This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft
File: A1EE5D09A0F5D0D87611013175C62E35777DA926.mft (raw, json)
Hash identifier: U4WGw1+gsduwQpcA0VjJZlVPj0ACssWbZPvvOaqsCWE=
Subject key identifier: 17:54:4F:90:BC:1A:43:3D:77:D8:F5:10:35:75:21:AD:F5:0F:12:05
Authority key identifier: A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26
Certificate issuer: /CN=A1EE5D09A0F5D0D87611013175C62E35777DA926
Certificate serial: 7EE8872E3FCCB6E4E8EDA8F8589A7B40A50D857F
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft
Manifest number: 02DE
Signing time: Sun 21 Dec 2025 00:38:22 +0000
Manifest this update: Sun 21 Dec 2025 00:33:22 +0000
Manifest next update: Mon 22 Dec 2025 04:09:22 +0000
Files and hashes: 1: 326131343a373538313a6666303a3a2f34382d3438203d3e20323135333634.roa (hash: nCwmmbP9gIjoEy95/v504iaQnyadcB1V8SB+J8/exJE=)
2: 326131343a373538313a393031303a3a2f34342d3438203d3e20313430393135.roa (hash: 34CzDRdWck3x5QdKwY21JLn4ljy5X8PbpWV6VL1UPl8=)
3: 326131343a373538313a393065653a3a2f34382d3438203d3e20323135333634.roa (hash: 5IFSShC1J1DPKr9fgEjy0DHzTqmR8W17B+sGrWUb29Q=)
4: 326131343a373538313a393130303a3a2f34382d3438203d3e20323134383431.roa (hash: TejNBoLvDqd6zzS1lptpFez+EdbwzXYJ6yM06vDQ9j0=)
5: 326131343a373538313a393130613a3a2f34382d3438203d3e20323135313438.roa (hash: g9TWsQZsTWz7mSDp6Y61gNZDSwAn6dADsEyVm1AJtlU=)
6: 326131343a373538313a393165313a3a2f34382d3438203d3e20323135333634.roa (hash: F9b5BNgK8TO7NWcYalz+qyjvcxyYqlq+/TYg6mk1sTI=)
7: 326131343a373538313a393330303a3a2f34302d3438203d3e20323039313039.roa (hash: TWxboGw6/lxhoMiWiDnyOg4O9SxsEOXusyizWuah2wo=)
8: 326131343a373538313a393066663a3a2f34382d3438203d3e20323135363137.roa (hash: JYfFIGSSsdhSc4V2wOJu9QFkSSC76MmCAjKsdTBmtQA=)
9: 326131343a373538313a393030303a3a2f33382d3338203d3e20323135333634.roa (hash: coziJfcvV7NZzAVbts1JQ6BKxT5yxFwdbwzsra8WCDw=)
10: 326131343a373538313a393165303a3a2f34382d3438203d3e20323135333634.roa (hash: 2aDuD/D+lIpzPYcnGpfR3f4GvH7bzD6tXNlt4SzLv7s=)
11: 326131343a373538313a393062303a3a2f34342d3438203d3e203134343437.roa (hash: 0s1d24KMFu1kYJPCMrebtn4XcHECqVsweN9wGCszluU=)
12: 326131343a373538313a393030303a3a2f34342d3438203d3e20323135333634.roa (hash: a41Xyu+1QM63sJBLjRXDXCMByy5FuK1D59e4kuksRCE=)
13: 326131343a373538313a393230303a3a2f34302d3438203d3e20323039313039.roa (hash: pMn1lmNiSpZ9TgFB+IRiwlTd7+lbxKBF0vBWWTkkXYs=)
14: 326131343a373538313a393032303a3a2f34342d3438203d3e203339373533.roa (hash: 0nNVfH0UNkgevPAH9ITuwY5tE24LlYCDjFx46F3vtM0=)
15: 326131343a373538313a393063303a3a2f34342d3438203d3e203134343437.roa (hash: 1KwjyQC5mQq96/1cZ1aeVWaWGIQIpF6Ei+ZSWIfd5WM=)
16: 326131343a373538313a393066653a3a2f34382d3438203d3e20323135333634.roa (hash: MyeYfbLc0//rjwnR8ZJ3TnxqQq4JflTHlrUTLQvk3gU=)
17: A1EE5D09A0F5D0D87611013175C62E35777DA926.crl (hash: bhPU97udVUbZh6Z82Fz3v+0MwQ3yNcEmnxnyUyvPorw=)
18: 326131343a373538313a393230303a3a2f34302d3430203d3e203134343437.roa (hash: wCZcPZ1Lk7X2Qee1qTSfN0RGP0Z21kPGqT0D7sgtD64=)
19: 326131343a373538313a393230303a3a2f34302d3438203d3e203134343437.roa (hash: kZ5VHXe1kAhX5tvSZsX77jhReBFDdvoZNrdYu896udw=)
20: 326131343a373538313a393061303a3a2f34332d3438203d3e20323135333634.roa (hash: imEjvtvCCz1eqwuI8/eFHCFB+WwTlJEDfPXRombfVNU=)
21: 326131343a373538313a393061303a3a2f34332d3438203d3e203134343437.roa (hash: jsviVwthOZBlV5+oRRFYDUvQF+OHc4iDYR8PVPHLwkA=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.crl
rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Dec 2025 04:09:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:e8:87:2e:3f:cc:b6:e4:e8:ed:a8:f8:58:9a:7b:40:a5:0d:85:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A1EE5D09A0F5D0D87611013175C62E35777DA926
Validity
Not Before: Dec 21 00:33:22 2025 GMT
Not After : Dec 22 04:09:22 2025 GMT
Subject: CN=17544F90BC1A433D77D8F510357521ADF50F1205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5c:f0:2c:f2:7d:b3:35:65:8b:9c:19:f3:fd:
10:4d:10:cb:52:18:08:ac:ca:4b:59:89:45:fa:db:
4c:2d:9f:70:70:d1:17:93:03:6f:07:73:b6:56:af:
a0:5c:86:54:10:01:1d:e2:82:9f:bd:0b:73:b1:b3:
56:ba:8f:9c:3c:39:7d:73:af:18:8d:6d:db:d9:ff:
35:98:e9:4a:5f:7c:5c:04:55:25:4a:72:03:02:50:
e4:e3:b0:9c:c4:43:db:bf:49:43:1e:5a:24:32:ad:
34:91:41:80:57:21:9b:3f:19:93:82:61:b3:68:5b:
16:57:0b:7f:0e:6b:05:3a:25:1d:6e:0f:ee:26:56:
f1:67:61:7a:8d:b3:24:23:68:64:05:f0:cf:af:83:
72:d4:15:97:08:0e:92:fc:4b:c2:00:1d:0c:e2:bf:
7f:27:de:14:72:60:87:d2:74:93:30:bb:36:2e:50:
45:0f:40:00:05:4b:17:a4:20:b3:38:27:30:f4:0c:
77:41:f7:bb:30:41:73:5f:b2:b0:a1:d1:43:f5:9f:
64:98:33:ae:1c:72:d3:54:ec:b5:ac:86:c9:ad:46:
f5:f9:84:61:dc:fd:8f:51:60:27:0e:ec:d3:3a:df:
d7:bd:31:48:a0:b1:5f:a7:a2:61:c5:18:14:3d:e1:
ca:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:54:4F:90:BC:1A:43:3D:77:D8:F5:10:35:75:21:AD:F5:0F:12:05
X509v3 Authority Key Identifier:
keyid:A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:7f:92:bd:cc:26:ec:d3:05:26:aa:3a:ea:ad:36:03:ed:7c:
33:0b:0e:98:c9:66:5a:70:dd:3a:43:12:b4:51:5d:07:ce:1f:
bf:9a:ef:7e:03:cb:50:b4:1f:ba:8a:46:ef:1a:1d:63:d3:e9:
78:55:79:78:1e:4a:9d:c3:da:0c:3e:3e:0a:18:36:ff:07:c1:
27:a1:28:86:84:5a:00:19:52:3c:89:61:51:fc:d2:a1:98:61:
84:19:ac:66:32:ef:26:05:5c:e3:5d:6c:ea:bc:a9:af:d4:0e:
a1:c0:74:bd:92:29:db:a6:8c:38:eb:cf:d8:fd:db:1e:24:e9:
9a:d9:8d:6f:62:1b:db:cb:d1:ba:64:54:f5:62:19:5e:08:5d:
1f:3a:6e:be:32:33:f2:89:ad:e1:3b:d7:9f:0f:05:88:88:72:
e4:4e:fe:71:fe:b0:73:20:8a:00:bb:0f:ef:a5:0c:98:51:16:
10:93:f6:24:69:fb:0e:f2:ed:93:fd:18:62:29:8a:d2:a8:5f:
5c:b2:a8:3b:5f:be:10:6a:3f:65:0d:54:d9:a5:29:53:7a:6a:
dc:0c:b2:01:6f:24:1e:b3:72:5b:75:71:37:a5:d0:1e:43:c9:
e2:27:f6:2d:2f:d9:34:a8:45:c3:17:54:6e:2e:09:42:cb:ab:
3b:1e:fa:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 15:26:05 2025 by rpki-client