This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
File: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft (raw, json)
Hash identifier: la5h5p6SKPrhyelf25fcz0bvl3E/nml6KV/PtYWZdI8=
Subject key identifier: 6B:1F:F5:8F:88:A0:F4:8D:51:6A:77:95:2A:56:E1:80:07:30:4A:E9
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 7D6A8FCF920B7BF19424856BBDBF19F3D88847E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
Manifest number: 0642
Signing time: Mon 22 Dec 2025 11:02:40 +0000
Manifest this update: Mon 22 Dec 2025 10:57:40 +0000
Manifest next update: Tue 23 Dec 2025 13:24:40 +0000
Files and hashes: 1: 38352e3230392e3233302e302f32342d3234203d3e20313430323234.roa (hash: X9S/vAQJZJ3+zexclWqp51kmLLKozc6jAta0ZYx43Ns=)
2: 34352e39352e3231352e302f32342d3234203d3e203631333137.roa (hash: jtw5h4s7N892mHMRX7q1v9D/8tuL7heVW+cms9i1OJM=)
3: 322e35392e36302e302f32342d3234203d3e20323132323338.roa (hash: hZ11O4/GfIQ3ZyUgAuxIn+0GkFLCBYYNN1OfZIqVDJk=)
4: 38352e3230392e3232392e302f32342d3234203d3e203432383331.roa (hash: vjpMNqLq25F9up6mT05GhHQJMJ0KbktUxvDSn9v6kBA=)
5: 34352e382e3231382e302f32342d3234203d3e20323132333834.roa (hash: tj3yrp12EwOeT1ZEKtZIphksitaxnh11pc39cLh8XvY=)
6: 34352e39352e3231322e302f32322d3232203d3e2037303239.roa (hash: b3HfoeSSJnwEFBW/P8/Hh1DNPoifdQtxChWclKR01cY=)
7: 3139342e33312e3139362e302f32342d3234203d3e20313939373337.roa (hash: kk3tkqt3pEQIayEC5akWsEQ7ftglPpO+Tt2YC9Lk7HM=)
8: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl (hash: yrff5g9fFJN3EglPIbemJcAecwn1f47GVWfTcJ50cS4=)
9: 3139342e33312e3139352e302f32342d3234203d3e203334393933.roa (hash: u4qzpzCcpcy7ZWgFmuZevTcx8Lt6OWg/1tciNCqCqYM=)
10: 34352e39352e3231322e302f32342d3234203d3e20323039353534.roa (hash: 9IsmuufWVjFLEbYLLcJg7Yp7+j5DqB4kK41/uY19nMQ=)
11: 3139342e33312e3139342e302f32342d3234203d3e203339333638.roa (hash: qMisc8M9fAgiB1zw7/Tn0y61M2FDJt3sqCMkzKcplhA=)
12: 34352e39352e3231332e302f32342d3234203d3e20343030303339.roa (hash: XrIv1BWbF+to8I3saogND52oHBVFoDY38lWpbUFLA6o=)
13: 34352e39352e3231352e302f32342d3234203d3e203239383032.roa (hash: Q1OlQJwADffmDxnZKj7bvhSo1kOL5aXrHpMtVtZFtuQ=)
14: 38352e3230392e3233312e302f32342d3234203d3e203135343430.roa (hash: 5P7OofszcYzyRXLoqtlNETBM0YQubML8godGGz1Zc2U=)
15: 38352e3230392e3232382e302f32342d3234203d3e203230343733.roa (hash: LvALS0QzJUIn2y2aM1WJBNeefzd38B8yBzedKpN4nB8=)
16: 3139342e33312e3139362e302f32342d3234203d3e20323030303137.roa (hash: +5av7/JwxJ2GdszhVyEajY1bsnLhd2JhS01B+/f5cdU=)
17: 322e35392e36312e302f32342d3234203d3e203438323636.roa (hash: 6dfl8lI1/2dWL8ffIUYhSFUUS7mSu5VjjS42Z8HkW7c=)
18: 3134362e31392e3136372e302f32342d3234203d3e20313532363732.roa (hash: 1EdzND/a/KltqRlIJaQnMPD7XH7CVfxCNY9eyK9ocYU=)
19: 322e35392e36322e302f32342d3234203d3e203633303233.roa (hash: /Ku1phd3ouPkx4ZDyzwkq+GI0U8NGNl14wVu1lc6q1k=)
20: 34352e382e3231392e302f32342d3234203d3e2039303039.roa (hash: 0zn1M6udTfOcCIE/Cifu6WDNTkQzSgcujlgX6HE4/sQ=)
21: 322e35392e36332e302f32342d3234203d3e20323039363432.roa (hash: +6zE35Il0rdGN/pq8ZFnc/c2DujvbAilLkJKRMrHYbw=)
22: 3139342e33312e3139352e302f32342d3234203d3e20323133363638.roa (hash: tD4GyhGOomU4ZODP9QGqyOztFfw1vKOkCjucViT/SZg=)
23: 352e3138312e3138352e302f32342d3234203d3e20323132333834.roa (hash: erSH6Mf15T5HOlDb5lpbU/Ku2eMK+cc/6OxLysGJmP4=)
24: 352e3138312e3138342e302f32342d3234203d3e20323131333733.roa (hash: HxZ7OQY4wmmok4f1jyMFC6WkeyQaBhCRYtiYzwz8qYg=)
25: 3134362e31392e3136372e302f32342d3234203d3e20313432313131.roa (hash: 1cwuvx0f/bXZ/DwexRmaaQu0tTmkULuIbOfrQVnX4ao=)
26: 3134362e31392e33382e302f32342d3234203d3e20313939363534.roa (hash: KCPy6uAOav6R+jmrUTgTpbZkeje3mnKOXa6FXDMEhhE=)
27: 36322e332e32302e302f32342d3234203d3e20323135313532.roa (hash: K3GEYfrcdLJt/Pv1pZTdwz6yJZqY0yfvXEhbrZ66rqc=)
28: 34352e382e3231372e302f32342d3234203d3e20323136303232.roa (hash: 8eRvRykZqahsRM0VQoPLCYYNfC1yyS358fE8muRhEDA=)
29: 352e3138312e3138372e302f32342d3234203d3e20323135373033.roa (hash: EJ6RmJBNoUg0c9WoYw2Ja1OnADVswQoLG/EoG0ZGnFE=)
30: 3139342e33312e3139372e302f32342d3234203d3e203432383331.roa (hash: KMAsq44hIBrFB+eRrhhDssa2B+eAZmGDL1feRYL/R5o=)
31: 352e3138312e3138342e302f32342d3234203d3e20323132333335.roa (hash: UCQA4MebhnFRuGzYIjyz+Oaxw3thh569/39f5fjzuDM=)
32: 322e35392e36302e302f32342d3234203d3e203631333137.roa (hash: BBdnQvjsMGsAKdV0CMmUgkUx9rKK17g08iyDVXfqF5c=)
33: 38352e3230392e3233302e302f32342d3234203d3e203138313836.roa (hash: +OSq4m/6RpxEZih63506Gv6cOkBhW+YglqTPEKg/ZcM=)
34: 352e3138312e3138352e302f32342d3234203d3e20323131333733.roa (hash: 2IzUCrtAIyuz9E3rWXqOgG5uo4suNn7bGWeOLhfOKvg=)
35: 3139342e33312e3139352e302f32342d3234203d3e203132383236.roa (hash: Hiowcu87+rnRP4VBm949hK9/XoAe1JP45hqg/KNcyVc=)
36: 352e3138312e3138362e302f32342d3234203d3e203239303636.roa (hash: Br5xkylLQ7DIyBTDg1K2G6clr5115SCctfJJ5icls9U=)
37: 38352e3230392e3233302e302f32342d3234203d3e203633393032.roa (hash: P3VDMMBoXLUjrVK3m58S6qhassJbF7wO/iSY6p4T2ZU=)
38: 322e35392e36322e302f32342d3234203d3e20313432313131.roa (hash: c23s9WCLyWR8C29b7voS/R0hWodZcVrxRN5kAioljng=)
39: 34352e39352e3231342e302f32342d3234203d3e203434353437.roa (hash: 4mA1gqLsHB6B1P8mI+JnCzpqXJzdsvy8YAE1F7eD96c=)
40: 36322e332e32302e302f32342d3234203d3e203231383539.roa (hash: Rro+Gx/ym8oazWi/ZTJ2dg2MGKpj7/78mNky+1y7VfU=)
41: 34352e382e3231362e302f32342d3234203d3e20323132333834.roa (hash: A1j+LbNuBb8MeFvlQDvvVkVer3lHzQ8b3CPtY22jros=)
42: 34352e39352e3231342e302f32342d3234203d3e20323136303939.roa (hash: e4sOWlDxZzPIXQ3Vnqya07udsUK1KYBFfN3K3q4TdIQ=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 23 Dec 2025 13:24:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:6a:8f:cf:92:0b:7b:f1:94:24:85:6b:bd:bf:19:f3:d8:88:47:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Dec 22 10:57:40 2025 GMT
Not After : Dec 23 13:24:40 2025 GMT
Subject: CN=6B1FF58F88A0F48D516A77952A56E18007304AE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:70:88:d8:a5:fc:21:e0:5e:d6:3a:c8:1d:c1:
f1:84:00:ce:dd:cd:39:b6:19:a3:fd:e5:da:b1:3a:
71:19:2b:9b:cf:24:fc:01:ab:9a:c8:bb:70:3b:cd:
c9:28:92:19:8e:e0:3d:5f:5b:d1:fe:a5:ae:08:91:
8e:88:80:53:40:71:7c:76:8a:9b:bf:84:63:04:3f:
72:b3:69:a0:8d:ca:94:9d:44:23:ba:d3:10:86:22:
d7:df:fe:ce:6b:ec:e4:15:5e:49:97:e5:bc:80:ac:
95:50:80:8f:69:d5:17:f1:8e:c0:1b:4d:b7:a6:55:
8e:55:83:16:6d:bf:4d:54:ff:66:e8:d2:d6:c3:fb:
07:7e:cd:9c:ea:36:5f:67:b5:22:1b:00:f4:14:74:
d9:05:f1:0d:0d:1d:a0:81:2d:a6:8b:d1:4c:b6:d0:
2a:52:58:e2:4a:20:7b:69:7c:a4:c0:b4:16:99:1e:
41:5b:fd:ad:cf:20:b9:98:d1:12:d1:f2:86:78:25:
62:d2:93:6d:52:7d:d0:b6:a4:d3:60:f2:cf:a2:c0:
86:27:c3:59:ae:9d:b9:a3:0e:c8:96:8a:aa:1c:cc:
3e:f4:3d:36:d2:07:8b:3a:a6:4c:b2:f1:4e:f8:54:
ee:91:42:d6:bc:33:a4:24:86:58:69:5d:63:8f:d0:
b4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:1F:F5:8F:88:A0:F4:8D:51:6A:77:95:2A:56:E1:80:07:30:4A:E9
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:72:61:3b:63:01:ca:64:9c:91:38:8a:bf:ec:62:6e:8a:eb:
3d:94:3d:cd:74:d4:65:57:69:12:11:3a:32:1b:8f:5d:ef:95:
12:15:08:ac:79:e7:f1:71:1a:65:90:da:97:94:3c:25:9d:0f:
fb:7b:46:ee:40:c6:71:92:d9:dd:2d:a1:7f:0a:52:80:e4:90:
9d:0e:eb:ad:94:44:28:c6:96:7b:cd:f2:36:b5:b9:8d:dc:8a:
87:cf:78:02:a3:ff:c3:33:81:d6:07:4b:eb:88:ac:5e:70:82:
49:2c:96:7f:d2:e4:e9:9f:0d:3d:73:79:c3:1b:ec:f6:29:02:
fb:27:5c:c5:24:83:b5:a5:c6:f0:61:84:68:f4:1e:f1:d5:0b:
92:f3:58:70:71:97:d0:ec:88:04:c2:1f:52:5a:ca:9a:66:c8:
65:76:ac:0d:fd:4a:1b:02:fb:35:1a:c9:c9:42:88:36:ab:07:
92:fd:2e:34:5b:2e:b3:ff:21:e7:4e:1b:58:e9:d6:1b:88:c9:
d7:06:51:cd:dc:ca:bd:df:5c:18:78:00:c9:0b:5f:c8:bb:40:
12:00:0b:c1:bf:bb:b2:88:c9:7c:f4:10:30:db:0a:54:a0:86:
b8:5d:13:a0:d0:bb:c4:66:89:92:72:d6:03:79:34:b7:b3:d5:
dd:7a:65:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 17:09:24 2025 by rpki-client