This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft
File: 1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft (raw, json)
Hash identifier: ilSj+tJTQJ4+4enLT32Ta+Y87FxlU6buPR0AFSOqyHQ=
Subject key identifier: 9A:9C:BF:4D:C3:55:A3:95:2A:44:63:2B:99:80:A0:CC:BB:23:1F:D8
Authority key identifier: 1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB
Certificate issuer: /CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB
Certificate serial: 6B2D1FA1838201C94405C2F61BD972EF78BCD873
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft
Manifest number: 02DE
Signing time: Wed 10 Dec 2025 20:51:56 +0000
Manifest this update: Wed 10 Dec 2025 20:46:56 +0000
Manifest next update: Thu 11 Dec 2025 22:48:56 +0000
Files and hashes: 1: 326131343a373538313a643130303a3a2f34302d3438203d3e203533363637.roa (hash: e+p8+Sw9X8S3Ty3gF9pg+LdvDbV5qMXAYBBthQD4LPE=)
2: 326131343a373538313a643030303a3a2f34302d3430203d3e203337393838.roa (hash: R4oy1L8+rEt1QdmoGVV7PiYt423B/xK5i6kPhc7W9aI=)
3: 326131343a373538313a643130303a3a2f34302d3430203d3e203533363637.roa (hash: M0+yHEN3VX8K+aVDmpusml/7Hx8dbBnadNDMaFbGOzQ=)
4: 326131343a373538313a643030303a3a2f34312d3431203d3e203337393838.roa (hash: DvQHKT6M+fkiG6o9KW4wBm0yNbqCXWjg78L/cu4BiJ0=)
5: 326131343a373538313a643230303a3a2f34302d3438203d3e203633343733.roa (hash: OTYsTfrglFs/JKFj7RJtAXdrMe1OUcjbc3WSXqeD0dk=)
6: 1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl (hash: ucB+YmbrzmKIWRGJNXY3v3OfIFZFn21Nzz0Ef5wzRWs=)
7: 326131343a373538313a643038303a3a2f34312d3431203d3e203337393838.roa (hash: BL4+PYIdcLs3fiOkkamkg94lgyO9kcRHp6ACoQUQ5y8=)
8: 326131343a373538313a643330303a3a2f34302d3430203d3e2037353435.roa (hash: 9phDdz/jhh9vxdEc5WXHXIl+cdnJzAyh/6SdvyVejiI=)
9: 326131343a373538313a643230303a3a2f34302d3430203d3e203533363637.roa (hash: KPVNDBydB4lEOCddQAWiNda/rm6IVb4G2i+sUeOhrYg=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl
rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Dec 2025 22:48:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:2d:1f:a1:83:82:01:c9:44:05:c2:f6:1b:d9:72:ef:78:bc:d8:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB
Validity
Not Before: Dec 10 20:46:56 2025 GMT
Not After : Dec 11 22:48:56 2025 GMT
Subject: CN=9A9CBF4DC355A3952A44632B9980A0CCBB231FD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fb:12:df:e8:d1:91:19:eb:ad:f2:40:ed:84:
a1:81:f1:75:a9:e0:6a:b2:ba:78:1b:d0:b0:97:6a:
7d:ad:33:b8:4b:a3:a9:87:f7:26:0a:33:00:5d:c0:
57:0a:f4:68:9e:71:33:b4:9b:d4:79:cf:d0:b1:6c:
36:4c:3c:25:dc:17:7d:2b:f7:13:b4:f9:98:13:ab:
98:34:e4:34:ef:a4:35:c4:a3:82:c3:0f:a8:fa:9c:
3f:7a:8d:b8:55:8a:7c:e6:26:de:3d:29:de:41:df:
96:54:68:9d:de:fc:a9:12:13:c9:5f:c8:76:6c:de:
75:a0:b4:de:7d:00:d4:42:af:8f:91:59:d5:5e:d1:
39:cf:6b:66:6d:8a:57:b9:d8:18:02:bd:2f:58:94:
94:e4:11:f4:f9:ea:46:ee:2f:e5:fd:c9:6f:c9:37:
2d:b7:33:09:33:34:7e:d2:94:e7:98:ab:d3:5b:de:
3d:ec:14:b7:0d:24:a9:01:3c:f8:09:bf:5a:08:00:
a6:fc:27:4c:6a:11:ec:ca:bb:f6:cf:d0:c3:5d:92:
47:42:22:36:7e:81:38:00:af:7e:86:2b:11:5c:d2:
ae:45:12:09:15:3f:32:23:51:bb:7b:51:0f:1a:1a:
f6:55:d6:7e:1a:82:08:2d:0f:db:59:84:e7:13:04:
34:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:9C:BF:4D:C3:55:A3:95:2A:44:63:2B:99:80:A0:CC:BB:23:1F:D8
X509v3 Authority Key Identifier:
keyid:1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:6b:ea:c8:b5:79:52:54:51:dd:c7:75:ec:55:ae:93:98:1e:
6d:4f:e0:9c:f2:e2:82:94:5c:24:ce:d4:a5:af:67:10:1f:cb:
4c:d5:df:82:63:85:2a:b2:a5:ec:95:fe:2a:7d:28:a6:af:91:
b9:0b:1c:c4:a1:f3:67:30:77:8f:70:2e:2e:fe:0f:3b:c3:98:
a4:45:14:83:7a:d0:68:0e:d5:0e:78:47:03:19:91:dc:70:4d:
dc:76:8d:2f:00:10:53:f8:b8:b4:e1:fd:41:0f:36:36:9a:3a:
d5:4a:62:86:e6:a4:3d:26:9e:1c:68:98:26:3e:42:10:7f:7d:
a3:5f:2c:56:24:48:71:93:aa:78:04:c2:05:5d:7e:86:f1:e0:
15:e9:23:33:47:d4:4c:39:00:cf:c3:b5:47:eb:76:8b:26:b9:
29:21:12:4b:43:b4:fa:2a:3c:fc:20:b7:db:a4:ba:90:10:8a:
98:39:d2:af:f7:68:3b:e0:98:c7:0c:03:bb:1a:0d:e7:50:f0:
2b:7d:f6:f1:73:17:21:5e:f1:26:4d:4a:37:68:d2:1b:37:f3:
6d:b9:9e:a0:74:93:03:99:de:0d:18:0f:9c:36:44:ca:57:c2:
34:a7:7d:e4:40:de:48:b3:4f:8e:c2:c8:43:84:ce:1f:03:ba:
ab:65:cb:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 11 07:42:46 2025 by rpki-client