This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.mft
File: 5E5179BB1757068D7028510FEEB1177AA7CC8818.mft (raw, json)
Hash identifier: Ka8ZoWzRYH1K8QAmqjBueHJ4k89m2yetR1kYK2APLWY=
Subject key identifier: 32:AE:4A:66:78:14:34:66:45:83:CA:5A:95:F1:D9:0E:06:6E:50:EE
Authority key identifier: 5E:51:79:BB:17:57:06:8D:70:28:51:0F:EE:B1:17:7A:A7:CC:88:18
Certificate issuer: /CN=5e5179bb1757068d7028510feeb1177aa7cc8818
Certificate serial: 4B45964C4F2F76F66A33E2294B8AB3EE1F79FF70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.mft
Manifest number: 05EB
Signing time: Thu 29 Jan 2026 17:18:46 +0000
Manifest this update: Thu 29 Jan 2026 17:13:46 +0000
Manifest next update: Fri 30 Jan 2026 21:17:46 +0000
Files and hashes: 1: 5E5179BB1757068D7028510FEEB1177AA7CC8818.crl (hash: VYOY34G4io/XpkRHFhf5N5jCaXhkGJnBU73MLBVTBTE=)
2: 38332e3135302e3231372e302f32342d3234203d3e20323132353034.roa (hash: k8RY7QTEncAN/MOxUGAuMRRlssrdtl7ahwCsdlVrRY0=)
3: 38332e3135302e3231362e302f32322d3234203d3e203631333137.roa (hash: bA7vtpR0TyML0HjZJJdgMHPc1uK0jGA3YpWrjwZ8y+U=)
4: 3139322e3130392e31302e302f32342d3234203d3e203239383032.roa (hash: CCWx5/mnzUAvPW2QXDisPqaJoMOmAAYfjlJp2z2VVX8=)
5: 38332e3135302e3231382e302f32342d3234203d3e20313939343135.roa (hash: yCFgEcnTSAhMVf29HMHp04B1k4DqC3mlqJPDdmg8wFQ=)
6: 38332e3135302e3231392e302f32342d3234203d3e203533333430.roa (hash: GXLgWx6Q3CLvfyeGG+4M+PXnBAwSeVlRcKDTfEKYkeQ=)
7: 3139322e3130392e31312e302f32342d3234203d3e203136323736.roa (hash: qRWEBAMqR9/oXRv8A+nfXFduPkpHZgx8k4TEVcf/LOk=)
8: 38332e3135302e3231362e302f32342d3234203d3e2039333034.roa (hash: SHO6BxDoTVCg+5Db1T6qj1oU+zO9Nrl8AN0Cw80zXoY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.crl
rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.mft
rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Jan 2026 21:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:45:96:4c:4f:2f:76:f6:6a:33:e2:29:4b:8a:b3:ee:1f:79:ff:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e5179bb1757068d7028510feeb1177aa7cc8818
Validity
Not Before: Jan 29 17:13:46 2026 GMT
Not After : Jan 30 21:17:46 2026 GMT
Subject: CN=32AE4A66781434664583CA5A95F1D90E066E50EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1c:29:54:fd:7d:7a:e4:ae:ba:72:e4:ac:e0:
8a:c2:65:e4:72:e3:89:e8:30:ce:8e:d5:ef:67:c2:
cb:c3:02:46:30:f4:d6:8d:7e:c4:dd:71:d6:9a:d7:
89:d6:48:29:ca:8f:2a:ea:8b:ce:a5:5a:49:3b:84:
28:2a:0e:2a:74:ff:60:92:e0:8c:cc:f7:e1:c8:7c:
d4:c7:47:6a:dc:7a:f6:27:da:33:de:82:f0:70:e6:
9d:78:48:94:a3:5f:bb:c0:04:1d:69:11:11:02:26:
ca:36:a6:0c:b8:e9:76:99:77:4a:d0:38:1d:59:24:
f9:e7:16:d8:89:72:2f:55:ee:db:87:81:9c:98:bf:
9e:c7:a0:41:4a:03:d8:4d:46:50:d7:e5:92:a3:03:
90:be:c1:ab:48:e2:36:57:2b:aa:8b:d1:cd:8f:29:
30:cb:9b:c5:0c:0a:1b:cd:01:d6:8e:83:61:78:2a:
f7:36:a0:7f:0f:ff:38:fc:79:83:53:8a:d1:80:54:
b3:52:28:6b:ca:3a:17:3b:a7:e7:5a:98:36:ab:79:
f4:be:5f:cb:08:47:d9:22:ba:1b:28:37:67:ad:00:
be:fa:f2:64:26:d7:1d:b7:4c:04:ac:b6:ff:e1:40:
19:0f:96:b8:4a:be:7e:e8:e6:ab:7e:db:9c:ea:a7:
34:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:AE:4A:66:78:14:34:66:45:83:CA:5A:95:F1:D9:0E:06:6E:50:EE
X509v3 Authority Key Identifier:
keyid:5E:51:79:BB:17:57:06:8D:70:28:51:0F:EE:B1:17:7A:A7:CC:88:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:b4:1e:f7:82:f7:59:ee:64:d2:d6:5f:08:40:89:4a:39:b6:
41:8f:3b:56:b2:59:7d:f2:9e:26:13:86:18:7f:ad:92:a6:05:
2b:0f:b5:6a:b1:e4:94:69:a9:fa:c1:b3:28:2d:f3:e3:86:b7:
6b:54:6c:1c:22:f7:bb:3b:f7:48:1d:cd:cc:23:d8:1a:45:c0:
8f:ea:f3:6c:be:f4:10:11:a9:91:64:f3:3c:65:9e:b4:4a:17:
94:a5:81:97:da:2e:3b:90:18:dd:93:2d:43:0a:6e:da:3b:0f:
c3:20:2f:c3:80:29:c3:d6:d3:d4:02:24:fa:42:e0:19:1d:27:
05:0e:4b:24:b8:d5:68:22:7e:fe:ec:71:de:fc:46:44:9f:e1:
5f:d1:42:89:09:fa:04:3a:ac:c3:69:5d:a8:0f:a8:d0:74:e4:
08:7e:ce:66:fa:39:61:0d:de:d6:90:eb:b9:84:b7:d0:e4:59:
84:6c:69:e8:43:78:a1:7e:24:5f:cb:10:c5:4e:44:09:5e:0d:
54:f4:14:7a:04:40:a7:88:da:38:12:0e:35:c8:01:c0:57:16:
a1:29:c7:60:fe:d4:0c:46:f7:ec:55:24:db:75:f5:54:a3:35:
2f:b1:5f:76:59:77:10:8d:fa:70:d9:dc:c0:0c:77:7a:fd:cd:
4e:61:b8:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 30 14:12:25 2026 by rpki-client