This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.mft
File:                     B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.mft (raw, json)
Hash identifier:          wZ54WVVv2DwQxINMW759O3DurN8oPoIAKRtRVGg5m9M=
Subject key identifier:   CC:50:36:0F:E3:DB:33:9C:B5:5B:8C:60:57:77:5F:6D:87:6E:FD:D9
Authority key identifier: B5:23:00:C5:AE:62:78:B6:08:E2:31:E4:31:C3:DD:0E:AF:6A:6B:C2
Certificate issuer:       /CN=B52300C5AE6278B608E231E431C3DD0EAF6A6BC2
Certificate serial:       20461CCD47CA7F15752FE99C15E774239FB19C43
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.mft
Manifest number:          0E
Signing time:             Sun 21 Dec 2025 01:45:02 +0000
Manifest this update:     Sun 21 Dec 2025 01:40:02 +0000
Manifest next update:     Mon 22 Dec 2025 05:04:02 +0000
Files and hashes:         1: 326131343a373538313a393930333a3a2f34382d3438203d3e20323134333434.roa (hash: odpWIoGfrHyjA/EqLrY/tj6kKgasd1C7YcR9JizUkBA=)
                          2: 326131343a373538313a393966333a3a2f34382d3438203d3e20323134333434.roa (hash: J6emFQdlETu7H0STfMe+srRexcrGlCk0y+BgTI9eJls=)
                          3: B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.crl (hash: 9q+Sg88u2zS8vJudZsScSIe4hB1nao1C9Asp/gf4bWs=)
                          4: 326131343a373538313a393966343a3a2f34382d3438203d3e20323134333434.roa (hash: spTh8DstCVqtG/UUp5lMqUt7m9/HXGTEzcFQEa7vRbE=)
                          5: 326131343a373538313a393966313a3a2f34382d3438203d3e20323134333434.roa (hash: uczfpozVS217kWRATgpEenuL/t1nbJiCmQMwvAEpV8o=)
                          6: 326131343a373538313a393966353a3a2f34382d3438203d3e20323134333434.roa (hash: HcA7KRdnBWzY7hEKVhGFuUdyfwcYU7b6FuC/duUcRFU=)
                          7: 326131343a373538313a393930343a3a2f34382d3438203d3e20323134333434.roa (hash: JSmiAu7ed33+J2eg2ZQ/ocsiovRypTOUdvXbpKPSbI8=)
                          8: 326131343a373538313a393930313a3a2f34382d3438203d3e20323134333434.roa (hash: a3vn+r3Xd1ZweP+VfXPkybQsxnlpFwKhPGkq1Aja1ws=)
                          9: 326131343a373538313a393930323a3a2f34382d3438203d3e20323134333434.roa (hash: TyFBqgR7vYeMd4/BuVueO5zwkcDAg7G5uk0/d+OPki0=)
                          10: 326131343a373538313a393938383a3a2f34382d3438203d3e20323134333434.roa (hash: dhPIT0Huo/8bMcCCD9CENzV8Oc7GRGv2lkOyyJSz4lY=)
                          11: 326131343a373538313a393966323a3a2f34382d3438203d3e20323134333434.roa (hash: Oe9b7D8DtLCyHfTEelgxQzMm3GoJ4G9/0gwwATaJfro=)
                          12: 326131343a373538313a393930353a3a2f34382d3438203d3e20323134333434.roa (hash: WvJ+nlXPCuTRZnP7e6XF03QrjAocsMrvYbQ3ZQ/eNBY=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:46:1c:cd:47:ca:7f:15:75:2f:e9:9c:15:e7:74:23:9f:b1:9c:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B52300C5AE6278B608E231E431C3DD0EAF6A6BC2
        Validity
            Not Before: Dec 21 01:40:02 2025 GMT
            Not After : Dec 22 05:04:02 2025 GMT
        Subject: CN=CC50360FE3DB339CB55B8C6057775F6D876EFDD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:2f:86:17:b1:9e:10:76:f5:f2:10:c0:c6:be:
                    85:20:97:8a:d6:bd:c2:ec:4e:0c:03:ae:99:8c:13:
                    5a:02:16:25:3d:b2:21:76:2a:6e:93:fc:2f:9c:d8:
                    5c:05:97:34:81:be:62:3e:4a:c8:d9:f5:4f:32:9c:
                    48:41:ce:e9:a7:ce:a1:bf:45:27:79:77:e5:39:d4:
                    ab:bf:23:cd:2c:c0:a7:e1:de:fa:91:e6:dc:49:4c:
                    0e:ff:bd:25:95:d7:f9:dc:f4:c2:80:43:2c:84:34:
                    a7:6c:b0:91:fa:65:dd:63:e0:55:bb:30:db:e5:89:
                    10:71:1e:dc:9d:98:9c:e4:46:c6:41:47:0c:c1:62:
                    fc:0d:27:73:0f:32:6d:68:cf:34:31:77:07:9a:ef:
                    d4:e1:33:9f:37:de:56:04:33:df:9a:9d:eb:00:11:
                    bf:6d:98:e1:44:02:d8:b7:51:c8:e3:55:dc:20:c8:
                    43:d8:7c:35:c1:76:70:97:7a:7f:f9:de:71:7e:1c:
                    92:9c:84:5c:bf:ec:8f:df:a9:98:08:26:0f:d8:fa:
                    04:60:24:17:7f:ae:1e:8a:32:db:f1:14:81:37:64:
                    d2:f4:23:a1:40:a5:15:2f:fc:47:11:8d:25:db:5c:
                    6f:ee:fb:c9:19:17:a9:b1:e3:df:b2:e9:d4:da:a1:
                    d3:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:50:36:0F:E3:DB:33:9C:B5:5B:8C:60:57:77:5F:6D:87:6E:FD:D9
            X509v3 Authority Key Identifier:
                keyid:B5:23:00:C5:AE:62:78:B6:08:E2:31:E4:31:C3:DD:0E:AF:6A:6B:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:45:65:f3:c2:02:47:11:93:ed:2b:85:2f:11:18:bd:37:30:
         69:7d:4f:94:32:01:7b:5f:24:54:0b:bd:96:c7:1e:6c:e4:0b:
         b4:7b:4d:53:53:36:59:15:be:59:b3:b9:8d:58:8f:1d:df:9b:
         03:48:33:42:be:0a:e8:88:c6:e3:b0:cf:eb:15:01:6e:c6:5a:
         db:51:e1:ba:1a:f3:38:9a:8f:b4:d5:49:b5:8d:b2:fb:fa:e7:
         3a:ed:ea:ec:45:ec:77:f2:03:1d:64:5a:a0:f1:03:7f:b7:85:
         f2:fa:45:64:92:9b:04:2f:48:51:35:a1:0f:f8:95:31:9d:f5:
         c6:6c:a0:33:29:ea:c4:76:df:93:3b:1a:5e:67:da:c6:8f:66:
         29:f6:c2:6d:6d:b5:6c:ed:96:b2:f9:9d:06:4c:31:23:6b:a3:
         e4:e6:4f:d2:fb:8c:62:b8:1c:52:ba:33:53:de:98:5a:a3:e3:
         03:a4:5d:ac:6c:9f:51:bf:bd:1a:fb:1d:e6:fe:eb:5a:99:03:
         14:8f:05:0f:9b:95:b3:6b:e2:fb:25:b5:5c:72:2e:58:5e:50:
         66:ea:bb:3b:cd:16:a5:1c:94:76:d5:01:2d:6a:ef:5b:8e:b6:
         0e:82:fa:11:86:86:32:10:cd:83:78:f4:b7:a8:ca:59:e1:d4:
         8a:63:ec:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 09:42:09 2025 by rpki-client