This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft File: A1EE5D09A0F5D0D87611013175C62E35777DA926.mft (raw, json) Hash identifier: Ad0Du4n4JeXbgW8GugSe4Ow7jrJ0T227ZhV2CtfYYVc= Subject key identifier: BD:2D:AB:7D:91:A7:EF:50:33:9C:D8:7F:D5:D3:24:58:E8:09:C1:CD Authority key identifier: A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26 Certificate issuer: /CN=A1EE5D09A0F5D0D87611013175C62E35777DA926 Certificate serial: 6D68DFC0D58338E8E85819E40B2D5644A67F6732 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft Manifest number: 02CF Signing time: Tue 09 Dec 2025 21:18:00 +0000 Manifest this update: Tue 09 Dec 2025 21:13:00 +0000 Manifest next update: Thu 11 Dec 2025 00:51:00 +0000 Files and hashes: 1: 326131343a373538313a6666303a3a2f34382d3438203d3e20323135333634.roa (hash: nCwmmbP9gIjoEy95/v504iaQnyadcB1V8SB+J8/exJE=) 2: 326131343a373538313a393031303a3a2f34342d3438203d3e20313430393135.roa (hash: 34CzDRdWck3x5QdKwY21JLn4ljy5X8PbpWV6VL1UPl8=) 3: 326131343a373538313a393130303a3a2f34382d3438203d3e20323134383431.roa (hash: TejNBoLvDqd6zzS1lptpFez+EdbwzXYJ6yM06vDQ9j0=) 4: 326131343a373538313a393065653a3a2f34382d3438203d3e20323135333634.roa (hash: 5IFSShC1J1DPKr9fgEjy0DHzTqmR8W17B+sGrWUb29Q=) 5: 326131343a373538313a393330303a3a2f34302d3438203d3e20323039313039.roa (hash: TWxboGw6/lxhoMiWiDnyOg4O9SxsEOXusyizWuah2wo=) 6: 326131343a373538313a393061303a3a2f34332d3438203d3e203134343437.roa (hash: jsviVwthOZBlV5+oRRFYDUvQF+OHc4iDYR8PVPHLwkA=) 7: 326131343a373538313a393062303a3a2f34342d3438203d3e203134343437.roa (hash: 0s1d24KMFu1kYJPCMrebtn4XcHECqVsweN9wGCszluU=) 8: 326131343a373538313a393030303a3a2f34342d3438203d3e20323135333634.roa (hash: a41Xyu+1QM63sJBLjRXDXCMByy5FuK1D59e4kuksRCE=) 9: A1EE5D09A0F5D0D87611013175C62E35777DA926.crl (hash: 6qAqkIfQDu+qhlS1Da6kreyu9Rv1IQUzEt3mjsROi14=) 10: 326131343a373538313a393030303a3a2f33382d3338203d3e20323135333634.roa (hash: coziJfcvV7NZzAVbts1JQ6BKxT5yxFwdbwzsra8WCDw=) 11: 326131343a373538313a393165313a3a2f34382d3438203d3e20323135333634.roa (hash: F9b5BNgK8TO7NWcYalz+qyjvcxyYqlq+/TYg6mk1sTI=) 12: 326131343a373538313a393230303a3a2f34302d3430203d3e203134343437.roa (hash: wCZcPZ1Lk7X2Qee1qTSfN0RGP0Z21kPGqT0D7sgtD64=) 13: 326131343a373538313a393066663a3a2f34382d3438203d3e20323135363137.roa (hash: JYfFIGSSsdhSc4V2wOJu9QFkSSC76MmCAjKsdTBmtQA=) 14: 326131343a373538313a393066653a3a2f34382d3438203d3e20323135333634.roa (hash: MyeYfbLc0//rjwnR8ZJ3TnxqQq4JflTHlrUTLQvk3gU=) 15: 326131343a373538313a393165303a3a2f34382d3438203d3e20323135333634.roa (hash: 2aDuD/D+lIpzPYcnGpfR3f4GvH7bzD6tXNlt4SzLv7s=) 16: 326131343a373538313a393061303a3a2f34332d3438203d3e20323135333634.roa (hash: imEjvtvCCz1eqwuI8/eFHCFB+WwTlJEDfPXRombfVNU=) 17: 326131343a373538313a393032303a3a2f34342d3438203d3e203339373533.roa (hash: 0nNVfH0UNkgevPAH9ITuwY5tE24LlYCDjFx46F3vtM0=) 18: 326131343a373538313a393230303a3a2f34302d3438203d3e20323039313039.roa (hash: pMn1lmNiSpZ9TgFB+IRiwlTd7+lbxKBF0vBWWTkkXYs=) 19: 326131343a373538313a393230303a3a2f34302d3438203d3e203134343437.roa (hash: kZ5VHXe1kAhX5tvSZsX77jhReBFDdvoZNrdYu896udw=) 20: 326131343a373538313a393063303a3a2f34342d3438203d3e203134343437.roa (hash: 1KwjyQC5mQq96/1cZ1aeVWaWGIQIpF6Ei+ZSWIfd5WM=) 21: 326131343a373538313a393130613a3a2f34382d3438203d3e20323135313438.roa (hash: g9TWsQZsTWz7mSDp6Y61gNZDSwAn6dADsEyVm1AJtlU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.crl rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 00:51:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:68:df:c0:d5:83:38:e8:e8:58:19:e4:0b:2d:56:44:a6:7f:67:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1EE5D09A0F5D0D87611013175C62E35777DA926 Validity Not Before: Dec 9 21:13:00 2025 GMT Not After : Dec 11 00:51:00 2025 GMT Subject: CN=BD2DAB7D91A7EF50339CD87FD5D32458E809C1CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ba:66:05:35:86:d4:db:5c:1d:6b:0d:a0:17: aa:1d:19:09:9e:4c:c8:43:b3:3b:71:f9:91:25:bd: e2:08:41:c2:43:07:06:8b:36:73:c8:bc:92:a9:e3: 07:fc:a2:01:f5:43:87:51:11:1d:70:43:ab:22:61: c2:9f:9a:64:d0:64:f1:8d:7a:32:ec:87:0a:80:c2: f8:7b:0a:3f:00:8e:ef:95:6a:9d:00:81:bc:28:5c: aa:9f:49:11:3a:f2:ad:b8:39:3c:69:9e:b5:2f:73: 43:b0:11:b1:a2:48:b3:a2:00:2a:b3:99:a1:29:f5: 7f:3f:0b:e8:73:6c:09:e0:9b:c6:1a:8e:1a:b2:19: 11:49:78:07:00:82:48:8e:7e:db:f5:d0:27:95:a5: f8:5e:35:36:ef:54:67:79:44:c1:ce:f8:1c:f5:40: f6:17:42:10:a3:e7:1c:fc:56:ce:33:89:e0:88:98: c4:e4:88:fd:85:fe:90:49:f4:e2:ee:79:4c:88:da: de:25:d6:4a:55:dd:07:ab:31:21:fb:79:8a:39:44: 70:1e:fb:de:01:30:64:d0:25:c4:47:3a:89:6e:4d: 7d:64:bd:c8:3c:70:a9:ff:18:58:e0:49:cb:c6:c5: 96:4b:c9:9e:fa:44:4a:d7:0e:20:20:1a:4a:7b:69: 73:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:2D:AB:7D:91:A7:EF:50:33:9C:D8:7F:D5:D3:24:58:E8:09:C1:CD X509v3 Authority Key Identifier: keyid:A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:d0:7c:ac:cd:50:b0:81:ef:b5:aa:e4:ae:e0:7d:b3:ef:bd: b1:b0:fc:cf:4d:c2:2e:45:8d:49:f2:36:a9:94:2b:d4:df:0e: 16:49:1b:33:ad:25:fb:a5:aa:ad:5d:7b:d7:96:e7:86:67:29: ba:93:17:14:07:19:83:32:78:85:7f:5c:bc:bc:6b:ae:cd:70: 99:b3:25:29:ab:ea:4c:7e:f8:9b:91:0a:57:fe:d1:b5:a2:91: e8:49:54:55:b4:b5:f1:d5:12:8e:38:91:49:d7:4d:fa:00:bc: 39:45:9a:b8:bf:5c:59:62:05:e1:48:80:e2:ff:57:ea:1a:78: fc:f5:34:d0:92:2f:9b:b2:24:5b:6e:9d:13:b4:15:f6:cb:48: 3c:c7:8c:e9:c5:cd:54:af:6a:14:06:b1:2a:c3:23:a4:a4:67: c3:bc:74:05:dd:1a:75:ae:3f:24:f7:3e:1b:a2:5a:90:e7:b4: 29:0f:e6:76:c8:b1:65:8e:6f:fa:36:63:5d:ed:cd:02:14:e9: 4e:99:a4:8a:5a:25:89:13:c9:6a:65:06:68:eb:da:2b:92:38: 41:58:b1:0f:b4:0d:ce:a2:f8:a9:32:55:88:a2:fe:86:cb:05: 94:b8:62:60:0d:bb:b5:31:85:70:46:07:ed:00:9f:49:74:a2: 9a:0f:46:26 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUbWjfwNWDOOjoWBnkCy1WRKZ/ZzIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTFFRTVEMDlBMEY1RDBEODc2MTEwMTMxNzVDNjJFMzU3 NzdEQTkyNjAeFw0yNTEyMDkyMTEzMDBaFw0yNTEyMTEwMDUxMDBaMDMxMTAvBgNV BAMTKEJEMkRBQjdEOTFBN0VGNTAzMzlDRDg3RkQ1RDMyNDU4RTgwOUMxQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZumYFNYbU21wdaw2gF6odGQme TMhDsztx+ZElveIIQcJDBwaLNnPIvJKp4wf8ogH1Q4dRER1wQ6siYcKfmmTQZPGN ejLshwqAwvh7Cj8Aju+Vap0AgbwoXKqfSRE68q24OTxpnrUvc0OwEbGiSLOiACqz maEp9X8/C+hzbAngm8YajhqyGRFJeAcAgkiOftv10CeVpfheNTbvVGd5RMHO+Bz1 QPYXQhCj5xz8Vs4zieCImMTkiP2F/pBJ9OLueUyI2t4l1kpV3QerMSH7eYo5RHAe +94BMGTQJcRHOoluTX1kvcg8cKn/GFjgScvGxZZLyZ76RErXDiAgGkp7aXOpAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUvS2rfZGn71AznNh/1dMkWOgJwc0wHwYDVR0j BBgwFoAUoe5dCaD10Nh2EQExdcYuNXd9qSYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODU1YzdkNWEtMTVjNC00NTg5LTg1ZmEtYjQ5MWEwNzEw NDhjLzAvQTFFRTVEMDlBMEY1RDBEODc2MTEwMTMxNzVDNjJFMzU3NzdEQTkyNi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9BMUVFNUQwOUEwRjVEMEQ4NzYxMTAxMzE3 NUM2MkUzNTc3N0RBOTI2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzg1NWM3ZDVhLTE1YzQtNDU4OS04NWZhLWI0OTFhMDcxMDQ4Yy8wL0ExRUU1RDA5 QTBGNUQwRDg3NjExMDEzMTc1QzYyRTM1Nzc3REE5MjYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBD0Hys zVCwge+1quSu4H2z772xsPzPTcIuRY1J8japlCvU3w4WSRszrSX7paqtXXvXlueG Zym6kxcUBxmDMniFf1y8vGuuzXCZsyUpq+pMfvibkQpX/tG1opHoSVRVtLXx1RKO OJFJ1036ALw5RZq4v1xZYgXhSIDi/1fqGnj89TTQki+bsiRbbp0TtBX2y0g8x4zp xc1Ur2oUBrEqwyOkpGfDvHQF3Rp1rj8k9z4bolqQ57QpD+Z2yLFljm/6NmNd7c0C FOlOmaSKWiWJE8lqZQZo69orkjhBWLEPtA3OovipMlWIov6GywWUuGJgDbu1MYVw RgftAJ9JdKKaD0Ym -----END CERTIFICATE-----Generated at Wed Dec 10 07:26:47 2025 by rpki-client