This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft File: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft (raw, json) Hash identifier: I/uWpCKZG/LwLtoV/gN+n6Qj7CxfyhLOA8PBRQLlAJk= Subject key identifier: A4:D5:E9:FA:9B:28:F1:D5:03:48:19:76:07:27:43:1F:5D:E8:14:36 Authority key identifier: 20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6 Certificate issuer: /CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6 Certificate serial: 7870663B91D1E8AB2FA53B3969BA13C310FE0AF5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft Manifest number: 02CC Signing time: Sat 06 Dec 2025 02:20:58 +0000 Manifest this update: Sat 06 Dec 2025 02:15:58 +0000 Manifest next update: Sun 07 Dec 2025 02:52:58 +0000 Files and hashes: 1: 326131343a316563373a633430303a3a2f34302d3438203d3e203438373030.roa (hash: LZc2AksEahD5rzoxMFxve6nJwmwqwYYZ+BLhaadaDDA=) 2: 326131343a316563313a376231303a3a2f34342d3438203d3e20323135363636.roa (hash: pZyYX9vqAixKUDIqsxujnSVA6UfFKeJc5iZ4yNtLX48=) 3: 326131343a316563303a3a2f33312d3438203d3e203438373030.roa (hash: NfdCiPZo2V7z2IR8DOEcP9s1WlT0wPdEK10WCc6hh18=) 4: 326131343a316563373a633030303a3a2f33362d3438203d3e203438373030.roa (hash: NDSS2hHdj8htIMoCQNzuGfJRE+FjfS7resxOlAoGNDM=) 5: 326131343a316563313a3a2f33322d3438203d3e203438373030.roa (hash: rD1drMlhgCHEm0vlVi8DONqmz75yH/sypTpIzdkNP6c=) 6: 326131343a316563313a376230303a3a2f34342d3438203d3e20323037313936.roa (hash: U8fXRRyT8emRE+fVUuy2ekIUYzd/0os3T2/COS8ejYg=) 7: 326131343a316563313a376232303a3a2f34342d3438203d3e20323135303933.roa (hash: dVnYLOP17LHBFloAhm1YIONwpYCVs6bwv8Qels/37Kg=) 8: 326131343a316563313a3a2f33322d3332203d3e20323037323532.roa (hash: ZnCFtDlyKKIKHxL+mnWSwMiKEny7fbonjbSjngpcz7c=) 9: 326131343a316563303a3a2f33312d3438203d3e203134363138.roa (hash: TNC4zrNVSYq6rg1HfzOLsFNL5cW5pcjjIopBseDA51Y=) 10: 326131343a316563373a633031303a3a2f34342d3434203d3e2030.roa (hash: SsdW0YpcJfef7CtWvRhhfCUEgjAhSHqFG1h0ACBR214=) 11: 326131343a316563303a3a2f33312d3438203d3e203136353039.roa (hash: DO5U+zbxAW9dCHHkG8v0O5pLZTi9rHV+80EYsqI00GY=) 12: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl (hash: qkHsUe/6l6s8E/FdACutdcS7Oy2udm+fn6alorSCMcw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 17:41:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:70:66:3b:91:d1:e8:ab:2f:a5:3b:39:69:ba:13:c3:10:fe:0a:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6 Validity Not Before: Dec 6 02:15:58 2025 GMT Not After : Dec 7 02:52:58 2025 GMT Subject: CN=A4D5E9FA9B28F1D5034819760727431F5DE81436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:1f:d0:fe:20:da:b9:ac:56:75:82:9e:c3:78: 70:a2:c6:6b:bd:79:fb:16:67:e0:91:a0:f8:1f:a2: 83:79:15:b8:bd:e3:e4:b8:e8:61:59:37:85:7e:51: 70:05:53:1e:5c:55:fc:d4:0f:e0:b9:6a:f5:20:72: 95:72:7d:81:39:62:ed:66:b6:cb:32:bd:85:5a:a2: d5:57:ed:af:40:ca:50:26:5e:26:28:ee:8d:a2:bf: c6:3c:cd:1a:26:f4:77:bf:3c:f2:c4:61:55:c4:e3: e6:d9:9b:41:79:0e:d2:b9:25:00:e5:89:da:7e:59: 50:17:3b:7d:12:d1:93:1d:e3:c8:c2:ce:e4:ec:f1: 11:b3:5a:35:f5:23:71:41:56:5e:f4:38:02:a9:f0: d6:03:eb:fc:4a:14:27:c2:24:b3:b1:07:8e:10:11: 8c:ba:39:11:5f:7a:2b:65:e6:7d:f1:13:d6:97:a9: 15:50:3c:f8:fc:e3:ef:44:c2:d7:fa:3d:b5:82:26: 6d:65:12:3e:57:74:9f:b7:4f:fe:6f:6a:24:70:2e: 57:a6:5d:2b:73:10:72:10:49:64:c1:c1:b0:12:ce: 24:e2:0b:a4:60:0d:20:8c:1f:6d:b3:16:bb:11:7c: e4:ca:22:8b:56:ee:7a:a0:9c:d2:90:23:54:a1:20: 9d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:D5:E9:FA:9B:28:F1:D5:03:48:19:76:07:27:43:1F:5D:E8:14:36 X509v3 Authority Key Identifier: keyid:20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:6e:56:d4:85:2c:06:7f:d8:85:25:64:66:80:2f:d0:e8:c8: 50:da:ed:3f:a3:7a:2a:33:12:2b:a1:20:7a:57:6d:fd:d4:09: 6d:58:33:41:77:04:03:e1:62:ee:95:3d:fd:c0:84:4d:71:22: ed:e2:3d:c7:7f:7e:a9:a6:24:69:32:69:ba:4e:fd:5d:67:a5: b5:bf:1b:e8:f7:72:33:39:8e:4f:1f:10:75:08:ab:5e:a4:c7: d2:7f:b7:0d:4d:96:ca:f3:eb:45:53:8b:e4:7f:48:2c:5d:78: 95:cf:9d:71:5b:f9:c7:fa:e5:b3:5a:bf:e1:df:50:c3:5e:4e: 3d:61:86:0c:00:61:d6:b7:d9:96:41:2e:07:60:bb:d3:e0:c7: 2f:c3:75:13:2a:1e:49:41:cd:ce:04:e3:e0:d2:23:bb:e5:cb: 21:a5:0f:02:96:4d:3a:65:5b:b0:82:d7:fd:88:0d:63:15:07: c0:c1:b0:fd:4b:35:cb:8c:9c:e6:b8:45:10:23:82:45:56:b3: ce:87:bf:88:a6:b9:95:8d:fd:b9:9a:d1:9f:14:2a:43:a4:31: 4d:26:12:ac:ef:c7:52:c1:7c:83:54:e1:e5:22:1b:27:32:15: a2:76:76:62:ea:39:ae:ee:ab:f5:40:72:6e:06:b6:b8:6a:73: 09:a2:9b:78 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUeHBmO5HR6KsvpTs5aboTwxD+CvUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBGNjlDNEMxNDYxMzhDQjAxMjFDNEM0Q0JCMzk4NzZG NEFCREVDNjAeFw0yNTEyMDYwMjE1NThaFw0yNTEyMDcwMjUyNThaMDMxMTAvBgNV BAMTKEE0RDVFOUZBOUIyOEYxRDUwMzQ4MTk3NjA3Mjc0MzFGNURFODE0MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4H9D+INq5rFZ1gp7DeHCixmu9 efsWZ+CRoPgfooN5Fbi94+S46GFZN4V+UXAFUx5cVfzUD+C5avUgcpVyfYE5Yu1m tssyvYVaotVX7a9AylAmXiYo7o2iv8Y8zRom9He/PPLEYVXE4+bZm0F5DtK5JQDl idp+WVAXO30S0ZMd48jCzuTs8RGzWjX1I3FBVl70OAKp8NYD6/xKFCfCJLOxB44Q EYy6ORFfeitl5n3xE9aXqRVQPPj84+9Ewtf6PbWCJm1lEj5XdJ+3T/5vaiRwLlem XStzEHIQSWTBwbASziTiC6RgDSCMH22zFrsRfOTKIotW7nqgnNKQI1ShIJ3xAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUpNXp+pso8dUDSBl2BydDH13oFDYwHwYDVR0j BBgwFoAUIPacTBRhOMsBIcTEy7OYdvSr3sYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJm NDA5LzAvMjBGNjlDNEMxNDYxMzhDQjAxMjFDNEM0Q0JCMzk4NzZGNEFCREVDNi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05OGE0LTRj N2UtYTBlMS04MDU3YTRmMDg2YzkvMC8yMEY2OUM0QzE0NjEzOENCMDEyMUM0QzRD QkIzOTg3NkY0QUJERUM2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzJhZjczYTljLTIwNTgtNDNiYi05YWM2LTVhYjQyZGZiZjQwOS8wLzIwRjY5QzRD MTQ2MTM4Q0IwMTIxQzRDNENCQjM5ODc2RjRBQkRFQzYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCLblbU hSwGf9iFJWRmgC/Q6MhQ2u0/o3oqMxIroSB6V2391AltWDNBdwQD4WLulT39wIRN cSLt4j3Hf36ppiRpMmm6Tv1dZ6W1vxvo93IzOY5PHxB1CKtepMfSf7cNTZbK8+tF U4vkf0gsXXiVz51xW/nH+uWzWr/h31DDXk49YYYMAGHWt9mWQS4HYLvT4Mcvw3UT Kh5JQc3OBOPg0iO75cshpQ8Clk06ZVuwgtf9iA1jFQfAwbD9SzXLjJzmuEUQI4JF VrPOh7+IprmVjf25mtGfFCpDpDFNJhKs78dSwXyDVOHlIhsnMhWidnZi6jmu7qv1 QHJuBra4anMJopt4 -----END CERTIFICATE-----Generated at Sat Dec 6 06:40:31 2025 by rpki-client