This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft
File: 5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft (raw, json)
Hash identifier: 4VeqChPs+ZuUDwjcKavZRsQY926OoPc+01ZdRX5mrdM=
Subject key identifier: 90:96:A1:A2:98:9D:69:AC:AB:AE:49:D9:97:4B:3D:BA:1F:64:1F:52
Authority key identifier: 5A:3F:78:19:35:3C:E0:FD:13:B8:FF:CD:CB:88:37:ED:0B:F5:91:5F
Certificate issuer: /CN=5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F
Certificate serial: 6C55A55E845A41B13ECDD9EF7F7DE560C5D1B098
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft
Manifest number: CF
Signing time: Thu 04 Dec 2025 07:59:25 +0000
Manifest this update: Thu 04 Dec 2025 07:54:25 +0000
Manifest next update: Fri 05 Dec 2025 11:16:25 +0000
Files and hashes: 1: 5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl (hash: B9eSG7388PeUKkbxYj4OVGdDteerUIMXlEMvIYYrjOY=)
2: 326130363a396634313a3130303a3a2f34302d3430203d3e20323134373233.roa (hash: sTs8O8KBp3/QEgTlhnDJhb+nhykdynr848iPv4Z/TIo=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl
rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft
rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer
rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl
rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Dec 2025 00:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:55:a5:5e:84:5a:41:b1:3e:cd:d9:ef:7f:7d:e5:60:c5:d1:b0:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F
Validity
Not Before: Dec 4 07:54:25 2025 GMT
Not After : Dec 5 11:16:25 2025 GMT
Subject: CN=9096A1A2989D69ACABAE49D9974B3DBA1F641F52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a3:cb:2a:b1:61:d0:c8:64:11:45:23:91:74:
bb:d0:47:59:47:81:fd:5b:44:e8:38:af:91:1c:55:
96:87:62:b8:c6:e5:f0:59:06:37:5a:f3:a9:83:0f:
9f:6e:b6:40:30:de:07:01:4e:e3:0e:2b:12:bf:ba:
67:bc:9e:53:14:86:7c:9f:a5:92:95:81:59:5e:7c:
b0:3b:86:f0:42:d1:c3:d1:8c:9c:2d:87:7e:68:a7:
24:09:eb:fc:a6:f8:81:bc:55:c4:61:e0:c0:5c:60:
99:53:9d:73:a5:a3:91:d3:5d:1b:5c:ad:55:bf:38:
b5:3e:dd:44:9f:69:2b:4c:c0:27:e0:21:c9:19:b8:
cc:e7:92:bd:c7:dc:55:79:14:44:30:75:ed:3c:f6:
e0:72:e8:b3:74:58:4d:65:e8:05:e0:5f:f8:51:71:
cb:d4:b4:2b:61:80:da:cb:54:97:78:e8:59:f0:4e:
c6:31:7f:fd:c7:94:26:85:86:8b:68:43:c9:9a:16:
19:d9:27:9c:41:89:67:71:06:cd:95:af:15:3b:a3:
e1:48:45:c4:38:03:51:42:23:96:2c:83:1c:a7:e7:
b0:5e:a1:06:37:ec:49:81:da:a8:47:df:f5:cf:01:
95:c8:94:b0:92:5d:6d:05:97:61:02:8b:8f:41:c6:
22:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:96:A1:A2:98:9D:69:AC:AB:AE:49:D9:97:4B:3D:BA:1F:64:1F:52
X509v3 Authority Key Identifier:
keyid:5A:3F:78:19:35:3C:E0:FD:13:B8:FF:CD:CB:88:37:ED:0B:F5:91:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:20:0c:9d:41:6c:7e:aa:3e:b2:fb:eb:1f:98:87:03:fe:d7:
1c:04:47:6d:99:a8:1c:be:1a:91:52:26:5b:e8:7d:5a:e6:9e:
e1:68:e4:1a:6d:d5:39:df:af:ca:b2:b6:98:9b:bf:b2:e5:24:
1b:24:b5:37:f5:21:28:11:2e:8c:61:a1:86:98:53:31:8a:85:
0d:9f:79:51:06:8a:73:27:d8:32:b5:fe:f4:1a:7b:e7:97:d5:
22:cd:f0:36:44:9f:3e:df:90:6f:23:a0:e6:03:a2:54:f4:91:
d7:2a:15:31:b0:39:bb:0f:92:f2:ef:b5:38:43:a0:09:cb:61:
ed:35:08:44:36:80:67:6f:57:42:70:d6:b4:e4:1e:94:82:c0:
22:21:e5:a5:26:1e:fe:44:e3:ae:43:81:f2:8c:d8:16:1f:51:
b3:bc:89:30:10:4d:34:07:7d:65:7e:e9:4e:b3:c4:35:40:38:
fe:0e:ba:ac:6a:fb:d8:0f:29:0d:1f:50:d7:88:60:9f:d3:c7:
ff:c3:f8:60:d9:a7:a8:8c:a8:c2:ab:c0:89:bf:d2:51:cc:ff:
85:44:f9:7b:9f:82:ca:1e:21:c3:80:39:35:35:ed:df:e5:ee:
df:e0:b9:98:ef:cc:ad:c7:ff:36:21:c0:5d:b4:9e:40:b1:a5:
2a:a0:75:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 09:53:09 2025 by rpki-client