This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft
File: ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft (raw, json)
Hash identifier: DQ7a5oJay4WxKQGBHTKqCOthhpPkxu0HZx0NuRz0OeI=
Subject key identifier: 4E:07:7D:A7:C6:B5:57:47:16:31:55:37:38:F5:F7:47:F7:48:52:99
Authority key identifier: ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B
Certificate issuer: /CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b
Certificate serial: 185F569C8608AA3942F404CD1DCFBE93A7A10437
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft
Manifest number: 07
Signing time: Sat 22 Nov 2025 12:45:30 +0000
Manifest this update: Sat 22 Nov 2025 12:40:30 +0000
Manifest next update: Sun 23 Nov 2025 13:00:30 +0000
Files and hashes: 1: 34352e3134332e3136302e302f32342d3234203d3e203232313638.roa (hash: R01FRlBDr9pZoq05BG3LRHuNkIAJs+FNxUn/NkK9at8=)
2: 3139342e3234372e34352e302f32342d3234203d3e20343033353034.roa (hash: GJ9H5qMFuesRjGGdPY42j9KwxVYLRdFz1c3FTVKPbZw=)
3: 3139342e35302e312e302f32342d3234203d3e203534323532.roa (hash: ruvdsYTXtE0Ab54FYmgOEkBccmfDScUwXgNFAX7lgcQ=)
4: 34352e3134392e3136362e302f32342d3234203d3e20323132333834.roa (hash: oGRqBKIGwkwo89Qzo8J8QE2XhyVF3R37X5VJTJkYTLY=)
5: 3139342e35302e312e302f32342d3234203d3e203634323637.roa (hash: Y111o5heSVgTuvX1afqOIbWwexv6C9e08p+YRNlvpVI=)
6: 34352e3134332e3136332e302f32342d3234203d3e203139343337.roa (hash: M8Y5TaWjTiVOLanqncdwCCTpjaAInXMAJmIU/gVIuL8=)
7: 34352e3134392e36302e302f32342d3234203d3e203136323736.roa (hash: mbyRbXV6qtXX/gc/fRiAchNGyI7vTap6PWbMkBmBIoY=)
8: 34352e3134332e3136322e302f32342d3234203d3e203233343730.roa (hash: OcZ6EMgc6x8+IMfJh9quglLv9DVchqMI90FMfGysZqA=)
9: 3139342e3234372e34352e302f32342d3234203d3e20313337353137.roa (hash: 7Uz0iGXKq5oSbUI44D0T64XUT0jHl47mRLVxjRhD2eU=)
10: ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl (hash: FKSBLwXLca703hXtDL3PxbfiIkz9uGRETtD07WNOT8g=)
11: 3139342e3234362e33362e302f32342d3234203d3e20323035383836.roa (hash: ddb+xsyabWT4R1Xj/pgaVmKy1W6jPXhuktKqX52CP3A=)
12: 3139342e3234362e33362e302f32342d3234203d3e203235313938.roa (hash: ozV90cqU2WyvLR/pcrjWwicV/oGcsSjYFMa1yOkQ0NQ=)
13: 3139342e3234372e34342e302f32342d3234203d3e20313432313436.roa (hash: TqX0P9wlnvbZoWAo8DlV20oJQITx6kCNiVhWbz6v/l4=)
14: 3139342e35302e312e302f32342d3234203d3e20333937363330.roa (hash: TeUJtf1ikY7LLYRPrAz/E+BsfW9QE1+7cNe6Ilv12VI=)
15: 34352e3134332e3136312e302f32342d3234203d3e203631333137.roa (hash: 8ZjMd6obm3N7HBniZT8uftJQwQbBGvAMihymyaoAi+E=)
16: 34352e3134392e3136372e302f32342d3234203d3e20323132363639.roa (hash: G5FQ1l+cRk3n7sDIEiJiOqD91u3IjodfdNcjTCN0Zms=)
17: 3139342e35302e342e302f32342d3234203d3e20343030303339.roa (hash: 1KQ8U/cyI6RlRLUmJsQ7MnZR4YGCCRfjVSVg2/aEhuA=)
18: 34352e3134392e3136352e302f32342d3234203d3e20323039303433.roa (hash: xof4y/WucaiGMtyPzgbTPsOcPFlb9obn6jFW42zp3IM=)
19: 3139342e3234362e33372e302f32342d3234203d3e20313534303439.roa (hash: qsoqYvzpUXEnewa636Uqf3ZdHju9vYqXC78N1RH7Kt0=)
20: 34352e3134392e36322e302f32342d3234203d3e203633313939.roa (hash: vZtUK+cyWn9HqZW47BPiCvcZESw+S9eULE1Gd8jVpHQ=)
21: 34352e3134392e3136342e302f32342d3234203d3e203235333639.roa (hash: a0LqwFPI6pwa1fZnOKWJVr+UvNzZLlo/pfpnRlcnUlw=)
22: 34352e3134392e36312e302f32342d3234203d3e20313335333931.roa (hash: CjBHEb6e8KCFokD4ry4Ct4NNWk9/i3N//pYJT3Rzvpg=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl
rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Nov 2025 13:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:5f:56:9c:86:08:aa:39:42:f4:04:cd:1d:cf:be:93:a7:a1:04:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b
Validity
Not Before: Nov 22 12:40:30 2025 GMT
Not After : Nov 23 13:00:30 2025 GMT
Subject: CN=4E077DA7C6B557471631553738F5F747F7485299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:16:d7:2a:42:41:d6:e7:c1:3d:ca:97:22:b0:
87:9d:f0:5e:24:2a:34:c5:46:ff:43:40:71:02:71:
b0:de:5c:f6:37:34:40:75:1e:c0:43:f6:04:0c:08:
b9:36:46:9f:8d:dd:a7:53:43:c8:1a:01:19:99:67:
9d:b9:dd:43:8b:0b:8e:b2:32:e6:80:42:02:75:b1:
f0:ab:aa:15:96:06:66:bb:40:b6:3f:79:60:76:39:
01:48:7b:a9:ab:ab:a9:ec:ba:aa:0b:2e:33:b7:7a:
c0:aa:bd:91:eb:a2:14:11:28:10:f9:ae:46:1b:ad:
e1:de:58:16:48:57:02:96:bb:a1:73:89:c9:f4:9e:
f5:77:2f:dd:9c:1e:76:d4:e8:29:2e:a8:33:ba:6b:
eb:80:5d:83:57:35:92:ed:78:e3:ae:4c:4b:36:d0:
db:e6:ba:fb:c0:30:ff:34:be:a1:44:57:32:b1:26:
1b:01:b5:45:0e:63:6c:09:ec:ef:45:6f:79:da:97:
42:91:74:7d:82:a3:54:cc:f4:28:51:e8:35:16:40:
e0:c7:91:f4:50:8a:ee:81:68:4f:57:cd:1d:f2:6a:
a1:85:2d:6f:8e:a4:5f:d8:2e:d3:fb:4b:9a:35:6a:
a7:5c:b2:f8:cc:e3:60:8f:a8:94:2c:ae:39:f7:12:
e0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:07:7D:A7:C6:B5:57:47:16:31:55:37:38:F5:F7:47:F7:48:52:99
X509v3 Authority Key Identifier:
keyid:ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:40:65:95:b1:30:53:1e:f8:76:f3:81:7f:97:44:06:44:88:
f8:b4:16:39:83:ff:b1:53:92:c2:ac:f3:3a:67:7d:35:ad:d3:
62:89:1e:5b:31:a2:73:3a:17:65:21:1d:b5:a8:f6:51:81:fa:
0e:c6:87:be:c0:b7:bb:b3:15:c6:b5:de:c8:6c:b4:12:68:cc:
c6:4d:18:35:5c:0b:c8:4a:45:d2:69:08:12:d9:92:fc:f7:5f:
19:2c:89:42:b7:31:b9:98:ab:a4:39:72:3b:1e:07:f7:69:b8:
77:8f:b6:f1:1a:65:3d:36:32:1c:61:6e:bc:d4:da:d1:25:76:
3c:46:73:5d:02:07:e2:60:ba:6c:7d:9e:3a:4c:38:13:56:56:
ee:ef:ab:cb:e6:50:0d:18:ae:92:8e:4a:79:3c:fb:80:54:b5:
c3:91:4a:1d:35:19:b7:98:24:cb:b8:09:4c:4d:b4:db:f8:69:
5e:0b:f1:5b:58:5c:9b:45:2f:f7:10:c3:7c:1a:3a:84:b0:53:
c8:83:a1:22:2c:d8:65:de:a5:3d:c7:1c:c7:88:e3:fb:03:48:
75:23:15:90:1e:b6:c8:f4:05:19:82:8b:71:8e:f0:ae:c0:0b:
20:31:9b:f9:9a:2f:e4:fe:58:dd:e5:10:d7:e1:7e:0d:30:98:
7a:1c:0d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 22:15:33 2025 by rpki-client