This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
File: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft (raw, json)
Hash identifier: v4Ku4oxKmlGXJSEY98TziShlTq60n/sKU7yrBxTAAzE=
Subject key identifier: 75:B0:6A:F6:D4:E6:CB:16:34:B6:B0:41:7B:47:75:0C:D0:45:0B:41
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 42787358B1D73376375AFC12DB639A8944F9426E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
Manifest number: 0626
Signing time: Wed 03 Dec 2025 20:51:05 +0000
Manifest this update: Wed 03 Dec 2025 20:46:05 +0000
Manifest next update: Thu 04 Dec 2025 23:56:05 +0000
Files and hashes: 1: 38352e3230392e3233302e302f32342d3234203d3e203633393032.roa (hash: P3VDMMBoXLUjrVK3m58S6qhassJbF7wO/iSY6p4T2ZU=)
2: 34352e39352e3231352e302f32342d3234203d3e203631333137.roa (hash: jtw5h4s7N892mHMRX7q1v9D/8tuL7heVW+cms9i1OJM=)
3: 38352e3230392e3233302e302f32342d3234203d3e20313430323234.roa (hash: X9S/vAQJZJ3+zexclWqp51kmLLKozc6jAta0ZYx43Ns=)
4: 352e3138312e3138372e302f32342d3234203d3e20323135373033.roa (hash: NPvxKSNfdGX2aoCtCwLVMBnzeoN7AU2GpBh+K+JOMMc=)
5: 38352e3230392e3233312e302f32342d3234203d3e203135343430.roa (hash: 5P7OofszcYzyRXLoqtlNETBM0YQubML8godGGz1Zc2U=)
6: 34352e382e3231362e302f32342d3234203d3e20323132333834.roa (hash: A1j+LbNuBb8MeFvlQDvvVkVer3lHzQ8b3CPtY22jros=)
7: 34352e382e3231372e302f32342d3234203d3e20323136303232.roa (hash: 8eRvRykZqahsRM0VQoPLCYYNfC1yyS358fE8muRhEDA=)
8: 352e3138312e3138342e302f32342d3234203d3e20323131333733.roa (hash: HxZ7OQY4wmmok4f1jyMFC6WkeyQaBhCRYtiYzwz8qYg=)
9: 322e35392e36302e302f32342d3234203d3e203631333137.roa (hash: BBdnQvjsMGsAKdV0CMmUgkUx9rKK17g08iyDVXfqF5c=)
10: 34352e382e3231392e302f32342d3234203d3e2039303039.roa (hash: 0zn1M6udTfOcCIE/Cifu6WDNTkQzSgcujlgX6HE4/sQ=)
11: 3134362e31392e3136372e302f32342d3234203d3e20313532363732.roa (hash: 1EdzND/a/KltqRlIJaQnMPD7XH7CVfxCNY9eyK9ocYU=)
12: 38352e3230392e3233302e302f32342d3234203d3e203138313836.roa (hash: +OSq4m/6RpxEZih63506Gv6cOkBhW+YglqTPEKg/ZcM=)
13: 34352e39352e3231322e302f32342d3234203d3e20323039353534.roa (hash: 9IsmuufWVjFLEbYLLcJg7Yp7+j5DqB4kK41/uY19nMQ=)
14: 3139342e33312e3139352e302f32342d3234203d3e203334393933.roa (hash: u4qzpzCcpcy7ZWgFmuZevTcx8Lt6OWg/1tciNCqCqYM=)
15: 322e35392e36322e302f32342d3234203d3e203633303233.roa (hash: /Ku1phd3ouPkx4ZDyzwkq+GI0U8NGNl14wVu1lc6q1k=)
16: 322e35392e36312e302f32342d3234203d3e203438323636.roa (hash: 6dfl8lI1/2dWL8ffIUYhSFUUS7mSu5VjjS42Z8HkW7c=)
17: 3139342e33312e3139362e302f32342d3234203d3e20313939373337.roa (hash: kk3tkqt3pEQIayEC5akWsEQ7ftglPpO+Tt2YC9Lk7HM=)
18: 3139342e33312e3139372e302f32342d3234203d3e203432383331.roa (hash: KMAsq44hIBrFB+eRrhhDssa2B+eAZmGDL1feRYL/R5o=)
19: 322e35392e36332e302f32342d3234203d3e20323039363432.roa (hash: +6zE35Il0rdGN/pq8ZFnc/c2DujvbAilLkJKRMrHYbw=)
20: 34352e382e3231382e302f32342d3234203d3e20323132333834.roa (hash: tj3yrp12EwOeT1ZEKtZIphksitaxnh11pc39cLh8XvY=)
21: 34352e39352e3231332e302f32342d3234203d3e20343030303339.roa (hash: XrIv1BWbF+to8I3saogND52oHBVFoDY38lWpbUFLA6o=)
22: 322e35392e36322e302f32342d3234203d3e20313432313131.roa (hash: c23s9WCLyWR8C29b7voS/R0hWodZcVrxRN5kAioljng=)
23: 3134362e31392e33382e302f32342d3234203d3e20313939363534.roa (hash: KCPy6uAOav6R+jmrUTgTpbZkeje3mnKOXa6FXDMEhhE=)
24: 3139342e33312e3139362e302f32342d3234203d3e20323030303137.roa (hash: +5av7/JwxJ2GdszhVyEajY1bsnLhd2JhS01B+/f5cdU=)
25: 352e3138312e3138362e302f32342d3234203d3e203239303636.roa (hash: 5g1iTpy4+Ocf7g6idB3LUlopM7lH9cpsMczTTuu+hV0=)
26: 38352e3230392e3232392e302f32342d3234203d3e203432383331.roa (hash: vjpMNqLq25F9up6mT05GhHQJMJ0KbktUxvDSn9v6kBA=)
27: 3134362e31392e3136372e302f32342d3234203d3e20313432313131.roa (hash: 1cwuvx0f/bXZ/DwexRmaaQu0tTmkULuIbOfrQVnX4ao=)
28: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl (hash: 9nrE45pHt/SccMcJ/ObtXkXtC2lthG2H0nTviN/AFew=)
29: 3139342e33312e3139342e302f32342d3234203d3e203339333638.roa (hash: qMisc8M9fAgiB1zw7/Tn0y61M2FDJt3sqCMkzKcplhA=)
30: 322e35392e36302e302f32342d3234203d3e20323132323338.roa (hash: hZ11O4/GfIQ3ZyUgAuxIn+0GkFLCBYYNN1OfZIqVDJk=)
31: 34352e39352e3231342e302f32342d3234203d3e203434353437.roa (hash: 4mA1gqLsHB6B1P8mI+JnCzpqXJzdsvy8YAE1F7eD96c=)
32: 34352e39352e3231342e302f32342d3234203d3e20323136303939.roa (hash: e4sOWlDxZzPIXQ3Vnqya07udsUK1KYBFfN3K3q4TdIQ=)
33: 352e3138312e3138352e302f32342d3234203d3e20323132333834.roa (hash: erSH6Mf15T5HOlDb5lpbU/Ku2eMK+cc/6OxLysGJmP4=)
34: 34352e39352e3231322e302f32322d3232203d3e2037303239.roa (hash: b3HfoeSSJnwEFBW/P8/Hh1DNPoifdQtxChWclKR01cY=)
35: 352e3138312e3138352e302f32342d3234203d3e20323131333733.roa (hash: 2IzUCrtAIyuz9E3rWXqOgG5uo4suNn7bGWeOLhfOKvg=)
36: 3139342e33312e3139352e302f32342d3234203d3e20323133363638.roa (hash: tD4GyhGOomU4ZODP9QGqyOztFfw1vKOkCjucViT/SZg=)
37: 3139342e33312e3139352e302f32342d3234203d3e203132383236.roa (hash: Hiowcu87+rnRP4VBm949hK9/XoAe1JP45hqg/KNcyVc=)
38: 38352e3230392e3232382e302f32342d3234203d3e203230343733.roa (hash: LvALS0QzJUIn2y2aM1WJBNeefzd38B8yBzedKpN4nB8=)
39: 34352e39352e3231352e302f32342d3234203d3e203239383032.roa (hash: Q1OlQJwADffmDxnZKj7bvhSo1kOL5aXrHpMtVtZFtuQ=)
40: 352e3138312e3138342e302f32342d3234203d3e20323132333335.roa (hash: EGBFBscvQ1YWstG9kbxkZOotMsNA8UcpxsIuwRfrnH4=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Dec 2025 23:56:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:78:73:58:b1:d7:33:76:37:5a:fc:12:db:63:9a:89:44:f9:42:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Dec 3 20:46:05 2025 GMT
Not After : Dec 4 23:56:05 2025 GMT
Subject: CN=75B06AF6D4E6CB1634B6B0417B47750CD0450B41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b5:ae:d0:a8:74:c4:5b:38:8c:40:e5:76:56:
c4:d9:73:72:13:cb:ea:ed:31:99:81:af:6a:2f:af:
5b:e7:67:0a:54:13:04:1d:b8:d0:dc:08:7b:a5:36:
45:a5:a8:7d:ea:f3:ed:fe:d9:57:88:47:64:ec:f7:
b2:2b:a7:74:98:60:84:1b:df:1c:e5:20:0c:98:2c:
04:d3:11:d7:41:eb:22:81:66:58:b1:16:9d:e6:d4:
8e:41:8e:55:c2:bb:c1:72:41:43:bd:1f:79:5d:f5:
e8:20:34:f3:df:87:e2:7d:89:7e:64:b7:ed:04:f7:
8a:5c:cd:26:54:7c:77:14:cd:b8:b2:b1:7d:24:ac:
39:b5:17:0c:6c:af:21:f1:c3:08:80:65:98:61:ef:
9d:ec:d4:f5:1b:17:46:23:d9:b1:1d:61:81:a5:cd:
08:08:a2:0d:66:86:8f:88:fa:79:d4:ab:19:58:5a:
12:85:6a:5f:1a:a9:4c:e6:2f:c9:cf:28:c3:b8:32:
e0:79:84:dd:c5:d7:f4:86:19:ed:c2:39:83:f4:8b:
bd:2b:54:23:1d:70:e7:cf:88:a0:0e:be:ea:a1:c4:
00:c5:9d:2a:ad:52:d5:f7:aa:ff:cf:de:dc:51:5d:
50:81:8a:90:23:02:39:1f:3d:09:fa:b3:4a:67:c9:
73:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:B0:6A:F6:D4:E6:CB:16:34:B6:B0:41:7B:47:75:0C:D0:45:0B:41
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:47:6a:5c:80:7a:c8:bf:ab:9a:a9:be:9f:e2:5e:fd:d4:88:
ab:fc:22:2f:f6:0b:7e:83:80:66:cd:38:8e:06:3b:75:fa:79:
c9:8a:6b:0d:53:dc:95:82:91:14:94:1a:9b:8f:b1:15:0b:c3:
d9:cc:a3:a8:e2:d3:6c:90:19:12:59:39:3b:0c:96:35:41:92:
33:f5:15:1d:43:6f:8c:80:6c:3f:51:c0:01:f2:a6:e1:90:2c:
10:7d:c7:5c:a4:4b:61:6f:47:95:84:01:d0:af:77:36:ff:30:
d0:ce:84:af:d7:bb:d1:da:a7:2d:da:2d:ef:49:ab:25:38:db:
34:cf:4d:6a:d2:ea:9e:c7:37:1e:39:bf:64:97:fe:17:33:dc:
e3:32:27:73:d2:f1:da:bf:06:8e:2d:4d:95:2d:df:27:fe:fa:
17:04:0b:61:bd:24:06:6e:3d:c3:ef:fc:78:cf:d0:e9:ff:31:
05:73:28:2d:e2:9a:7a:0f:52:90:f1:58:7c:50:da:f5:64:3b:
fb:40:6c:e4:d8:05:a4:55:96:99:07:21:33:1f:34:b6:92:d7:
f0:8d:0b:c2:95:8d:31:51:59:a1:79:ae:93:cb:1f:b0:4a:48:
41:5e:33:cf:48:f4:79:6f:29:10:c7:32:0f:e4:52:6a:f3:ea:
85:02:55:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 04:32:17 2025 by rpki-client