This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft
File: A1EE5D09A0F5D0D87611013175C62E35777DA926.mft (raw, json)
Hash identifier: s91FrIbjW7yU8iKNhDi7judDElhjHJjkYbJq29s9eaI=
Subject key identifier: AC:4A:65:72:2E:F9:66:5D:A3:17:F3:28:EC:FA:47:0C:5F:C7:B2:BD
Authority key identifier: A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26
Certificate issuer: /CN=A1EE5D09A0F5D0D87611013175C62E35777DA926
Certificate serial: 427F9D0A8649209C866261D852BAE31AE344BCD2
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft
Manifest number: 02CA
Signing time: Sat 06 Dec 2025 03:42:27 +0000
Manifest this update: Sat 06 Dec 2025 03:37:27 +0000
Manifest next update: Sun 07 Dec 2025 04:05:27 +0000
Files and hashes: 1: 326131343a373538313a393230303a3a2f34302d3438203d3e203134343437.roa (hash: kZ5VHXe1kAhX5tvSZsX77jhReBFDdvoZNrdYu896udw=)
2: 326131343a373538313a393031303a3a2f34342d3438203d3e20313430393135.roa (hash: 34CzDRdWck3x5QdKwY21JLn4ljy5X8PbpWV6VL1UPl8=)
3: 326131343a373538313a393230303a3a2f34302d3438203d3e20323039313039.roa (hash: pMn1lmNiSpZ9TgFB+IRiwlTd7+lbxKBF0vBWWTkkXYs=)
4: 326131343a373538313a393066653a3a2f34382d3438203d3e20323135333634.roa (hash: MyeYfbLc0//rjwnR8ZJ3TnxqQq4JflTHlrUTLQvk3gU=)
5: 326131343a373538313a393165303a3a2f34382d3438203d3e20323135333634.roa (hash: 2aDuD/D+lIpzPYcnGpfR3f4GvH7bzD6tXNlt4SzLv7s=)
6: 326131343a373538313a393062303a3a2f34342d3438203d3e203134343437.roa (hash: 0s1d24KMFu1kYJPCMrebtn4XcHECqVsweN9wGCszluU=)
7: 326131343a373538313a393061303a3a2f34332d3438203d3e20323135333634.roa (hash: imEjvtvCCz1eqwuI8/eFHCFB+WwTlJEDfPXRombfVNU=)
8: 326131343a373538313a393030303a3a2f34342d3438203d3e20323135333634.roa (hash: a41Xyu+1QM63sJBLjRXDXCMByy5FuK1D59e4kuksRCE=)
9: 326131343a373538313a393061303a3a2f34332d3438203d3e203134343437.roa (hash: jsviVwthOZBlV5+oRRFYDUvQF+OHc4iDYR8PVPHLwkA=)
10: 326131343a373538313a393130303a3a2f34382d3438203d3e20323134383431.roa (hash: TejNBoLvDqd6zzS1lptpFez+EdbwzXYJ6yM06vDQ9j0=)
11: 326131343a373538313a393066663a3a2f34382d3438203d3e20323135363137.roa (hash: JYfFIGSSsdhSc4V2wOJu9QFkSSC76MmCAjKsdTBmtQA=)
12: 326131343a373538313a393230303a3a2f34302d3430203d3e203134343437.roa (hash: wCZcPZ1Lk7X2Qee1qTSfN0RGP0Z21kPGqT0D7sgtD64=)
13: 326131343a373538313a6666303a3a2f34382d3438203d3e20323135333634.roa (hash: nCwmmbP9gIjoEy95/v504iaQnyadcB1V8SB+J8/exJE=)
14: 326131343a373538313a393330303a3a2f34302d3438203d3e20323039313039.roa (hash: TWxboGw6/lxhoMiWiDnyOg4O9SxsEOXusyizWuah2wo=)
15: 326131343a373538313a393063303a3a2f34342d3438203d3e203134343437.roa (hash: 1KwjyQC5mQq96/1cZ1aeVWaWGIQIpF6Ei+ZSWIfd5WM=)
16: 326131343a373538313a393165313a3a2f34382d3438203d3e20323135333634.roa (hash: F9b5BNgK8TO7NWcYalz+qyjvcxyYqlq+/TYg6mk1sTI=)
17: A1EE5D09A0F5D0D87611013175C62E35777DA926.crl (hash: jOT/9uUJah75QAIxESh47gUX0XrSaTZFhiBbxhF7sCk=)
18: 326131343a373538313a393065653a3a2f34382d3438203d3e20323135333634.roa (hash: 5IFSShC1J1DPKr9fgEjy0DHzTqmR8W17B+sGrWUb29Q=)
19: 326131343a373538313a393030303a3a2f33382d3338203d3e20323135333634.roa (hash: coziJfcvV7NZzAVbts1JQ6BKxT5yxFwdbwzsra8WCDw=)
20: 326131343a373538313a393130613a3a2f34382d3438203d3e20323135313438.roa (hash: g9TWsQZsTWz7mSDp6Y61gNZDSwAn6dADsEyVm1AJtlU=)
21: 326131343a373538313a393032303a3a2f34342d3438203d3e203339373533.roa (hash: 0nNVfH0UNkgevPAH9ITuwY5tE24LlYCDjFx46F3vtM0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.crl
rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Dec 2025 23:45:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:7f:9d:0a:86:49:20:9c:86:62:61:d8:52:ba:e3:1a:e3:44:bc:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A1EE5D09A0F5D0D87611013175C62E35777DA926
Validity
Not Before: Dec 6 03:37:27 2025 GMT
Not After : Dec 7 04:05:27 2025 GMT
Subject: CN=AC4A65722EF9665DA317F328ECFA470C5FC7B2BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:47:24:d2:e8:0a:2f:71:fc:a2:b3:86:c0:a5:
35:f2:45:d8:97:e0:5d:2d:86:00:5d:5e:37:25:dd:
27:ef:37:18:2c:31:fb:6a:11:5e:fc:82:a5:cd:db:
b6:de:18:24:60:aa:28:f7:da:d1:6e:5b:a7:17:e8:
6a:6b:ce:8d:5b:43:34:9a:ee:d9:d0:b3:b5:86:e6:
ab:07:07:f3:66:6a:a1:ba:ff:39:48:62:1a:b4:85:
98:34:82:a8:a6:6c:25:98:ab:82:eb:0e:94:29:7b:
5c:e7:ec:48:88:23:04:ca:6c:60:d4:55:a5:4f:44:
f8:b8:ae:5b:e8:01:5a:9a:66:0a:ee:3c:39:70:c7:
82:dd:8f:d5:b1:c0:d2:cb:42:4b:a4:a9:f7:cc:bb:
18:ba:bb:40:08:1a:b7:3f:cb:9c:0d:e8:35:b3:41:
2b:ac:e8:51:82:92:89:7e:21:06:22:d3:35:61:4e:
0c:77:4d:cb:88:68:9a:af:10:11:1b:4d:c2:f5:2a:
87:91:85:c4:75:c8:76:8a:48:e3:e1:e2:0f:be:6a:
4b:d9:9d:6e:36:22:7e:c2:1a:fb:bd:a4:f3:b6:e1:
7a:5a:54:8c:7e:45:3c:ac:4f:72:38:c5:40:49:4e:
4c:b3:85:3b:dc:c2:25:0b:da:3b:a1:a3:b4:06:df:
bc:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:4A:65:72:2E:F9:66:5D:A3:17:F3:28:EC:FA:47:0C:5F:C7:B2:BD
X509v3 Authority Key Identifier:
keyid:A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:ea:b3:55:45:66:04:75:f9:be:92:fb:d1:3b:05:c4:cf:94:
04:96:1d:c6:63:77:ab:c7:4a:48:54:72:b6:41:04:46:1d:62:
4b:4a:23:1b:dc:cd:90:ad:1f:d1:f5:2d:89:88:9b:25:42:4e:
70:bf:df:e0:be:23:55:79:fa:5f:07:64:51:ab:61:ee:ba:d4:
6c:9b:cb:e5:83:d6:b8:fa:bd:ac:01:7d:5c:0f:91:03:ab:aa:
1f:a8:59:f9:6c:fd:19:ff:e4:f7:32:46:db:90:fa:12:6c:51:
98:97:a2:2a:de:5f:82:85:26:2e:c8:96:dd:8e:8a:35:c6:47:
5c:ff:55:97:45:32:47:b6:9d:3f:b5:ab:52:67:5d:3c:8c:e9:
59:02:22:0d:ba:7c:36:39:29:16:8a:e3:1a:a3:f2:87:a9:b4:
b1:d7:17:cd:a4:8b:b4:15:36:4b:75:9c:e3:02:69:42:8c:8b:
e3:e5:3e:f9:81:ed:f4:f3:2f:10:d9:e2:da:4e:70:df:8c:10:
c1:dd:32:31:17:5e:ca:bd:76:f9:37:69:98:b9:51:d2:79:36:
1c:8c:18:44:c4:78:50:1b:d6:c0:2f:86:20:b0:b6:67:d3:1c:
02:14:99:31:cd:6e:82:3b:b3:65:fd:6a:4c:7c:07:36:9e:3f:
3e:e8:0c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:09:31 2025 by rpki-client