This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
File:                     F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft (raw, json)
Hash identifier:          ygPKfnwwTmu0kCn+JbwtGE8tUhamx1TixlOBMIqkOxI=
Subject key identifier:   5F:F9:C7:79:ED:7A:6E:E0:AB:8B:C4:3A:19:A0:93:6B:05:14:22:63
Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
Certificate issuer:       /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Certificate serial:       3A49AD5609842507C6508A571CAB79B0BB76E1C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
Manifest number:          01F0
Signing time:             Mon 22 Dec 2025 00:42:38 +0000
Manifest this update:     Mon 22 Dec 2025 00:37:38 +0000
Manifest next update:     Tue 23 Dec 2025 01:43:38 +0000
Files and hashes:         1: 3137382e3133322e3139392e302f32342d3234203d3e203631333137.roa (hash: g03b1IthT7R6emRcKoovUUAfL6xJm+JexZ6oxCLs8E4=)
                          2: 3137382e3133322e3139372e302f32342d3234203d3e2033333230.roa (hash: MuzLKtyseOT68ju0FOjjeN3pxilqG43fi3IvFyF1hyA=)
                          3: 3130392e3233342e3231332e302f32342d3234203d3e203434323133.roa (hash: pWCIuSrDYwp+tan25QY6TeO9jMNRWP/W0zj94P0620Y=)
                          4: F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl (hash: +Dx6y7qHMtp5F9r5ARJMh3MixNWP6NgENgLgHDhz2Qs=)
                          5: 3137382e3133322e3139322e302f32342d3234203d3e203136353039.roa (hash: 0XlqzvD5WZeVhzrMIb+ArV6j60KVoqxW88qIB/mg2yk=)
                          6: 352e3232362e3138342e302f32342d3234203d3e20313534303439.roa (hash: H9hlRxAktpjIeT3DJhaD4nFRiEtoUGveoYH/KllFDKE=)
                          7: 3130392e3233342e3231352e302f32342d3234203d3e20393733.roa (hash: 7XlPdZ+5k5dznfPMoT3Ni5uRfyL41Likgo5fplEaDTA=)
                          8: 3130392e3233342e3231312e302f32342d3234203d3e203133333335.roa (hash: Ej1HuQzuhYe60A2HNErPZLUdfpH5EaYPpZ+PpBEwVxY=)
                          9: 3137382e3133322e3139342e302f32342d3234203d3e2033333230.roa (hash: fQsEWjsrThcFlJLP0H4ir/IvOeNDAQWZ1RZpyw7wV08=)
                          10: 352e3232362e3138372e302f32342d3234203d3e203331383938.roa (hash: kBpq1LEvwgTf4WM51jxpYydvFyszuazgeravGzXETJo=)
                          11: 3130392e3233342e3230392e302f32342d3234203d3e20333935373933.roa (hash: o3GE/oY8MCJAGEjtcPLWPVhOZbFRZAMmde/X42j4j+s=)
                          12: 352e3232362e3139312e302f32342d3234203d3e20323135323338.roa (hash: UAeHXbW3QhFNKys+iIRYQQp2rK+CbLJVmAbT44zmQ1k=)
                          13: 352e3232362e3138392e302f32342d3234203d3e2039333034.roa (hash: KMYDoKnPWH3TUSOlAA/wzDsC66Y3O5PlUt+i9WMB8YA=)
                          14: 3137382e3133322e3139332e302f32342d3234203d3e2033333230.roa (hash: oI+z5B0JaicbPoA0ktNCShJBGRgRTGuhGcC7A8+Ru9U=)
                          15: 3137382e3133322e3139322e302f32342d3234203d3e203134363138.roa (hash: UgtgsSF4DmUx+FqAs5WV6TWI9fyKhqfkEeJgaHpzYEc=)
                          16: 3130392e3233342e3231342e302f32342d3234203d3e203433363431.roa (hash: 6BGcWOFPHM6AYGamfRs+s+1VsWvQIYZ1oxiJHAvfJjg=)
                          17: 352e3232362e3138382e302f32342d3234203d3e20313532313739.roa (hash: nFzeEleWTSIYtIbjgNdPg9c+CwbgHF8u+W2VGtxEBpQ=)
                          18: 3130392e3233342e3230382e302f32342d3234203d3e203331383938.roa (hash: b3VPqm78d32upkRS45HOejDpaZzakM7RvUm8zYxxirQ=)
                          19: 3137382e3133322e3139382e302f32342d3234203d3e20323133393230.roa (hash: 5LOGXsAFfY8MpN+3dgrjf5uTyIh00nk/J0/MSXxVmy4=)
                          20: 352e3232362e3138352e302f32342d3234203d3e2034363337.roa (hash: xGDSj9rMMdhGkci1rj9QS/c2p6IRznTgPF56svMZjZY=)
                          21: 3130392e3233342e3231302e302f32342d3234203d3e203432383331.roa (hash: XdAkV6zbkuI1AZDLksTC73fyYmD1RaBTy+I3AGFuaxA=)
                          22: 3137382e3133322e3139362e302f32342d3234203d3e20333933393432.roa (hash: D28ld5kVJceea0qzm5GNZqptmPyuFgFAFujny6boKiE=)
                          23: 3137382e3133322e3139382e302f32342d3234203d3e203133333335.roa (hash: 6TrR9eiRNzBfJRrubefTFudn86wqW7t6u+0cIxHNR5g=)
                          24: 3130392e3233342e3231322e302f32342d3234203d3e20313937353337.roa (hash: Lxa7aR1NsNsgX0Y0Me+SOrl9Sd6ODfPmrUUHY7uRFAg=)
                          25: 3137382e3133322e3139352e302f32342d3234203d3e20313335333931.roa (hash: RVvsf+GbQ+gvRF/WRSFeBmTdyh0atmXnd8DAVmdlYaw=)
                          26: 3130392e3233342e3230392e302f32342d3234203d3e203235313630.roa (hash: 4qmNKGx6VCIK53hbSqHwJPgKKMACqFJu608tkfoDU90=)
                          27: 352e3232362e3138362e302f32342d3234203d3e203633303233.roa (hash: kysMqqfL+cxQFiZ9hx+MYhVVLOWVsGxNP3RzuLn0/y4=)
                          28: 3137382e3133322e3139382e302f32342d3234203d3e20323635393139.roa (hash: uhM+/0v8HioS/qE+KkDqR673YS11oQr5aznZkyp/yx4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 22:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:49:ad:56:09:84:25:07:c6:50:8a:57:1c:ab:79:b0:bb:76:e1:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
        Validity
            Not Before: Dec 22 00:37:38 2025 GMT
            Not After : Dec 23 01:43:38 2025 GMT
        Subject: CN=5FF9C779ED7A6EE0AB8BC43A19A0936B05142263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:12:ef:84:f0:b6:21:6a:f1:d5:2e:cb:7c:e5:
                    8a:06:4b:f7:10:12:ba:62:2e:64:43:8d:8c:48:1b:
                    17:d2:ad:ec:fc:de:b5:1f:df:b9:84:35:e0:a0:bb:
                    7a:d6:8c:1b:aa:56:76:10:c5:67:35:5a:60:e1:12:
                    d6:98:84:bf:6b:38:8e:36:dd:df:2b:87:e3:f2:70:
                    56:cf:d0:16:47:76:94:70:fd:de:31:1c:15:ab:e7:
                    04:f2:be:49:78:b9:4e:c4:4c:3e:b0:ef:96:89:9b:
                    f4:4c:cc:46:e4:5d:f2:2d:c4:bc:9a:0f:77:5b:1d:
                    28:ce:e3:dd:8a:8b:e7:fe:4d:6e:e6:e3:12:1a:e5:
                    c1:06:c6:f2:da:ab:3f:5d:09:a3:83:6d:f4:88:21:
                    c6:a6:73:97:9e:15:a8:78:38:4a:88:49:e3:12:6e:
                    b5:bf:f6:e3:53:fd:1d:74:58:d8:a7:29:9d:8c:b0:
                    3d:b4:63:2b:19:b8:fe:06:c0:db:b9:82:75:f8:b5:
                    f9:73:d8:9c:fa:39:b5:37:b2:34:42:b0:bc:bf:10:
                    91:01:d8:d1:28:dd:84:5e:be:f4:1d:84:23:61:26:
                    65:26:ae:a6:e6:ee:1d:8a:d5:c0:66:95:91:6e:05:
                    d7:bd:02:09:aa:4e:98:29:db:2b:27:b1:b4:e9:a8:
                    78:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:F9:C7:79:ED:7A:6E:E0:AB:8B:C4:3A:19:A0:93:6B:05:14:22:63
            X509v3 Authority Key Identifier:
                keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:65:63:21:f1:39:5c:24:c7:ca:61:ed:cf:aa:a1:f4:59:73:
         98:57:51:e1:16:19:58:75:21:dc:17:80:74:34:f8:30:56:d5:
         ff:d8:1e:04:5e:8a:d3:48:7d:c9:e9:36:cf:90:8a:e6:42:36:
         8c:2f:5d:30:27:c3:7e:bd:40:97:d6:f6:6c:3c:a6:d7:3c:bd:
         05:51:e2:00:40:90:c4:d5:88:01:1e:3a:0b:0a:58:39:1f:70:
         2c:82:15:dc:d7:7e:f8:d9:ee:a2:42:1a:c7:9c:63:fb:fe:25:
         a7:7a:60:64:99:4f:1b:dc:b0:00:42:0f:e7:fa:be:87:4d:3d:
         fa:99:73:ae:ce:da:b0:21:fb:69:fb:dd:99:ca:64:4c:79:96:
         4f:e2:c7:08:93:a9:95:47:6b:61:f7:64:8c:3f:ea:e0:74:35:
         52:51:e7:15:b3:25:5b:c1:29:d9:16:e5:0b:58:1d:1d:b8:ee:
         df:e0:7c:76:99:fd:f7:96:9a:6c:85:2a:26:24:21:0d:dc:a2:
         40:90:b5:85:b7:31:e0:f9:82:3f:21:85:55:49:1a:94:d5:76:
         e1:f1:39:e2:c9:85:30:3b:f1:20:46:06:18:8b:d7:fe:84:cd:
         07:31:d0:85:b6:34:ee:f9:d2:5f:50:0c:a0:29:e0:05:b0:a8:
         5b:d8:b9:e0
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUOkmtVgmEJQfGUIpXHKt5sLt24cEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZjc2OGZmNmU2ODE4NThjMGVjMTlmM2E5M2ZhMTc5MmNk
MTZjZWVkMzAeFw0yNTEyMjIwMDM3MzhaFw0yNTEyMjMwMTQzMzhaMDMxMTAvBgNV
BAMTKDVGRjlDNzc5RUQ3QTZFRTBBQjhCQzQzQTE5QTA5MzZCMDUxNDIyNjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgEu+E8LYhavHVLst85YoGS/cQ
ErpiLmRDjYxIGxfSrez83rUf37mENeCgu3rWjBuqVnYQxWc1WmDhEtaYhL9rOI42
3d8rh+PycFbP0BZHdpRw/d4xHBWr5wTyvkl4uU7ETD6w75aJm/RMzEbkXfItxLya
D3dbHSjO492Ki+f+TW7m4xIa5cEGxvLaqz9dCaODbfSIIcamc5eeFah4OEqISeMS
brW/9uNT/R10WNinKZ2MsD20YysZuP4GwNu5gnX4tflz2Jz6ObU3sjRCsLy/EJEB
2NEo3YRevvQdhCNhJmUmrqbm7h2K1cBmlZFuBde9AgmqTpgp2ysnsbTpqHgtAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUX/nHee16buCri8Q6GaCTawUUImMwHwYDVR0j
BBgwFoAU92j/bmgYWMDsGfOpP6F5LNFs7tMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMGNjMDg3MzctOTI2Ny00MDJhLTk5ZDQtN2FhYWZlYTQ0
NGVkLzAvRjc2OEZGNkU2ODE4NThDMEVDMTlGM0E5M0ZBMTc5MkNEMTZDRUVEMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkyal9ibWdZV01Ec0dmT3BQNkY1TE5G
czd0TS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wY2MwODczNy05
MjY3LTQwMmEtOTlkNC03YWFhZmVhNDQ0ZWQvMC9GNzY4RkY2RTY4MTg1OEMwRUMx
OUYzQTkzRkExNzkyQ0QxNkNFRUQzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGGVjIfE5XCTHymHtz6qh
9FlzmFdR4RYZWHUh3BeAdDT4MFbV/9geBF6K00h9yek2z5CK5kI2jC9dMCfDfr1A
l9b2bDym1zy9BVHiAECQxNWIAR46CwpYOR9wLIIV3Nd++NnuokIax5xj+/4lp3pg
ZJlPG9ywAEIP5/q+h009+plzrs7asCH7afvdmcpkTHmWT+LHCJOplUdrYfdkjD/q
4HQ1UlHnFbMlW8Ep2RblC1gdHbju3+B8dpn995aabIUqJiQhDdyiQJC1hbcx4PmC
PyGFVUkalNV24fE54smFMDvxIEYGGIvX/oTNBzHQhbY07vnSX1AMoCngBbCoW9i5
4A==
-----END CERTIFICATE-----
Generated at Mon Dec 22 06:30:28 2025 by rpki-client