This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft File: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft (raw, json) Hash identifier: xEAXTJVEmn1sxmjwJZgo4aeBblVg7j+odsv+n9R3iYU= Subject key identifier: 57:E4:3A:C9:39:B5:E9:EE:53:91:E3:A6:89:E3:12:BF:7B:E6:0D:39 Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6 Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6 Certificate serial: 4A74B539615B95C462B2C7A123EC3B1077A0F7C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft Manifest number: 0649 Signing time: Sat 27 Dec 2025 14:19:10 +0000 Manifest this update: Sat 27 Dec 2025 14:14:10 +0000 Manifest next update: Sun 28 Dec 2025 14:30:10 +0000 Files and hashes: 1: 3134362e31392e3136372e302f32342d3234203d3e20313532363732.roa (hash: 1EdzND/a/KltqRlIJaQnMPD7XH7CVfxCNY9eyK9ocYU=) 2: 38352e3230392e3232392e302f32342d3234203d3e203432383331.roa (hash: vjpMNqLq25F9up6mT05GhHQJMJ0KbktUxvDSn9v6kBA=) 3: 352e3138312e3138372e302f32342d3234203d3e20323135373033.roa (hash: EJ6RmJBNoUg0c9WoYw2Ja1OnADVswQoLG/EoG0ZGnFE=) 4: 34352e39352e3231342e302f32342d3234203d3e20323136303939.roa (hash: e4sOWlDxZzPIXQ3Vnqya07udsUK1KYBFfN3K3q4TdIQ=) 5: 34352e39352e3231352e302f32342d3234203d3e203239383032.roa (hash: Q1OlQJwADffmDxnZKj7bvhSo1kOL5aXrHpMtVtZFtuQ=) 6: 3134362e31392e33382e302f32342d3234203d3e20313939363534.roa (hash: KCPy6uAOav6R+jmrUTgTpbZkeje3mnKOXa6FXDMEhhE=) 7: 322e35392e36322e302f32342d3234203d3e20313432313131.roa (hash: c23s9WCLyWR8C29b7voS/R0hWodZcVrxRN5kAioljng=) 8: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl (hash: sNTtJe7xJTvdCb0INPB2+YQOBFGpiUeN6AAOatPE8x4=) 9: 322e35392e36302e302f32342d3234203d3e203631333137.roa (hash: BBdnQvjsMGsAKdV0CMmUgkUx9rKK17g08iyDVXfqF5c=) 10: 322e35392e36322e302f32342d3234203d3e203633303233.roa (hash: /Ku1phd3ouPkx4ZDyzwkq+GI0U8NGNl14wVu1lc6q1k=) 11: 3139342e33312e3139372e302f32342d3234203d3e203432383331.roa (hash: KMAsq44hIBrFB+eRrhhDssa2B+eAZmGDL1feRYL/R5o=) 12: 352e3138312e3138352e302f32342d3234203d3e20323132333834.roa (hash: erSH6Mf15T5HOlDb5lpbU/Ku2eMK+cc/6OxLysGJmP4=) 13: 352e3138312e3138362e302f32342d3234203d3e203239303636.roa (hash: Br5xkylLQ7DIyBTDg1K2G6clr5115SCctfJJ5icls9U=) 14: 34352e39352e3231332e302f32342d3234203d3e20343030303339.roa (hash: XrIv1BWbF+to8I3saogND52oHBVFoDY38lWpbUFLA6o=) 15: 322e35392e36312e302f32342d3234203d3e203438323636.roa (hash: 6dfl8lI1/2dWL8ffIUYhSFUUS7mSu5VjjS42Z8HkW7c=) 16: 34352e39352e3231322e302f32322d3232203d3e2037303239.roa (hash: b3HfoeSSJnwEFBW/P8/Hh1DNPoifdQtxChWclKR01cY=) 17: 3139342e33312e3139352e302f32342d3234203d3e203132383236.roa (hash: Hiowcu87+rnRP4VBm949hK9/XoAe1JP45hqg/KNcyVc=) 18: 34352e39352e3231352e302f32342d3234203d3e203631333137.roa (hash: jtw5h4s7N892mHMRX7q1v9D/8tuL7heVW+cms9i1OJM=) 19: 352e3138312e3138352e302f32342d3234203d3e20323131333733.roa (hash: 2IzUCrtAIyuz9E3rWXqOgG5uo4suNn7bGWeOLhfOKvg=) 20: 34352e39352e3231342e302f32342d3234203d3e203434353437.roa (hash: 4mA1gqLsHB6B1P8mI+JnCzpqXJzdsvy8YAE1F7eD96c=) 21: 34352e382e3231362e302f32342d3234203d3e20323132333834.roa (hash: A1j+LbNuBb8MeFvlQDvvVkVer3lHzQ8b3CPtY22jros=) 22: 38352e3230392e3233302e302f32342d3234203d3e203138313836.roa (hash: +OSq4m/6RpxEZih63506Gv6cOkBhW+YglqTPEKg/ZcM=) 23: 34352e382e3231382e302f32342d3234203d3e20323132333834.roa (hash: tj3yrp12EwOeT1ZEKtZIphksitaxnh11pc39cLh8XvY=) 24: 38352e3230392e3233312e302f32342d3234203d3e203135343430.roa (hash: 5P7OofszcYzyRXLoqtlNETBM0YQubML8godGGz1Zc2U=) 25: 3139342e33312e3139352e302f32342d3234203d3e203334393933.roa (hash: u4qzpzCcpcy7ZWgFmuZevTcx8Lt6OWg/1tciNCqCqYM=) 26: 3139342e33312e3139342e302f32342d3234203d3e203339333638.roa (hash: qMisc8M9fAgiB1zw7/Tn0y61M2FDJt3sqCMkzKcplhA=) 27: 352e3138312e3138342e302f32342d3234203d3e20323132333335.roa (hash: UCQA4MebhnFRuGzYIjyz+Oaxw3thh569/39f5fjzuDM=) 28: 3139342e33312e3139362e302f32342d3234203d3e20323030303137.roa (hash: +5av7/JwxJ2GdszhVyEajY1bsnLhd2JhS01B+/f5cdU=) 29: 38352e3230392e3232382e302f32342d3234203d3e203230343733.roa (hash: LvALS0QzJUIn2y2aM1WJBNeefzd38B8yBzedKpN4nB8=) 30: 3139342e33312e3139362e302f32342d3234203d3e20313939373337.roa (hash: kk3tkqt3pEQIayEC5akWsEQ7ftglPpO+Tt2YC9Lk7HM=) 31: 36322e332e32302e302f32342d3234203d3e203231383539.roa (hash: Rro+Gx/ym8oazWi/ZTJ2dg2MGKpj7/78mNky+1y7VfU=) 32: 34352e382e3231372e302f32342d3234203d3e20323136303232.roa (hash: 8eRvRykZqahsRM0VQoPLCYYNfC1yyS358fE8muRhEDA=) 33: 3134362e31392e3136372e302f32342d3234203d3e20313432313131.roa (hash: 1cwuvx0f/bXZ/DwexRmaaQu0tTmkULuIbOfrQVnX4ao=) 34: 34352e382e3231392e302f32342d3234203d3e2039303039.roa (hash: 0zn1M6udTfOcCIE/Cifu6WDNTkQzSgcujlgX6HE4/sQ=) 35: 34352e39352e3231322e302f32342d3234203d3e20323039353534.roa (hash: 9IsmuufWVjFLEbYLLcJg7Yp7+j5DqB4kK41/uY19nMQ=) 36: 352e3138312e3138342e302f32342d3234203d3e20323131333733.roa (hash: HxZ7OQY4wmmok4f1jyMFC6WkeyQaBhCRYtiYzwz8qYg=) 37: 38352e3230392e3233302e302f32342d3234203d3e203633393032.roa (hash: P3VDMMBoXLUjrVK3m58S6qhassJbF7wO/iSY6p4T2ZU=) 38: 38352e3230392e3233302e302f32342d3234203d3e20313430323234.roa (hash: X9S/vAQJZJ3+zexclWqp51kmLLKozc6jAta0ZYx43Ns=) 39: 322e35392e36332e302f32342d3234203d3e20323039363432.roa (hash: +6zE35Il0rdGN/pq8ZFnc/c2DujvbAilLkJKRMrHYbw=) 40: 322e35392e36302e302f32342d3234203d3e20323132323338.roa (hash: hZ11O4/GfIQ3ZyUgAuxIn+0GkFLCBYYNN1OfZIqVDJk=) 41: 36322e332e32302e302f32342d3234203d3e20323135313532.roa (hash: K3GEYfrcdLJt/Pv1pZTdwz6yJZqY0yfvXEhbrZ66rqc=) 42: 3139342e33312e3139352e302f32342d3234203d3e20323133363638.roa (hash: tD4GyhGOomU4ZODP9QGqyOztFfw1vKOkCjucViT/SZg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 14:30:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:74:b5:39:61:5b:95:c4:62:b2:c7:a1:23:ec:3b:10:77:a0:f7:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6 Validity Not Before: Dec 27 14:14:10 2025 GMT Not After : Dec 28 14:30:10 2025 GMT Subject: CN=57E43AC939B5E9EE5391E3A689E312BF7BE60D39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:43:c8:6d:cc:e3:e6:3d:20:cb:41:61:d8:70: 0b:4f:ab:68:7b:cb:ab:4f:e2:23:b2:38:04:09:9c: 76:27:6e:40:a0:3a:33:ae:52:e5:47:eb:42:29:35: 34:26:bf:46:ee:82:23:fd:b6:aa:96:f1:be:55:a1: 25:cd:4d:a3:11:04:37:bf:13:a3:b4:26:58:bc:9d: 25:16:40:8f:aa:de:4e:95:b4:16:f4:80:2c:4c:da: b7:e5:b7:4f:4d:be:fb:8d:ce:69:ac:4b:f8:7a:e9: d2:87:d0:7e:51:52:f2:f9:c7:8c:aa:a7:4e:6b:e7: 94:c1:12:31:3a:12:20:68:9c:37:d9:c1:fc:2a:03: 0f:0a:1c:bd:ee:59:d8:b8:7e:d4:1f:46:e7:31:c9: 1f:9c:9e:f1:d4:dd:15:27:c8:7f:69:4e:07:e6:e0: 7a:4e:e6:43:81:c5:dc:48:e0:10:fd:c8:d4:cc:8e: e5:28:6c:6a:b7:7e:0d:96:2d:5b:58:e5:2d:81:73: a8:88:3c:31:7e:7a:41:6f:b2:59:ca:e7:bb:22:35: a2:55:f5:5c:a1:9e:fd:c5:15:71:1c:60:07:01:7c: aa:66:b9:55:74:19:ad:85:cd:46:5e:c3:02:65:9d: bf:ad:ab:5a:61:36:a6:c3:00:c8:a7:e9:21:67:64: e4:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:E4:3A:C9:39:B5:E9:EE:53:91:E3:A6:89:E3:12:BF:7B:E6:0D:39 X509v3 Authority Key Identifier: keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:e5:fd:5e:cb:1d:2f:86:f7:66:bf:6e:85:ff:13:8d:a0:eb: 2f:8b:a9:7d:81:af:37:6d:1d:5b:ff:a5:b5:37:a4:0c:50:96: 46:86:66:97:de:e6:b4:61:e6:16:7d:0f:59:fe:6c:6b:0a:17: 51:85:e6:c6:ad:1e:76:9b:03:75:e8:26:23:89:9e:04:34:d1: 0e:df:14:58:27:1e:09:07:72:c0:37:2c:cc:fe:74:79:4b:2f: 2b:59:c9:73:fe:5e:26:50:8e:3a:82:47:12:3a:e9:69:69:ab: da:1b:14:89:07:83:bb:31:42:ad:3b:35:fb:3c:76:aa:54:d8: 45:cb:52:97:7e:03:a5:6d:41:2b:50:4d:ac:d9:58:32:6d:72: 3a:15:b0:b0:ba:ce:80:d4:6a:c2:77:23:0a:fa:ca:29:b7:a7: b1:49:8a:5d:ad:66:fa:be:65:ec:85:32:70:ae:59:ba:51:ad: 8a:c9:60:22:d4:c7:67:78:0b:b4:f4:a2:18:61:cf:b7:7f:38: c2:84:90:6c:80:ea:2d:68:80:dd:f8:c4:42:4b:2c:ad:02:21: 40:35:b4:90:23:7a:a1:17:55:57:97:8c:4a:b4:65:c7:8e:36: 32:d5:ca:dc:6c:91:4d:cf:0c:b1:5c:75:83:05:37:36:18:cb: bc:76:52:40 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUSnS1OWFblcRissehI+w7EHeg98kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTk0MjBlNmM2ZjI0YjBlNDIyZGE3ZmU3ZTQyMGVmNTAz NTRmNDVjNjAeFw0yNTEyMjcxNDE0MTBaFw0yNTEyMjgxNDMwMTBaMDMxMTAvBgNV BAMTKDU3RTQzQUM5MzlCNUU5RUU1MzkxRTNBNjg5RTMxMkJGN0JFNjBEMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGQ8htzOPmPSDLQWHYcAtPq2h7 y6tP4iOyOAQJnHYnbkCgOjOuUuVH60IpNTQmv0bugiP9tqqW8b5VoSXNTaMRBDe/ E6O0Jli8nSUWQI+q3k6VtBb0gCxM2rflt09NvvuNzmmsS/h66dKH0H5RUvL5x4yq p05r55TBEjE6EiBonDfZwfwqAw8KHL3uWdi4ftQfRucxyR+cnvHU3RUnyH9pTgfm 4HpO5kOBxdxI4BD9yNTMjuUobGq3fg2WLVtY5S2Bc6iIPDF+ekFvslnK57siNaJV 9Vyhnv3FFXEcYAcBfKpmuVV0Ga2FzUZewwJlnb+tq1phNqbDAMin6SFnZORTAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUV+Q6yTm16e5TkeOmieMSv3vmDTkwHwYDVR0j BBgwFoAUqUIObG8ksOQi2n/n5CDvUDVPRcYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWY5ODIzZDAtMDg1NS00MWYyLWFjNDYtNTlhMmU5OGRh NzM2LzEvQTk0MjBFNkM2RjI0QjBFNDIyREE3RkU3RTQyMEVGNTAzNTRGNDVDNi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FVSU9iRzhrc09RaTJuX241Q0R2VURW UFJjWS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xZjk4MjNkMC0w ODU1LTQxZjItYWM0Ni01OWEyZTk4ZGE3MzYvMS9BOTQyMEU2QzZGMjRCMEU0MjJE QTdGRTdFNDIwRUY1MDM1NEY0NUM2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADuX9XssdL4b3Zr9uhf8T jaDrL4upfYGvN20dW/+ltTekDFCWRoZml97mtGHmFn0PWf5sawoXUYXmxq0edpsD degmI4meBDTRDt8UWCceCQdywDcszP50eUsvK1nJc/5eJlCOOoJHEjrpaWmr2hsU iQeDuzFCrTs1+zx2qlTYRctSl34DpW1BK1BNrNlYMm1yOhWwsLrOgNRqwncjCvrK KbensUmKXa1m+r5l7IUycK5ZulGtislgItTHZ3gLtPSiGGHPt384woSQbIDqLWiA 3fjEQkssrQIhQDW0kCN6oRdVV5eMSrRlx442MtXK3GyRTc8MsVx1gwU3NhjLvHZS QA== -----END CERTIFICATE-----Generated at Sun Dec 28 08:01:48 2025 by rpki-client