This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/1/AD51B4FA37D423844399722D5240A94674496236.mft
File: AD51B4FA37D423844399722D5240A94674496236.mft (raw, json)
Hash identifier: UoTNBsfVdgaLKvt14d9r8drpo1O3M5S11P4zvlJW0jM=
Subject key identifier: F2:C8:B8:94:6D:8B:DD:AB:54:55:1F:02:B0:41:CD:7C:0B:4E:E3:FC
Authority key identifier: AD:51:B4:FA:37:D4:23:84:43:99:72:2D:52:40:A9:46:74:49:62:36
Certificate issuer: /CN=AD51B4FA37D423844399722D5240A94674496236
Certificate serial: 4BFBD9B2FE75572D7D795B3D37F733A18F738490
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AD51B4FA37D423844399722D5240A94674496236.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/1/AD51B4FA37D423844399722D5240A94674496236.mft
Manifest number: 0C
Signing time: Fri 05 Dec 2025 15:03:17 +0000
Manifest this update: Fri 05 Dec 2025 14:58:17 +0000
Manifest next update: Sat 06 Dec 2025 16:32:17 +0000
Files and hashes: 1: 326131343a373538333a333030303a3a2f33362d3438203d3e20323034353335.roa (hash: wa3x+YdBz4iMqCjU1AX+bNH8GFDW/LR3zugaLxxd1vE=)
2: AD51B4FA37D423844399722D5240A94674496236.crl (hash: QFRmBUwvva5TSCjHR694M2aNxrc5JNO2nF6awgnkshk=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/1/AD51B4FA37D423844399722D5240A94674496236.crl
rsync://rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/1/AD51B4FA37D423844399722D5240A94674496236.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AD51B4FA37D423844399722D5240A94674496236.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Dec 2025 16:32:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:fb:d9:b2:fe:75:57:2d:7d:79:5b:3d:37:f7:33:a1:8f:73:84:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AD51B4FA37D423844399722D5240A94674496236
Validity
Not Before: Dec 5 14:58:17 2025 GMT
Not After : Dec 6 16:32:17 2025 GMT
Subject: CN=F2C8B8946D8BDDAB54551F02B041CD7C0B4EE3FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:52:72:f9:b3:14:7f:c0:cd:8d:e4:58:f1:07:
45:b0:2c:a6:c6:c4:4d:dc:37:d8:51:64:c3:97:6a:
8f:8d:c2:49:39:18:97:9e:1e:ca:34:3e:40:1a:da:
9e:25:ba:ee:ab:4e:80:80:98:0b:ab:6e:65:ca:4b:
b5:62:8a:9c:5e:dd:af:9f:2c:00:4e:25:c4:3a:25:
a3:3e:95:bf:81:cb:d8:db:3a:3c:38:fa:a9:c3:5f:
b2:58:a8:b2:41:af:65:93:12:9b:f0:30:ba:1c:3c:
f7:eb:0d:38:c8:b1:fe:bd:6a:3a:8f:b5:b0:34:2a:
8b:32:c3:93:3a:b6:ee:f2:30:b1:fe:6d:44:f9:76:
ac:b3:49:ed:3d:48:35:4d:5d:95:c4:5d:fe:43:4d:
75:9a:29:22:6e:8b:f1:9a:b2:eb:36:c1:45:4f:c1:
d0:99:15:61:76:5e:d7:18:a4:b8:26:a4:29:a7:83:
4d:98:c1:f6:35:fb:1f:28:46:8d:b6:cc:fc:8a:22:
8b:e1:07:75:96:18:9a:1c:85:14:ca:9e:fe:49:ea:
02:30:ba:7d:98:f5:24:d9:9f:54:ea:37:dc:79:2d:
05:e6:cb:b8:57:5d:20:4e:c8:8e:18:4a:38:84:9e:
49:91:86:2d:43:c8:6c:c8:f7:d8:a9:40:d8:7e:95:
3b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C8:B8:94:6D:8B:DD:AB:54:55:1F:02:B0:41:CD:7C:0B:4E:E3:FC
X509v3 Authority Key Identifier:
keyid:AD:51:B4:FA:37:D4:23:84:43:99:72:2D:52:40:A9:46:74:49:62:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/1/AD51B4FA37D423844399722D5240A94674496236.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AD51B4FA37D423844399722D5240A94674496236.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/1/AD51B4FA37D423844399722D5240A94674496236.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:df:9f:81:d6:c8:b7:bf:a2:7f:75:d4:53:77:5f:d4:80:05:
f3:c6:c2:71:c0:41:20:52:ae:63:df:4e:de:45:c9:a5:e3:12:
ce:2d:11:c4:93:71:c7:c1:d9:a1:d3:7a:84:0b:45:c1:df:95:
c7:44:44:22:42:54:1d:56:2d:3e:12:e9:4a:e4:1f:05:7f:f2:
ac:5c:0b:bb:6d:7a:4e:ff:cb:79:17:ec:9c:2b:c9:70:5a:9f:
33:73:38:86:02:01:f6:66:64:c4:19:16:23:a5:37:74:ac:cb:
0c:ae:d8:c3:60:5d:73:26:53:6f:55:32:28:ec:19:65:7e:b1:
b7:f7:05:1f:96:64:d8:ac:8a:4c:3d:9e:0e:08:ea:0f:e5:1b:
5f:1c:b0:c0:d4:a7:d9:ec:69:c0:af:4c:99:07:a5:b8:59:0e:
1f:21:51:b4:aa:aa:64:cd:2d:af:ae:5c:27:e3:15:0e:d2:9f:
05:f7:95:fe:64:63:30:52:0a:a3:84:4f:b4:fe:c7:6d:b2:ad:
61:49:32:81:4f:e1:61:10:7b:20:44:40:9c:52:8e:e3:c9:c1:
4b:9a:c8:c9:92:be:67:00:10:68:f4:9e:bb:c0:06:b6:e3:f8:
a7:a1:56:32:57:b2:cf:49:3d:dd:cb:a2:e7:41:5d:f1:79:fe:
94:99:99:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 06:14:07 2025 by rpki-client