This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft
File: 51917E722DB03952D9056BED2F6BD4BF98B78976.mft (raw, json)
Hash identifier: 7SFIyTbXP/ndlCbWb4cCDB2P8anoDNvXhZgOEpIE3xI=
Subject key identifier: 09:20:FF:19:0A:AF:63:46:7F:34:C7:49:83:5A:D3:10:73:E7:D8:38
Authority key identifier: 51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76
Certificate issuer: /CN=51917E722DB03952D9056BED2F6BD4BF98B78976
Certificate serial: 0FE9A4841BF103D7F2A237125E01A7EE7520755B
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft
Manifest number: 0120
Signing time: Fri 12 Dec 2025 17:19:47 +0000
Manifest this update: Fri 12 Dec 2025 17:14:47 +0000
Manifest next update: Sat 13 Dec 2025 21:07:47 +0000
Files and hashes: 1: 326131343a373538303a666635323a3a2f34382d3438203d3e20323039373130.roa (hash: vs66PWFM6L/hirNyhIXTRaz65c001j+IhkCdp8VdfS4=)
2: 326131343a373538303a666635333a3a2f34382d3438203d3e20323039373130.roa (hash: UpFVw7x1NBf/Uix4G0zJEj+QV4riL3tEIjso5GywhOU=)
3: 326131343a373538303a666635353a3a2f34382d3438203d3e20323039373130.roa (hash: 5weylF9E+kZUqdJn7nMGLccAIkWjUNuo5MqarqyfkO8=)
4: 326131343a373538303a3530303a3a2f34322d3432203d3e203331383938.roa (hash: 7z5RoyaJRkP9nx99eQ4HknE9KjY7eFLuMQrU4NhLP9s=)
5: 326131343a373538303a3530303a3a2f34302d3430203d3e20323039373130.roa (hash: UtWLjV2JD6X8emwUC9bu8RyXGCD7bzymrTBVIEkaVv8=)
6: 326131343a373538303a666635343a3a2f34382d3438203d3e20323039373130.roa (hash: i7VkbN6Rb5CnHlmR8BF2dlC+Uq3PFV4wJTcaolWAu+U=)
7: 326131343a373538303a666635303a3a2f34342d3434203d3e20323039373130.roa (hash: SHYewRnAEyfHeIS/ErCy1dNpuo8kVPzhKkgjNNzYVkM=)
8: 326131343a373538303a666635303a3a2f34382d3438203d3e20323039373130.roa (hash: RhrZumuCHn+6y3yZr34sdgh4sb8kS47/Ka9E3B3UluQ=)
9: 326131343a373538303a666635313a3a2f34382d3438203d3e20323039373130.roa (hash: KcfiSDiqDvlLOqfaLqph9s6F4NvpySAcmNFiwDriyms=)
10: 51917E722DB03952D9056BED2F6BD4BF98B78976.crl (hash: ytnbtpY1uJJc75Q1fOd8j+UQAWC/tRM0yNi/cgcNr9M=)
11: 326131343a373538303a666635363a3a2f34382d3438203d3e20323039373130.roa (hash: SwKF9ZgurLBB1Omp9sHNYZoTnYJ/E2ALGPkMC5kD1BA=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl
rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Dec 2025 21:07:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:e9:a4:84:1b:f1:03:d7:f2:a2:37:12:5e:01:a7:ee:75:20:75:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51917E722DB03952D9056BED2F6BD4BF98B78976
Validity
Not Before: Dec 12 17:14:47 2025 GMT
Not After : Dec 13 21:07:47 2025 GMT
Subject: CN=0920FF190AAF63467F34C749835AD31073E7D838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:dd:fd:ff:8c:6c:c5:6e:ba:7b:44:3b:15:16:
b9:ab:e0:03:f7:c7:c9:80:60:15:a7:47:a0:0c:8b:
27:58:fb:6d:2f:37:a1:0e:5a:74:24:d2:b2:0c:e9:
a5:2f:21:f9:60:96:83:12:cb:90:3d:b3:c5:b2:a2:
2b:bb:66:ea:95:3b:a7:d6:46:5e:7c:7f:12:67:03:
e4:45:d9:e7:fc:76:45:40:33:67:44:fb:07:7b:66:
0e:4e:f5:4b:b7:65:80:03:f8:d8:68:2c:5b:44:30:
87:c4:34:a7:e6:f9:1c:b2:c6:4f:e4:a1:fb:a3:e5:
a4:0e:2a:df:f1:b1:f4:65:51:fd:21:6a:bd:c9:91:
c0:c7:59:a5:ab:42:52:5f:72:89:cd:99:f8:34:98:
54:d3:78:40:3d:0b:bf:f9:7c:a2:24:7b:00:fa:2e:
d5:2a:03:fe:e7:0f:8b:62:c4:ab:83:0a:81:4b:36:
61:11:76:1c:3e:7b:8a:12:c9:14:b8:bb:e7:e3:9b:
35:d4:91:ca:66:10:32:17:9e:92:c2:b5:50:20:bc:
18:2f:ff:68:ea:f0:72:fe:d9:d3:57:fd:a3:08:ad:
b9:91:ec:ca:9d:ec:5f:6c:a4:c5:83:cf:70:77:61:
e2:cf:ec:b4:80:0c:4f:1f:b9:ee:48:c9:57:9a:7b:
df:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:20:FF:19:0A:AF:63:46:7F:34:C7:49:83:5A:D3:10:73:E7:D8:38
X509v3 Authority Key Identifier:
keyid:51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:56:c9:ee:75:87:96:06:11:5b:e2:3a:1e:01:53:d2:c5:1e:
81:5e:8c:a6:a8:67:b0:48:d3:95:4b:d5:ed:51:cc:cd:7b:d7:
9b:e5:b6:5f:f0:a6:4f:cd:15:dd:7b:f7:28:55:21:26:42:bd:
2b:a8:7f:23:4a:cc:ab:76:0c:da:40:a4:1a:d3:65:02:b5:9d:
ba:43:76:1d:8e:17:63:fe:8f:53:71:43:88:09:17:95:3f:0b:
72:96:51:a7:30:50:7b:b9:83:ca:a2:85:e4:38:22:89:66:86:
2d:bd:eb:03:c0:31:83:fc:30:c0:23:4f:5d:73:cd:6d:01:91:
7e:1b:41:dc:f6:fc:a2:97:1d:c4:65:1f:0d:08:fe:29:c2:4a:
06:ce:8f:1f:f8:2e:dd:b6:96:f0:c6:7d:1d:3c:a0:33:eb:f6:
85:e9:d6:9d:d7:50:6c:f8:0c:79:bf:8f:2a:cf:42:dd:c3:90:
c0:dc:fb:97:72:77:50:1b:a9:24:44:4c:f3:62:22:b0:4c:b7:
e3:0c:2e:6f:e3:03:48:4d:5b:37:68:f0:94:43:93:7e:79:f0:
1b:26:98:00:88:37:bb:92:9f:27:02:7c:44:48:aa:40:55:62:
c0:e4:01:44:84:05:77:7e:8a:50:1e:61:a1:b5:9a:0b:92:2d:
49:b9:02:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 13 08:21:27 2025 by rpki-client