This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
File:                     9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft (raw, json)
Hash identifier:          gaj3w7u9CAr1PWs0KMeY+k9zG8v0DXFWLIlNTl9YO8s=
Subject key identifier:   70:00:0B:4A:09:39:D6:89:76:FE:D9:8E:8F:8C:49:6B:47:B4:54:A9
Authority key identifier: 9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE
Certificate issuer:       /CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae
Certificate serial:       406F2213B70B5539443B010439BA90E289AE771A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
Manifest number:          04B1
Signing time:             Sat 20 Dec 2025 12:58:53 +0000
Manifest this update:     Sat 20 Dec 2025 12:53:53 +0000
Manifest next update:     Sun 21 Dec 2025 16:43:53 +0000
Files and hashes:         1: 38392e3131362e31362e302f32332d3233203d3e203135343139.roa (hash: 7gdiZpTYF4VKwdmEsTHKuwi6oAiZC6mVLx4cpcdl/GE=)
                          2: 326130323a323633303a3a2f33322d3332203d3e203135343139.roa (hash: qWp9paAJXWyG6T4NlWTD/O+mrcUKf+wb2OOSJ/RUTQM=)
                          3: 38392e3131362e342e302f32322d3232203d3e203135343139.roa (hash: S7PYQmgyaS+nUukOrNi+7gU0SVsm2vupfOTXwPtPOXM=)
                          4: 38392e3131362e34322e302f32332d3233203d3e203135343139.roa (hash: dqiC7sfkexEdY4bNAfWo7TkIe5GTWHX5uIAGfupS9Ro=)
                          5: 38322e3134302e3138392e302f32342d3234203d3e203135343139.roa (hash: q/tmnbq1kdd2hUMwbcuSKcZt7pux1EaGGpLbn7IfofI=)
                          6: D34606949D385DB42714FE71274FAC9948EF279C.cer (hash: TQCZQkzK1CqgemnKR/erluvTKMYq58W//DcXZ16FiAE=)
                          7: 3138352e3134392e3135342e302f32342d3234203d3e203434373731.roa (hash: Pgs5ueHQXHOzRUAnFpUKAel9Ig4WE+HMpXX4wHeR3SY=)
                          8: 3231372e392e3234312e302f32342d3234203d3e203135343139.roa (hash: hFAW06mmhAPSV/HJ4B8aC2PvIR5CrcKx3FcqsTikSiM=)
                          9: 38322e3134302e3133312e302f32342d3234203d3e203135343139.roa (hash: YcmyLeFBQ+WK9MxW4qT13yT/CsdMqFWcCNcHges7cNY=)
                          10: 3138352e3134392e3135332e302f32342d3234203d3e203133313934.roa (hash: DudKC7EbN/x1z3E3UcohZZDxNJCJJwujdDPss+8DrkI=)
                          11: 38392e3131362e322e302f32332d3233203d3e203135343139.roa (hash: twheygdBU9M/hWK8PwEKS7vel1IBGYLsGKuF6NDPdmA=)
                          12: 3231372e392e3234322e302f32342d3234203d3e203135343139.roa (hash: mOAttZBNx/CTeO/Z3xtwFj9TNAzOHD7wWSzttDopHBY=)
                          13: 38392e3131362e31352e302f32342d3234203d3e203135343139.roa (hash: /LejqbWiFUxs1DgkjzVItnmcQXCtVjOkQxj/fIk9rAQ=)
                          14: 3138352e3134392e3135332e302f32342d3234203d3e203135343430.roa (hash: ld9bmw/lU5ViE7fFfnUAARe92vzpSXeZ47xTrIGHE2Y=)
                          15: 9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl (hash: Xup0rU/N65BWu6n8s28665yirVikgjDSNeMBmmq0H64=)
                          16: 38362e33382e332e302f32342d3234203d3e203135343139.roa (hash: 1jWpw+W9zeIRwNdxwEeWvA1uKZ5XVqeLW/yed0hU+d4=)
                          17: 3138352e3134392e3135332e302f32342d3234203d3e203434373731.roa (hash: 3LQCLtbZ2cAzmsqD8inTKmHS0+b4RIJVefCUUonuvB0=)
                          18: 3138352e3134392e3135352e302f32342d3234203d3e203434373731.roa (hash: W9T8aPnkMAlNbGOA+isd3U8U+YdKRxlDW0/+vHw4iGg=)
                          19: 38392e3131362e3131362e302f32322d3232203d3e203135343139.roa (hash: +6pKiWIr1xfpXpXCXiVMVMi0tFetJIO1JWmpuLH4c10=)
                          20: 326130323a323633303a3a2f32392d3239203d3e203135343139.roa (hash: 8htEN27nXC1XFUYvScmaKLGazPRUUosEipnSlN6XgBk=)
                          21: 38392e3131362e312e302f32342d3234203d3e203135343139.roa (hash: QlNtxapPtCDVmKsd/rR7Y2Bq1QIkmg64gwg6mpWc9ZY=)
                          22: 38392e3131362e31322e302f32332d3233203d3e203135343139.roa (hash: vCrLMX0eSFK/WsSjH4NPI6BnYmwIN7ZEFJbozFxO6uE=)
                          23: 38392e3131362e31392e302f32342d3234203d3e203135343139.roa (hash: 4JL3Gtu7UsX3IaHs3LaQwmdxUfCfFV6YWJerzJoc+wE=)
                          24: 3231372e392e3235342e302f32332d3233203d3e203135343139.roa (hash: iksl6QO5bGAwqBp6Vth9mckUoVZxpFnDxq6gmgw5QDs=)
                          25: 38322e3134302e3137382e302f32342d3234203d3e203135343139.roa (hash: kVZlSJSrWOIFgbVyyqSUiD6jECTpvfhx5mx8hRL1cGE=)
                          26: 38392e3131362e34312e302f32342d3234203d3e203135343139.roa (hash: nrTdofG3QiyT59ifvXqBtX8pF4lYbmqFJc6mO1yyOW0=)
                          27: 38362e33382e382e302f32312d3231203d3e203135343139.roa (hash: uWYPVYjRnhouz2kB1gip220mm9ixJ1+yxtSXIITlxEw=)
                          28: 3138352e3134392e3135322e302f32322d3232203d3e203135343139.roa (hash: yiPh36TU1+o+jLX45pyYr1yhJEOI86BPrMUwrS94mMI=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 09:56:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:6f:22:13:b7:0b:55:39:44:3b:01:04:39:ba:90:e2:89:ae:77:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae
        Validity
            Not Before: Dec 20 12:53:53 2025 GMT
            Not After : Dec 21 16:43:53 2025 GMT
        Subject: CN=70000B4A0939D68976FED98E8F8C496B47B454A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ed:fb:5c:df:ae:24:4a:1e:0b:9e:3e:63:68:
                    f8:0c:6f:40:25:f1:b0:74:60:50:04:de:52:40:6e:
                    22:71:92:3f:c8:04:c5:29:20:8a:2c:97:4c:c5:6e:
                    af:bc:7a:5e:6e:53:d7:42:87:fc:ba:60:7f:02:06:
                    e5:17:ad:40:03:8c:34:b0:61:5b:f6:ea:94:fa:1b:
                    91:07:dc:2c:03:4e:6e:1e:8b:7d:a9:0f:64:f9:ee:
                    aa:6c:49:c5:e3:03:ad:9e:54:69:ee:e0:fa:cd:7f:
                    c8:04:10:2a:16:09:84:3d:f9:de:e3:5e:10:c6:7a:
                    82:d1:f3:04:3c:b3:b1:50:54:c3:cf:19:2a:25:a7:
                    b7:40:5f:ff:35:b8:29:3a:cd:77:a2:ee:53:d7:6a:
                    71:a8:02:27:2b:0c:4e:9f:bb:d1:2d:2a:96:76:e6:
                    38:34:ab:15:9d:a1:1c:68:7c:d3:f3:c4:ee:42:2d:
                    4c:28:49:0a:34:d6:fa:70:eb:13:5b:15:8d:44:71:
                    cd:bc:83:18:9a:98:bb:04:02:cb:a7:de:0b:63:6f:
                    b3:8b:4b:a6:89:25:79:80:4f:a0:81:54:96:8f:62:
                    a7:6c:40:6a:16:c0:00:02:37:32:f6:ec:96:d2:e5:
                    42:34:54:4a:b5:05:23:3b:29:58:44:27:02:7f:00:
                    80:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:00:0B:4A:09:39:D6:89:76:FE:D9:8E:8F:8C:49:6B:47:B4:54:A9
            X509v3 Authority Key Identifier:
                keyid:9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:08:2d:fb:a8:b1:05:f1:f1:93:0c:d1:ac:56:d2:d8:52:c7:
         57:1b:be:09:97:d1:5d:63:ca:d0:ce:4f:f7:f2:a5:97:e4:81:
         53:26:38:8b:60:45:aa:af:e0:dc:dc:7e:50:14:a8:c1:8e:fe:
         0c:38:57:69:78:5f:da:15:39:a9:31:a1:bb:ad:3e:1c:21:7b:
         8e:11:a5:52:7b:6a:80:01:37:48:94:9a:15:29:0f:3a:48:91:
         a0:13:e6:2a:1f:e7:6b:e9:8e:20:14:0d:c9:ed:8b:26:4c:63:
         54:1c:3d:5c:8a:cd:75:5d:59:9c:1c:e2:76:79:82:f5:1b:a7:
         3b:b7:ac:23:82:de:0d:e7:1a:13:42:cb:51:0e:d6:d8:0c:7c:
         1d:18:e4:60:da:f1:bd:6e:ff:d1:b3:d7:c4:1e:a8:38:3f:71:
         f6:27:8e:9f:5a:bd:8a:9a:84:c9:cf:4b:35:a3:35:0e:3e:be:
         6e:5b:dc:f4:f6:2c:df:2c:e2:65:99:5d:73:9f:a4:a6:74:0f:
         3b:de:8a:c7:37:b6:2e:53:1e:e0:64:80:25:16:51:78:b2:c8:
         b5:2a:64:cb:6e:78:7d:77:3b:51:c5:f1:97:17:f7:7a:b7:b7:
         b1:c9:ff:67:23:47:f3:11:0d:03:68:3c:0b:67:c4:50:ac:b5:
         a7:07:f6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----