This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft File: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft (raw, json) Hash identifier: UIow5fyIDgSZulFDw4SeoHnXXA3wVn/1yHSrUeWPDNA= Subject key identifier: CB:B0:58:A4:2C:F6:C4:37:76:26:83:20:3F:D9:C2:56:3F:3F:0D:1F Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 Certificate issuer: /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Certificate serial: 16FB158D998BD1035783CA0C285145F408F0C888 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft Manifest number: 02FF Signing time: Thu 20 Nov 2025 10:45:32 +0000 Manifest this update: Thu 20 Nov 2025 10:40:32 +0000 Manifest next update: Fri 21 Nov 2025 11:24:32 +0000 Files and hashes: 1: 326130663a383563313a3766333a3a2f34382d3438203d3e20323035343633.roa (hash: YxuKH5bQA8YI1bwf7mCp5od3hfadKIetOc5KHPtspsc=) 2: 326130663a383563313a3766373a3a2f34382d3438203d3e20323135323432.roa (hash: polxJUQuuGvo82QFQvRtgLcGzpMrITqZaH9JMW5PByU=) 3: 326130663a383563313a3766613a3a2f34382d3438203d3e20323135323432.roa (hash: M4zqLtdUHSAbU4GatESAUlsOQgWU2zpPTfy3/5JmOsg=) 4: 326130663a383563313a3766623a3a2f34382d3438203d3e20323135323432.roa (hash: 6RxmKyitzJl4tEe1yv4vU5lxANHGsLOEl2k3HSP2ddo=) 5: 326130663a383563313a3361323a3a2f34382d3438203d3e20323135323432.roa (hash: Gz7cU4OgmvLm8iR5sxlLJ8umD/eM2550DADKq1NdbVY=) 6: 326130663a383563313a3730313a3a2f34382d3438203d3e20323033353131.roa (hash: Tk4tJu5bvTD5dR9NoM2pYvWxSXCc2/x84lQAlZZqzIs=) 7: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl (hash: dSbeySVb2+EqbyMwkGhG3k/rIn5xR0uexAGIapSQK/4=) 8: 326130663a383563313a3766323a3a2f34382d3438203d3e20323135323432.roa (hash: sEiHLlrRoeeUa4AJCYCoXBnr24SESsEbTviJLVfMEys=) 9: 326130663a383563313a3766313a3a2f34382d3438203d3e20323135313234.roa (hash: gq6me54MBqnqosS7iLksDmqAJs8yyfHwMXcZfgP1ijQ=) 10: 326130663a383563313a3766393a3a2f34382d3438203d3e20323135323432.roa (hash: ZhIUpj5tVPDcWiQ+3SY61ZE9RRhM2AJ7zchpU/cGNbk=) 11: 326130663a383563313a3766383a3a2f34382d3438203d3e20323135323432.roa (hash: 7RQ0gXCWkNwXJyLVMAjMT4ifOZKJ140AG/jnIia+kz4=) 12: 326130663a383563313a3766303a3a2f34382d3438203d3e20323033353131.roa (hash: F6VJOi3vW8ih7gU8rCzD7A7gIu39IHtVGsLlId1ILkM=) 13: 326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa (hash: LIVxcxtvoeze2S46mPqGSXeLOCk0JK2W2QKOiQjUdZQ=) 14: 326130663a383563313a3766343a3a2f34382d3438203d3e20323135323432.roa (hash: Sqqkf1ajVYDwVw2KSKZnr/tFVnDaWUIPFwaxuN/hzVk=) 15: 326130663a383563313a3766313a3a2f34382d3438203d3e20323035343633.roa (hash: QtxzWf2JsAYGrlxsDmcE2oi7tthkDrQ3wvK+rgUOQxg=) 16: 326130663a383563313a3766363a3a2f34382d3438203d3e20323135323432.roa (hash: sqekG79xztP1stI8964y8O+ILcqcxMBKS5vM2N9Yeq4=) 17: 326130663a383563313a3766353a3a2f34382d3438203d3e20323135373631.roa (hash: byQYxxoRiZMkalXd6RzudJTQa4Ua3fqFXKXTWNIB1fs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 21 Nov 2025 11:24:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:fb:15:8d:99:8b:d1:03:57:83:ca:0c:28:51:45:f4:08:f0:c8:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Validity Not Before: Nov 20 10:40:32 2025 GMT Not After : Nov 21 11:24:32 2025 GMT Subject: CN=CBB058A42CF6C437762683203FD9C2563F3F0D1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f7:90:3d:99:5e:e3:3d:fa:c5:a1:d1:5d:75: ac:03:55:71:3d:5d:11:cb:eb:70:54:ce:47:7b:2e: 54:b4:de:8a:d4:87:47:ef:84:2e:d1:47:31:2a:34: 8d:2d:88:a8:26:34:9f:a6:4a:e7:22:01:fb:84:25: d6:53:8c:7e:84:f3:cf:e7:70:3d:f7:93:31:c9:dc: 77:79:35:a7:04:af:2f:a2:f8:fb:fa:16:fa:db:46: 75:53:0a:84:97:c7:01:78:e5:2a:28:22:ac:40:55: c5:dc:f5:94:14:1c:29:d9:74:20:3b:30:11:b0:4e: f9:3d:a9:fe:d7:4c:9b:e8:14:aa:af:26:09:80:c9: e2:10:ff:e1:c3:e4:78:e1:c4:be:58:df:89:13:68: f4:57:55:5f:d1:1a:d5:1d:dd:43:18:af:00:b4:42: 51:a7:fe:2a:d8:85:ad:76:a8:fc:0d:6a:3a:1e:d4: 87:6d:02:9e:9a:41:1c:3d:5a:68:43:a3:09:d9:5d: 9c:84:bf:34:a1:0b:4b:c6:a4:2e:42:dd:71:11:6c: 30:62:5d:e6:22:6e:10:97:0a:52:6e:4d:b3:64:6c: 38:94:99:d3:9d:95:33:61:7c:4c:17:ee:6a:2e:c2: 55:5d:ba:5a:14:3e:e7:58:92:11:b6:85:7b:43:10: 2e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:B0:58:A4:2C:F6:C4:37:76:26:83:20:3F:D9:C2:56:3F:3F:0D:1F X509v3 Authority Key Identifier: keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:5a:0f:3e:b3:9e:f8:ea:1d:3d:da:f5:eb:9a:02:a0:4f:c7: 74:76:81:fe:cf:bb:23:dd:8f:ba:c8:ef:53:3c:b4:e5:ab:64: 06:50:d7:c3:cb:95:0a:1f:f4:f6:a6:d3:08:61:f4:56:03:f3: 42:85:3a:ba:3e:be:5c:df:56:32:8b:f8:2e:8c:6f:2b:f0:70: 31:02:b0:af:cf:93:19:e3:30:18:8a:10:93:d8:f9:89:e6:dd: b4:be:27:4e:5a:93:cd:ba:91:ae:b4:c8:8a:a7:6f:41:ef:43: 6d:9f:6a:ee:6e:41:74:65:e2:8d:24:86:2d:ac:c1:60:24:24: 23:37:14:82:89:a3:a5:7f:ed:17:6c:76:85:4f:09:9e:59:d4: d9:eb:66:c5:92:29:27:b7:53:99:40:e2:1a:cd:36:fe:79:16: 57:d3:4d:9d:a0:50:61:85:16:5c:0b:41:1b:6c:90:c9:b8:de: fd:70:83:6d:ea:19:15:22:fa:27:73:d8:4d:69:30:c9:77:eb: 4b:b0:c2:95:9e:45:b7:71:ec:b7:75:70:9b:ac:7f:73:8f:ea: 1b:33:68:df:2d:8f:d1:ff:57:37:a7:fb:89:c0:a6:50:c3:af: f6:42:dc:1d:d1:c0:62:5a:4c:e7:5e:b0:e5:38:92:04:e6:94: 6b:fa:18:03 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUFvsVjZmL0QNXg8oMKFFF9AjwyIgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0 OUMxODM3NzAeFw0yNTExMjAxMDQwMzJaFw0yNTExMjExMTI0MzJaMDMxMTAvBgNV BAMTKENCQjA1OEE0MkNGNkM0Mzc3NjI2ODMyMDNGRDlDMjU2M0YzRjBEMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC395A9mV7jPfrFodFddawDVXE9 XRHL63BUzkd7LlS03orUh0fvhC7RRzEqNI0tiKgmNJ+mSuciAfuEJdZTjH6E88/n cD33kzHJ3Hd5NacEry+i+Pv6FvrbRnVTCoSXxwF45SooIqxAVcXc9ZQUHCnZdCA7 MBGwTvk9qf7XTJvoFKqvJgmAyeIQ/+HD5HjhxL5Y34kTaPRXVV/RGtUd3UMYrwC0 QlGn/irYha12qPwNajoe1IdtAp6aQRw9WmhDownZXZyEvzShC0vGpC5C3XERbDBi XeYibhCXClJuTbNkbDiUmdOdlTNhfEwX7mouwlVduloUPudYkhG2hXtDEC6jAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUy7BYpCz2xDd2JoMgP9nCVj8/DR8wHwYDVR0j BBgwFoAUGpCmrhVCo1PMp0l36yv+KknBg3cwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDA2MzMzYzYtOTQ2ZC00YjBiLTk1ZWYtZGFiYTI2MmE0 MmUxLzEvMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0OUMxODM3Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8xQTkwQTZBRTE1NDJBMzUzQ0NBNzQ5NzdF QjJCRkUyQTQ5QzE4Mzc3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2QwNjMzM2M2LTk0NmQtNGIwYi05NWVmLWRhYmEyNjJhNDJlMS8xLzFBOTBBNkFF MTU0MkEzNTNDQ0E3NDk3N0VCMkJGRTJBNDlDMTgzNzcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAiWg8+ s5746h092vXrmgKgT8d0doH+z7sj3Y+6yO9TPLTlq2QGUNfDy5UKH/T2ptMIYfRW A/NChTq6Pr5c31Yyi/gujG8r8HAxArCvz5MZ4zAYihCT2PmJ5t20vidOWpPNupGu tMiKp29B70Ntn2rubkF0ZeKNJIYtrMFgJCQjNxSCiaOlf+0XbHaFTwmeWdTZ62bF kiknt1OZQOIazTb+eRZX002doFBhhRZcC0EbbJDJuN79cINt6hkVIvonc9hNaTDJ d+tLsMKVnkW3cey3dXCbrH9zj+obM2jfLY/R/1c3p/uJwKZQw6/2Qtwd0cBiWkzn XrDlOJIE5pRr+hgD -----END CERTIFICATE-----Generated at Thu Nov 20 21:57:48 2025 by rpki-client