This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft File: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft (raw, json) Hash identifier: JPEv3npIiIS5RvIcwjjv8QhEF5ep45oPTt4KdYbQuzQ= Subject key identifier: DF:B2:74:9B:A8:3B:41:4F:F0:61:3B:F3:BB:DF:8D:7E:B2:C6:C5:EB Authority key identifier: 20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6 Certificate issuer: /CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6 Certificate serial: 53E20530377320E8B3C5D471B12402866830CC45 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft Manifest number: 02EC Signing time: Mon 15 Dec 2025 10:58:04 +0000 Manifest this update: Mon 15 Dec 2025 10:53:04 +0000 Manifest next update: Tue 16 Dec 2025 14:51:04 +0000 Files and hashes: 1: 326131343a316563373a633030303a3a2f33362d3438203d3e203438373030.roa (hash: NDSS2hHdj8htIMoCQNzuGfJRE+FjfS7resxOlAoGNDM=) 2: 326131343a316563313a3a2f33322d3438203d3e203438373030.roa (hash: rD1drMlhgCHEm0vlVi8DONqmz75yH/sypTpIzdkNP6c=) 3: 326131343a316563313a376232303a3a2f34342d3438203d3e20323135303933.roa (hash: dVnYLOP17LHBFloAhm1YIONwpYCVs6bwv8Qels/37Kg=) 4: 326131343a316563313a376231303a3a2f34342d3438203d3e20323135363636.roa (hash: pZyYX9vqAixKUDIqsxujnSVA6UfFKeJc5iZ4yNtLX48=) 5: 326131343a316563373a633430303a3a2f34302d3438203d3e203438373030.roa (hash: LZc2AksEahD5rzoxMFxve6nJwmwqwYYZ+BLhaadaDDA=) 6: 326131343a316563303a3a2f33312d3438203d3e203134363138.roa (hash: TNC4zrNVSYq6rg1HfzOLsFNL5cW5pcjjIopBseDA51Y=) 7: 326131343a316563373a633031303a3a2f34342d3434203d3e2030.roa (hash: SsdW0YpcJfef7CtWvRhhfCUEgjAhSHqFG1h0ACBR214=) 8: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl (hash: ltn+9YiQa1PHmGAVkUHb/ag+8VsvwY2Sri6D/3I+CaE=) 9: 326131343a316563303a3a2f33312d3438203d3e203438373030.roa (hash: NfdCiPZo2V7z2IR8DOEcP9s1WlT0wPdEK10WCc6hh18=) 10: 326131343a316563313a3a2f33322d3332203d3e20323037323532.roa (hash: ZnCFtDlyKKIKHxL+mnWSwMiKEny7fbonjbSjngpcz7c=) 11: 326131343a316563313a376230303a3a2f34342d3438203d3e20323037313936.roa (hash: U8fXRRyT8emRE+fVUuy2ekIUYzd/0os3T2/COS8ejYg=) 12: 326131343a316563303a3a2f33312d3438203d3e203136353039.roa (hash: DO5U+zbxAW9dCHHkG8v0O5pLZTi9rHV+80EYsqI00GY=) 13: 326131343a316563313a376233303a3a2f34342d3438203d3e20323134393036.roa (hash: YRMori7doYSmuYrHuDGxvFWUqZxa6EqhEvjhhQlS2vI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:e2:05:30:37:73:20:e8:b3:c5:d4:71:b1:24:02:86:68:30:cc:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6 Validity Not Before: Dec 15 10:53:04 2025 GMT Not After : Dec 16 14:51:04 2025 GMT Subject: CN=DFB2749BA83B414FF0613BF3BBDF8D7EB2C6C5EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4d:c0:0f:76:ec:aa:09:00:65:f2:31:2d:f9: e1:cd:12:97:26:45:86:28:f6:ea:13:fa:b9:a8:99: b1:be:6f:e3:bb:66:a6:03:72:94:28:84:e8:29:a4: e3:25:7c:04:5c:a4:4d:2b:2c:02:2d:0d:1e:3d:dc: 19:d3:7c:a9:84:09:d3:1b:b0:44:3d:66:82:70:68: 1a:10:2d:15:80:f3:88:3a:5e:da:61:da:f4:93:8d: 65:5f:40:26:7d:6c:be:32:9b:ce:77:fe:68:ba:de: f2:77:80:28:74:a3:16:82:47:38:4d:0d:96:fe:59: 18:c4:8e:3b:c8:bf:9d:04:ca:3a:06:a2:7f:13:67: 1d:2f:a2:fe:b6:c9:9e:be:03:d9:de:26:eb:b1:d4: c9:1c:64:3e:5f:16:bb:94:b2:a2:be:a7:7a:42:76: e8:22:e5:eb:f4:8e:92:1c:68:8e:86:8f:38:37:2b: e1:c4:d5:ce:fb:3b:30:2c:6d:ac:6d:40:61:c3:a0: f1:fe:ae:ac:de:0c:97:a7:8f:ad:1d:b2:b8:f5:9b: dd:59:2b:aa:cf:7d:83:db:a1:bb:8e:24:e0:ea:9c: f6:ca:79:99:c6:d6:b1:fb:e7:a1:bc:9f:11:77:5d: c4:c4:08:3f:7d:c9:d3:21:09:53:4f:74:89:0e:e2: 97:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:B2:74:9B:A8:3B:41:4F:F0:61:3B:F3:BB:DF:8D:7E:B2:C6:C5:EB X509v3 Authority Key Identifier: keyid:20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:45:0f:25:3d:cf:ad:67:aa:79:07:30:c4:d3:ba:0f:b5:ca: 87:a5:09:18:a2:4b:26:5c:90:92:c7:f7:86:e9:bb:43:d2:18: b1:8f:e3:0e:3e:e0:60:ff:d5:2a:df:a3:15:98:f5:b0:a9:8d: fd:70:f3:6f:f2:b0:72:69:70:e4:c4:48:fd:62:e6:63:64:e0: fe:e8:96:d2:7e:ef:ce:b0:46:d2:9d:75:b7:8e:54:6b:76:77: e8:db:a9:f6:a4:43:c8:28:3a:21:65:b0:e6:c9:73:0d:5e:5c: cd:77:bd:e4:5a:66:15:7b:93:13:9d:bc:52:72:fa:af:62:17: d2:44:8d:17:7c:23:90:80:4c:7e:75:7b:9b:eb:58:5a:df:ab: d6:df:43:07:96:7d:8f:24:82:26:9a:84:c8:4c:1b:08:f0:30: 38:e4:66:52:45:e2:11:76:4b:ff:0c:4b:46:8b:0e:04:cb:23: 58:c0:d5:e6:05:ec:d0:ad:6d:c1:bc:08:a0:a1:b5:02:e8:e2: c6:b8:a2:ce:67:ce:f8:e7:5d:53:ed:f1:99:fe:88:83:fa:6c: f8:c9:9a:8e:4b:79:d2:eb:43:bc:67:9c:b4:5a:e7:ac:41:7c: 71:d3:d8:d9:66:64:c7:3d:cb:55:1b:5d:e1:8c:9e:f5:c1:36: 5b:f9:28:75 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUU+IFMDdzIOizxdRxsSQChmgwzEUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBGNjlDNEMxNDYxMzhDQjAxMjFDNEM0Q0JCMzk4NzZG NEFCREVDNjAeFw0yNTEyMTUxMDUzMDRaFw0yNTEyMTYxNDUxMDRaMDMxMTAvBgNV BAMTKERGQjI3NDlCQTgzQjQxNEZGMDYxM0JGM0JCREY4RDdFQjJDNkM1RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyTcAPduyqCQBl8jEt+eHNEpcm RYYo9uoT+rmombG+b+O7ZqYDcpQohOgppOMlfARcpE0rLAItDR493BnTfKmECdMb sEQ9ZoJwaBoQLRWA84g6Xtph2vSTjWVfQCZ9bL4ym853/mi63vJ3gCh0oxaCRzhN DZb+WRjEjjvIv50EyjoGon8TZx0vov62yZ6+A9neJuux1MkcZD5fFruUsqK+p3pC dugi5ev0jpIcaI6Gjzg3K+HE1c77OzAsbaxtQGHDoPH+rqzeDJenj60dsrj1m91Z K6rPfYPbobuOJODqnPbKeZnG1rH756G8nxF3XcTECD99ydMhCVNPdIkO4pdTAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU37J0m6g7QU/wYTvzu9+NfrLGxeswHwYDVR0j BBgwFoAUIPacTBRhOMsBIcTEy7OYdvSr3sYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJm NDA5LzAvMjBGNjlDNEMxNDYxMzhDQjAxMjFDNEM0Q0JCMzk4NzZGNEFCREVDNi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05OGE0LTRj N2UtYTBlMS04MDU3YTRmMDg2YzkvMC8yMEY2OUM0QzE0NjEzOENCMDEyMUM0QzRD QkIzOTg3NkY0QUJERUM2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzJhZjczYTljLTIwNTgtNDNiYi05YWM2LTVhYjQyZGZiZjQwOS8wLzIwRjY5QzRD MTQ2MTM4Q0IwMTIxQzRDNENCQjM5ODc2RjRBQkRFQzYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBqRQ8l Pc+tZ6p5BzDE07oPtcqHpQkYoksmXJCSx/eG6btD0hixj+MOPuBg/9Uq36MVmPWw qY39cPNv8rByaXDkxEj9YuZjZOD+6JbSfu/OsEbSnXW3jlRrdnfo26n2pEPIKDoh ZbDmyXMNXlzNd73kWmYVe5MTnbxScvqvYhfSRI0XfCOQgEx+dXub61ha36vW30MH ln2PJIImmoTITBsI8DA45GZSReIRdkv/DEtGiw4EyyNYwNXmBezQrW3BvAigobUC 6OLGuKLOZ874511T7fGZ/oiD+mz4yZqOS3nS60O8Z5y0WuesQXxx09jZZmTHPctV G13hjJ71wTZb+Sh1 -----END CERTIFICATE-----Generated at Mon Dec 15 16:44:16 2025 by rpki-client