This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft
File: ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft (raw, json)
Hash identifier: 0lnjgY2waC1fKEBikRrPL2Ed39nVxkLGSeR/4MJdLHc=
Subject key identifier: A9:FC:AA:A2:6D:33:70:AB:25:B4:D4:C0:38:04:46:9C:68:35:9B:6B
Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
Certificate issuer: /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Certificate serial: 1FCEB400E328E919FF110D148144C3D50C08E727
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft
Manifest number: 04A0
Signing time: Thu 11 Dec 2025 15:46:37 +0000
Manifest this update: Thu 11 Dec 2025 15:41:37 +0000
Manifest next update: Fri 12 Dec 2025 18:07:37 +0000
Files and hashes: 1: 38392e34322e3131302e302f32342d3234203d3e203631333137.roa (hash: VsyHwXGnPa9jTtnErp0xUSN9uxae8b2L7otiSzP7S2M=)
2: 34362e3130322e3233332e302f32342d3234203d3e203233383635.roa (hash: e+SnYwDfi/1yFie63JthDdkoXVxOgCTXFxhh6sC9If8=)
3: 39332e3131332e32352e302f32342d3234203d3e20323134323039.roa (hash: JoDR/IGOmrYGEwu1+N5VZtYwQlvGeImnksk34tLzkIU=)
4: 3139332e3230332e3230352e302f32342d3234203d3e203439343638.roa (hash: miGCXloG7luQuuhAJwRZ+kv5aIjNiE2JcKseZN1V68A=)
5: ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl (hash: kLE2LCnOvmBxj2wDomu0jYGPpp8rOyJhhQCAoGGnJH4=)
6: 39332e3131332e3231322e302f32342d3234203d3e203631333137.roa (hash: Mffmj9tigk0AvK8qUYEb5eCtUKaC20yQi7QyJq/JmDA=)
7: 3139332e3230332e3230342e302f32342d3234203d3e203439343638.roa (hash: QWu7fHTZ3PYuiSQam7CYDAJC5NNcXBc6g5huH6iiI3k=)
8: 38392e34322e3131312e302f32342d3234203d3e203631333137.roa (hash: T+9QQX64dOYanRzHKI9rhWnUyaZt9GgRQXrvhvIBrgs=)
9: 37372e38312e3133372e302f32342d3234203d3e20333939363431.roa (hash: xL9s9lGr6Y1GcoWPNRfoiIg5P1LyMl92tRndWKMRxvY=)
10: 37372e38312e3133382e302f32342d3234203d3e203136323736.roa (hash: QSH/lbFqFfB0kjPH8NXF1ssxXFJMA3tQTCmwcMlSfAQ=)
11: 34362e3130322e3233322e302f32342d3234203d3e203231383539.roa (hash: xmss+X7N7YEJYzsofqDqdmVc6hQlkz4fI2F5jzOV+w0=)
12: 3139332e3230332e3230342e302f32332d3233203d3e203439343638.roa (hash: SUmtopgHH8Nww5p/xP0ODKmemVjaFc93EIAThLWzp7U=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl
rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Dec 2025 18:07:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:ce:b4:00:e3:28:e9:19:ff:11:0d:14:81:44:c3:d5:0c:08:e7:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Validity
Not Before: Dec 11 15:41:37 2025 GMT
Not After : Dec 12 18:07:37 2025 GMT
Subject: CN=A9FCAAA26D3370AB25B4D4C03804469C68359B6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ed:31:29:8a:09:c9:5e:00:a2:eb:3c:d6:06:
0b:4b:44:75:e1:08:29:d0:6f:24:92:ce:ef:f1:a6:
c4:83:34:61:9e:4f:ac:4d:60:b8:8a:c4:0a:57:f3:
e1:19:7a:69:90:bf:12:76:6e:3d:2b:b4:c1:d1:7b:
4e:ad:68:4e:13:ba:5d:15:d9:e5:db:f5:26:da:42:
45:e5:57:b8:1e:96:9a:b1:05:cc:e1:82:1a:2c:92:
32:70:d8:d5:e3:25:99:2a:56:95:74:1e:05:d6:d0:
b1:cd:63:e7:20:2c:39:75:00:14:34:39:58:82:26:
aa:a1:6d:54:5c:53:cf:0e:7d:cf:84:5a:f3:d7:23:
b6:e4:69:ef:0a:a4:65:60:a4:30:26:47:43:30:d3:
99:99:f2:a1:32:1d:41:b6:56:84:7e:dc:0f:29:ce:
df:d8:8b:24:d0:b5:18:53:cd:83:4f:31:bd:c7:d4:
bb:38:75:9d:62:3a:bb:03:48:b6:3d:7a:72:72:e5:
ca:2f:20:07:84:4d:4e:51:95:ba:26:da:57:d3:7e:
65:60:ac:d6:e9:c0:7b:bf:62:1e:46:45:08:04:4c:
d8:d7:62:d4:95:0a:59:b1:d6:6c:ca:32:af:a5:47:
86:8a:a3:b4:0c:8d:ae:4d:17:7d:dc:2c:17:5e:b1:
98:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:FC:AA:A2:6D:33:70:AB:25:B4:D4:C0:38:04:46:9C:68:35:9B:6B
X509v3 Authority Key Identifier:
keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:2e:0d:a4:a3:17:d7:70:30:38:13:b8:5e:93:72:25:6a:91:
d5:22:76:10:2d:ac:74:77:e7:d7:ca:99:cd:63:43:89:50:d7:
c3:c2:08:e7:a4:5a:e7:ed:c7:16:1a:a9:a4:51:d4:03:dc:b2:
77:26:39:ca:18:82:a5:e1:c2:57:e0:f8:72:cb:63:49:39:e7:
83:65:7f:ea:f4:a0:90:b7:55:f1:f3:86:bf:a3:52:40:aa:74:
fc:a0:25:e7:a2:b8:25:e6:e4:69:ce:65:57:5b:01:96:5a:1f:
08:bb:f6:78:57:c0:43:df:41:ed:f8:f9:a1:bc:08:51:cf:c1:
be:06:bd:35:b5:35:bc:39:6c:0b:16:18:d1:28:11:7f:60:12:
55:af:74:cd:6e:f6:50:fc:a7:a1:05:ba:1a:5c:13:f3:72:df:
af:86:2d:30:6b:e5:9b:c5:7d:77:55:1d:1b:95:d3:af:25:f8:
7f:1c:81:16:55:63:d7:a1:ac:67:b7:f0:94:4d:b7:52:40:08:
38:00:52:a8:1b:31:e4:20:f5:fb:da:da:9a:5e:de:e0:2d:20:
16:98:4b:29:fa:46:9f:c0:7b:f8:5a:f8:1c:2a:b0:70:88:7b:
3a:ae:81:20:89:ef:65:93:43:e4:1e:11:06:45:91:33:34:8a:
f1:f9:ce:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 01:16:11 2025 by rpki-client