This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft
File: 578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft (raw, json)
Hash identifier: mjH34VyXYF90RAD5f6I+n31Z9rUjEfEglobPvdKHYFI=
Subject key identifier: EA:57:90:E8:D6:DE:17:C0:D3:52:EF:02:0B:4E:21:1C:E1:85:BD:E2
Authority key identifier: 57:8D:7D:C9:77:9B:27:81:5E:BB:5C:3F:5F:CF:07:CC:58:37:08:B3
Certificate issuer: /CN=578d7dc9779b27815ebb5c3f5fcf07cc583708b3
Certificate serial: 624C6F31C57EF55A1881CA084F0BB820CEE02812
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V419yXebJ4Feu1w_X88HzFg3CLM.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft
Manifest number: 0190
Signing time: Sun 07 Dec 2025 05:06:27 +0000
Manifest this update: Sun 07 Dec 2025 05:01:27 +0000
Manifest next update: Mon 08 Dec 2025 08:16:27 +0000
Files and hashes: 1: 3130332e3134372e3135332e302f32342d3234203d3e20323135323936.roa (hash: 54w2F3M9c9ZMYqej/uVTYoc9lVaBw0QpLSZEW7mlB7o=)
2: 578D7DC9779B27815EBB5C3F5FCF07CC583708B3.crl (hash: uDNbsz90PB2pX16kqAZ6N5DM7NegFT+LzXiLpW9vEps=)
3: 323030313a3637633a6533633a3a2f34382d3438203d3e20323135323936.roa (hash: 9+L5QD9C8ye40Ikj2zBEBBChEOO2tsV/W1In9gyAruM=)
4: AS215296.asa (hash: OtSM7n/M5H4Gr1eK1WwYJcN3J5IxezG9iWmcyo289w0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.crl
rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft
rsync://rpki.ripe.net/repository/DEFAULT/V419yXebJ4Feu1w_X88HzFg3CLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Dec 2025 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:4c:6f:31:c5:7e:f5:5a:18:81:ca:08:4f:0b:b8:20:ce:e0:28:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=578d7dc9779b27815ebb5c3f5fcf07cc583708b3
Validity
Not Before: Dec 7 05:01:27 2025 GMT
Not After : Dec 8 08:16:27 2025 GMT
Subject: CN=EA5790E8D6DE17C0D352EF020B4E211CE185BDE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:78:e4:d0:91:10:85:a4:67:c6:06:6e:b5:0a:
24:50:1b:0c:f0:45:87:fc:e4:95:1b:61:38:a9:15:
ba:2b:18:ae:a4:19:48:52:c4:b3:50:c9:d4:da:32:
d5:92:78:13:cc:8a:5d:47:d8:a2:1f:8c:3e:08:88:
a0:06:2e:86:81:e6:29:35:40:7a:7b:7b:70:80:2d:
21:07:d5:33:a1:b3:50:8b:d3:e2:a9:a5:1b:d2:d1:
91:31:36:a7:19:3a:4c:3c:22:39:78:3d:6b:5b:bb:
1c:09:85:34:c3:7d:e9:d2:53:e0:fe:2c:06:8b:03:
2d:15:be:bc:94:d9:53:4e:9c:7a:fa:21:17:f4:50:
d6:3f:8c:ef:18:73:7c:f3:02:9a:c0:74:0b:0c:1e:
39:d2:aa:37:37:96:e3:62:ad:4e:e7:47:51:3b:f5:
d5:16:1e:45:20:3d:36:e6:39:75:e8:05:d8:f8:42:
97:92:00:93:2d:98:d5:7b:8d:e3:fd:62:7c:73:63:
5a:9f:3e:a5:0c:6b:3a:7f:32:25:48:a6:b0:72:b1:
8c:b0:6e:1d:7a:d3:d5:b2:be:7f:b9:95:d0:6e:d1:
b5:54:c5:f7:a2:7f:9e:55:1a:77:3d:ac:cc:d7:f9:
e5:6e:00:d1:61:71:57:cb:36:22:f3:78:cb:a0:a7:
16:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:57:90:E8:D6:DE:17:C0:D3:52:EF:02:0B:4E:21:1C:E1:85:BD:E2
X509v3 Authority Key Identifier:
keyid:57:8D:7D:C9:77:9B:27:81:5E:BB:5C:3F:5F:CF:07:CC:58:37:08:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V419yXebJ4Feu1w_X88HzFg3CLM.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:8f:db:34:06:ff:d9:a4:91:f3:76:ec:e3:d5:8b:49:5a:54:
22:4c:b6:cf:00:28:7f:00:b2:cf:2d:6e:d5:f3:a7:a5:6d:88:
35:c2:4f:17:08:68:c5:11:23:4c:3d:27:54:40:5f:53:17:be:
52:d4:fc:4c:18:14:84:6b:b5:8c:6e:b5:f6:1e:89:44:b2:83:
5d:78:52:95:58:b6:f0:26:8d:58:b7:66:c8:1e:33:69:80:ae:
9e:9f:26:79:a0:2b:d0:31:c6:e3:f8:61:ee:e2:ba:a3:e9:17:
4c:fb:4c:ce:fd:e3:ce:f9:6e:f9:fe:69:27:74:35:d4:1f:2b:
2b:ce:bd:7e:39:b9:fd:cf:b4:ca:0a:ed:2f:fb:1b:dd:2e:ac:
d9:8b:00:ef:30:44:9c:f7:b9:9c:27:06:24:4c:42:c2:b0:26:
75:d6:d7:4b:13:ad:01:05:c9:55:5c:0c:ee:79:bf:41:01:58:
56:76:6c:96:a3:c3:28:54:b3:50:0d:56:0a:ab:ba:e1:06:6d:
43:8a:57:6b:f2:c4:8e:5b:eb:5a:e9:af:ca:ea:d9:ad:6d:e6:
d7:a2:92:ac:6e:14:0e:1b:a4:86:5f:b7:bf:19:f3:2e:33:64:
65:cf:e9:83:83:98:37:94:e4:f7:01:29:9a:21:5a:95:4c:c0:
2d:bd:af:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 14:29:32 2025 by rpki-client