This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/984185b7-0343-4a64-aa34-82f61ec0dfdc/3/F61224D667068380A44FE2FC056C03E3C2952368.mft
File: F61224D667068380A44FE2FC056C03E3C2952368.mft (raw, json)
Hash identifier: DcWNdh5j8k34rqUfYzcqTDunwWw8djcS2SSGlbH+iHQ=
Subject key identifier: E5:1C:A5:A0:01:AA:10:B5:5B:E1:A5:26:DD:3C:28:DC:DA:31:AD:F6
Authority key identifier: F6:12:24:D6:67:06:83:80:A4:4F:E2:FC:05:6C:03:E3:C2:95:23:68
Certificate issuer: /CN=f61224d667068380a44fe2fc056c03e3c2952368
Certificate serial: 3513BFEEEDDAA1A38EC49E1F2DB58E0CD15ECF9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9hIk1mcGg4CkT-L8BWwD48KVI2g.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/984185b7-0343-4a64-aa34-82f61ec0dfdc/3/F61224D667068380A44FE2FC056C03E3C2952368.mft
Manifest number: 10
Signing time: Fri 26 Dec 2025 08:05:46 +0000
Manifest this update: Fri 26 Dec 2025 08:00:46 +0000
Manifest next update: Sat 27 Dec 2025 09:48:46 +0000
Files and hashes: 1: F61224D667068380A44FE2FC056C03E3C2952368.crl (hash: m6YWyd4hr9XDAq5rtAyKLa8xjeeDdA6XmNFXXZDKRBM=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/984185b7-0343-4a64-aa34-82f61ec0dfdc/3/F61224D667068380A44FE2FC056C03E3C2952368.crl
rsync://rsync.paas.rpki.ripe.net/repository/984185b7-0343-4a64-aa34-82f61ec0dfdc/3/F61224D667068380A44FE2FC056C03E3C2952368.mft
rsync://rpki.ripe.net/repository/DEFAULT/9hIk1mcGg4CkT-L8BWwD48KVI2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Dec 2025 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:13:bf:ee:ed:da:a1:a3:8e:c4:9e:1f:2d:b5:8e:0c:d1:5e:cf:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f61224d667068380a44fe2fc056c03e3c2952368
Validity
Not Before: Dec 26 08:00:46 2025 GMT
Not After : Dec 27 09:48:46 2025 GMT
Subject: CN=E51CA5A001AA10B55BE1A526DD3C28DCDA31ADF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:51:02:ec:ad:b3:70:0e:b3:c9:24:e0:4e:e4:
90:23:e0:fe:49:c6:d3:fc:a4:b3:9e:e9:8d:58:59:
e8:4f:73:6d:1c:9c:a1:bb:ae:6b:a2:95:b2:99:a3:
71:49:4b:ad:1d:ed:f7:d3:93:56:a3:a1:6f:e3:7c:
54:32:de:01:fd:d2:8a:2c:b9:fe:c5:81:07:2a:e6:
9b:75:26:c2:06:23:de:18:b1:f6:6c:da:14:9b:0c:
8d:69:13:fd:74:b2:0b:ff:88:78:32:48:ae:8a:c2:
31:2a:ed:37:13:cd:b7:c9:2b:aa:1e:f4:c8:9f:53:
4e:f5:66:57:c5:59:76:c0:67:f7:8c:70:9d:16:ff:
ef:e1:72:22:18:32:1e:49:35:ec:9c:1b:f4:2e:48:
a1:28:67:37:f8:73:ba:47:25:43:44:51:82:da:fc:
51:6b:80:a6:31:7f:d1:0e:80:95:13:40:4d:30:ba:
8f:1c:b5:a2:02:23:93:d6:d9:dd:66:ee:c2:d4:68:
c5:02:5f:ea:a7:df:8d:06:53:77:bc:05:d3:4d:42:
b1:54:7e:0a:40:66:54:ff:63:28:f8:d0:6a:b9:8d:
dd:2c:28:0d:72:1f:d8:70:22:4f:e8:31:a4:52:b4:
dd:6e:f0:a6:24:41:d9:b1:27:b3:65:7a:10:35:e7:
d8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:1C:A5:A0:01:AA:10:B5:5B:E1:A5:26:DD:3C:28:DC:DA:31:AD:F6
X509v3 Authority Key Identifier:
keyid:F6:12:24:D6:67:06:83:80:A4:4F:E2:FC:05:6C:03:E3:C2:95:23:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/984185b7-0343-4a64-aa34-82f61ec0dfdc/3/F61224D667068380A44FE2FC056C03E3C2952368.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9hIk1mcGg4CkT-L8BWwD48KVI2g.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/984185b7-0343-4a64-aa34-82f61ec0dfdc/3/F61224D667068380A44FE2FC056C03E3C2952368.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:7e:26:c3:38:95:6f:d0:64:36:96:c8:9d:47:1d:e2:d4:df:
eb:10:49:05:06:01:b8:2a:60:e9:c9:95:34:13:b3:08:61:db:
46:2f:3a:9f:25:cb:ab:5d:d7:2f:ff:ad:4e:bf:84:35:37:e7:
c6:03:ac:a0:a0:f0:4f:64:9d:63:6f:08:1e:88:e0:b0:53:59:
c3:3b:aa:39:05:17:bf:93:b7:b9:c0:9f:fd:5a:0e:04:57:d5:
a6:e0:f3:45:ec:c7:9a:1a:ff:c8:0a:a1:3c:93:a2:db:b9:ed:
cf:9f:b4:e4:8c:85:78:94:e3:80:89:d4:c6:8a:9e:c2:d3:0b:
02:03:c9:d9:23:9f:ba:c6:af:29:af:9e:12:a6:e3:82:73:1e:
70:94:0a:6a:6d:1e:3b:bb:3a:d3:c5:cf:61:f8:71:25:75:be:
db:8c:1b:74:94:19:9c:fe:66:72:d7:ae:9f:9d:38:ec:3e:f0:
6c:ff:0c:52:e7:bc:4b:5c:b8:a4:1d:51:7a:22:7a:52:0a:1e:
bb:fb:70:f0:20:8f:4d:21:5b:8f:f3:24:0a:72:2d:67:6c:a5:
fb:47:19:b3:5b:4f:7d:3e:69:a3:41:ea:c6:5f:e4:eb:8b:90:
d6:64:b7:ae:f7:21:50:59:7e:9f:8a:89:08:5f:34:35:19:19:
cb:f2:91:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 15:43:19 2025 by rpki-client