This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
File: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft (raw, json)
Hash identifier: efXJvCuY/4OJkT5vbduhS0ZGi084PK2GqIU+P98ksWQ=
Subject key identifier: D4:35:E4:82:00:E5:C2:66:8A:4E:74:DB:6B:4B:34:28:D1:BD:36:78
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 616866C1862354E7041D5077ECAD9E2A9E24BA56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
Manifest number: 062A
Signing time: Sat 06 Dec 2025 23:21:18 +0000
Manifest this update: Sat 06 Dec 2025 23:16:18 +0000
Manifest next update: Mon 08 Dec 2025 01:19:18 +0000
Files and hashes: 1: 34352e39352e3231322e302f32342d3234203d3e20323039353534.roa (hash: 9IsmuufWVjFLEbYLLcJg7Yp7+j5DqB4kK41/uY19nMQ=)
2: 352e3138312e3138362e302f32342d3234203d3e203239303636.roa (hash: 5g1iTpy4+Ocf7g6idB3LUlopM7lH9cpsMczTTuu+hV0=)
3: 3134362e31392e3136372e302f32342d3234203d3e20313532363732.roa (hash: 1EdzND/a/KltqRlIJaQnMPD7XH7CVfxCNY9eyK9ocYU=)
4: 322e35392e36322e302f32342d3234203d3e203633303233.roa (hash: /Ku1phd3ouPkx4ZDyzwkq+GI0U8NGNl14wVu1lc6q1k=)
5: 322e35392e36302e302f32342d3234203d3e20323132323338.roa (hash: hZ11O4/GfIQ3ZyUgAuxIn+0GkFLCBYYNN1OfZIqVDJk=)
6: 34352e39352e3231332e302f32342d3234203d3e20343030303339.roa (hash: XrIv1BWbF+to8I3saogND52oHBVFoDY38lWpbUFLA6o=)
7: 352e3138312e3138342e302f32342d3234203d3e20323132333335.roa (hash: EGBFBscvQ1YWstG9kbxkZOotMsNA8UcpxsIuwRfrnH4=)
8: 38352e3230392e3232382e302f32342d3234203d3e203230343733.roa (hash: LvALS0QzJUIn2y2aM1WJBNeefzd38B8yBzedKpN4nB8=)
9: 38352e3230392e3233312e302f32342d3234203d3e203135343430.roa (hash: 5P7OofszcYzyRXLoqtlNETBM0YQubML8godGGz1Zc2U=)
10: 34352e39352e3231342e302f32342d3234203d3e203434353437.roa (hash: 4mA1gqLsHB6B1P8mI+JnCzpqXJzdsvy8YAE1F7eD96c=)
11: 34352e382e3231372e302f32342d3234203d3e20323136303232.roa (hash: 8eRvRykZqahsRM0VQoPLCYYNfC1yyS358fE8muRhEDA=)
12: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl (hash: 1FwsdMauG2nllFhRH/c/Hf40w29iLr21jIduLrPD1vc=)
13: 3139342e33312e3139352e302f32342d3234203d3e203334393933.roa (hash: u4qzpzCcpcy7ZWgFmuZevTcx8Lt6OWg/1tciNCqCqYM=)
14: 38352e3230392e3233302e302f32342d3234203d3e20313430323234.roa (hash: X9S/vAQJZJ3+zexclWqp51kmLLKozc6jAta0ZYx43Ns=)
15: 3139342e33312e3139362e302f32342d3234203d3e20323030303137.roa (hash: +5av7/JwxJ2GdszhVyEajY1bsnLhd2JhS01B+/f5cdU=)
16: 3139342e33312e3139352e302f32342d3234203d3e203132383236.roa (hash: Hiowcu87+rnRP4VBm949hK9/XoAe1JP45hqg/KNcyVc=)
17: 38352e3230392e3233302e302f32342d3234203d3e203138313836.roa (hash: +OSq4m/6RpxEZih63506Gv6cOkBhW+YglqTPEKg/ZcM=)
18: 352e3138312e3138342e302f32342d3234203d3e20323131333733.roa (hash: HxZ7OQY4wmmok4f1jyMFC6WkeyQaBhCRYtiYzwz8qYg=)
19: 322e35392e36312e302f32342d3234203d3e203438323636.roa (hash: 6dfl8lI1/2dWL8ffIUYhSFUUS7mSu5VjjS42Z8HkW7c=)
20: 3134362e31392e3136372e302f32342d3234203d3e20313432313131.roa (hash: 1cwuvx0f/bXZ/DwexRmaaQu0tTmkULuIbOfrQVnX4ao=)
21: 3139342e33312e3139372e302f32342d3234203d3e203432383331.roa (hash: KMAsq44hIBrFB+eRrhhDssa2B+eAZmGDL1feRYL/R5o=)
22: 34352e382e3231392e302f32342d3234203d3e2039303039.roa (hash: 0zn1M6udTfOcCIE/Cifu6WDNTkQzSgcujlgX6HE4/sQ=)
23: 322e35392e36332e302f32342d3234203d3e20323039363432.roa (hash: +6zE35Il0rdGN/pq8ZFnc/c2DujvbAilLkJKRMrHYbw=)
24: 3139342e33312e3139342e302f32342d3234203d3e203339333638.roa (hash: qMisc8M9fAgiB1zw7/Tn0y61M2FDJt3sqCMkzKcplhA=)
25: 38352e3230392e3232392e302f32342d3234203d3e203432383331.roa (hash: vjpMNqLq25F9up6mT05GhHQJMJ0KbktUxvDSn9v6kBA=)
26: 34352e39352e3231322e302f32322d3232203d3e2037303239.roa (hash: b3HfoeSSJnwEFBW/P8/Hh1DNPoifdQtxChWclKR01cY=)
27: 34352e39352e3231352e302f32342d3234203d3e203631333137.roa (hash: jtw5h4s7N892mHMRX7q1v9D/8tuL7heVW+cms9i1OJM=)
28: 3139342e33312e3139362e302f32342d3234203d3e20313939373337.roa (hash: kk3tkqt3pEQIayEC5akWsEQ7ftglPpO+Tt2YC9Lk7HM=)
29: 352e3138312e3138372e302f32342d3234203d3e20323135373033.roa (hash: NPvxKSNfdGX2aoCtCwLVMBnzeoN7AU2GpBh+K+JOMMc=)
30: 38352e3230392e3233302e302f32342d3234203d3e203633393032.roa (hash: P3VDMMBoXLUjrVK3m58S6qhassJbF7wO/iSY6p4T2ZU=)
31: 352e3138312e3138352e302f32342d3234203d3e20323131333733.roa (hash: 2IzUCrtAIyuz9E3rWXqOgG5uo4suNn7bGWeOLhfOKvg=)
32: 34352e39352e3231342e302f32342d3234203d3e20323136303939.roa (hash: e4sOWlDxZzPIXQ3Vnqya07udsUK1KYBFfN3K3q4TdIQ=)
33: 352e3138312e3138352e302f32342d3234203d3e20323132333834.roa (hash: erSH6Mf15T5HOlDb5lpbU/Ku2eMK+cc/6OxLysGJmP4=)
34: 322e35392e36322e302f32342d3234203d3e20313432313131.roa (hash: c23s9WCLyWR8C29b7voS/R0hWodZcVrxRN5kAioljng=)
35: 322e35392e36302e302f32342d3234203d3e203631333137.roa (hash: BBdnQvjsMGsAKdV0CMmUgkUx9rKK17g08iyDVXfqF5c=)
36: 34352e382e3231382e302f32342d3234203d3e20323132333834.roa (hash: tj3yrp12EwOeT1ZEKtZIphksitaxnh11pc39cLh8XvY=)
37: 34352e39352e3231352e302f32342d3234203d3e203239383032.roa (hash: Q1OlQJwADffmDxnZKj7bvhSo1kOL5aXrHpMtVtZFtuQ=)
38: 3134362e31392e33382e302f32342d3234203d3e20313939363534.roa (hash: KCPy6uAOav6R+jmrUTgTpbZkeje3mnKOXa6FXDMEhhE=)
39: 3139342e33312e3139352e302f32342d3234203d3e20323133363638.roa (hash: tD4GyhGOomU4ZODP9QGqyOztFfw1vKOkCjucViT/SZg=)
40: 34352e382e3231362e302f32342d3234203d3e20323132333834.roa (hash: A1j+LbNuBb8MeFvlQDvvVkVer3lHzQ8b3CPtY22jros=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 21:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:68:66:c1:86:23:54:e7:04:1d:50:77:ec:ad:9e:2a:9e:24:ba:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Dec 6 23:16:18 2025 GMT
Not After : Dec 8 01:19:18 2025 GMT
Subject: CN=D435E48200E5C2668A4E74DB6B4B3428D1BD3678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:26:09:02:ee:e6:b0:c6:74:5e:72:04:2a:0c:
cb:f5:43:08:b4:6b:5c:a3:71:cb:8e:75:2a:4c:b6:
33:75:83:a9:e7:8d:e4:16:14:64:9e:06:2e:41:af:
c1:28:2a:5c:7c:3a:ba:fc:cc:6c:a6:50:b0:d2:38:
ac:31:b2:a5:9a:01:1b:cd:c7:ab:49:65:62:1f:7b:
dd:e9:18:ac:03:f5:2c:23:48:6d:45:5f:77:10:fd:
87:e1:f0:e7:5a:ad:74:0d:07:77:40:a5:89:e9:00:
b1:6f:a0:97:9a:ad:7c:50:86:61:65:91:76:22:1c:
22:0b:c3:ae:83:5a:3a:91:5e:a0:de:f0:73:b6:3c:
36:63:0a:a0:b8:09:cc:ce:e4:fd:41:6c:07:ed:31:
12:4f:25:47:4b:91:a0:f5:3b:9c:5d:3e:ea:f9:da:
7e:e7:0c:c9:2f:f2:63:9b:7f:26:1d:03:f4:f8:21:
a7:84:86:4a:d2:e7:b0:97:bd:8c:43:ea:b3:fb:81:
58:ee:9a:73:e1:56:88:2e:f8:c9:18:e9:66:29:9e:
89:01:fe:d3:0f:5b:46:b5:51:c8:ec:a2:17:9d:1a:
34:9c:fd:56:78:ad:9a:8d:1d:72:5d:5c:9e:66:7a:
3d:70:c1:b7:b8:05:37:70:b1:f7:63:eb:0d:02:ae:
a6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:35:E4:82:00:E5:C2:66:8A:4E:74:DB:6B:4B:34:28:D1:BD:36:78
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:1c:fd:08:30:f1:73:4c:9e:95:ad:58:04:45:a9:5b:3b:f3:
12:07:eb:5b:d3:b2:e8:b0:b8:a5:fe:e2:55:a2:47:be:db:89:
5d:e1:96:a3:90:f3:9b:88:6b:a8:90:23:eb:4e:76:7d:c6:a2:
97:a4:66:64:55:cf:86:28:0b:b9:9b:02:9c:aa:f5:ff:50:43:
42:c4:63:b9:10:ad:c9:70:d9:4d:7d:88:6c:b9:4e:ef:ec:8b:
c0:c8:04:14:23:7d:92:18:78:58:9e:7a:59:8e:6b:f9:17:0f:
4f:89:d1:d4:01:cb:d3:f4:8d:c0:5b:72:a7:36:d9:8b:05:a9:
91:6a:69:c0:6b:cf:96:75:a1:83:18:41:cc:9b:41:ca:a3:37:
c5:a7:89:07:98:c5:34:fc:0d:65:e0:20:91:72:64:c1:7c:c3:
93:2c:d4:52:f8:c4:dc:6c:52:75:9d:90:29:71:63:38:0d:6b:
44:c4:d4:f0:12:3f:99:43:86:4e:04:18:ff:f1:df:8f:dc:55:
fd:b8:e7:44:27:02:0b:ff:d0:a6:c6:9b:28:17:3f:f7:93:8a:
3c:09:4c:9f:37:6c:03:55:84:67:c8:94:db:02:2f:00:c6:c1:
a1:80:90:f3:56:60:62:ca:dc:01:04:7c:c6:30:29:bc:c7:ac:
a7:ec:a6:aa
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUYWhmwYYjVOcEHVB37K2eKp4kulYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTk0MjBlNmM2ZjI0YjBlNDIyZGE3ZmU3ZTQyMGVmNTAz
NTRmNDVjNjAeFw0yNTEyMDYyMzE2MThaFw0yNTEyMDgwMTE5MThaMDMxMTAvBgNV
BAMTKEQ0MzVFNDgyMDBFNUMyNjY4QTRFNzREQjZCNEIzNDI4RDFCRDM2NzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpJgkC7uawxnRecgQqDMv1Qwi0
a1yjccuOdSpMtjN1g6nnjeQWFGSeBi5Br8EoKlx8Orr8zGymULDSOKwxsqWaARvN
x6tJZWIfe93pGKwD9SwjSG1FX3cQ/Yfh8OdarXQNB3dApYnpALFvoJearXxQhmFl
kXYiHCILw66DWjqRXqDe8HO2PDZjCqC4CczO5P1BbAftMRJPJUdLkaD1O5xdPur5
2n7nDMkv8mObfyYdA/T4IaeEhkrS57CXvYxD6rP7gVjumnPhVogu+MkY6WYpnokB
/tMPW0a1UcjsohedGjSc/VZ4rZqNHXJdXJ5mej1wwbe4BTdwsfdj6w0CrqYhAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU1DXkggDlwmaKTnTba0s0KNG9NngwHwYDVR0j
BBgwFoAUqUIObG8ksOQi2n/n5CDvUDVPRcYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWY5ODIzZDAtMDg1NS00MWYyLWFjNDYtNTlhMmU5OGRh
NzM2LzEvQTk0MjBFNkM2RjI0QjBFNDIyREE3RkU3RTQyMEVGNTAzNTRGNDVDNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FVSU9iRzhrc09RaTJuX241Q0R2VURW
UFJjWS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xZjk4MjNkMC0w
ODU1LTQxZjItYWM0Ni01OWEyZTk4ZGE3MzYvMS9BOTQyMEU2QzZGMjRCMEU0MjJE
QTdGRTdFNDIwRUY1MDM1NEY0NUM2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALBz9CDDxc0yela1YBEWp
WzvzEgfrW9Oy6LC4pf7iVaJHvtuJXeGWo5Dzm4hrqJAj6052fcail6RmZFXPhigL
uZsCnKr1/1BDQsRjuRCtyXDZTX2IbLlO7+yLwMgEFCN9khh4WJ56WY5r+RcPT4nR
1AHL0/SNwFtypzbZiwWpkWppwGvPlnWhgxhBzJtByqM3xaeJB5jFNPwNZeAgkXJk
wXzDkyzUUvjE3GxSdZ2QKXFjOA1rRMTU8BI/mUOGTgQY//Hfj9xV/bjnRCcCC//Q
psabKBc/95OKPAlMnzdsA1WEZ8iU2wIvAMbBoYCQ81ZgYsrcAQR8xjApvMesp+ym
qg==
-----END CERTIFICATE-----
Generated at Sun Dec 7 04:47:44 2025 by rpki-client