This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft File: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft (raw, json) Hash identifier: VfWDsS0UUiH88uwbVAeo8/IQGsRrGlCDRkZXzRuzpCc= Subject key identifier: 0F:F9:B6:EF:77:3B:EA:D0:A4:AE:DA:F6:FC:B0:6E:0D:6F:02:29:64 Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6 Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6 Certificate serial: 3997BA207E998DB14C2DF44D1EC06B2B3D76ED09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft Manifest number: 061D Signing time: Thu 27 Nov 2025 08:25:52 +0000 Manifest this update: Thu 27 Nov 2025 08:20:52 +0000 Manifest next update: Fri 28 Nov 2025 11:05:52 +0000 Files and hashes: 1: 3139342e33312e3139372e302f32342d3234203d3e203432383331.roa (hash: KMAsq44hIBrFB+eRrhhDssa2B+eAZmGDL1feRYL/R5o=) 2: 38352e3230392e3233312e302f32342d3234203d3e203135343430.roa (hash: 5P7OofszcYzyRXLoqtlNETBM0YQubML8godGGz1Zc2U=) 3: 352e3138312e3138342e302f32342d3234203d3e20323132333335.roa (hash: EGBFBscvQ1YWstG9kbxkZOotMsNA8UcpxsIuwRfrnH4=) 4: 3134362e31392e3136372e302f32342d3234203d3e20313532363732.roa (hash: 1EdzND/a/KltqRlIJaQnMPD7XH7CVfxCNY9eyK9ocYU=) 5: 322e35392e36302e302f32342d3234203d3e203631333137.roa (hash: BBdnQvjsMGsAKdV0CMmUgkUx9rKK17g08iyDVXfqF5c=) 6: 34352e39352e3231322e302f32322d3232203d3e2037303239.roa (hash: b3HfoeSSJnwEFBW/P8/Hh1DNPoifdQtxChWclKR01cY=) 7: 34352e382e3231392e302f32342d3234203d3e2039303039.roa (hash: 0zn1M6udTfOcCIE/Cifu6WDNTkQzSgcujlgX6HE4/sQ=) 8: 352e3138312e3138342e302f32342d3234203d3e20323131333733.roa (hash: HxZ7OQY4wmmok4f1jyMFC6WkeyQaBhCRYtiYzwz8qYg=) 9: 322e35392e36302e302f32342d3234203d3e20323132323338.roa (hash: hZ11O4/GfIQ3ZyUgAuxIn+0GkFLCBYYNN1OfZIqVDJk=) 10: 3139342e33312e3139362e302f32342d3234203d3e20323030303137.roa (hash: +5av7/JwxJ2GdszhVyEajY1bsnLhd2JhS01B+/f5cdU=) 11: 322e35392e36322e302f32342d3234203d3e20313432313131.roa (hash: c23s9WCLyWR8C29b7voS/R0hWodZcVrxRN5kAioljng=) 12: 34352e39352e3231352e302f32342d3234203d3e203239383032.roa (hash: Q1OlQJwADffmDxnZKj7bvhSo1kOL5aXrHpMtVtZFtuQ=) 13: 34352e39352e3231342e302f32342d3234203d3e20323136303939.roa (hash: e4sOWlDxZzPIXQ3Vnqya07udsUK1KYBFfN3K3q4TdIQ=) 14: 34352e382e3231362e302f32342d3234203d3e20323132333834.roa (hash: A1j+LbNuBb8MeFvlQDvvVkVer3lHzQ8b3CPtY22jros=) 15: 34352e382e3231372e302f32342d3234203d3e20323136303232.roa (hash: 8eRvRykZqahsRM0VQoPLCYYNfC1yyS358fE8muRhEDA=) 16: 322e35392e36322e302f32342d3234203d3e203633303233.roa (hash: /Ku1phd3ouPkx4ZDyzwkq+GI0U8NGNl14wVu1lc6q1k=) 17: 352e3138312e3138362e302f32342d3234203d3e203239303636.roa (hash: 5g1iTpy4+Ocf7g6idB3LUlopM7lH9cpsMczTTuu+hV0=) 18: 322e35392e36332e302f32342d3234203d3e20323039363432.roa (hash: +6zE35Il0rdGN/pq8ZFnc/c2DujvbAilLkJKRMrHYbw=) 19: 38352e3230392e3232392e302f32342d3234203d3e203432383331.roa (hash: vjpMNqLq25F9up6mT05GhHQJMJ0KbktUxvDSn9v6kBA=) 20: 34352e382e3231382e302f32342d3234203d3e20323132333834.roa (hash: tj3yrp12EwOeT1ZEKtZIphksitaxnh11pc39cLh8XvY=) 21: 38352e3230392e3233302e302f32342d3234203d3e20313430323234.roa (hash: X9S/vAQJZJ3+zexclWqp51kmLLKozc6jAta0ZYx43Ns=) 22: 38352e3230392e3232382e302f32342d3234203d3e203230343733.roa (hash: LvALS0QzJUIn2y2aM1WJBNeefzd38B8yBzedKpN4nB8=) 23: 34352e39352e3231332e302f32342d3234203d3e20343030303339.roa (hash: XrIv1BWbF+to8I3saogND52oHBVFoDY38lWpbUFLA6o=) 24: 3134362e31392e3136372e302f32342d3234203d3e20313432313131.roa (hash: 1cwuvx0f/bXZ/DwexRmaaQu0tTmkULuIbOfrQVnX4ao=) 25: 352e3138312e3138352e302f32342d3234203d3e20323132333834.roa (hash: erSH6Mf15T5HOlDb5lpbU/Ku2eMK+cc/6OxLysGJmP4=) 26: 3139342e33312e3139352e302f32342d3234203d3e20323133363638.roa (hash: tD4GyhGOomU4ZODP9QGqyOztFfw1vKOkCjucViT/SZg=) 27: 3134362e31392e33382e302f32342d3234203d3e20313939363534.roa (hash: KCPy6uAOav6R+jmrUTgTpbZkeje3mnKOXa6FXDMEhhE=) 28: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl (hash: toQ0/GzsM4u87dCTCfxonUlWGsXeqZ1d3tPTRsFzi3o=) 29: 3139342e33312e3139362e302f32342d3234203d3e20313939373337.roa (hash: kk3tkqt3pEQIayEC5akWsEQ7ftglPpO+Tt2YC9Lk7HM=) 30: 3139342e33312e3139342e302f32342d3234203d3e203339333638.roa (hash: qMisc8M9fAgiB1zw7/Tn0y61M2FDJt3sqCMkzKcplhA=) 31: 352e3138312e3138352e302f32342d3234203d3e20323131333733.roa (hash: 2IzUCrtAIyuz9E3rWXqOgG5uo4suNn7bGWeOLhfOKvg=) 32: 3139342e33312e3139352e302f32342d3234203d3e203132383236.roa (hash: Hiowcu87+rnRP4VBm949hK9/XoAe1JP45hqg/KNcyVc=) 33: 34352e39352e3231352e302f32342d3234203d3e203631333137.roa (hash: jtw5h4s7N892mHMRX7q1v9D/8tuL7heVW+cms9i1OJM=) 34: 3139342e33312e3139352e302f32342d3234203d3e203334393933.roa (hash: u4qzpzCcpcy7ZWgFmuZevTcx8Lt6OWg/1tciNCqCqYM=) 35: 34352e39352e3231342e302f32342d3234203d3e203434353437.roa (hash: 4mA1gqLsHB6B1P8mI+JnCzpqXJzdsvy8YAE1F7eD96c=) 36: 322e35392e36312e302f32342d3234203d3e203438323636.roa (hash: 6dfl8lI1/2dWL8ffIUYhSFUUS7mSu5VjjS42Z8HkW7c=) 37: 38352e3230392e3233302e302f32342d3234203d3e203633393032.roa (hash: P3VDMMBoXLUjrVK3m58S6qhassJbF7wO/iSY6p4T2ZU=) 38: 34352e39352e3231322e302f32342d3234203d3e20323039353534.roa (hash: 9IsmuufWVjFLEbYLLcJg7Yp7+j5DqB4kK41/uY19nMQ=) 39: 38352e3230392e3233302e302f32342d3234203d3e203138313836.roa (hash: +OSq4m/6RpxEZih63506Gv6cOkBhW+YglqTPEKg/ZcM=) 40: 352e3138312e3138372e302f32342d3234203d3e20323135373033.roa (hash: NPvxKSNfdGX2aoCtCwLVMBnzeoN7AU2GpBh+K+JOMMc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 11:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:97:ba:20:7e:99:8d:b1:4c:2d:f4:4d:1e:c0:6b:2b:3d:76:ed:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6 Validity Not Before: Nov 27 08:20:52 2025 GMT Not After : Nov 28 11:05:52 2025 GMT Subject: CN=0FF9B6EF773BEAD0A4AEDAF6FCB06E0D6F022964 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:63:5b:c9:2e:ce:9e:0e:a9:44:1d:8c:29:f1: e6:02:3b:fe:d7:bf:e0:3e:92:fc:e7:10:7e:19:7b: 55:a5:3e:37:2c:0b:97:93:2a:72:16:22:60:c5:30: b7:a5:7b:d8:2d:0d:95:21:ee:2c:9c:c3:99:e5:f4: bf:d4:e5:4a:9d:c4:5b:f5:58:cd:bc:c4:b4:34:fe: 15:5e:cd:f0:1c:c4:77:3f:a5:8a:8b:87:d0:8f:e9: 7a:cf:fb:a3:01:9f:17:6d:70:56:9e:2c:38:25:f2: f7:25:d8:f8:d8:a9:d3:3b:e4:28:95:9e:9b:61:3c: e9:ea:5f:ee:95:e1:9d:5b:63:51:58:56:ce:4b:c7: 32:4e:41:c9:a2:d6:7c:89:f0:cb:5a:e7:30:f1:6a: 01:41:ae:91:60:f2:29:f9:61:7d:b3:a4:96:64:91: ee:05:3d:a7:78:6f:4d:e5:1a:90:bf:3d:ab:68:0c: 6f:93:2b:7f:c4:db:bc:56:f7:ee:0c:ed:35:a4:cf: 4a:ce:23:c4:14:71:e3:73:51:1b:66:9a:c3:38:55: 6e:90:c9:ed:36:4a:b7:78:fe:87:83:e3:1f:77:e8: d9:22:d8:3c:98:29:f5:ae:c2:74:c7:2e:26:b3:b6: 69:3a:74:62:83:eb:29:46:88:e7:b9:ac:3b:55:6a: ca:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:F9:B6:EF:77:3B:EA:D0:A4:AE:DA:F6:FC:B0:6E:0D:6F:02:29:64 X509v3 Authority Key Identifier: keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:0f:29:bd:44:c7:59:dd:b1:4f:dc:0b:85:dd:20:39:e4:5d: 65:38:a2:6b:9c:cd:29:f3:5e:26:d7:3b:27:09:1c:02:c4:ca: 8f:98:f3:16:61:12:ae:66:f3:b1:5d:63:e5:d4:47:05:15:36: 98:30:1b:52:e9:d7:04:d7:89:0d:d3:d7:b8:34:cf:dc:fa:f0: 63:1f:03:4e:84:6c:92:b5:0c:17:f5:59:99:99:d1:62:ab:45: 0e:a2:84:95:87:50:0f:6f:97:d5:e5:90:ad:fd:98:1a:53:3f: db:2d:b3:51:b8:07:ad:d0:aa:26:87:b3:73:4d:af:3c:06:41: 45:d9:b6:e5:31:f3:cb:83:ea:31:b6:0b:df:6d:2f:9e:d9:ae: 8e:36:d1:57:d7:ca:8d:96:30:6e:23:30:7f:05:cd:f5:05:3c: 17:df:96:07:b2:1d:9f:90:ee:6e:0b:6f:2f:64:5b:91:91:d5: e3:a3:35:db:34:f8:5a:27:c4:6a:27:42:aa:6f:1c:16:e7:ab: b3:4d:a6:95:f9:bb:e5:2d:32:46:bc:f6:38:83:c8:2d:9b:a2: 3d:86:d8:ad:a9:8d:72:77:f0:0b:4d:81:d0:af:7a:02:25:9d: 90:ca:3b:3d:63:6a:73:a0:ee:f2:29:12:63:3d:71:8b:c6:50: 6f:ce:2f:10 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUOZe6IH6ZjbFMLfRNHsBrKz127QkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTk0MjBlNmM2ZjI0YjBlNDIyZGE3ZmU3ZTQyMGVmNTAz NTRmNDVjNjAeFw0yNTExMjcwODIwNTJaFw0yNTExMjgxMTA1NTJaMDMxMTAvBgNV BAMTKDBGRjlCNkVGNzczQkVBRDBBNEFFREFGNkZDQjA2RTBENkYwMjI5NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsY1vJLs6eDqlEHYwp8eYCO/7X v+A+kvznEH4Ze1WlPjcsC5eTKnIWImDFMLele9gtDZUh7iycw5nl9L/U5UqdxFv1 WM28xLQ0/hVezfAcxHc/pYqLh9CP6XrP+6MBnxdtcFaeLDgl8vcl2PjYqdM75CiV npthPOnqX+6V4Z1bY1FYVs5LxzJOQcmi1nyJ8Mta5zDxagFBrpFg8in5YX2zpJZk ke4FPad4b03lGpC/PatoDG+TK3/E27xW9+4M7TWkz0rOI8QUceNzURtmmsM4VW6Q ye02Srd4/oeD4x936Nki2DyYKfWuwnTHLiaztmk6dGKD6ylGiOe5rDtVaspPAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUD/m273c76tCkrtr2/LBuDW8CKWQwHwYDVR0j BBgwFoAUqUIObG8ksOQi2n/n5CDvUDVPRcYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWY5ODIzZDAtMDg1NS00MWYyLWFjNDYtNTlhMmU5OGRh NzM2LzEvQTk0MjBFNkM2RjI0QjBFNDIyREE3RkU3RTQyMEVGNTAzNTRGNDVDNi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FVSU9iRzhrc09RaTJuX241Q0R2VURW UFJjWS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xZjk4MjNkMC0w ODU1LTQxZjItYWM0Ni01OWEyZTk4ZGE3MzYvMS9BOTQyMEU2QzZGMjRCMEU0MjJE QTdGRTdFNDIwRUY1MDM1NEY0NUM2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApw8pvUTHWd2xT9wLhd0g OeRdZTiia5zNKfNeJtc7JwkcAsTKj5jzFmESrmbzsV1j5dRHBRU2mDAbUunXBNeJ DdPXuDTP3PrwYx8DToRskrUMF/VZmZnRYqtFDqKElYdQD2+X1eWQrf2YGlM/2y2z UbgHrdCqJoezc02vPAZBRdm25THzy4PqMbYL320vntmujjbRV9fKjZYwbiMwfwXN 9QU8F9+WB7Idn5DubgtvL2RbkZHV46M12zT4WifEaidCqm8cFuers02mlfm75S0y Rrz2OIPILZuiPYbYramNcnfwC02B0K96AiWdkMo7PWNqc6Du8ikSYz1xi8ZQb84v EA== -----END CERTIFICATE-----Generated at Thu Nov 27 16:21:45 2025 by rpki-client