This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
File: 88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft (raw, json)
Hash identifier: jvu8lP6e6sDsbg+UKQ07Ooe6SpHZVNbPqIQXOn+WR8w=
Subject key identifier: B2:C2:48:7C:85:F8:C3:78:3A:AD:3E:1E:40:FB:D1:86:8E:23:8E:DB
Authority key identifier: 88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91
Certificate issuer: /CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
Certificate serial: 27399947F44F408AAAF127CDD5C34C0B0A8F3DB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
Manifest number: 027D
Signing time: Sat 06 Dec 2025 23:15:12 +0000
Manifest this update: Sat 06 Dec 2025 23:10:12 +0000
Manifest next update: Sun 07 Dec 2025 23:36:12 +0000
Files and hashes: 1: 3138352e3234322e3138302e302f32342d3234203d3e203431373230.roa (hash: m2CiuFBjrlRavusUidV8mkbKXKHzyUUUhDYGNFwtBAs=)
2: 326130643a623238303a3a2f32392d3239203d3e203431373230.roa (hash: UtcmwgPmmxIsh/ra+btug0leCQZCVTQekME41LiPWtU=)
3: 326130643a623238373a656334313a3a2f34382d3438203d3e20323132353136.roa (hash: S10o6lJcne+SfvZMZmd0ndSNpfqn8OsjAJw8rNDdBSw=)
4: 326130643a623238373a653930303a3a2f34302d3430203d3e203437313532.roa (hash: YeBU5ew7EbaM3M5c2zGWzk0Q7RzGkO4TGKp/4byQ64k=)
5: 326130643a623238373a656330303a3a2f34302d3430203d3e20323038333238.roa (hash: eT5l/HEUwKyeWtm/1X7rr0MrwygNo9k95lPs1zLe884=)
6: 326130643a623238303a383130303a3a2f34382d3438203d3e203431373230.roa (hash: ItyIHbG/IJlKjOf6vhLnjpZ9k/lt97Z65upW37DdGzA=)
7: 326130643a623238373a656130303a3a2f34302d3430203d3e20323032373034.roa (hash: JNRd26hu5UclLm2ralvA5Swgz/zS0HyqV27DJFHZj6c=)
8: AS41720.asa (hash: R9jFblFZaPwUK6Huk1SWnasBO6ka9sffBE6ldnurUoM=)
9: 326130643a623238373a646130313a3a2f34382d3438203d3e20323132353339.roa (hash: U56VGJcjuLrEYPpG7oABc/1/udX8BKChn+eBmuJZDts=)
10: 326130643a623238373a656530303a3a2f34302d3430203d3e20323038333238.roa (hash: Q6Io7mv8dNkJZap1oGvqDaJWxZcBIoRNlU5W1SfkDVo=)
11: 326130643a623238373a656230303a3a2f34302d3430203d3e20323133373039.roa (hash: Nk6ANHp8DkJz6kDCL9bvYoWgqeyO4UOw/aVOiTsobgk=)
12: 3138352e3234322e3138312e302f32342d3234203d3e203431373230.roa (hash: BJe1bO6YYCEXeriSlULaZwS25Q4hRdnweRF5hyXEuDY=)
13: 326130643a623238373a646430303a3a2f34302d3430203d3e20323136333039.roa (hash: mpzPSr1CBW6Ka5Te0DE52rLBHWk7ArDQlInbkbsiPzA=)
14: 326130643a623238373a646130303a3a2f34382d3438203d3e20323135313436.roa (hash: BOfTSY7wWayFslIYZyC++f09YnW0ZvOoQVsy6AzQanA=)
15: 88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl (hash: PU1y3LDmUZ40foTj82TkYFVnszupCWElP9TMAH9aDIE=)
16: 3138352e3234322e3138322e302f32342d3234203d3e203431373230.roa (hash: gAYzs7DeTkU9g1RDUiQKlOcpyqQALQV1LLqH3P6H/bU=)
17: 326130643a623238373a656334323a3a2f34382d3438203d3e20323134393235.roa (hash: JAmgJM2VGcbQzWkOuFvV1aRU7IhMtvcEw/0vm9hTp3I=)
18: 326130643a623238373a653966663a3a2f34382d3438203d3e20323038373533.roa (hash: kmFg1Ubyi8msuCXkZq9wTUwo9VmgSHMiCqLO0oSubS4=)
19: 326130643a623238373a646164303a3a2f34342d3434203d3e20323038343337.roa (hash: Lh+NThTArglnDdFNJgAbksxydedvZ3VhoYilxW6dgHQ=)
20: 3138352e3234322e3138332e302f32342d3234203d3e203431373230.roa (hash: V4bF3gDy6FE6zlNg9r0xUvpdAXLZEuLnN1FQtQz0KTM=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl
rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 21:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:39:99:47:f4:4f:40:8a:aa:f1:27:cd:d5:c3:4c:0b:0a:8f:3d:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
Validity
Not Before: Dec 6 23:10:12 2025 GMT
Not After : Dec 7 23:36:12 2025 GMT
Subject: CN=B2C2487C85F8C3783AAD3E1E40FBD1868E238EDB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:92:7b:29:fa:c6:10:ee:2a:b0:bb:d7:53:bc:
b7:4d:a8:c1:48:65:fe:3c:bb:5c:cd:81:3b:ae:0a:
49:f4:2d:29:f2:de:03:e7:85:90:71:1a:de:1a:55:
5d:c6:77:54:5c:e9:cc:cd:cf:10:5e:4d:ca:cd:69:
ad:7b:79:50:b4:87:d8:9c:b2:ae:9b:82:57:8a:45:
8a:bb:a6:86:6d:05:1f:f6:0c:99:33:1a:31:95:65:
cb:14:94:26:be:17:c6:c2:82:8f:3d:18:8e:0d:85:
34:89:fc:8e:26:8e:a6:78:68:45:c1:41:2d:28:5d:
57:f2:c0:8b:4c:e6:c9:44:40:04:f0:39:c4:96:f2:
2e:5f:bf:a5:72:38:cd:48:a5:2b:5a:ab:5a:60:97:
1b:f2:df:c6:a9:83:ed:87:73:ec:3d:5a:d0:80:2f:
e4:c6:98:33:f7:17:f8:3e:86:0e:f9:33:57:db:d8:
c7:a7:10:12:b8:7e:3d:40:0e:76:d8:9e:d2:cf:74:
00:94:50:4f:34:c9:3a:22:1c:c8:73:f4:1d:b6:6f:
09:0a:99:06:ad:a3:6e:02:f3:b1:48:54:f6:05:2d:
7f:6a:ec:31:fb:26:6b:c3:f3:e8:af:1a:5c:28:f6:
c3:6f:6e:95:b5:f4:39:17:03:1c:df:df:9f:33:49:
2b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C2:48:7C:85:F8:C3:78:3A:AD:3E:1E:40:FB:D1:86:8E:23:8E:DB
X509v3 Authority Key Identifier:
keyid:88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:3c:ad:da:e3:2c:e9:dd:8a:b7:7d:8b:c4:1a:d8:b9:84:89:
f9:b2:d7:92:15:7c:52:86:db:d3:3e:75:c3:65:00:52:ed:57:
10:af:44:7c:41:f4:52:33:e3:2c:af:84:58:5d:27:1c:c8:9c:
3f:90:49:29:eb:8b:29:bf:2d:41:2c:2a:31:23:b9:43:09:b5:
82:fe:12:7b:76:cd:25:d3:20:6d:89:2a:5f:0b:c9:bd:f9:4d:
16:d4:18:84:2a:c7:71:70:c4:ae:01:94:e8:66:b1:5e:5f:85:
1a:84:48:6e:05:64:6d:ae:9e:20:79:b3:2e:75:64:41:de:2b:
67:09:d7:c4:2c:23:99:55:b5:1d:f0:51:f6:ee:43:d2:69:d0:
55:06:89:66:f3:7e:0c:c1:8d:b9:ea:2b:7f:20:75:10:35:8d:
76:4e:b5:6d:fa:91:01:e6:0d:c3:a1:59:4f:ec:0b:2d:33:a4:
f0:04:20:e6:27:42:4d:0b:dc:11:17:79:0b:55:3f:30:e9:2f:
76:05:b4:41:7e:6c:a6:ca:76:77:f6:75:be:fd:e3:36:8e:e7:
a0:92:d4:fd:39:51:e8:5f:20:20:c9:a9:ae:77:74:cc:32:cd:
f6:71:82:fb:74:e7:30:ab:f5:21:37:29:70:2d:af:b4:68:3a:
58:a4:08:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:17:54 2025 by rpki-client