This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft
File:                     3134EE987E08D8B5583FEEF621A03150C4F35434.mft (raw, json)
Hash identifier:          8savTSJQhFCfLnCEQs8uD/Lks0+fPlgudIaIy2/Rtak=
Subject key identifier:   B1:C1:F5:D4:CC:01:78:E7:C2:6D:48:40:8D:5D:86:C2:83:D6:65:48
Authority key identifier: 31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
Certificate issuer:       /CN=3134ee987e08d8b5583feef621a03150c4f35434
Certificate serial:       599E6390A044B648AAAC6650DD678FF4F66F2FF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft
Manifest number:          0398
Signing time:             Sat 20 Dec 2025 11:47:33 +0000
Manifest this update:     Sat 20 Dec 2025 11:42:33 +0000
Manifest next update:     Sun 21 Dec 2025 14:35:33 +0000
Files and hashes:         1: 2AFACA7F316DBE0CFF394F9D5952E52992F185F1.cer (hash: TzD6pGlBEMmZI/OlLFvK4Q5nKNXovDA7wOkDjfwohQo=)
                          2: 326131343a316563373a666430303a3a2f34302d3438203d3e20323136323034.roa (hash: s/Nou3yfPszN+70d0fh1KxFGk9lHz9YF1rBNojiEJcI=)
                          3: 1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer (hash: BF/TWOjb2Ii4r0osOdYS/rUG+zOQPpS2tAXbzEo5Wzo=)
                          4: 326131343a316563373a663830303a3a2f34382d3438203d3e20323131303139.roa (hash: IUL9dWtw0Umsxfs7xwdo1JVZ6ulAsKal+ROC0kpiHgM=)
                          5: 326131343a316563373a663731303a3a2f34342d3438203d3e20323030303838.roa (hash: AEg6jBnmgaUb2x64BLtcycaY+zMRMacIwLXjCKOp0Kc=)
                          6: 326131343a316563373a663630303a3a2f34302d3438203d3e20323133393938.roa (hash: jfvc4Qyrnftgf9GYsuLUox0bHp6mia0CtR4lMdTVrZY=)
                          7: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer (hash: jLV89odZdgTYzYRcumFoTReP+gmmk+raXpcoYf0+wxA=)
                          8: 326131343a316563373a663530303a3a2f34302d3430203d3e20323038343533.roa (hash: 26SEXU3Pd+BR8SHx6kufhwY94Io89XBTIVQPTTPnVB8=)
                          9: 326131343a316563373a663830313a3a2f34382d3438203d3e20323131303139.roa (hash: q5taedROXWkWDrb/6D/rTI85VzK640g7YzLTCK454po=)
                          10: 326131343a316563373a663230303a3a2f34302d3438203d3e20323036353430.roa (hash: qSdNZRVsblfNLTN5jWJzdVW0nG7dD+fw8GdvqXWqzCg=)
                          11: 326131343a316563373a663830303a3a2f34302d3438203d3e20323131303139.roa (hash: AGI7e/F2Snd3LJvhDdI7M6IquMMB8CwXmbzdMBVWefQ=)
                          12: AS215318.asa (hash: Cq1YNeZujV2DCB3+fofzEgyWvtRNnETlVqcvQ1iCKVE=)
                          13: 326131343a316563373a666230303a3a2f34302d3438203d3e20323134373435.roa (hash: 6hKao63oIzBdls8N02e3UeaWWtVa56Xgit+XQJDfjec=)
                          14: 326131343a316563373a666666663a3a2f34382d3438203d3e20323030313739.roa (hash: jxX5jejatt6POI8r69/OIdC4tpqjlqDh7/l5cMHt1Lc=)
                          15: 326131343a316563373a323030303a3a2f34302d3438203d3e20323133353135.roa (hash: ei7uKbr21cStunIFD4/+QnxpXX+lUv4yRtUBnFqqQIw=)
                          16: 326131343a316563373a666666633a3a2f34382d3438203d3e20323136333339.roa (hash: Xpu7YHsE9Uu/Z34+AM32q6wFmIndeEkcOzm4kV29gZU=)
                          17: 3134EE987E08D8B5583FEEF621A03150C4F35434.crl (hash: +Fxoo1QU3xEf69MVGB1M1586rI0IFs0SMbdBoeK0YVU=)
                          18: 326131343a316563373a663733303a3a2f34342d3438203d3e20313336353537.roa (hash: EjYVXtoGI4pKSiTLS0VJX0KMS0fHh7kyk5vR1WUohgI=)
                          19: 326131343a316563373a663930303a3a2f34302d3438203d3e20323131363733.roa (hash: eFx1IPRipEBged0ZijUlxcw0OO6jOfnGP3TjandnEEA=)
                          20: 326131343a316563373a663330303a3a2f34302d3438203d3e20323132303835.roa (hash: /N5wUQJdysICqY/mrt3+ONpnXUY6EQuvRkeb07T1NVw=)
                          21: 326131343a316563373a666666643a3a2f34382d3438203d3e20323038343533.roa (hash: cQGzH58GG/5AlClFkvMjXXZFAsalmfdZS0xTjTmJx5Q=)
                          22: 326131343a316563373a313030303a3a2f33362d3438203d3e20323134343831.roa (hash: mAC3tE41nQDojIaT/TKY9BuNdhC77RQ6VPm5O+XWCIE=)
                          23: 326131343a316563373a663130303a3a2f34302d3438203d3e20323134313838.roa (hash: l6K8Ipuv+LpAjKBvLV7xS+N25xPDi1Q5md9XNlMDt3o=)
                          24: 326131343a316563343a3a2f33322d3430203d3e203535323031.roa (hash: J7TluaWBMRkzmoR+yQUgqy6TY9pp5e+qFllmxawGaBk=)
                          25: 39312e3139362e362e302f32342d3234203d3e20323135333138.roa (hash: j1BjBA5NyrZGkTgGio3bSgpZw6QFV9sBz2jgQ+DhB30=)
                          26: 326131343a316563323a3a2f34302d3434203d3e20323135333138.roa (hash: 1f8XyNlehbCOnOttGzyrDosIHnqaI9sKAvrNf1ADCiI=)
                          27: 326131343a316563373a666661303a3a2f34382d3438203d3e20323133353135.roa (hash: uw8e5+V55rs+wlENeJdGRICWtffz7xQmePuL+3U/nIU=)
                          28: 326131343a316563373a666530303a3a2f34302d3438203d3e20323135343637.roa (hash: 8asU86WRYRMPRuHXiCGWb31YsN6wlyGCHOUyjPq08QE=)
                          29: 326131343a316563373a663732303a3a2f34342d3438203d3e203139333138.roa (hash: 354DUYTmwYIpJ7s6pAfElMpcSbsG0UySE6atyDydlaw=)
                          30: 326131343a316563373a663730303a3a2f34302d3438203d3e20323033363632.roa (hash: TXZSGetReOdbEu0rJcDlVY8E6EFEIEHEr5rTFcqv3xU=)
                          31: 326131343a316563373a666330303a3a2f34302d3438203d3e20323130363435.roa (hash: D0UhxJixjH/6ED4b7asHdvZhN16xQRz9JstOKq1KOMc=)
                          32: 326131343a316563373a313130303a3a2f34302d3438203d3e20323135343337.roa (hash: LSZWA34YwCO9D6JtWEG8LpUQ1o3Anb+MGXWPU43gT4A=)
                          33: 326131343a316563373a663730303a3a2f34342d3438203d3e20333937343233.roa (hash: 3NaEQ7JEzM4oESWmvkMu3mTAfj7phWpZMjjU4RHfTkQ=)
                          34: 326131343a316563373a666666653a3a2f34382d3438203d3e20323135343733.roa (hash: tXMEYMrTa38uR0L+SQ9LimzmDrpxo8zhMIaTp0PKkR0=)
                          35: 326131343a316563373a666130303a3a2f34302d3438203d3e20323134333635.roa (hash: D7vq42LlJ1JkjKrlS8EXaLer6htaFFui19vj1Iz46+0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 14:35:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:9e:63:90:a0:44:b6:48:aa:ac:66:50:dd:67:8f:f4:f6:6f:2f:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3134ee987e08d8b5583feef621a03150c4f35434
        Validity
            Not Before: Dec 20 11:42:33 2025 GMT
            Not After : Dec 21 14:35:33 2025 GMT
        Subject: CN=B1C1F5D4CC0178E7C26D48408D5D86C283D66548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:d3:70:6f:88:9a:1e:19:f6:47:68:64:08:80:
                    4f:c7:07:12:a7:c3:2c:fd:a3:ef:61:4a:cd:38:16:
                    20:39:9d:0d:d6:fd:ac:6c:8e:a7:52:fc:2d:33:4a:
                    c9:3e:50:58:25:54:e6:89:0c:84:68:d2:5f:46:91:
                    66:6f:5f:8f:ab:f3:f8:f8:b3:0c:5a:0a:0a:62:2c:
                    db:af:05:1b:15:e6:b5:a1:c7:22:c0:4f:09:a0:f3:
                    dd:f5:b5:79:b0:16:ed:c6:13:b9:2e:1c:34:04:c7:
                    20:7b:be:1d:15:22:19:78:5e:47:d7:dc:cd:75:7b:
                    85:9a:27:76:dd:37:2f:33:03:e0:8a:a9:66:b9:78:
                    f8:46:a3:76:78:e4:b9:24:d2:4c:ea:ed:df:5d:2c:
                    d0:eb:c6:f3:43:d5:bb:e0:2c:41:ba:45:65:b7:12:
                    27:2f:33:1f:ff:36:ed:62:8f:f1:3b:8f:df:2c:2e:
                    38:a3:79:47:d4:48:4b:42:9b:82:4a:62:db:b7:e3:
                    e2:3d:7f:4c:b8:95:fd:9f:ed:c5:4f:23:19:ae:19:
                    a5:b4:27:c0:d9:d3:e0:4c:14:04:eb:b9:bb:0e:5b:
                    4a:27:05:fa:3f:ad:fb:56:b6:9e:d4:66:bf:1a:78:
                    c9:66:09:b0:b6:dc:7f:41:12:45:14:4c:57:41:b3:
                    c0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:C1:F5:D4:CC:01:78:E7:C2:6D:48:40:8D:5D:86:C2:83:D6:65:48
            X509v3 Authority Key Identifier:
                keyid:31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:c2:9b:17:e9:ed:7a:25:c4:e4:6b:8d:9e:ef:91:20:00:72:
         27:7b:32:88:62:56:18:d5:c2:ad:ed:a6:7c:30:16:62:e0:57:
         88:52:65:3b:8e:44:a9:f8:76:31:9b:4e:a3:13:15:82:9e:b4:
         2c:de:ad:e6:d4:d0:ab:2a:7b:26:3c:e6:52:dd:c5:ab:5f:33:
         7b:52:a0:ea:69:4a:97:ef:9f:da:35:8e:33:00:84:88:cb:e8:
         ea:dc:1e:1d:44:60:b4:9b:8f:eb:c7:6b:31:3d:6b:b7:c7:f1:
         33:a9:dd:f3:de:bf:69:94:ee:ce:f5:4f:4b:4d:33:9a:c1:f7:
         c7:9b:ac:ca:38:0f:3d:9d:a7:fe:a8:02:fa:20:50:91:91:0d:
         af:c7:90:63:69:42:18:72:70:fe:3b:26:a6:6c:d8:d8:c0:85:
         90:87:65:63:73:65:f5:85:f4:0d:69:b5:13:c2:9f:b4:0a:7c:
         f8:1e:ed:c6:7d:68:ad:e8:19:06:c4:f9:86:e6:b6:f7:63:b8:
         f5:aa:ef:0b:11:77:e5:6e:ac:54:39:30:b4:6e:67:43:db:6e:
         ac:e4:1e:5c:f5:6e:12:04:ea:77:8d:13:02:bc:9f:d0:c0:39:
         e7:a7:75:d7:14:9f:27:8d:e9:66:4c:cc:0c:91:b7:03:9d:99:
         50:23:c3:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 20:45:17 2025 by rpki-client