This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
File: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft (raw, json)
Hash identifier: kbAwWCpLGuz7YX75LOnaLKTXlbZIXLyy648vcNs7tzs=
Subject key identifier: D2:79:A8:94:F5:71:1D:3F:F2:DE:EA:D9:67:1D:12:B4:D7:DB:5F:13
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 25B5F723BF7D53EBDD2DDC4A35A71696551742AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
Manifest number: 067B
Signing time: Fri 30 Jan 2026 22:09:44 +0000
Manifest this update: Fri 30 Jan 2026 22:04:44 +0000
Manifest next update: Sat 31 Jan 2026 22:59:44 +0000
Files and hashes: 1: 322e35392e36302e302f32342d3234203d3e20323132323338.roa (hash: hZ11O4/GfIQ3ZyUgAuxIn+0GkFLCBYYNN1OfZIqVDJk=)
2: 322e35392e36322e302f32342d3234203d3e203633303233.roa (hash: /Ku1phd3ouPkx4ZDyzwkq+GI0U8NGNl14wVu1lc6q1k=)
3: 352e3138312e3138342e302f32342d3234203d3e20323132333335.roa (hash: UCQA4MebhnFRuGzYIjyz+Oaxw3thh569/39f5fjzuDM=)
4: 3139342e33312e3139362e302f32342d3234203d3e20313939373337.roa (hash: kk3tkqt3pEQIayEC5akWsEQ7ftglPpO+Tt2YC9Lk7HM=)
5: 3134362e31392e3136372e302f32342d3234203d3e20313532363732.roa (hash: 1EdzND/a/KltqRlIJaQnMPD7XH7CVfxCNY9eyK9ocYU=)
6: 34352e39352e3231332e302f32342d3234203d3e20343030303339.roa (hash: XrIv1BWbF+to8I3saogND52oHBVFoDY38lWpbUFLA6o=)
7: 36322e332e32302e302f32342d3234203d3e20323135313532.roa (hash: K3GEYfrcdLJt/Pv1pZTdwz6yJZqY0yfvXEhbrZ66rqc=)
8: 3134362e31392e3136372e302f32342d3234203d3e20313432313131.roa (hash: 1cwuvx0f/bXZ/DwexRmaaQu0tTmkULuIbOfrQVnX4ao=)
9: 3139342e33312e3139352e302f32342d3234203d3e203132383236.roa (hash: dZ5pA0FTXTMIyebmvvTrXa2pwRmRVDj8qy5ZN+EkpPo=)
10: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl (hash: Pi00+eF22ukQKPspogtwEpTuRvwcIRjtSIS9mgxRKwo=)
11: 322e35392e36312e302f32342d3234203d3e203438323636.roa (hash: 6dfl8lI1/2dWL8ffIUYhSFUUS7mSu5VjjS42Z8HkW7c=)
12: 322e35392e36302e302f32342d3234203d3e203631333137.roa (hash: BBdnQvjsMGsAKdV0CMmUgkUx9rKK17g08iyDVXfqF5c=)
13: 34352e39352e3231322e302f32342d3234203d3e20323039353534.roa (hash: 9IsmuufWVjFLEbYLLcJg7Yp7+j5DqB4kK41/uY19nMQ=)
14: 36322e332e32302e302f32342d3234203d3e203231383539.roa (hash: Rro+Gx/ym8oazWi/ZTJ2dg2MGKpj7/78mNky+1y7VfU=)
15: 3139342e33312e3139352e302f32342d3234203d3e20323133363638.roa (hash: tD4GyhGOomU4ZODP9QGqyOztFfw1vKOkCjucViT/SZg=)
16: 3134362e31392e33382e302f32342d3234203d3e20313939363534.roa (hash: KCPy6uAOav6R+jmrUTgTpbZkeje3mnKOXa6FXDMEhhE=)
17: 38352e3230392e3233312e302f32342d3234203d3e203135343430.roa (hash: 5P7OofszcYzyRXLoqtlNETBM0YQubML8godGGz1Zc2U=)
18: 3139342e33312e3139352e302f32342d3234203d3e203334393933.roa (hash: /RrqrRO8J+Vsp3FaP0KZwFzXiRmxrRbyseKOqWdHYpY=)
19: 34352e382e3231392e302f32342d3234203d3e2039303039.roa (hash: 0zn1M6udTfOcCIE/Cifu6WDNTkQzSgcujlgX6HE4/sQ=)
20: 34352e39352e3231342e302f32342d3234203d3e20323136303939.roa (hash: D/Nmap/PxRG4O5COkUTsliUnadwaB6xsHT4TvPGKFlQ=)
21: 34352e39352e3231352e302f32342d3234203d3e203239383032.roa (hash: Q1OlQJwADffmDxnZKj7bvhSo1kOL5aXrHpMtVtZFtuQ=)
22: 352e3138312e3138352e302f32342d3234203d3e20323132333834.roa (hash: erSH6Mf15T5HOlDb5lpbU/Ku2eMK+cc/6OxLysGJmP4=)
23: 34352e39352e3231342e302f32342d3234203d3e203434353437.roa (hash: 4mA1gqLsHB6B1P8mI+JnCzpqXJzdsvy8YAE1F7eD96c=)
24: 34352e39352e3231352e302f32342d3234203d3e203631333137.roa (hash: jtw5h4s7N892mHMRX7q1v9D/8tuL7heVW+cms9i1OJM=)
25: 352e3138312e3138342e302f32342d3234203d3e20323131333733.roa (hash: HxZ7OQY4wmmok4f1jyMFC6WkeyQaBhCRYtiYzwz8qYg=)
26: 38352e3230392e3233302e302f32342d3234203d3e20313430323234.roa (hash: X9S/vAQJZJ3+zexclWqp51kmLLKozc6jAta0ZYx43Ns=)
27: 322e35392e36322e302f32342d3234203d3e20313432313131.roa (hash: c23s9WCLyWR8C29b7voS/R0hWodZcVrxRN5kAioljng=)
28: 38352e3230392e3233302e302f32342d3234203d3e203633393032.roa (hash: P3VDMMBoXLUjrVK3m58S6qhassJbF7wO/iSY6p4T2ZU=)
29: 352e3138312e3138372e302f32342d3234203d3e20323135373033.roa (hash: EJ6RmJBNoUg0c9WoYw2Ja1OnADVswQoLG/EoG0ZGnFE=)
30: 322e35392e36332e302f32342d3234203d3e20383334.roa (hash: 8DqvUUgTHwg4fnhfYD2q3DFHCSCucv2RToLFRdMK/4s=)
31: 352e3138312e3138362e302f32342d3234203d3e20323036313530.roa (hash: QGg1o/UsEXwX7QWOmnciGR0lfU5zaV2UWyNlVxa/Ka8=)
32: 38352e3230392e3232392e302f32342d3234203d3e203432383331.roa (hash: vjpMNqLq25F9up6mT05GhHQJMJ0KbktUxvDSn9v6kBA=)
33: 3139342e33312e3139372e302f32342d3234203d3e203432383331.roa (hash: KMAsq44hIBrFB+eRrhhDssa2B+eAZmGDL1feRYL/R5o=)
34: 352e3138312e3138352e302f32342d3234203d3e20323131333733.roa (hash: 2IzUCrtAIyuz9E3rWXqOgG5uo4suNn7bGWeOLhfOKvg=)
35: 38352e3230392e3233302e302f32342d3234203d3e203138313836.roa (hash: +OSq4m/6RpxEZih63506Gv6cOkBhW+YglqTPEKg/ZcM=)
36: 3134362e31392e33382e302f32342d3234203d3e203136323736.roa (hash: norYvgZGO2Imho4UnQcnY8UITUyuaQwpwpHqXsoPDao=)
37: 34352e382e3231372e302f32342d3234203d3e20323136303232.roa (hash: 8eRvRykZqahsRM0VQoPLCYYNfC1yyS358fE8muRhEDA=)
38: 34352e39352e3231322e302f32322d3232203d3e2037303239.roa (hash: b3HfoeSSJnwEFBW/P8/Hh1DNPoifdQtxChWclKR01cY=)
39: 38352e3230392e3232382e302f32342d3234203d3e203230343733.roa (hash: LvALS0QzJUIn2y2aM1WJBNeefzd38B8yBzedKpN4nB8=)
40: 3139342e33312e3139362e302f32342d3234203d3e20323030303137.roa (hash: +5av7/JwxJ2GdszhVyEajY1bsnLhd2JhS01B+/f5cdU=)
41: 34352e382e3231382e302f32342d3234203d3e20323132333834.roa (hash: tj3yrp12EwOeT1ZEKtZIphksitaxnh11pc39cLh8XvY=)
42: 34352e382e3231362e302f32342d3234203d3e20323132333834.roa (hash: A1j+LbNuBb8MeFvlQDvvVkVer3lHzQ8b3CPtY22jros=)
43: 3139342e33312e3139342e302f32342d3234203d3e203339333638.roa (hash: qMisc8M9fAgiB1zw7/Tn0y61M2FDJt3sqCMkzKcplhA=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Jan 2026 15:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:b5:f7:23:bf:7d:53:eb:dd:2d:dc:4a:35:a7:16:96:55:17:42:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Jan 30 22:04:44 2026 GMT
Not After : Jan 31 22:59:44 2026 GMT
Subject: CN=D279A894F5711D3FF2DEEAD9671D12B4D7DB5F13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f3:64:71:78:1f:a1:a7:89:60:ec:9e:5e:cf:
5f:ef:3c:b3:67:bf:09:88:17:d9:f1:7c:b1:3e:c5:
a4:d8:9b:af:ad:51:d4:33:fb:c4:15:2e:e9:fd:b4:
1a:d0:0d:6c:84:d9:b8:8d:b0:75:82:3f:ef:a2:a1:
6b:b1:7b:a5:e6:d6:ab:63:d6:f5:19:5f:20:9a:9c:
ae:af:3e:80:5e:65:86:26:00:c9:35:ed:2f:41:73:
cd:7e:5b:49:fa:7f:3b:59:21:e9:13:56:58:4f:b9:
81:d4:d9:b5:9a:be:f7:e2:a2:ee:ce:3b:77:92:43:
46:d8:6e:fd:13:42:fd:60:8e:c7:b3:06:06:64:c8:
0b:f9:f8:d7:52:3a:04:72:51:94:03:fb:c9:36:e1:
07:04:1a:16:8f:e8:a5:e5:83:ba:7f:14:e8:d4:a0:
07:82:aa:ca:78:f3:30:a9:e4:e2:b0:43:7b:6e:99:
33:be:d1:8f:c3:30:0a:f0:e6:ad:b9:92:ab:75:ba:
5b:36:21:61:a2:df:2a:b2:98:58:bd:e4:18:87:81:
2c:4f:b1:f4:54:76:e8:fb:53:85:6f:c0:11:b3:ab:
1e:7d:b8:ac:62:fb:dd:ae:51:8b:cc:37:29:b6:3c:
fe:e4:60:f8:4c:50:93:9b:aa:9c:08:ec:b0:25:1b:
bf:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:79:A8:94:F5:71:1D:3F:F2:DE:EA:D9:67:1D:12:B4:D7:DB:5F:13
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:4a:40:b5:52:c1:9a:f6:e5:5a:b8:88:13:da:59:40:fc:f5:
4f:04:a1:53:2c:a0:e6:8b:65:7f:34:c3:75:50:fc:97:c1:b7:
c3:d1:67:9d:1a:0a:3c:63:03:04:d8:59:29:7c:36:56:91:83:
86:6b:4f:32:74:20:b2:86:95:c1:a8:ca:72:eb:14:d6:4b:6f:
67:6e:33:7e:06:06:ce:36:c4:5e:b8:9c:36:a0:ba:f1:fa:90:
79:94:25:0c:50:2b:3d:7c:0e:e3:3b:d1:39:84:5a:99:95:6e:
46:68:71:cd:81:15:f7:76:a0:69:65:b3:11:09:13:ce:44:cc:
7b:85:cd:fd:5a:f3:27:c2:b9:be:6d:ca:ee:1d:b5:be:51:04:
29:38:d0:41:59:86:e9:5a:31:e6:f4:ed:5b:82:4c:65:de:1c:
9a:e7:d6:d0:5c:e5:81:09:6a:e0:9e:e9:32:2e:dc:42:c6:a1:
4f:d2:22:b2:34:87:1e:4c:95:c4:a8:41:c8:e3:d8:b8:84:38:
b3:de:9a:ac:9c:f5:d2:fc:ee:ac:12:ae:57:e3:da:8c:46:6c:
2f:f8:c5:ba:9d:ea:c7:c7:c4:01:8b:54:c6:6f:f9:e0:21:ef:
86:7f:b5:47:79:77:32:c8:2d:0e:71:ca:54:31:70:7d:14:a3:
bd:c3:e2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 31 00:27:16 2026 by rpki-client