This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft
File: E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft (raw, json)
Hash identifier: x+qEMwH5MM/A2JLDCTpjVeeCyYlR6+qEUNyGMOQ/LfI=
Subject key identifier: 8B:F5:3F:37:AA:B0:0F:A1:4F:87:25:5B:52:A1:84:2A:3D:7B:B1:D5
Authority key identifier: E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
Certificate issuer: /CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Certificate serial: 5D818967B8C0DC4627E2AE0A199DAFD523801351
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft
Manifest number: 0130
Signing time: Thu 11 Dec 2025 19:51:37 +0000
Manifest this update: Thu 11 Dec 2025 19:46:37 +0000
Manifest next update: Fri 12 Dec 2025 23:03:37 +0000
Files and hashes: 1: 39312e3233312e3132362e302f32342d3234203d3e2035363530.roa (hash: it6kdqtvQIR1fmnyxGg95/2ozlg9ybLYZncNwT8sS4M=)
2: 3138352e3136322e3137382e302f32342d3234203d3e2032393134.roa (hash: s1bbd6LyvYQrZ11FtU3Xa/oNq7QSAV2j6DcxJrrwcV0=)
3: 3138382e39342e3139312e302f32342d3234203d3e203236333833.roa (hash: KVgKufhzMCzuYPXRdj1v2nCOHhTInMxlTivgHzFkAcY=)
4: 3138382e39342e3139312e302f32342d3234203d3e203537303433.roa (hash: 8styg8XghivByqecwh8GqtE8kKwAeHdMu50Ggf4sImQ=)
5: 3138352e3136322e3137372e302f32342d3234203d3e203634323637.roa (hash: /1m1oguvqlFAZeE/pimTTtaJVN2H8its6YXMEA9yyH0=)
6: 3138352e3233342e3130302e302f32342d3234203d3e203335363631.roa (hash: 7IoW8V7sYCxYnK3GpV+L+iywqaWF/MSER2M0Aaj+ktk=)
7: 34352e3134392e3135322e302f32342d3234203d3e20323134313433.roa (hash: ZqsnAbwfQsSLAO15y/hQmlAKLget/IE+XAeE4Nr5/8I=)
8: 39312e3233322e39392e302f32342d3234203d3e20313937353337.roa (hash: G+mgzv7tRhUfmSaRumVwyhbJ8nNvEA0s859L61Ejv18=)
9: 3138352e3132332e3135362e302f32342d3234203d3e20323133323832.roa (hash: HI1VX16qX1LTsAjuvQN0eR8x1ZQ2WlG9l18ZWZhTnXQ=)
10: 34352e3134392e3135332e302f32342d3234203d3e20323635393139.roa (hash: kgIiY2hKU4E4tRDz3OnYpx84hUJKrY7sZF8oMbsebok=)
11: 3138352e3132332e3135382e302f32342d3234203d3e203239383032.roa (hash: TLiGnJOFD2b+z4uS2pKNa+Gc2aYGJ4ZFIaexiybn7wo=)
12: 3138352e3136322e3137392e302f32342d3234203d3e203132383734.roa (hash: Oev3T5PHjGnxWqjgwbUH88tHYEWPx4hW7vlkYnxUh4c=)
13: 38392e3135302e34392e302f32342d3234203d3e2030.roa (hash: 7Ig6g0VJeEa8ieyP+TOsHpA7clMBoFU562cFNoIoSMM=)
14: 3138352e33332e32362e302f32342d3234203d3e20323132363039.roa (hash: +Uou40uKN3P8LL5yuWZGR768rlaEfbKR2VYxApN71AA=)
15: 3138352e3132332e3135392e302f32342d3234203d3e20333936333536.roa (hash: 8ymSE6/IZ4mS3/jdg4jdCuqPIOO7MFcCnM1/lcLJutM=)
16: 34352e3134392e3135342e302f32342d3234203d3e20323132343737.roa (hash: ElvQJHHMZyjhqFtZ4eXubU55AwJuUHlB5VPhchi0zEY=)
17: E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl (hash: T5RRCwIMWL88w01TfqU76cjufp7Sim6krkgOBuqyXuY=)
18: 3139342e39392e3135362e302f32342d3234203d3e203232343237.roa (hash: rIB6LZlyDY4ccd8aiBOUspQRAkgz2Qkx5QliZapGW3w=)
19: 3138352e3132332e3135372e302f32342d3234203d3e203533333536.roa (hash: lHbHKjkzEHNG8HMgZvfO2b7EsuiOvBYyEIHvvUxLyMU=)
20: 3138352e3136322e3137362e302f32342d3234203d3e203537303433.roa (hash: SVrpMsQaq2+Of1pyWLABKDNguVH/um78jdJjsg2PZXk=)
21: 34352e3134392e3135332e302f32342d3234203d3e203133333335.roa (hash: oW4WynaArlYMwXoVGq9L68dOfSrJj8wnnWqrszCEjBM=)
22: 34352e3134392e3135322e302f32342d3234203d3e203235313630.roa (hash: F5qAcWfgptgKaaDsmY0iSSOR+nBZv9RYAI/0kq8SYl8=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl
rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Dec 2025 19:27:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:81:89:67:b8:c0:dc:46:27:e2:ae:0a:19:9d:af:d5:23:80:13:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Validity
Not Before: Dec 11 19:46:37 2025 GMT
Not After : Dec 12 23:03:37 2025 GMT
Subject: CN=8BF53F37AAB00FA14F87255B52A1842A3D7BB1D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8e:74:98:b8:c2:e1:c0:46:7f:32:18:4e:e0:
98:de:ac:81:24:bc:82:23:03:3a:bc:c9:65:4f:96:
7e:c6:ff:5f:eb:48:34:8a:7e:94:d7:f5:20:ac:91:
a9:40:54:5d:ce:7a:8a:f2:a2:32:ac:61:83:dc:59:
05:01:e8:94:2d:64:28:bd:af:f5:3a:c0:1c:fd:36:
79:79:a6:0e:7f:48:68:2f:66:58:f8:e4:91:6e:04:
ef:cd:f6:c7:b3:55:f5:7c:1e:33:4d:ab:eb:6b:f5:
e8:79:3c:62:c9:c7:e5:ac:bf:2f:9b:2a:fc:02:40:
10:cb:01:9a:2f:27:92:11:6c:7f:2e:8e:a5:c5:3d:
f5:54:6e:eb:82:41:15:bc:f0:95:99:48:17:8a:e8:
bc:c5:ee:2b:8a:af:90:62:e9:46:62:49:eb:87:d8:
24:01:ba:c9:0d:9c:8c:f8:10:ba:45:34:39:1a:2c:
18:85:a7:85:6e:22:f0:56:38:e3:f5:dd:c3:8b:80:
dc:52:45:cb:02:5a:e9:16:65:a2:93:16:eb:84:c4:
a6:91:a0:b0:f9:aa:3a:24:96:72:8f:56:60:fc:a9:
27:d3:ff:82:22:52:22:ff:8b:11:0c:77:ec:bb:c4:
7f:bf:6d:7a:2a:f9:e3:37:03:4e:df:38:71:c5:c9:
f6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:F5:3F:37:AA:B0:0F:A1:4F:87:25:5B:52:A1:84:2A:3D:7B:B1:D5
X509v3 Authority Key Identifier:
keyid:E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:c6:9f:7a:0d:99:01:67:51:7c:38:44:9f:90:53:63:5a:f6:
22:bb:21:d2:a5:a8:87:b3:d5:43:6d:7d:7c:4c:47:cf:7f:5d:
f4:b0:a0:ea:44:02:db:71:98:00:c7:48:af:c9:ae:06:09:e5:
c2:a7:24:58:72:42:9f:f5:7a:b8:80:35:7e:e3:1b:5d:35:fc:
ae:69:90:ea:83:a6:f4:80:5c:2c:72:ad:ec:09:19:9e:cf:f3:
02:5e:ce:1a:91:3b:9f:a9:b2:0b:9f:34:1d:cb:b3:62:5f:de:
d1:fe:37:42:d2:bd:82:5f:c8:cc:40:52:b2:42:91:19:0f:50:
78:8d:72:b1:57:06:4c:cd:b1:e8:a6:c9:6c:f2:ae:8f:1b:e2:
b8:fb:5e:0c:60:23:12:5c:59:1d:de:5f:0f:0a:d3:1a:60:e5:
4f:3d:9e:82:50:65:81:a6:1c:19:75:c0:7b:77:a0:fd:1e:b5:
f6:bc:ec:e1:dd:ec:78:26:9c:c0:c3:12:7c:4e:f9:2d:2b:ad:
28:55:e0:9a:86:79:06:83:55:5a:dd:70:fe:0b:1f:af:61:df:
d7:fd:12:34:3b:fd:b8:6c:c2:8e:84:44:29:7a:b6:85:b6:66:
d8:25:72:a6:74:4c:a3:31:6e:e7:32:43:19:8e:43:11:40:8c:
29:9e:2f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 00:09:17 2025 by rpki-client