This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
File: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft (raw, json)
Hash identifier: x7eTZDcfqRM3/EVtLxqMDW8wtuIGJ3E7Aa7XA5Jb/tQ=
Subject key identifier: B1:72:44:36:16:A8:2C:EC:72:46:C7:93:31:38:0E:85:D3:05:D5:00
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 41C82B3816A62769B3FBD36994CE0A8CC2FAC06F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
Manifest number: 0610
Signing time: Tue 18 Nov 2025 09:14:07 +0000
Manifest this update: Tue 18 Nov 2025 09:09:07 +0000
Manifest next update: Wed 19 Nov 2025 11:26:07 +0000
Files and hashes: 1: 352e3138312e3138362e302f32342d3234203d3e203239303636.roa (hash: 5g1iTpy4+Ocf7g6idB3LUlopM7lH9cpsMczTTuu+hV0=)
2: 38352e3230392e3233302e302f32342d3234203d3e20313430323234.roa (hash: X9S/vAQJZJ3+zexclWqp51kmLLKozc6jAta0ZYx43Ns=)
3: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl (hash: Vc8yLvYJfZ5e0WWwm8SVsHahG1yExTLT6afoMQZ12rw=)
4: 34352e39352e3231332e302f32342d3234203d3e20343030303339.roa (hash: XrIv1BWbF+to8I3saogND52oHBVFoDY38lWpbUFLA6o=)
5: 34352e39352e3231322e302f32322d3232203d3e2037303239.roa (hash: b3HfoeSSJnwEFBW/P8/Hh1DNPoifdQtxChWclKR01cY=)
6: 3134362e31392e33382e302f32342d3234203d3e20313939363534.roa (hash: KCPy6uAOav6R+jmrUTgTpbZkeje3mnKOXa6FXDMEhhE=)
7: 3139342e33312e3139362e302f32342d3234203d3e20313939373337.roa (hash: kk3tkqt3pEQIayEC5akWsEQ7ftglPpO+Tt2YC9Lk7HM=)
8: 38352e3230392e3233302e302f32342d3234203d3e203633393032.roa (hash: P3VDMMBoXLUjrVK3m58S6qhassJbF7wO/iSY6p4T2ZU=)
9: 352e3138312e3138372e302f32342d3234203d3e20323135373033.roa (hash: NPvxKSNfdGX2aoCtCwLVMBnzeoN7AU2GpBh+K+JOMMc=)
10: 34352e382e3231382e302f32342d3234203d3e20323132333834.roa (hash: tj3yrp12EwOeT1ZEKtZIphksitaxnh11pc39cLh8XvY=)
11: 322e35392e36302e302f32342d3234203d3e203631333137.roa (hash: BBdnQvjsMGsAKdV0CMmUgkUx9rKK17g08iyDVXfqF5c=)
12: 352e3138312e3138352e302f32342d3234203d3e20323132333834.roa (hash: erSH6Mf15T5HOlDb5lpbU/Ku2eMK+cc/6OxLysGJmP4=)
13: 3134362e31392e3136372e302f32342d3234203d3e20313532363732.roa (hash: 1EdzND/a/KltqRlIJaQnMPD7XH7CVfxCNY9eyK9ocYU=)
14: 322e35392e36322e302f32342d3234203d3e20313432313131.roa (hash: c23s9WCLyWR8C29b7voS/R0hWodZcVrxRN5kAioljng=)
15: 3134362e31392e3136372e302f32342d3234203d3e20313432313131.roa (hash: 1cwuvx0f/bXZ/DwexRmaaQu0tTmkULuIbOfrQVnX4ao=)
16: 34352e382e3231392e302f32342d3234203d3e2039303039.roa (hash: 0zn1M6udTfOcCIE/Cifu6WDNTkQzSgcujlgX6HE4/sQ=)
17: 34352e39352e3231352e302f32342d3234203d3e203239383032.roa (hash: Q1OlQJwADffmDxnZKj7bvhSo1kOL5aXrHpMtVtZFtuQ=)
18: 322e35392e36322e302f32342d3234203d3e203633303233.roa (hash: /Ku1phd3ouPkx4ZDyzwkq+GI0U8NGNl14wVu1lc6q1k=)
19: 3139342e33312e3139342e302f32342d3234203d3e203339333638.roa (hash: qMisc8M9fAgiB1zw7/Tn0y61M2FDJt3sqCMkzKcplhA=)
20: 38352e3230392e3233312e302f32342d3234203d3e203135343430.roa (hash: 5P7OofszcYzyRXLoqtlNETBM0YQubML8godGGz1Zc2U=)
21: 322e35392e36302e302f32342d3234203d3e20323132323338.roa (hash: hZ11O4/GfIQ3ZyUgAuxIn+0GkFLCBYYNN1OfZIqVDJk=)
22: 38352e3230392e3233302e302f32342d3234203d3e203138313836.roa (hash: +OSq4m/6RpxEZih63506Gv6cOkBhW+YglqTPEKg/ZcM=)
23: 34352e382e3231372e302f32342d3234203d3e20323136303232.roa (hash: 8eRvRykZqahsRM0VQoPLCYYNfC1yyS358fE8muRhEDA=)
24: 322e35392e36332e302f32342d3234203d3e20323039363432.roa (hash: +6zE35Il0rdGN/pq8ZFnc/c2DujvbAilLkJKRMrHYbw=)
25: 3139342e33312e3139362e302f32342d3234203d3e20323030303137.roa (hash: +5av7/JwxJ2GdszhVyEajY1bsnLhd2JhS01B+/f5cdU=)
26: 34352e39352e3231322e302f32342d3234203d3e20323039353534.roa (hash: D9JHULDkg0M1wT0M8wVTfDaCTJBMJIgvLcTza5q7f5c=)
27: 34352e39352e3231342e302f32342d3234203d3e20323136303939.roa (hash: e4sOWlDxZzPIXQ3Vnqya07udsUK1KYBFfN3K3q4TdIQ=)
28: 3139342e33312e3139352e302f32342d3234203d3e20323133363638.roa (hash: tD4GyhGOomU4ZODP9QGqyOztFfw1vKOkCjucViT/SZg=)
29: 352e3138312e3138342e302f32342d3234203d3e20323132333335.roa (hash: EGBFBscvQ1YWstG9kbxkZOotMsNA8UcpxsIuwRfrnH4=)
30: 34352e39352e3231352e302f32342d3234203d3e203631333137.roa (hash: jtw5h4s7N892mHMRX7q1v9D/8tuL7heVW+cms9i1OJM=)
31: 352e3138312e3138352e302f32342d3234203d3e20323131333733.roa (hash: 2IzUCrtAIyuz9E3rWXqOgG5uo4suNn7bGWeOLhfOKvg=)
32: 38352e3230392e3232382e302f32342d3234203d3e203230343733.roa (hash: LvALS0QzJUIn2y2aM1WJBNeefzd38B8yBzedKpN4nB8=)
33: 38352e3230392e3232392e302f32342d3234203d3e203432383331.roa (hash: vjpMNqLq25F9up6mT05GhHQJMJ0KbktUxvDSn9v6kBA=)
34: 3139342e33312e3139372e302f32342d3234203d3e203432383331.roa (hash: KMAsq44hIBrFB+eRrhhDssa2B+eAZmGDL1feRYL/R5o=)
35: 3139342e33312e3139352e302f32342d3234203d3e203132383236.roa (hash: Hiowcu87+rnRP4VBm949hK9/XoAe1JP45hqg/KNcyVc=)
36: 34352e382e3231362e302f32342d3234203d3e20323132333834.roa (hash: A1j+LbNuBb8MeFvlQDvvVkVer3lHzQ8b3CPtY22jros=)
37: 34352e39352e3231342e302f32342d3234203d3e203434353437.roa (hash: 4mA1gqLsHB6B1P8mI+JnCzpqXJzdsvy8YAE1F7eD96c=)
38: 352e3138312e3138342e302f32342d3234203d3e20323131333733.roa (hash: HxZ7OQY4wmmok4f1jyMFC6WkeyQaBhCRYtiYzwz8qYg=)
39: 3139342e33312e3139352e302f32342d3234203d3e203334393933.roa (hash: u4qzpzCcpcy7ZWgFmuZevTcx8Lt6OWg/1tciNCqCqYM=)
40: 322e35392e36312e302f32342d3234203d3e203438323636.roa (hash: 6dfl8lI1/2dWL8ffIUYhSFUUS7mSu5VjjS42Z8HkW7c=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 19 Nov 2025 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:c8:2b:38:16:a6:27:69:b3:fb:d3:69:94:ce:0a:8c:c2:fa:c0:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Nov 18 09:09:07 2025 GMT
Not After : Nov 19 11:26:07 2025 GMT
Subject: CN=B172443616A82CEC7246C79331380E85D305D500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:34:5d:5d:5f:c9:d8:b9:6f:15:7c:25:0c:fe:
2d:67:3c:d8:6a:fe:c2:d3:ee:a2:c7:5e:95:be:ea:
56:54:e0:b7:f7:bd:13:93:01:d5:b0:b1:a0:21:8e:
7d:b4:55:43:73:4d:7e:98:da:cc:a2:c7:5c:28:5c:
ef:18:5c:db:98:20:ca:bd:59:1f:12:b3:04:fa:51:
82:2e:f6:77:e6:a0:79:27:36:3c:c4:2c:26:8c:e9:
d3:eb:52:c4:d1:85:01:20:3d:ec:f8:25:36:76:57:
cd:0c:95:85:ed:75:ed:df:33:cf:69:5f:d7:93:3a:
07:9a:ba:65:c5:26:3e:25:11:77:ac:40:97:e5:62:
82:1f:39:6d:d8:0a:65:4a:8d:17:02:f8:04:74:b0:
cf:ea:66:c0:07:e4:d4:b3:61:68:5d:db:c5:4d:3c:
56:f8:60:22:ec:69:5f:1e:1a:19:ff:35:42:74:d1:
29:a0:c4:9b:13:74:15:e1:fb:65:0f:d7:bd:b5:39:
91:cb:dd:ee:21:14:49:5f:91:64:63:91:fa:8f:3b:
0a:9c:d0:59:df:d5:85:4a:d7:9c:4f:89:96:8d:6a:
83:6b:2a:01:db:fb:0b:30:ee:3c:93:e0:0c:70:02:
94:81:13:1e:6e:5d:89:19:e3:a0:54:16:40:e8:bb:
36:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:72:44:36:16:A8:2C:EC:72:46:C7:93:31:38:0E:85:D3:05:D5:00
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:2b:e3:cb:48:25:40:63:c3:f3:ff:03:89:c4:e5:a5:a9:82:
18:c1:d3:25:14:c2:56:64:8a:34:ba:33:e5:8e:67:e7:e6:7d:
cb:f7:e3:16:c1:08:d6:b7:e6:39:8b:12:68:ff:89:93:43:de:
6b:4c:1b:6f:aa:12:d2:a1:fe:ed:0a:25:0b:0e:e6:f1:68:41:
57:91:e2:01:55:92:9a:89:52:fa:77:74:19:bb:96:80:d2:26:
9b:89:6a:ee:60:30:13:c2:b1:75:dc:a8:15:63:37:38:c8:73:
41:93:e1:eb:75:37:d6:a1:e5:2f:61:7c:39:8e:f9:25:c5:27:
ce:ef:9b:e4:f4:0c:43:ef:fd:b3:6c:db:99:94:84:9f:87:ed:
7c:52:fb:3d:59:26:ec:75:19:8e:56:ff:d9:84:f4:28:8f:d9:
7d:93:f4:8e:85:31:e4:94:0c:16:ab:d1:13:04:5b:38:1d:41:
c2:fc:8d:0c:50:7d:1d:75:71:7e:10:d3:b7:6b:f6:d6:9f:82:
3d:a8:3a:03:71:3a:e6:51:f8:f4:af:06:6a:70:34:7d:cf:74:
54:d2:18:69:3b:fb:bd:09:30:6d:23:98:37:0a:ee:ab:20:c7:
68:73:13:64:94:68:66:66:57:04:ff:04:09:af:4b:33:49:07:
db:83:d2:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 16:41:48 2025 by rpki-client