This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft
File: A1EE5D09A0F5D0D87611013175C62E35777DA926.mft (raw, json)
Hash identifier: DBbAOPdJrMJtC6rLmC2k5ey1n1uutSy26nx9Wiks4Pc=
Subject key identifier: 5F:DF:E1:0F:2B:5B:96:16:B6:03:29:10:BA:93:DC:D2:8F:8F:46:A4
Authority key identifier: A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26
Certificate issuer: /CN=A1EE5D09A0F5D0D87611013175C62E35777DA926
Certificate serial: 1AC682374EFE8C63F06AD677D81F85B91654F3EC
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft
Manifest number: 02DD
Signing time: Sat 20 Dec 2025 07:03:19 +0000
Manifest this update: Sat 20 Dec 2025 06:58:19 +0000
Manifest next update: Sun 21 Dec 2025 08:38:19 +0000
Files and hashes: 1: 326131343a373538313a6666303a3a2f34382d3438203d3e20323135333634.roa (hash: nCwmmbP9gIjoEy95/v504iaQnyadcB1V8SB+J8/exJE=)
2: 326131343a373538313a393130303a3a2f34382d3438203d3e20323134383431.roa (hash: TejNBoLvDqd6zzS1lptpFez+EdbwzXYJ6yM06vDQ9j0=)
3: 326131343a373538313a393031303a3a2f34342d3438203d3e20313430393135.roa (hash: 34CzDRdWck3x5QdKwY21JLn4ljy5X8PbpWV6VL1UPl8=)
4: 326131343a373538313a393230303a3a2f34302d3438203d3e203134343437.roa (hash: kZ5VHXe1kAhX5tvSZsX77jhReBFDdvoZNrdYu896udw=)
5: 326131343a373538313a393030303a3a2f33382d3338203d3e20323135333634.roa (hash: coziJfcvV7NZzAVbts1JQ6BKxT5yxFwdbwzsra8WCDw=)
6: 326131343a373538313a393061303a3a2f34332d3438203d3e20323135333634.roa (hash: imEjvtvCCz1eqwuI8/eFHCFB+WwTlJEDfPXRombfVNU=)
7: 326131343a373538313a393030303a3a2f34342d3438203d3e20323135333634.roa (hash: a41Xyu+1QM63sJBLjRXDXCMByy5FuK1D59e4kuksRCE=)
8: 326131343a373538313a393330303a3a2f34302d3438203d3e20323039313039.roa (hash: TWxboGw6/lxhoMiWiDnyOg4O9SxsEOXusyizWuah2wo=)
9: 326131343a373538313a393066663a3a2f34382d3438203d3e20323135363137.roa (hash: JYfFIGSSsdhSc4V2wOJu9QFkSSC76MmCAjKsdTBmtQA=)
10: 326131343a373538313a393230303a3a2f34302d3438203d3e20323039313039.roa (hash: pMn1lmNiSpZ9TgFB+IRiwlTd7+lbxKBF0vBWWTkkXYs=)
11: 326131343a373538313a393066653a3a2f34382d3438203d3e20323135333634.roa (hash: MyeYfbLc0//rjwnR8ZJ3TnxqQq4JflTHlrUTLQvk3gU=)
12: 326131343a373538313a393165313a3a2f34382d3438203d3e20323135333634.roa (hash: F9b5BNgK8TO7NWcYalz+qyjvcxyYqlq+/TYg6mk1sTI=)
13: 326131343a373538313a393032303a3a2f34342d3438203d3e203339373533.roa (hash: 0nNVfH0UNkgevPAH9ITuwY5tE24LlYCDjFx46F3vtM0=)
14: A1EE5D09A0F5D0D87611013175C62E35777DA926.crl (hash: PVr74I8wRmSQGzRFQZ2wbsAVhVv/159SS3IU0KfiggA=)
15: 326131343a373538313a393065653a3a2f34382d3438203d3e20323135333634.roa (hash: 5IFSShC1J1DPKr9fgEjy0DHzTqmR8W17B+sGrWUb29Q=)
16: 326131343a373538313a393165303a3a2f34382d3438203d3e20323135333634.roa (hash: 2aDuD/D+lIpzPYcnGpfR3f4GvH7bzD6tXNlt4SzLv7s=)
17: 326131343a373538313a393063303a3a2f34342d3438203d3e203134343437.roa (hash: 1KwjyQC5mQq96/1cZ1aeVWaWGIQIpF6Ei+ZSWIfd5WM=)
18: 326131343a373538313a393130613a3a2f34382d3438203d3e20323135313438.roa (hash: g9TWsQZsTWz7mSDp6Y61gNZDSwAn6dADsEyVm1AJtlU=)
19: 326131343a373538313a393061303a3a2f34332d3438203d3e203134343437.roa (hash: jsviVwthOZBlV5+oRRFYDUvQF+OHc4iDYR8PVPHLwkA=)
20: 326131343a373538313a393230303a3a2f34302d3430203d3e203134343437.roa (hash: wCZcPZ1Lk7X2Qee1qTSfN0RGP0Z21kPGqT0D7sgtD64=)
21: 326131343a373538313a393062303a3a2f34342d3438203d3e203134343437.roa (hash: 0s1d24KMFu1kYJPCMrebtn4XcHECqVsweN9wGCszluU=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.crl
rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 08:38:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:c6:82:37:4e:fe:8c:63:f0:6a:d6:77:d8:1f:85:b9:16:54:f3:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A1EE5D09A0F5D0D87611013175C62E35777DA926
Validity
Not Before: Dec 20 06:58:19 2025 GMT
Not After : Dec 21 08:38:19 2025 GMT
Subject: CN=5FDFE10F2B5B9616B6032910BA93DCD28F8F46A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d1:9d:d9:24:b7:62:d4:c6:27:c5:26:97:02:
83:43:33:e0:bc:e8:ce:6b:c7:03:a8:5b:a5:7e:b9:
57:78:6e:e9:e1:1d:bc:bb:4c:c5:c2:7a:29:d2:e4:
82:29:36:77:c0:ae:08:08:e2:dd:22:99:26:6e:81:
83:6f:03:56:b2:bb:9c:98:bf:3b:f0:ab:47:e9:a5:
4a:02:ed:9f:52:8d:e6:34:ba:37:2f:43:30:26:65:
14:39:ea:fa:8c:2c:32:72:8f:5a:72:95:f7:38:a6:
cf:b3:f9:2e:f6:f0:49:f0:ee:f5:34:0c:f8:da:a9:
52:30:28:27:aa:7a:2a:f9:59:ed:f8:48:fd:34:90:
1e:c9:2f:7a:b4:fe:f9:f8:2c:7d:b4:b8:35:f4:f5:
46:65:26:d5:91:35:79:92:e3:2c:06:35:a5:ff:64:
91:83:14:ca:c8:c3:5b:c9:09:6b:c3:34:38:8a:7b:
7b:b2:87:ae:9c:35:78:fd:7d:b7:59:03:a4:23:56:
5d:b7:5c:6b:31:3d:89:56:9c:55:1e:5b:f4:a8:95:
9e:7b:bb:21:98:8b:63:b6:9a:ac:71:a3:a5:8b:d3:
4a:af:bd:9c:2d:93:ec:ee:5d:8c:a4:06:7a:9a:80:
ad:c5:4d:24:00:c1:6e:d3:f9:34:0d:d2:ea:97:70:
d7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:DF:E1:0F:2B:5B:96:16:B6:03:29:10:BA:93:DC:D2:8F:8F:46:A4
X509v3 Authority Key Identifier:
keyid:A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:bd:a2:78:f4:71:98:eb:01:22:85:18:6a:cd:9b:49:cf:2a:
ca:0b:de:6a:46:d4:b6:ff:ee:b8:00:f7:62:cb:d0:c9:97:2d:
9b:83:b9:30:82:f8:9a:26:5e:40:46:b3:3d:32:42:3a:bb:64:
5d:d2:ba:6f:76:23:45:dd:db:8d:b7:bc:72:fd:00:43:62:f6:
c9:6a:bd:16:f9:c6:52:74:39:70:c8:35:8c:0b:c7:0d:e6:24:
bb:e5:f0:d9:a8:e3:b5:b7:28:99:b4:35:92:d2:5c:82:af:1a:
6f:88:42:5a:8c:b9:2d:d8:78:92:9b:ea:6a:8e:99:61:e1:21:
0d:fc:e4:2b:75:86:d1:a0:e2:d8:aa:1a:d9:6f:e6:a8:45:c2:
b6:8e:a8:c4:8b:95:cf:79:c2:4f:b2:01:08:1d:ab:b4:a0:d9:
cd:4b:0f:0c:33:e3:6c:21:7d:a2:04:40:51:15:f9:bb:de:f0:
b5:47:59:12:a7:fc:3e:20:a2:8f:e7:95:89:c4:fa:1a:1c:9a:
0a:fb:87:5e:dc:ca:dd:31:e5:e3:e7:7a:e5:91:87:83:37:a1:
66:d5:bb:28:a3:cd:3d:ed:3f:32:31:e4:ba:93:5f:ac:f8:05:
34:c6:cd:34:ec:02:2c:73:2c:b7:a4:a1:29:24:2a:d0:c0:61:
43:1b:79:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 12:38:05 2025 by rpki-client