This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
File:                     A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft (raw, json)
Hash identifier:          VVbqoaIuK3iqm2dk1nxqtXGSyDb/T0MEwONtIomoWqk=
Subject key identifier:   6C:42:66:87:C9:84:01:7A:54:CD:8F:8E:BE:ED:F2:B9:EA:85:69:D7
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Certificate issuer:       /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial:       10FCA204FD01EED60B6F13193B0E41E1CF075A09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
Manifest number:          0629
Signing time:             Sat 06 Dec 2025 04:31:17 +0000
Manifest this update:     Sat 06 Dec 2025 04:26:17 +0000
Manifest next update:     Sun 07 Dec 2025 07:17:17 +0000
Files and hashes:         1: 352e3138312e3138342e302f32342d3234203d3e20323131333733.roa (hash: HxZ7OQY4wmmok4f1jyMFC6WkeyQaBhCRYtiYzwz8qYg=)
                          2: 34352e39352e3231322e302f32342d3234203d3e20323039353534.roa (hash: 9IsmuufWVjFLEbYLLcJg7Yp7+j5DqB4kK41/uY19nMQ=)
                          3: 34352e382e3231382e302f32342d3234203d3e20323132333834.roa (hash: tj3yrp12EwOeT1ZEKtZIphksitaxnh11pc39cLh8XvY=)
                          4: 3139342e33312e3139362e302f32342d3234203d3e20323030303137.roa (hash: +5av7/JwxJ2GdszhVyEajY1bsnLhd2JhS01B+/f5cdU=)
                          5: 34352e382e3231372e302f32342d3234203d3e20323136303232.roa (hash: 8eRvRykZqahsRM0VQoPLCYYNfC1yyS358fE8muRhEDA=)
                          6: 34352e39352e3231342e302f32342d3234203d3e203434353437.roa (hash: 4mA1gqLsHB6B1P8mI+JnCzpqXJzdsvy8YAE1F7eD96c=)
                          7: 34352e39352e3231352e302f32342d3234203d3e203239383032.roa (hash: Q1OlQJwADffmDxnZKj7bvhSo1kOL5aXrHpMtVtZFtuQ=)
                          8: 3139342e33312e3139352e302f32342d3234203d3e20323133363638.roa (hash: tD4GyhGOomU4ZODP9QGqyOztFfw1vKOkCjucViT/SZg=)
                          9: 352e3138312e3138372e302f32342d3234203d3e20323135373033.roa (hash: NPvxKSNfdGX2aoCtCwLVMBnzeoN7AU2GpBh+K+JOMMc=)
                          10: 38352e3230392e3233302e302f32342d3234203d3e203633393032.roa (hash: P3VDMMBoXLUjrVK3m58S6qhassJbF7wO/iSY6p4T2ZU=)
                          11: 34352e39352e3231342e302f32342d3234203d3e20323136303939.roa (hash: e4sOWlDxZzPIXQ3Vnqya07udsUK1KYBFfN3K3q4TdIQ=)
                          12: 3134362e31392e3136372e302f32342d3234203d3e20313432313131.roa (hash: 1cwuvx0f/bXZ/DwexRmaaQu0tTmkULuIbOfrQVnX4ao=)
                          13: 352e3138312e3138352e302f32342d3234203d3e20323131333733.roa (hash: 2IzUCrtAIyuz9E3rWXqOgG5uo4suNn7bGWeOLhfOKvg=)
                          14: 322e35392e36322e302f32342d3234203d3e203633303233.roa (hash: /Ku1phd3ouPkx4ZDyzwkq+GI0U8NGNl14wVu1lc6q1k=)
                          15: 352e3138312e3138352e302f32342d3234203d3e20323132333834.roa (hash: erSH6Mf15T5HOlDb5lpbU/Ku2eMK+cc/6OxLysGJmP4=)
                          16: 3139342e33312e3139372e302f32342d3234203d3e203432383331.roa (hash: KMAsq44hIBrFB+eRrhhDssa2B+eAZmGDL1feRYL/R5o=)
                          17: 34352e39352e3231352e302f32342d3234203d3e203631333137.roa (hash: jtw5h4s7N892mHMRX7q1v9D/8tuL7heVW+cms9i1OJM=)
                          18: 3139342e33312e3139362e302f32342d3234203d3e20313939373337.roa (hash: kk3tkqt3pEQIayEC5akWsEQ7ftglPpO+Tt2YC9Lk7HM=)
                          19: 322e35392e36302e302f32342d3234203d3e20323132323338.roa (hash: hZ11O4/GfIQ3ZyUgAuxIn+0GkFLCBYYNN1OfZIqVDJk=)
                          20: 34352e39352e3231332e302f32342d3234203d3e20343030303339.roa (hash: XrIv1BWbF+to8I3saogND52oHBVFoDY38lWpbUFLA6o=)
                          21: 3134362e31392e3136372e302f32342d3234203d3e20313532363732.roa (hash: 1EdzND/a/KltqRlIJaQnMPD7XH7CVfxCNY9eyK9ocYU=)
                          22: 352e3138312e3138362e302f32342d3234203d3e203239303636.roa (hash: 5g1iTpy4+Ocf7g6idB3LUlopM7lH9cpsMczTTuu+hV0=)
                          23: 3134362e31392e33382e302f32342d3234203d3e20313939363534.roa (hash: KCPy6uAOav6R+jmrUTgTpbZkeje3mnKOXa6FXDMEhhE=)
                          24: 322e35392e36322e302f32342d3234203d3e20313432313131.roa (hash: c23s9WCLyWR8C29b7voS/R0hWodZcVrxRN5kAioljng=)
                          25: 38352e3230392e3232382e302f32342d3234203d3e203230343733.roa (hash: LvALS0QzJUIn2y2aM1WJBNeefzd38B8yBzedKpN4nB8=)
                          26: 322e35392e36312e302f32342d3234203d3e203438323636.roa (hash: 6dfl8lI1/2dWL8ffIUYhSFUUS7mSu5VjjS42Z8HkW7c=)
                          27: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl (hash: /ypaz0bZCY59hvI1FWHr9vvm5WRtAjueIQzx8o13QLc=)
                          28: 38352e3230392e3233302e302f32342d3234203d3e203138313836.roa (hash: +OSq4m/6RpxEZih63506Gv6cOkBhW+YglqTPEKg/ZcM=)
                          29: 34352e382e3231362e302f32342d3234203d3e20323132333834.roa (hash: A1j+LbNuBb8MeFvlQDvvVkVer3lHzQ8b3CPtY22jros=)
                          30: 34352e39352e3231322e302f32322d3232203d3e2037303239.roa (hash: b3HfoeSSJnwEFBW/P8/Hh1DNPoifdQtxChWclKR01cY=)
                          31: 352e3138312e3138342e302f32342d3234203d3e20323132333335.roa (hash: EGBFBscvQ1YWstG9kbxkZOotMsNA8UcpxsIuwRfrnH4=)
                          32: 38352e3230392e3233302e302f32342d3234203d3e20313430323234.roa (hash: X9S/vAQJZJ3+zexclWqp51kmLLKozc6jAta0ZYx43Ns=)
                          33: 34352e382e3231392e302f32342d3234203d3e2039303039.roa (hash: 0zn1M6udTfOcCIE/Cifu6WDNTkQzSgcujlgX6HE4/sQ=)
                          34: 322e35392e36332e302f32342d3234203d3e20323039363432.roa (hash: +6zE35Il0rdGN/pq8ZFnc/c2DujvbAilLkJKRMrHYbw=)
                          35: 38352e3230392e3233312e302f32342d3234203d3e203135343430.roa (hash: 5P7OofszcYzyRXLoqtlNETBM0YQubML8godGGz1Zc2U=)
                          36: 38352e3230392e3232392e302f32342d3234203d3e203432383331.roa (hash: vjpMNqLq25F9up6mT05GhHQJMJ0KbktUxvDSn9v6kBA=)
                          37: 322e35392e36302e302f32342d3234203d3e203631333137.roa (hash: BBdnQvjsMGsAKdV0CMmUgkUx9rKK17g08iyDVXfqF5c=)
                          38: 3139342e33312e3139342e302f32342d3234203d3e203339333638.roa (hash: qMisc8M9fAgiB1zw7/Tn0y61M2FDJt3sqCMkzKcplhA=)
                          39: 3139342e33312e3139352e302f32342d3234203d3e203334393933.roa (hash: u4qzpzCcpcy7ZWgFmuZevTcx8Lt6OWg/1tciNCqCqYM=)
                          40: 3139342e33312e3139352e302f32342d3234203d3e203132383236.roa (hash: Hiowcu87+rnRP4VBm949hK9/XoAe1JP45hqg/KNcyVc=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:fc:a2:04:fd:01:ee:d6:0b:6f:13:19:3b:0e:41:e1:cf:07:5a:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
        Validity
            Not Before: Dec  6 04:26:17 2025 GMT
            Not After : Dec  7 07:17:17 2025 GMT
        Subject: CN=6C426687C984017A54CD8F8EBEEDF2B9EA8569D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:96:99:27:32:38:da:dd:48:87:b2:04:48:15:
                    10:08:95:15:ea:5c:4a:9d:d6:00:2b:e4:7a:74:7e:
                    6c:66:91:62:f1:59:3c:f8:74:18:20:13:6e:a0:07:
                    f2:97:14:11:cb:4c:ce:ff:d3:ae:a0:60:64:75:9d:
                    41:f7:dc:25:d2:7e:2a:40:74:16:e9:e2:45:ab:a0:
                    97:aa:3e:91:2b:17:b5:62:59:84:9c:44:4d:8f:4b:
                    76:f0:07:0d:03:e9:be:18:0e:c2:20:4e:1b:b1:d1:
                    9c:a6:5a:6d:3b:e4:38:ba:ea:f3:fc:61:55:d6:74:
                    f0:20:b2:6d:1a:17:74:83:86:39:4d:8f:10:07:19:
                    40:58:86:84:4c:13:86:8b:88:45:24:f2:d7:49:8f:
                    05:18:f5:dd:15:1f:63:41:1e:a6:af:45:71:3d:ff:
                    cb:a2:42:48:4a:e6:fb:09:ce:31:de:a6:8b:ed:05:
                    a3:96:8a:44:5c:fa:42:11:61:c7:66:33:45:1b:28:
                    91:3f:3e:c3:69:8c:4a:88:9d:fb:6e:d6:bd:30:15:
                    83:46:74:6c:f9:84:04:02:1b:b2:c0:23:da:6d:19:
                    0f:e0:5d:6b:41:fc:25:0b:53:8a:28:e6:e7:3c:d4:
                    08:87:d5:44:e8:83:57:b9:2e:51:4a:89:8e:c5:b7:
                    f6:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:42:66:87:C9:84:01:7A:54:CD:8F:8E:BE:ED:F2:B9:EA:85:69:D7
            X509v3 Authority Key Identifier:
                keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:af:54:aa:d3:36:51:35:23:1d:0a:48:17:fc:f5:fd:a7:aa:
         5c:a0:15:d7:a6:75:1e:a8:63:f9:5d:a4:03:32:90:0f:e3:03:
         7b:0c:0b:7c:54:59:5a:ac:22:6e:d5:da:ef:93:91:b9:64:f9:
         0e:5e:73:5d:af:49:da:3e:f4:bc:f0:90:b0:91:ef:61:e7:1d:
         38:44:c4:0e:95:15:37:48:08:8e:33:4f:6b:1e:83:b8:bf:d3:
         d9:df:f5:b4:01:1b:bd:73:6a:94:26:b0:74:be:96:0c:76:66:
         f1:e5:90:67:d6:08:74:4c:ec:3e:17:f7:9f:2a:67:03:43:e2:
         53:eb:39:79:23:b6:92:78:3a:ab:46:e9:1f:17:2c:8a:0b:23:
         ac:e2:1a:a6:b4:3d:21:42:69:ba:b4:94:5a:9f:e0:9b:a9:4b:
         15:ae:58:16:d4:47:29:3d:4f:d7:f9:55:3f:5a:5f:a1:42:ef:
         67:0d:a8:d7:fe:35:26:1b:7e:74:86:76:8d:a1:95:f0:a1:e5:
         e4:f9:08:46:dc:73:23:2c:6a:e2:4c:7f:5f:d4:d4:a4:ff:fb:
         0a:13:ec:6d:1e:8f:25:ee:72:1c:88:cd:04:1b:fc:7e:1d:86:
         c6:6a:c4:03:5e:55:ec:dc:22:18:70:32:f9:21:2f:df:9e:77:
         01:77:76:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:27:30 2025 by rpki-client