This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/2/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.mft
File:                     BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.mft (raw, json)
Hash identifier:          cHYpb1QNWhYztogW9bCNmPh7/3YC29SBheSxU4ryqbw=
Subject key identifier:   22:90:82:81:3A:C3:97:77:0C:D4:20:67:49:3E:57:00:32:9E:74:DF
Authority key identifier: BB:0B:02:80:6A:E3:C3:4F:45:3A:DE:DD:E3:6A:DF:43:2F:CD:F9:C4
Certificate issuer:       /CN=BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4
Certificate serial:       20AEC7B1A481E8796D952CD397C54EA38F80AD08
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/2/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.mft
Manifest number:          14
Signing time:             Sun 21 Dec 2025 02:30:02 +0000
Manifest this update:     Sun 21 Dec 2025 02:25:02 +0000
Manifest next update:     Mon 22 Dec 2025 04:02:02 +0000
Files and hashes:         1: BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.crl (hash: 4oET1s8CbRt4O99AUeGwFeJstyYz6UXvfH/w84SOVVk=)
                          2: 326131343a373538303a666634323a3a2f34382d3438203d3e20323134333434.roa (hash: O/PJi/N0ASXeoDd9xkm5e+vUVYHvnrMhoRT9Q5UqBNM=)
                          3: 326131343a373538303a666634313a3a2f34382d3438203d3e20323134333434.roa (hash: FSeGkTavy6E/PYG9xOOh6cS7WX/ehiQ2P+nWL6HUfzA=)
                          4: 326131343a373538303a666634343a3a2f34382d3438203d3e20323134333434.roa (hash: 5NZsbS3/ECNwsIkfwekBTuMsstws0S9jzGJtHhbmy3k=)
                          5: 326131343a373538303a666634333a3a2f34382d3438203d3e20323134333434.roa (hash: LrJY5RvJFU1hFw5kwe9OHrsNrGlMAHPKFkyFsYYWBwM=)
                          6: 326131343a373538303a666634303a3a2f34382d3438203d3e20323134333434.roa (hash: NMvj9zoeOL/7ubYXVejRPUJJs+qt+8DS24zEbTeKmfE=)
                          7: 326131343a373538303a666634353a3a2f34382d3438203d3e20323134333434.roa (hash: hdVzeFM1qIVbiHCOPfcZVjzE07zDvwiz6q8IHeNVQA0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/2/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/2/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:ae:c7:b1:a4:81:e8:79:6d:95:2c:d3:97:c5:4e:a3:8f:80:ad:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4
        Validity
            Not Before: Dec 21 02:25:02 2025 GMT
            Not After : Dec 22 04:02:02 2025 GMT
        Subject: CN=229082813AC397770CD42067493E5700329E74DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2b:78:1f:b9:2b:3b:52:f6:5a:e1:39:8b:eb:
                    3f:a3:30:e7:dd:a5:32:a2:ff:7f:79:1c:f1:87:a6:
                    21:92:33:ca:a0:69:d0:da:df:3e:43:dc:2e:95:9b:
                    41:b3:df:e1:c7:43:3b:e0:d2:66:ed:59:df:25:45:
                    6e:e8:b7:93:ab:5f:88:50:8f:69:81:8d:d3:89:67:
                    92:db:52:bb:bd:14:58:46:6f:65:1b:05:9a:04:d4:
                    dd:e7:62:c2:49:bc:70:01:1d:33:c9:55:d3:cd:23:
                    da:0f:08:26:14:25:89:a6:fe:05:c8:96:e0:15:1d:
                    8d:87:c4:69:7a:ec:dc:3e:44:2b:fc:d2:f9:06:2c:
                    fd:c8:d7:93:b3:80:eb:92:07:0a:89:5e:35:de:73:
                    8b:a8:1c:5d:ff:ae:57:e6:5b:28:73:4d:69:17:27:
                    84:df:dc:89:80:81:e8:96:13:fe:8d:4d:8d:94:47:
                    9e:b3:69:ae:f4:30:ed:59:a5:cc:0d:a0:7d:85:63:
                    1a:f6:0f:f8:a7:c8:aa:55:be:7a:38:17:9a:41:f1:
                    c9:5f:d7:37:ad:ed:ad:ac:15:3a:dc:b6:af:ec:21:
                    8a:c8:a6:ff:d8:88:af:39:53:5e:52:a4:c3:bb:12:
                    2e:02:b0:4d:05:37:bc:de:67:e7:5a:78:4e:b7:52:
                    6d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:90:82:81:3A:C3:97:77:0C:D4:20:67:49:3E:57:00:32:9E:74:DF
            X509v3 Authority Key Identifier:
                keyid:BB:0B:02:80:6A:E3:C3:4F:45:3A:DE:DD:E3:6A:DF:43:2F:CD:F9:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/2/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/2/BB0B02806AE3C34F453ADEDDE36ADF432FCDF9C4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:4a:d0:b8:0d:df:24:8e:59:86:02:aa:93:a8:b5:18:6b:a6:
         22:21:de:36:d7:b9:dc:c3:8c:95:61:56:26:5d:9c:a1:af:d5:
         72:70:37:55:cb:3b:cc:0a:11:2e:09:77:bc:49:08:6f:19:3b:
         88:ea:36:1b:bf:68:4b:6f:dd:54:f1:d4:68:90:f2:bb:6d:5e:
         9b:bc:46:fd:36:70:1c:59:2e:70:fa:fd:a4:34:e8:de:41:a7:
         88:71:12:88:ea:ee:76:0e:72:0a:58:7d:8f:be:87:7a:68:64:
         6a:9b:fd:ea:3f:45:76:35:7a:a0:bd:af:d5:cf:4d:8a:6e:11:
         63:63:fb:02:76:6c:d1:55:85:a8:9b:b1:8c:bb:76:c0:29:ff:
         53:9e:e9:42:85:8d:4f:6f:de:0e:dc:ad:16:19:97:d0:d4:ee:
         2d:30:1d:00:2e:fb:31:11:c4:21:1a:14:ab:2b:e4:8c:45:ef:
         ee:5e:e1:f6:40:b4:30:bf:e7:9b:5e:4b:c5:77:0e:ce:81:4b:
         97:bb:5f:bc:89:a1:2c:4d:f9:e5:c5:ca:39:6f:c5:37:62:96:
         fb:a9:30:04:c6:ba:aa:03:a2:68:ef:8d:8f:ae:47:5b:5b:57:
         05:2f:72:f9:f1:b2:96:61:99:a3:fb:dc:b7:fe:55:f8:39:65:
         40:cc:2b:76
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUIK7HsaSB6HltlSzTl8VOo4+ArQgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkIwQjAyODA2QUUzQzM0RjQ1M0FERURERTM2QURGNDMy
RkNERjlDNDAeFw0yNTEyMjEwMjI1MDJaFw0yNTEyMjIwNDAyMDJaMDMxMTAvBgNV
BAMTKDIyOTA4MjgxM0FDMzk3NzcwQ0Q0MjA2NzQ5M0U1NzAwMzI5RTc0REYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAK3gfuSs7UvZa4TmL6z+jMOfd
pTKi/395HPGHpiGSM8qgadDa3z5D3C6Vm0Gz3+HHQzvg0mbtWd8lRW7ot5OrX4hQ
j2mBjdOJZ5LbUru9FFhGb2UbBZoE1N3nYsJJvHABHTPJVdPNI9oPCCYUJYmm/gXI
luAVHY2HxGl67Nw+RCv80vkGLP3I15OzgOuSBwqJXjXec4uoHF3/rlfmWyhzTWkX
J4Tf3ImAgeiWE/6NTY2UR56zaa70MO1ZpcwNoH2FYxr2D/inyKpVvno4F5pB8clf
1zet7a2sFTrctq/sIYrIpv/YiK85U15SpMO7Ei4CsE0FN7zeZ+daeE63Um0nAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUIpCCgTrDl3cM1CBnST5XADKedN8wHwYDVR0j
BBgwFoAUuwsCgGrjw09FOt7d42rfQy/N+cQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDk3MThmMDgtYmIzOS00YTA5LWE0YzAtMWY0MDI0OGE2
ZDE1LzIvQkIwQjAyODA2QUUzQzM0RjQ1M0FERURERTM2QURGNDMyRkNERjlDNC5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9CQjBCMDI4MDZBRTNDMzRGNDUzQURFRERF
MzZBREY0MzJGQ0RGOUM0LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzA5NzE4ZjA4LWJiMzktNGEwOS1hNGMwLTFmNDAyNDhhNmQxNS8yL0JCMEIwMjgw
NkFFM0MzNEY0NTNBREVEREUzNkFERjQzMkZDREY5QzQubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA1StC4
Dd8kjlmGAqqTqLUYa6YiId4217ncw4yVYVYmXZyhr9VycDdVyzvMChEuCXe8SQhv
GTuI6jYbv2hLb91U8dRokPK7bV6bvEb9NnAcWS5w+v2kNOjeQaeIcRKI6u52DnIK
WH2Pvod6aGRqm/3qP0V2NXqgva/Vz02KbhFjY/sCdmzRVYWom7GMu3bAKf9TnulC
hY1Pb94O3K0WGZfQ1O4tMB0ALvsxEcQhGhSrK+SMRe/uXuH2QLQwv+ebXkvFdw7O
gUuXu1+8iaEsTfnlxco5b8U3Ypb7qTAExrqqA6Jo742PrkdbW1cFL3L58bKWYZmj
+9y3/lX4OWVAzCt2
-----END CERTIFICATE-----
Generated at Sun Dec 21 09:42:11 2025 by rpki-client