This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft
File: E205EBF065FC4929F1802662AE62D7F9762600E6.mft (raw, json)
Hash identifier: g20D+38KtlN0gK8WuSlSacDTsNCBH+/l5VaSELJSfhg=
Subject key identifier: D0:0A:96:49:66:C5:8C:58:3D:BD:AD:93:44:39:0E:44:22:A3:31:B0
Authority key identifier: E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6
Certificate issuer: /CN=e205ebf065fc4929f1802662ae62d7f9762600e6
Certificate serial: 428D06AEBBEABF976A9C55F240E24D550A6E1C22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft
Manifest number: 0192
Signing time: Sun 14 Dec 2025 03:17:09 +0000
Manifest this update: Sun 14 Dec 2025 03:12:09 +0000
Manifest next update: Mon 15 Dec 2025 05:44:09 +0000
Files and hashes: 1: 39312e3230392e35382e302f32342d3234203d3e203634323637.roa (hash: vVPhAwxMoGbJX95BZTqrmZCi086rlFMNDRhMBQEniYs=)
2: 326130663a356663303a6163653a3a2f34382d3438203d3e20323035303336.roa (hash: s62/iVKVlW2KdVyTR+Xnv457Z0j5+aZNRyV7RtkAKNQ=)
3: 39312e3230392e35302e302f32342d3234203d3e20323039333732.roa (hash: UjFw0WQQLm//XoiWgykA8VWz+amzh0YCKaelwGihPq4=)
4: 326130663a356663303a6465623a3a2f34382d3438203d3e20323035303336.roa (hash: HGgyYO79YRPv5eTIvRCSkvT+uzFYIDLIXRArnhiRVzA=)
5: 39312e3230392e34382e302f32342d3234203d3e2034363337.roa (hash: 4+D5jdmTDYB1GvCAU0z5GBGlSPW7Q/zpduO0wdWv8pU=)
6: 326130663a356663303a623030623a3a2f34382d3438203d3e20323035303336.roa (hash: dtubQqytFEqkt8TqTYJ+KlZgpXqOEEfNHG9KMyAKroE=)
7: 326130663a356663303a646561643a3a2f34382d3438203d3e20323035303336.roa (hash: Z7YS72AkRUhmGE/8eVCwX/QArQ7kzj3DMVCvF8nhupE=)
8: 326130663a356663303a6164643a3a2f34382d3438203d3e20323035303336.roa (hash: N543k0DcGiJuxubeGma9GZg+VhMwbPVS9ShNVwfZl30=)
9: 326130663a356663303a646561663a3a2f34382d3438203d3e20323035303336.roa (hash: nBnCDOBWFR9glmAsUSRrLmDkLZa6Zi7bYUkIoT7Lpvs=)
10: 326130663a356663303a633064653a3a2f34382d3438203d3e20323035303336.roa (hash: vwuw8BagjBJB+QjPivE2w5i9soU6pwd3DUm4jYukQKs=)
11: 326130663a356663303a626162613a3a2f34382d3438203d3e20323035303336.roa (hash: kdDGBWrURu4f0ClnA4SfgsI29M2UtK1sJ9ldbUvOvNc=)
12: 326130663a356663303a663030643a3a2f34382d3438203d3e20323035303336.roa (hash: Xgs2aXZ2twwalLnMnwHKHrLdiNgmex+4PLid272RcXc=)
13: E205EBF065FC4929F1802662AE62D7F9762600E6.crl (hash: U89F3oxOoAqhqqJz5GWqfY07IKgEDR3QiBMlm12mkYM=)
14: 326130663a356663303a6265643a3a2f34382d3438203d3e20323035303336.roa (hash: Vn0tNJq84yvhpEx3djvegd0qElXvUXIj3d10CpoBDS8=)
15: 326130663a356663303a6665653a3a2f34382d3438203d3e20323035303336.roa (hash: sgKb1dwb+yOP2QySpduAJeLZbiJJdLEfbfVpO0+8Lgg=)
16: 326130663a356663303a646565643a3a2f34382d3438203d3e20323035303336.roa (hash: 6WyHSY5Xp60q1IE95V4h6lwOICpnxsevWtnXKH+E1RA=)
17: 326130663a356663303a636166653a3a2f34382d3438203d3e20323035303336.roa (hash: SIzDkF7YYsoaU9vFR/am7daSl1S+0BBZdMp9c5ogCY8=)
18: 326130663a356663303a626162653a3a2f34382d3438203d3e20323035303336.roa (hash: BEzvo1oTT3h/yITGofAX+DfQt9t+mraGyg3xFdVKM2I=)
19: 326130663a356663303a666565643a3a2f34382d3438203d3e20323035303336.roa (hash: Qj8pflv8KszWoeUIqOpeKQUtZrsbyJDTmnxefpUjjlo=)
20: 326130663a356663303a6261643a3a2f34382d3438203d3e20323035303336.roa (hash: tvkflaFeVW3sd8cXnqPd3goXjSItIqLYbambS6E6g9M=)
21: 326130663a356663303a6461643a3a2f34382d3438203d3e20323035303336.roa (hash: FjMn5kgc0Y1vdPNQCAd4cKVxUcNaP4msdjwOhjOI4iE=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl
rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft
rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:8d:06:ae:bb:ea:bf:97:6a:9c:55:f2:40:e2:4d:55:0a:6e:1c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e205ebf065fc4929f1802662ae62d7f9762600e6
Validity
Not Before: Dec 14 03:12:09 2025 GMT
Not After : Dec 15 05:44:09 2025 GMT
Subject: CN=D00A964966C58C583DBDAD9344390E4422A331B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cb:cb:81:46:67:80:a7:18:f7:ef:10:6d:bd:
86:02:ef:bb:f3:17:00:54:38:1e:4e:27:3f:b9:48:
9f:7b:d4:ea:d7:fe:fc:ff:58:ee:a3:50:41:8a:88:
27:a8:e5:ea:0b:f8:99:af:62:d0:ab:c2:0b:b5:14:
d2:bc:f6:f0:ac:7b:e2:1a:40:14:3b:c4:c9:9d:4c:
b3:a2:d2:9b:30:20:a4:81:77:99:c4:02:aa:09:a5:
0d:92:72:ef:a2:d6:7b:50:9c:68:89:2c:23:97:d2:
48:93:0e:d5:83:07:ba:6e:73:bb:9e:b6:ba:61:ba:
de:ff:58:af:52:c2:09:4e:c5:84:af:0b:7b:e9:78:
f8:36:42:e1:3b:a1:45:37:b6:20:80:9a:c8:13:5f:
1c:15:0a:b9:e6:7c:70:a7:4b:ff:17:f4:e4:74:0d:
af:58:3c:d8:55:34:f0:7d:e1:b7:36:3f:0d:7b:77:
49:36:bb:2f:06:41:78:66:e6:88:3f:97:57:19:79:
12:dc:db:ad:da:cd:17:05:ae:76:87:d8:42:9c:63:
09:5f:c2:dc:e2:f5:3a:1f:a5:a4:59:98:e4:ad:6d:
27:e6:c3:31:e6:92:f2:2d:f9:0d:6f:a7:34:ef:88:
30:bc:2f:0a:c2:10:d6:51:29:c5:32:e8:70:84:60:
65:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:0A:96:49:66:C5:8C:58:3D:BD:AD:93:44:39:0E:44:22:A3:31:B0
X509v3 Authority Key Identifier:
keyid:E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:38:fd:82:94:c4:ca:f1:ee:96:ea:b1:f9:18:21:56:e6:fa:
a5:c5:49:17:1c:be:a3:a5:02:c7:19:dd:9e:c6:25:19:12:82:
fd:bb:93:13:60:a9:73:66:c8:32:41:7f:a5:b3:94:f8:b3:db:
8c:6c:c0:46:e1:32:12:16:ab:8c:44:bb:5b:bc:00:9e:eb:40:
26:7b:e8:1b:90:35:ab:c4:e3:50:09:f7:5e:54:aa:c5:1f:50:
ef:d9:12:2e:16:44:53:e5:e3:76:b5:84:a9:a6:f2:8f:87:92:
c8:9c:0a:6f:31:6c:e2:cd:15:37:96:d3:08:7a:9b:b7:0f:38:
7d:7a:72:71:1f:4f:f8:a4:ac:8d:48:29:c2:d0:be:44:83:5a:
3d:91:50:d9:66:f7:9f:2d:4b:66:30:b8:df:b0:35:1e:fe:96:
c0:6a:fd:06:1f:1c:7e:62:6e:44:bf:9c:5f:b3:e0:63:57:3f:
7d:0d:db:d8:d4:50:0c:6c:a2:84:da:88:63:e2:b4:98:f3:0f:
c7:3b:6d:ee:28:22:19:3d:ee:ba:1f:f7:d9:5f:db:2d:1c:9e:
58:b8:a1:1e:2b:ad:b0:15:9b:ed:42:cf:6d:15:e4:0b:43:70:
b8:09:12:e4:d5:13:00:68:60:4e:85:2e:8e:67:ac:02:a3:09:
bd:97:12:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 12:07:02 2025 by rpki-client