This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
File:                     A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft (raw, json)
Hash identifier:          0Uf788pkq3wnjR5WwkTWy4mmVQ8K5xUzZCE4aCExyWg=
Subject key identifier:   EA:E6:B7:19:3D:2E:78:69:B6:59:FF:DF:CF:84:F5:53:82:14:EF:AB
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Certificate issuer:       /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial:       59EFB93BE9477139E13D4F3164B5D4F8AE1C1741
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
Manifest number:          062C
Signing time:             Mon 08 Dec 2025 01:26:40 +0000
Manifest this update:     Mon 08 Dec 2025 01:21:40 +0000
Manifest next update:     Tue 09 Dec 2025 02:42:40 +0000
Files and hashes:         1: 38352e3230392e3233302e302f32342d3234203d3e20313430323234.roa (hash: X9S/vAQJZJ3+zexclWqp51kmLLKozc6jAta0ZYx43Ns=)
                          2: 34352e39352e3231352e302f32342d3234203d3e203631333137.roa (hash: jtw5h4s7N892mHMRX7q1v9D/8tuL7heVW+cms9i1OJM=)
                          3: 322e35392e36302e302f32342d3234203d3e203631333137.roa (hash: BBdnQvjsMGsAKdV0CMmUgkUx9rKK17g08iyDVXfqF5c=)
                          4: 3139342e33312e3139342e302f32342d3234203d3e203339333638.roa (hash: qMisc8M9fAgiB1zw7/Tn0y61M2FDJt3sqCMkzKcplhA=)
                          5: 352e3138312e3138352e302f32342d3234203d3e20323132333834.roa (hash: erSH6Mf15T5HOlDb5lpbU/Ku2eMK+cc/6OxLysGJmP4=)
                          6: 3139342e33312e3139352e302f32342d3234203d3e203334393933.roa (hash: u4qzpzCcpcy7ZWgFmuZevTcx8Lt6OWg/1tciNCqCqYM=)
                          7: 3134362e31392e3136372e302f32342d3234203d3e20313432313131.roa (hash: 1cwuvx0f/bXZ/DwexRmaaQu0tTmkULuIbOfrQVnX4ao=)
                          8: 352e3138312e3138362e302f32342d3234203d3e203239303636.roa (hash: 5g1iTpy4+Ocf7g6idB3LUlopM7lH9cpsMczTTuu+hV0=)
                          9: 38352e3230392e3232382e302f32342d3234203d3e203230343733.roa (hash: LvALS0QzJUIn2y2aM1WJBNeefzd38B8yBzedKpN4nB8=)
                          10: 3134362e31392e33382e302f32342d3234203d3e20313939363534.roa (hash: KCPy6uAOav6R+jmrUTgTpbZkeje3mnKOXa6FXDMEhhE=)
                          11: 34352e382e3231362e302f32342d3234203d3e20323132333834.roa (hash: A1j+LbNuBb8MeFvlQDvvVkVer3lHzQ8b3CPtY22jros=)
                          12: 34352e39352e3231352e302f32342d3234203d3e203239383032.roa (hash: Q1OlQJwADffmDxnZKj7bvhSo1kOL5aXrHpMtVtZFtuQ=)
                          13: 34352e39352e3231332e302f32342d3234203d3e20343030303339.roa (hash: XrIv1BWbF+to8I3saogND52oHBVFoDY38lWpbUFLA6o=)
                          14: 34352e382e3231392e302f32342d3234203d3e2039303039.roa (hash: 0zn1M6udTfOcCIE/Cifu6WDNTkQzSgcujlgX6HE4/sQ=)
                          15: 34352e382e3231372e302f32342d3234203d3e20323136303232.roa (hash: 8eRvRykZqahsRM0VQoPLCYYNfC1yyS358fE8muRhEDA=)
                          16: 34352e39352e3231342e302f32342d3234203d3e20323136303939.roa (hash: e4sOWlDxZzPIXQ3Vnqya07udsUK1KYBFfN3K3q4TdIQ=)
                          17: 352e3138312e3138372e302f32342d3234203d3e20323135373033.roa (hash: NPvxKSNfdGX2aoCtCwLVMBnzeoN7AU2GpBh+K+JOMMc=)
                          18: 322e35392e36322e302f32342d3234203d3e20313432313131.roa (hash: c23s9WCLyWR8C29b7voS/R0hWodZcVrxRN5kAioljng=)
                          19: 38352e3230392e3233302e302f32342d3234203d3e203138313836.roa (hash: +OSq4m/6RpxEZih63506Gv6cOkBhW+YglqTPEKg/ZcM=)
                          20: 3134362e31392e3136372e302f32342d3234203d3e20313532363732.roa (hash: 1EdzND/a/KltqRlIJaQnMPD7XH7CVfxCNY9eyK9ocYU=)
                          21: 34352e39352e3231342e302f32342d3234203d3e203434353437.roa (hash: 4mA1gqLsHB6B1P8mI+JnCzpqXJzdsvy8YAE1F7eD96c=)
                          22: 34352e382e3231382e302f32342d3234203d3e20323132333834.roa (hash: tj3yrp12EwOeT1ZEKtZIphksitaxnh11pc39cLh8XvY=)
                          23: 322e35392e36312e302f32342d3234203d3e203438323636.roa (hash: 6dfl8lI1/2dWL8ffIUYhSFUUS7mSu5VjjS42Z8HkW7c=)
                          24: 322e35392e36302e302f32342d3234203d3e20323132323338.roa (hash: hZ11O4/GfIQ3ZyUgAuxIn+0GkFLCBYYNN1OfZIqVDJk=)
                          25: 3139342e33312e3139352e302f32342d3234203d3e203132383236.roa (hash: Hiowcu87+rnRP4VBm949hK9/XoAe1JP45hqg/KNcyVc=)
                          26: 38352e3230392e3232392e302f32342d3234203d3e203432383331.roa (hash: vjpMNqLq25F9up6mT05GhHQJMJ0KbktUxvDSn9v6kBA=)
                          27: 322e35392e36322e302f32342d3234203d3e203633303233.roa (hash: /Ku1phd3ouPkx4ZDyzwkq+GI0U8NGNl14wVu1lc6q1k=)
                          28: 3139342e33312e3139362e302f32342d3234203d3e20313939373337.roa (hash: kk3tkqt3pEQIayEC5akWsEQ7ftglPpO+Tt2YC9Lk7HM=)
                          29: 34352e39352e3231322e302f32322d3232203d3e2037303239.roa (hash: b3HfoeSSJnwEFBW/P8/Hh1DNPoifdQtxChWclKR01cY=)
                          30: 3139342e33312e3139372e302f32342d3234203d3e203432383331.roa (hash: KMAsq44hIBrFB+eRrhhDssa2B+eAZmGDL1feRYL/R5o=)
                          31: 38352e3230392e3233312e302f32342d3234203d3e203135343430.roa (hash: 5P7OofszcYzyRXLoqtlNETBM0YQubML8godGGz1Zc2U=)
                          32: 352e3138312e3138352e302f32342d3234203d3e20323131333733.roa (hash: 2IzUCrtAIyuz9E3rWXqOgG5uo4suNn7bGWeOLhfOKvg=)
                          33: 3139342e33312e3139352e302f32342d3234203d3e20323133363638.roa (hash: tD4GyhGOomU4ZODP9QGqyOztFfw1vKOkCjucViT/SZg=)
                          34: 3139342e33312e3139362e302f32342d3234203d3e20323030303137.roa (hash: +5av7/JwxJ2GdszhVyEajY1bsnLhd2JhS01B+/f5cdU=)
                          35: 352e3138312e3138342e302f32342d3234203d3e20323132333335.roa (hash: EGBFBscvQ1YWstG9kbxkZOotMsNA8UcpxsIuwRfrnH4=)
                          36: 34352e39352e3231322e302f32342d3234203d3e20323039353534.roa (hash: 9IsmuufWVjFLEbYLLcJg7Yp7+j5DqB4kK41/uY19nMQ=)
                          37: 322e35392e36332e302f32342d3234203d3e20323039363432.roa (hash: +6zE35Il0rdGN/pq8ZFnc/c2DujvbAilLkJKRMrHYbw=)
                          38: 38352e3230392e3233302e302f32342d3234203d3e203633393032.roa (hash: P3VDMMBoXLUjrVK3m58S6qhassJbF7wO/iSY6p4T2ZU=)
                          39: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl (hash: UeZrq8rXS7BQ7LxLti5mGg/oxJtv1qViE3TUoC8YcW0=)
                          40: 36322e332e32302e302f32342d3234203d3e203231383539.roa (hash: Rro+Gx/ym8oazWi/ZTJ2dg2MGKpj7/78mNky+1y7VfU=)
                          41: 352e3138312e3138342e302f32342d3234203d3e20323131333733.roa (hash: HxZ7OQY4wmmok4f1jyMFC6WkeyQaBhCRYtiYzwz8qYg=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Dec 2025 19:58:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:ef:b9:3b:e9:47:71:39:e1:3d:4f:31:64:b5:d4:f8:ae:1c:17:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
        Validity
            Not Before: Dec  8 01:21:40 2025 GMT
            Not After : Dec  9 02:42:40 2025 GMT
        Subject: CN=EAE6B7193D2E7869B659FFDFCF84F5538214EFAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ee:f6:a3:ce:d0:f0:96:9f:aa:30:5b:67:f6:
                    bb:67:70:6d:b4:90:40:d1:43:6a:58:96:4e:43:02:
                    7b:5f:98:b9:92:19:e2:1a:7c:5e:f0:60:2f:ac:16:
                    ef:bf:5b:b8:5e:ce:29:88:ab:d2:24:01:15:8d:fa:
                    62:60:4c:49:d4:06:1b:a7:60:1a:42:d5:d0:ea:3b:
                    8f:0b:db:8b:f5:40:14:b5:d4:01:e6:8e:74:71:0b:
                    88:0c:35:3f:73:59:63:5e:83:7d:1d:6d:ae:ca:6a:
                    8c:74:56:de:9b:b7:91:f4:2c:17:b8:c3:7d:d5:66:
                    59:44:22:33:59:cf:e5:10:aa:6b:70:99:52:17:f0:
                    29:7b:46:7e:a4:ed:cd:c0:07:4a:d9:98:80:0f:6a:
                    fb:6d:55:30:65:88:18:fc:a4:e6:7b:0e:64:fd:3d:
                    56:4b:3e:f4:a3:85:54:56:94:e2:17:df:84:fd:c4:
                    b5:98:cc:79:00:b7:01:a2:4c:b0:74:9a:91:59:9c:
                    50:65:6e:66:de:04:75:a9:e5:1c:48:7d:b4:b1:bd:
                    16:44:99:5d:c4:ab:6e:2f:d3:b5:3a:63:6f:15:47:
                    1f:49:60:84:c8:8c:9a:fb:f4:1d:38:cf:d7:43:73:
                    99:19:cf:ff:8a:a2:f5:87:db:60:e0:e9:6a:0e:07:
                    bf:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:E6:B7:19:3D:2E:78:69:B6:59:FF:DF:CF:84:F5:53:82:14:EF:AB
            X509v3 Authority Key Identifier:
                keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:f3:fe:31:3c:f3:10:33:77:0c:68:cf:ac:a1:ec:3b:4b:78:
         47:de:0d:9e:38:6e:8b:7c:22:e3:12:10:51:7c:ab:fb:e7:be:
         da:06:b3:21:9b:83:70:d3:d5:5a:b4:c3:60:4d:92:39:b6:a4:
         d8:0b:5b:0b:0f:6c:ab:e7:12:76:f8:f3:40:c9:16:c9:00:c0:
         f9:2b:35:44:41:00:25:b0:e0:46:89:cb:1f:8e:5b:ad:82:f9:
         f3:ca:bd:7c:60:20:66:4a:11:9a:dd:be:25:26:2c:77:7c:2b:
         39:1a:c7:d1:01:05:46:33:1f:16:35:a7:6c:b9:a8:21:4b:2f:
         96:51:92:c4:eb:8b:2f:e1:e1:b7:f4:c4:0d:42:a2:a5:5e:57:
         90:46:6c:51:c5:c9:79:ff:44:9c:47:e4:bc:21:b6:9d:1b:4d:
         b1:54:94:16:9f:fb:01:ce:c4:8c:f7:41:a5:46:74:da:45:89:
         f7:33:34:b5:69:e4:7e:df:56:8d:56:36:d8:fa:ee:b7:7c:31:
         ff:b4:27:cb:4b:d3:7b:11:3d:25:b4:f0:04:db:bf:ec:8a:37:
         6e:bb:1d:94:cf:28:72:5e:f7:ff:7b:13:99:95:58:ca:19:84:
         ef:fa:c9:46:0a:7e:45:5a:e0:d8:7d:4e:7c:d4:68:10:18:16:
         08:f3:86:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 04:51:31 2025 by rpki-client