This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
File:                     A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft (raw, json)
Hash identifier:          3GSapHTA4HWWrN7NQxvHzdIcLfvOLaZmppgBTk9mBNs=
Subject key identifier:   40:AA:08:B7:D8:07:4A:29:5B:A8:1D:D9:5A:3F:07:12:9C:A6:E4:B5
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Certificate issuer:       /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial:       56F170B15F48A5175FEF33F5A3E7B799E5740FF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
Manifest number:          0617
Signing time:             Sun 23 Nov 2025 16:02:36 +0000
Manifest this update:     Sun 23 Nov 2025 15:57:36 +0000
Manifest next update:     Mon 24 Nov 2025 17:54:36 +0000
Files and hashes:         1: 3139342e33312e3139352e302f32342d3234203d3e20323133363638.roa (hash: tD4GyhGOomU4ZODP9QGqyOztFfw1vKOkCjucViT/SZg=)
                          2: 3139342e33312e3139342e302f32342d3234203d3e203339333638.roa (hash: qMisc8M9fAgiB1zw7/Tn0y61M2FDJt3sqCMkzKcplhA=)
                          3: 3139342e33312e3139352e302f32342d3234203d3e203132383236.roa (hash: Hiowcu87+rnRP4VBm949hK9/XoAe1JP45hqg/KNcyVc=)
                          4: 38352e3230392e3232382e302f32342d3234203d3e203230343733.roa (hash: LvALS0QzJUIn2y2aM1WJBNeefzd38B8yBzedKpN4nB8=)
                          5: 352e3138312e3138342e302f32342d3234203d3e20323131333733.roa (hash: HxZ7OQY4wmmok4f1jyMFC6WkeyQaBhCRYtiYzwz8qYg=)
                          6: 322e35392e36322e302f32342d3234203d3e203633303233.roa (hash: /Ku1phd3ouPkx4ZDyzwkq+GI0U8NGNl14wVu1lc6q1k=)
                          7: 34352e39352e3231352e302f32342d3234203d3e203239383032.roa (hash: Q1OlQJwADffmDxnZKj7bvhSo1kOL5aXrHpMtVtZFtuQ=)
                          8: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl (hash: 8V/z1Cvmk3dMLijBvnEwgcjXmkPxqELWFlry09tbmHA=)
                          9: 38352e3230392e3233302e302f32342d3234203d3e203138313836.roa (hash: +OSq4m/6RpxEZih63506Gv6cOkBhW+YglqTPEKg/ZcM=)
                          10: 34352e382e3231392e302f32342d3234203d3e2039303039.roa (hash: 0zn1M6udTfOcCIE/Cifu6WDNTkQzSgcujlgX6HE4/sQ=)
                          11: 38352e3230392e3232392e302f32342d3234203d3e203432383331.roa (hash: vjpMNqLq25F9up6mT05GhHQJMJ0KbktUxvDSn9v6kBA=)
                          12: 3134362e31392e3136372e302f32342d3234203d3e20313432313131.roa (hash: 1cwuvx0f/bXZ/DwexRmaaQu0tTmkULuIbOfrQVnX4ao=)
                          13: 3134362e31392e33382e302f32342d3234203d3e20313939363534.roa (hash: KCPy6uAOav6R+jmrUTgTpbZkeje3mnKOXa6FXDMEhhE=)
                          14: 38352e3230392e3233302e302f32342d3234203d3e203633393032.roa (hash: P3VDMMBoXLUjrVK3m58S6qhassJbF7wO/iSY6p4T2ZU=)
                          15: 352e3138312e3138362e302f32342d3234203d3e203239303636.roa (hash: 5g1iTpy4+Ocf7g6idB3LUlopM7lH9cpsMczTTuu+hV0=)
                          16: 352e3138312e3138352e302f32342d3234203d3e20323132333834.roa (hash: erSH6Mf15T5HOlDb5lpbU/Ku2eMK+cc/6OxLysGJmP4=)
                          17: 322e35392e36312e302f32342d3234203d3e203438323636.roa (hash: 6dfl8lI1/2dWL8ffIUYhSFUUS7mSu5VjjS42Z8HkW7c=)
                          18: 3134362e31392e3136372e302f32342d3234203d3e20313532363732.roa (hash: 1EdzND/a/KltqRlIJaQnMPD7XH7CVfxCNY9eyK9ocYU=)
                          19: 34352e39352e3231342e302f32342d3234203d3e20323136303939.roa (hash: e4sOWlDxZzPIXQ3Vnqya07udsUK1KYBFfN3K3q4TdIQ=)
                          20: 352e3138312e3138372e302f32342d3234203d3e20323135373033.roa (hash: NPvxKSNfdGX2aoCtCwLVMBnzeoN7AU2GpBh+K+JOMMc=)
                          21: 38352e3230392e3233302e302f32342d3234203d3e20313430323234.roa (hash: X9S/vAQJZJ3+zexclWqp51kmLLKozc6jAta0ZYx43Ns=)
                          22: 38352e3230392e3233312e302f32342d3234203d3e203135343430.roa (hash: 5P7OofszcYzyRXLoqtlNETBM0YQubML8godGGz1Zc2U=)
                          23: 352e3138312e3138352e302f32342d3234203d3e20323131333733.roa (hash: 2IzUCrtAIyuz9E3rWXqOgG5uo4suNn7bGWeOLhfOKvg=)
                          24: 3139342e33312e3139362e302f32342d3234203d3e20323030303137.roa (hash: +5av7/JwxJ2GdszhVyEajY1bsnLhd2JhS01B+/f5cdU=)
                          25: 322e35392e36322e302f32342d3234203d3e20313432313131.roa (hash: c23s9WCLyWR8C29b7voS/R0hWodZcVrxRN5kAioljng=)
                          26: 34352e382e3231372e302f32342d3234203d3e20323136303232.roa (hash: 8eRvRykZqahsRM0VQoPLCYYNfC1yyS358fE8muRhEDA=)
                          27: 34352e382e3231362e302f32342d3234203d3e20323132333834.roa (hash: A1j+LbNuBb8MeFvlQDvvVkVer3lHzQ8b3CPtY22jros=)
                          28: 3139342e33312e3139362e302f32342d3234203d3e20313939373337.roa (hash: kk3tkqt3pEQIayEC5akWsEQ7ftglPpO+Tt2YC9Lk7HM=)
                          29: 34352e39352e3231352e302f32342d3234203d3e203631333137.roa (hash: jtw5h4s7N892mHMRX7q1v9D/8tuL7heVW+cms9i1OJM=)
                          30: 34352e39352e3231332e302f32342d3234203d3e20343030303339.roa (hash: XrIv1BWbF+to8I3saogND52oHBVFoDY38lWpbUFLA6o=)
                          31: 34352e382e3231382e302f32342d3234203d3e20323132333834.roa (hash: tj3yrp12EwOeT1ZEKtZIphksitaxnh11pc39cLh8XvY=)
                          32: 34352e39352e3231342e302f32342d3234203d3e203434353437.roa (hash: 4mA1gqLsHB6B1P8mI+JnCzpqXJzdsvy8YAE1F7eD96c=)
                          33: 34352e39352e3231322e302f32322d3232203d3e2037303239.roa (hash: b3HfoeSSJnwEFBW/P8/Hh1DNPoifdQtxChWclKR01cY=)
                          34: 34352e39352e3231322e302f32342d3234203d3e20323039353534.roa (hash: D9JHULDkg0M1wT0M8wVTfDaCTJBMJIgvLcTza5q7f5c=)
                          35: 322e35392e36302e302f32342d3234203d3e203631333137.roa (hash: BBdnQvjsMGsAKdV0CMmUgkUx9rKK17g08iyDVXfqF5c=)
                          36: 3139342e33312e3139372e302f32342d3234203d3e203432383331.roa (hash: KMAsq44hIBrFB+eRrhhDssa2B+eAZmGDL1feRYL/R5o=)
                          37: 352e3138312e3138342e302f32342d3234203d3e20323132333335.roa (hash: EGBFBscvQ1YWstG9kbxkZOotMsNA8UcpxsIuwRfrnH4=)
                          38: 322e35392e36332e302f32342d3234203d3e20323039363432.roa (hash: +6zE35Il0rdGN/pq8ZFnc/c2DujvbAilLkJKRMrHYbw=)
                          39: 322e35392e36302e302f32342d3234203d3e20323132323338.roa (hash: hZ11O4/GfIQ3ZyUgAuxIn+0GkFLCBYYNN1OfZIqVDJk=)
                          40: 3139342e33312e3139352e302f32342d3234203d3e203334393933.roa (hash: u4qzpzCcpcy7ZWgFmuZevTcx8Lt6OWg/1tciNCqCqYM=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Nov 2025 15:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:f1:70:b1:5f:48:a5:17:5f:ef:33:f5:a3:e7:b7:99:e5:74:0f:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
        Validity
            Not Before: Nov 23 15:57:36 2025 GMT
            Not After : Nov 24 17:54:36 2025 GMT
        Subject: CN=40AA08B7D8074A295BA81DD95A3F07129CA6E4B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2d:2b:64:70:1a:fa:7e:4c:90:ea:6e:27:fc:
                    6a:54:2c:d5:9c:a5:54:71:a6:73:fe:84:6d:a6:9a:
                    2a:a6:6f:12:28:1e:aa:83:dd:bd:54:a9:19:5d:59:
                    13:99:1b:37:c2:fd:68:2f:82:a2:fe:b1:cc:a8:fa:
                    f0:f6:35:9a:70:fd:b8:39:a1:e6:7e:21:f3:01:13:
                    d8:19:c4:d3:be:d9:d2:0e:4f:91:e3:1f:25:95:50:
                    6e:eb:34:ae:89:4f:d5:1e:a5:0e:e7:d4:d6:e0:30:
                    91:71:92:70:c4:e4:a6:f7:47:63:50:ae:14:c9:63:
                    1a:d5:5d:57:94:bd:f1:9d:df:a9:18:35:01:ed:02:
                    fa:e2:b3:fd:76:44:a2:56:c0:78:8e:a4:50:ea:64:
                    bf:e1:fe:d6:28:b4:6e:22:6a:4d:4f:86:78:7e:67:
                    50:10:32:ca:09:ac:f2:f9:2e:a1:48:a9:90:00:b6:
                    74:2e:11:93:c3:a7:b5:b3:cc:3d:53:79:ba:f9:98:
                    a9:3b:1f:05:26:c9:5c:ad:33:f9:24:c3:02:87:e2:
                    4e:ee:2d:e7:79:80:c9:60:94:59:c8:6e:b1:ab:c0:
                    cd:04:d1:1c:75:76:bd:d7:88:7c:76:b6:b1:d5:4f:
                    45:53:c8:ab:1b:5e:83:93:d4:92:3a:b2:62:e2:31:
                    5f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:AA:08:B7:D8:07:4A:29:5B:A8:1D:D9:5A:3F:07:12:9C:A6:E4:B5
            X509v3 Authority Key Identifier:
                keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:70:66:93:ab:d3:08:46:c7:e2:54:67:90:42:a8:de:b3:62:
         21:9c:2f:89:77:33:fe:1f:f0:27:ee:21:df:62:7b:25:b0:6e:
         22:e5:cc:f5:80:d4:32:30:a9:f9:e5:51:46:f5:10:dd:d9:d5:
         c2:33:37:ab:ce:62:3f:e4:7e:99:d7:7d:b3:65:19:99:0e:62:
         39:32:29:ce:e9:86:d5:1c:41:37:f9:e2:68:50:27:1f:e6:e4:
         bf:5d:ca:ac:fe:9b:88:c2:6c:05:e0:b5:47:f8:de:dc:5a:e5:
         b9:92:a5:7a:dc:79:85:28:cf:52:7f:79:86:a4:f6:38:fc:87:
         94:65:3b:f1:f8:c1:91:07:f9:08:91:47:eb:62:6f:81:ff:c6:
         e0:38:ae:3d:a3:4e:49:1d:45:6e:2a:e1:9c:17:32:d1:a0:b4:
         3d:35:91:91:17:6b:ea:c1:7a:e2:07:93:17:eb:43:c2:39:98:
         db:2d:92:6f:38:99:ae:2b:b1:7d:4f:26:01:8a:5f:f2:19:e5:
         df:95:3c:67:cf:74:68:e3:7c:b7:86:a0:be:61:cc:c1:4e:f6:
         5e:05:5d:5d:b9:a3:07:ab:33:30:ae:d4:12:d7:d2:13:01:80:
         82:43:34:a7:1e:fe:22:f1:a1:89:29:fd:70:15:af:78:4a:ca:
         f5:a1:1f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----