:06:80:42:67:
04:7a:7a:72:a4:be:08:07:77:36:8a:5f:39:8f:92:0a:26:a2:
8c:77:c7:99:e3:7d:17:5d:55:8d:9e:de:13:86:97:e5:2c:17:
2d:35:58:6a:9f:2c:fb:3a:55:6d:85:49:9e:d5:31:ad:0a:1f:
cc:3a:4d:b7:91:e7:7d:66:ae:91:cf:9f:2f:2b:ef:1f:31:a7:
d8:1e:17:52:96:a0:47:f6:3f:e1:46:8d:73:82:58:0e:0c:8b:
e3:63:18:1a:e0:26:f5:95:c7:8b:1f:80:df:83:cf:8a:be:b1:
4b:96:ae:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:54:20 2025 by rpki-client