This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft File: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft (raw, json) Hash identifier: 17MbN88qOvK2L6N/0IL7YO+xrw3Qa3OoLotpRd3R50c= Subject key identifier: 52:6C:C3:91:D0:5F:B0:89:A3:31:10:2A:79:EF:8A:AE:56:07:3E:96 Authority key identifier: 20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6 Certificate issuer: /CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6 Certificate serial: 4B648F67863A5B23B7E143AF9F6BE44F3EFCAEBC Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft Manifest number: 02FC Signing time: Sat 20 Dec 2025 17:57:13 +0000 Manifest this update: Sat 20 Dec 2025 17:52:13 +0000 Manifest next update: Sun 21 Dec 2025 19:43:13 +0000 Files and hashes: 1: 326131343a316563313a376230303a3a2f34342d3438203d3e20323037313936.roa (hash: U8fXRRyT8emRE+fVUuy2ekIUYzd/0os3T2/COS8ejYg=) 2: 326131343a316563303a3a2f33312d3438203d3e203136353039.roa (hash: DO5U+zbxAW9dCHHkG8v0O5pLZTi9rHV+80EYsqI00GY=) 3: 326131343a316563313a3a2f33322d3438203d3e203438373030.roa (hash: rD1drMlhgCHEm0vlVi8DONqmz75yH/sypTpIzdkNP6c=) 4: 326131343a316563303a3a2f33312d3438203d3e203134363138.roa (hash: TNC4zrNVSYq6rg1HfzOLsFNL5cW5pcjjIopBseDA51Y=) 5: 326131343a316563313a376233303a3a2f34342d3438203d3e20323134393036.roa (hash: YRMori7doYSmuYrHuDGxvFWUqZxa6EqhEvjhhQlS2vI=) 6: 326131343a316563313a3a2f33322d3332203d3e20323037323532.roa (hash: ZnCFtDlyKKIKHxL+mnWSwMiKEny7fbonjbSjngpcz7c=) 7: 326131343a316563303a3a2f33312d3438203d3e203438373030.roa (hash: NfdCiPZo2V7z2IR8DOEcP9s1WlT0wPdEK10WCc6hh18=) 8: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl (hash: aGr+eeAPaGQDbYEjSXXGAHBS44RcxZvDq+BwJru5n4g=) 9: 326131343a316563313a376231303a3a2f34342d3438203d3e20323135363636.roa (hash: pZyYX9vqAixKUDIqsxujnSVA6UfFKeJc5iZ4yNtLX48=) 10: 326131343a316563373a633031303a3a2f34342d3434203d3e2030.roa (hash: SsdW0YpcJfef7CtWvRhhfCUEgjAhSHqFG1h0ACBR214=) 11: 326131343a316563373a633030303a3a2f33362d3438203d3e203438373030.roa (hash: NDSS2hHdj8htIMoCQNzuGfJRE+FjfS7resxOlAoGNDM=) 12: 326131343a316563313a376232303a3a2f34342d3438203d3e20323135303933.roa (hash: dVnYLOP17LHBFloAhm1YIONwpYCVs6bwv8Qels/37Kg=) 13: 326131343a316563373a633430303a3a2f34302d3438203d3e203438373030.roa (hash: LZc2AksEahD5rzoxMFxve6nJwmwqwYYZ+BLhaadaDDA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:35:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:64:8f:67:86:3a:5b:23:b7:e1:43:af:9f:6b:e4:4f:3e:fc:ae:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6 Validity Not Before: Dec 20 17:52:13 2025 GMT Not After : Dec 21 19:43:13 2025 GMT Subject: CN=526CC391D05FB089A331102A79EF8AAE56073E96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:41:8e:c7:84:ae:e9:32:85:d5:90:1b:a5:a9: b1:99:8a:07:7d:84:ab:4c:fb:28:12:ad:34:f7:dd: 2d:70:ad:56:a9:34:d1:6e:a6:60:33:e3:07:08:a5: c2:3f:b2:4f:6a:32:8f:bd:ca:e4:d1:b5:58:4b:08: e6:ae:ce:67:13:0c:5b:23:37:bb:a8:17:69:0a:fe: b1:6d:29:a6:7c:3e:85:8f:87:7c:6c:d2:76:45:16: d5:f7:29:95:ce:62:71:e5:99:f6:3a:08:0d:56:4c: 3d:4a:fe:a9:5a:9e:d0:3e:82:1e:3b:43:c7:a7:cf: bf:51:75:06:4e:97:28:f6:c7:a6:28:11:26:b5:ed: 48:a3:ce:3d:2c:33:c7:1e:ae:e5:e1:fe:db:f1:cd: 28:fb:6d:68:9c:44:76:12:1e:c5:3a:53:da:1d:46: 75:50:f9:af:6d:b9:3c:c2:6a:44:86:03:69:9d:63: f9:3b:8b:24:a8:9a:89:f0:ad:33:f6:4e:ff:18:c8: 05:11:a2:fa:8a:07:5b:9b:e4:3f:ef:5d:94:57:da: 77:3b:dd:3b:d4:44:d1:74:e9:8a:40:09:64:b7:1c: 5c:26:f3:89:ba:71:fb:81:d7:27:5b:83:4f:48:ad: 58:8d:7e:f6:47:51:99:64:68:cc:23:b4:e7:e8:50: b9:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:6C:C3:91:D0:5F:B0:89:A3:31:10:2A:79:EF:8A:AE:56:07:3E:96 X509v3 Authority Key Identifier: keyid:20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:27:27:e7:f4:07:fa:d7:a4:07:84:ce:95:34:b1:f0:43:8c: 2d:05:59:27:77:21:81:a8:f5:85:d7:ea:33:cb:70:e0:91:1d: a5:7a:4f:88:66:98:3b:45:d6:98:dd:6c:3c:dd:3b:8b:4f:9b: b4:2b:a8:f8:34:fa:fb:d8:d0:57:3c:b9:49:bf:14:ab:35:46: 56:7e:23:d8:e2:03:21:d6:20:11:40:61:00:87:f5:b2:61:fb: ef:b7:66:8c:f6:ae:2d:db:86:b6:99:f0:02:88:12:9b:b1:93: 3a:9b:b6:12:7f:97:30:2c:f1:f5:cb:c0:ec:de:64:5b:aa:44: 9c:30:9f:7e:98:37:82:1c:4e:10:25:1d:d0:9f:28:13:6f:8f: 84:ac:75:3e:07:63:97:e6:e8:49:f5:20:48:83:0c:f9:84:d1: 8d:53:50:d5:3c:57:65:87:a3:ae:5f:ce:95:c7:7c:eb:0a:83: 2c:20:4c:f9:f3:d5:60:36:98:86:2d:76:c8:e4:38:1e:3d:aa: e8:bb:2a:74:2f:82:7b:5d:ff:be:1c:64:c1:7c:52:f5:e5:16: 9a:5e:b2:be:0b:3e:37:3a:34:28:29:53:60:b9:d3:ef:de:c4: 1b:e2:7b:f1:19:41:93:47:f4:00:1b:b5:65:1e:03:d5:8c:41: 6a:c9:7e:d8 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUS2SPZ4Y6WyO34UOvn2vkTz78rrwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBGNjlDNEMxNDYxMzhDQjAxMjFDNEM0Q0JCMzk4NzZG NEFCREVDNjAeFw0yNTEyMjAxNzUyMTNaFw0yNTEyMjExOTQzMTNaMDMxMTAvBgNV BAMTKDUyNkNDMzkxRDA1RkIwODlBMzMxMTAyQTc5RUY4QUFFNTYwNzNFOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeQY7HhK7pMoXVkBulqbGZigd9 hKtM+ygSrTT33S1wrVapNNFupmAz4wcIpcI/sk9qMo+9yuTRtVhLCOauzmcTDFsj N7uoF2kK/rFtKaZ8PoWPh3xs0nZFFtX3KZXOYnHlmfY6CA1WTD1K/qlantA+gh47 Q8enz79RdQZOlyj2x6YoESa17Uijzj0sM8ceruXh/tvxzSj7bWicRHYSHsU6U9od RnVQ+a9tuTzCakSGA2mdY/k7iySomonwrTP2Tv8YyAURovqKB1ub5D/vXZRX2nc7 3TvURNF06YpACWS3HFwm84m6cfuB1ydbg09IrViNfvZHUZlkaMwjtOfoULlpAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUUmzDkdBfsImjMRAqee+KrlYHPpYwHwYDVR0j BBgwFoAUIPacTBRhOMsBIcTEy7OYdvSr3sYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFmNzNhOWMtMjA1OC00M2JiLTlhYzYtNWFiNDJkZmJm NDA5LzAvMjBGNjlDNEMxNDYxMzhDQjAxMjFDNEM0Q0JCMzk4NzZGNEFCREVDNi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05OGE0LTRj N2UtYTBlMS04MDU3YTRmMDg2YzkvMC8yMEY2OUM0QzE0NjEzOENCMDEyMUM0QzRD QkIzOTg3NkY0QUJERUM2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzJhZjczYTljLTIwNTgtNDNiYi05YWM2LTVhYjQyZGZiZjQwOS8wLzIwRjY5QzRD MTQ2MTM4Q0IwMTIxQzRDNENCQjM5ODc2RjRBQkRFQzYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBSJyfn 9Af616QHhM6VNLHwQ4wtBVkndyGBqPWF1+ozy3DgkR2lek+IZpg7RdaY3Ww83TuL T5u0K6j4NPr72NBXPLlJvxSrNUZWfiPY4gMh1iARQGEAh/WyYfvvt2aM9q4t24a2 mfACiBKbsZM6m7YSf5cwLPH1y8Ds3mRbqkScMJ9+mDeCHE4QJR3QnygTb4+ErHU+ B2OX5uhJ9SBIgwz5hNGNU1DVPFdlh6OuX86Vx3zrCoMsIEz589VgNpiGLXbI5Dge Parouyp0L4J7Xf++HGTBfFL15RaaXrK+Cz43OjQoKVNgudPv3sQb4nvxGUGTR/QA G7VlHgPVjEFqyX7Y -----END CERTIFICATE-----Generated at Sat Dec 20 23:38:00 2025 by rpki-client