This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
File: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft (raw, json)
Hash identifier: mtSQmC/39JboMVFONrOTMHYsfWZ4geX9/aQWSUQEQq4=
Subject key identifier: 46:AB:7F:BF:11:1A:1B:AB:F3:7A:04:B5:4E:C4:91:C4:3C:BF:1C:56
Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77
Certificate issuer: /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
Certificate serial: 10407C3D55D91440D55A32C4D78E4C89689C448F
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
Manifest number: 030C
Signing time: Sun 30 Nov 2025 08:10:51 +0000
Manifest this update: Sun 30 Nov 2025 08:05:51 +0000
Manifest next update: Mon 01 Dec 2025 09:55:51 +0000
Files and hashes: 1: 326130663a383563313a3766613a3a2f34382d3438203d3e20323135323432.roa (hash: M4zqLtdUHSAbU4GatESAUlsOQgWU2zpPTfy3/5JmOsg=)
2: 326130663a383563313a3766303a3a2f34382d3438203d3e20323033353131.roa (hash: F6VJOi3vW8ih7gU8rCzD7A7gIu39IHtVGsLlId1ILkM=)
3: 326130663a383563313a3766313a3a2f34382d3438203d3e20323035343633.roa (hash: QtxzWf2JsAYGrlxsDmcE2oi7tthkDrQ3wvK+rgUOQxg=)
4: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl (hash: dRGWGXFA/YDTCTw2GR9NkAbyw+cwUWpiyQTTmN9FTls=)
5: 326130663a383563313a3766383a3a2f34382d3438203d3e20323135323432.roa (hash: 7RQ0gXCWkNwXJyLVMAjMT4ifOZKJ140AG/jnIia+kz4=)
6: 326130663a383563313a3766353a3a2f34382d3438203d3e20323135373631.roa (hash: byQYxxoRiZMkalXd6RzudJTQa4Ua3fqFXKXTWNIB1fs=)
7: 326130663a383563313a3766623a3a2f34382d3438203d3e20323135323432.roa (hash: 6RxmKyitzJl4tEe1yv4vU5lxANHGsLOEl2k3HSP2ddo=)
8: 326130663a383563313a3730313a3a2f34382d3438203d3e20323033353131.roa (hash: Tk4tJu5bvTD5dR9NoM2pYvWxSXCc2/x84lQAlZZqzIs=)
9: 326130663a383563313a3766343a3a2f34382d3438203d3e20323135323432.roa (hash: Sqqkf1ajVYDwVw2KSKZnr/tFVnDaWUIPFwaxuN/hzVk=)
10: 326130663a383563313a3766363a3a2f34382d3438203d3e20323135323432.roa (hash: sqekG79xztP1stI8964y8O+ILcqcxMBKS5vM2N9Yeq4=)
11: 326130663a383563313a3766323a3a2f34382d3438203d3e20323135323432.roa (hash: sEiHLlrRoeeUa4AJCYCoXBnr24SESsEbTviJLVfMEys=)
12: 326130663a383563313a3766393a3a2f34382d3438203d3e20323135323432.roa (hash: ZhIUpj5tVPDcWiQ+3SY61ZE9RRhM2AJ7zchpU/cGNbk=)
13: 326130663a383563313a3766313a3a2f34382d3438203d3e20323135313234.roa (hash: gq6me54MBqnqosS7iLksDmqAJs8yyfHwMXcZfgP1ijQ=)
14: 326130663a383563313a3361323a3a2f34382d3438203d3e20323135323432.roa (hash: Gz7cU4OgmvLm8iR5sxlLJ8umD/eM2550DADKq1NdbVY=)
15: 326130663a383563313a3766373a3a2f34382d3438203d3e20323135323432.roa (hash: polxJUQuuGvo82QFQvRtgLcGzpMrITqZaH9JMW5PByU=)
16: 326130663a383563313a3766333a3a2f34382d3438203d3e20323035343633.roa (hash: YxuKH5bQA8YI1bwf7mCp5od3hfadKIetOc5KHPtspsc=)
17: 326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa (hash: LIVxcxtvoeze2S46mPqGSXeLOCk0JK2W2QKOiQjUdZQ=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl
rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Dec 2025 09:55:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:40:7c:3d:55:d9:14:40:d5:5a:32:c4:d7:8e:4c:89:68:9c:44:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
Validity
Not Before: Nov 30 08:05:51 2025 GMT
Not After : Dec 1 09:55:51 2025 GMT
Subject: CN=46AB7FBF111A1BABF37A04B54EC491C43CBF1C56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b1:79:76:9f:d0:6b:d7:9e:8b:f3:1e:08:58:
57:2a:41:77:8f:ff:69:90:02:62:59:e4:49:4c:c5:
fa:d0:c5:93:a1:f2:ea:68:ea:f8:f3:8b:93:d7:03:
f5:b7:c8:09:62:ac:42:4c:75:65:80:94:82:d5:2e:
df:59:4e:6b:d8:b4:a9:b9:4c:d4:7a:42:41:11:ec:
98:40:3e:5e:85:1b:10:e1:fe:43:0e:24:c3:76:09:
85:a0:b2:c1:ad:ec:e6:62:d2:64:bf:df:16:ad:28:
1a:b3:00:2b:5f:af:48:46:4a:4b:a3:7c:99:c4:da:
e5:4e:50:c7:1c:99:c7:72:a3:40:59:25:33:8c:00:
22:c5:a7:6e:a9:7b:8f:ac:be:c1:6a:c9:86:76:ac:
21:e7:c7:dc:ca:69:2f:c3:37:2f:03:41:1d:89:5d:
d3:c6:19:ce:bb:15:47:8d:7c:35:3f:59:84:70:91:
8d:4f:d1:0e:1b:f7:54:2b:8d:60:a7:0e:e9:f7:64:
44:ca:47:fd:34:cb:02:c3:0f:99:ef:16:b7:e7:b7:
43:5a:93:97:f5:30:ea:24:2d:59:07:8d:43:88:df:
1b:8f:4f:67:40:e5:ad:ce:8a:39:0f:67:aa:ad:60:
94:84:0d:f9:d6:58:a7:b9:d7:1f:a4:51:bb:9c:81:
78:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:AB:7F:BF:11:1A:1B:AB:F3:7A:04:B5:4E:C4:91:C4:3C:BF:1C:56
X509v3 Authority Key Identifier:
keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:e3:db:6e:95:79:30:55:aa:92:6b:56:c8:53:02:70:19:3b:
06:91:a3:3d:d5:82:f8:32:c7:35:9d:6a:08:1f:89:32:2d:df:
ff:1d:af:a6:49:90:73:11:d4:78:9f:23:fd:01:fe:5a:54:6d:
65:a5:e2:71:ae:12:08:3a:cb:56:b5:cf:a3:14:8a:9b:95:46:
d7:a2:1d:1b:61:bc:0d:8d:fb:32:ea:6a:1c:43:8e:8a:63:d3:
92:a4:60:bd:a3:60:fa:7b:4f:fb:40:bd:f8:84:05:eb:e4:bf:
49:38:c4:6d:a2:05:bd:0b:19:7c:40:3d:1d:d3:3d:f6:45:87:
98:03:69:a0:af:4d:ab:47:51:c7:9d:12:99:19:16:97:5c:e3:
24:71:b1:a3:40:a3:ea:94:06:38:f0:43:46:14:b1:28:4d:e6:
d7:0a:03:1c:0f:d2:94:d5:83:9c:12:38:ce:e2:98:00:f6:92:
d3:23:40:ed:e9:1d:7e:80:bd:5b:98:3b:94:35:9e:8b:89:f7:
50:f1:b2:46:9f:78:60:33:f2:1f:61:d6:3a:4f:65:50:5d:91:
c0:b3:ea:51:24:53:68:09:f1:bc:ef:5d:9d:ea:4e:79:f3:34:
26:ab:ac:11:57:d4:c8:65:5d:55:fa:75:f8:ad:09:b1:79:d9:
a6:1a:ad:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 30 22:12:02 2025 by rpki-client