This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
File:                     3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft (raw, json)
Hash identifier:          TMB3GV9q2aWx5mk2rr46TKG115lyyaLH6dMNX3NlMiM=
Subject key identifier:   5D:35:88:B7:B2:2F:4A:D2:69:94:AB:63:36:BE:F6:ED:27:D8:80:63
Authority key identifier: 3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B
Certificate issuer:       /CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
Certificate serial:       2A682CC62CE3DD89E1F8B490531931157432EF98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
Manifest number:          0168
Signing time:             Fri 19 Dec 2025 11:17:06 +0000
Manifest this update:     Fri 19 Dec 2025 11:12:06 +0000
Manifest next update:     Sat 20 Dec 2025 13:06:06 +0000
Files and hashes:         1: AS395793.roa (hash: V5JEB7lz8FwA4enu53vGQgB/6Qx37KJCclmB6l2ZUq0=)
                          2: AS197537.roa (hash: JP3hx/IAvQ4SgOvsKr86baQJpbUUMchlqabqd0xftz0=)
                          3: AS27463.roa (hash: Qa9G1fyPkPtivskG7RmcNp+V3FFUx0ZZAO5NHVFED+0=)
                          4: AS63199.roa (hash: 12M/4rDEnNlu6NpcT1coUXqoQ04lDw3cZPaAu5+YbWM=)
                          5: AS42831.roa (hash: uuKI3/yP2w4woZt9biKewlb0tCO9hThIqZOmRiy7DQo=)
                          6: AS202736.roa (hash: mvaFQ8VzOiSlC6osU1pagjFGEUjuXEDkXWP0QHArhMs=)
                          7: AS5650.roa (hash: Js0jrGQQyIbg26/8AZigTW/NGuPFZW8fhpgPYAsdnV8=)
                          8: AS8820.roa (hash: 37NLowiuT9jy/dagftAxkW62Xv5potfYYsy61mpYIOM=)
                          9: AS214025.roa (hash: QQrQzSCf1RokpR1jZpI0uXRdVOPLg7PuMKRznUH/3LY=)
                          10: AS61244.roa (hash: rBybT6KNUveYSpFmW0LV7SLnrcp5d5Ac6NXXIFW7N3g=)
                          11: AS48266.roa (hash: wN58VW25Z+LecojZP+oOAtM/5chfYovrCCO/Cl8gTkE=)
                          12: AS203446.roa (hash: oqoiqzh1+ViDUf4HKID2vR8MgIa8o5lwgPwsNCMr93E=)
                          13: AS57043.roa (hash: 5kt0gUPpPlXUEkEZgXCUZ1bMA7kcongFeMkYDKoEOqw=)
                          14: AS207821.roa (hash: duP/7c0JhJ943FShftflbTsUFfvdFJVpDpIIC2INpqY=)
                          15: AS212238.roa (hash: 0IyslS3CG8KwMKdb6hG7WmS6/jX6BN24to036ny5Oec=)
                          16: AS13347.roa (hash: Vcr6EeUXObLLwMTr/P281IyX4fwZYhwUt1AVEFcBuD4=)
                          17: AS401776.roa (hash: ebLx46/uD/rPd1H9fx2yLVz5RrxFIjvh29qH51zn5WU=)
                          18: AS210732.roa (hash: EmDXi9UctgaSCDq82zNTOg8zLFou2/aExhjh0/O5J3U=)
                          19: AS984.roa (hash: 9ATj70EvyOEJUloVaxSnzdXUrBuU3YdN7scbt4sKaSg=)
                          20: AS24940.roa (hash: 9llPOqU1kkKR3lcv6by46UJ3h/kj9YxcNOMcBr6oIUw=)
                          21: 3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl (hash: 98Y9o0LL0DWt3+mrGdfvSW1vkJUF0JRc8fN3+b63cU0=)
                          22: AS3320.roa (hash: J0gCdn8aWPQr54/0F/uediEv8Z8fjukYJoHGgqTaPFs=)
                          23: AS25198.roa (hash: FqGiyIX/w2q23xvxQalz6f4NFkQfGG5TLHZxxG09oeg=)
                          24: AS32132.roa (hash: AnbuErehQXFxV+kWQt2eul6q993RKYVkoz7/H8Ifyq0=)
                          25: AS20326.roa (hash: bjlCs1cn8SZvrAA+XVOeFzTEEDwkFKKTeVLvOLa+FN0=)
                          26: AS399073.roa (hash: 9W+8Rej68EJTWmEEI49+dSUZhcc+C37ptbroUQavDdM=)
                          27: AS47690.roa (hash: ooqiQO4HpfGl3m9/7LtHIwFb/PWFu0EXUeXrqpQ+FtA=)
                          28: AS137409.roa (hash: Y9UvfHoHT/x96pt+KFD1GFP/gX4ktFwFm+kigGEhsmM=)
                          29: AS16276.roa (hash: KW9MPVc+GYoziUSGxGJkc9sN3s6o49VGu2rqobWKOO8=)
                          30: AS208545.roa (hash: QaFp0CtwymMb26LzXqGktL2J3jbDSYF8yfVJZ7bGYbw=)
                          31: AS9009.roa (hash: 3Xt+kLkYr0AOLYU71hxVNM0goE/MIxNJEsmOva08MWQ=)
                          32: AS205886.roa (hash: sTiEMkgGikZqMsIZQnshE+5D76nt7ESMGpjidVFtNRc=)
                          33: AS206781.roa (hash: u5AtvuN8DZoybC5jmpdLGiJIsJAgQ1te19Ty/6LaNP8=)
                          34: AS214483.roa (hash: 6RqqmAQfiH5vxDsevnysTOwpoPe3+DXp3DMdAvOkobQ=)
                          35: AS215607.roa (hash: zz/4pZ29ma+j9IGHrOCXiUO6WajVwOT0F+zsKOMnWJ0=)
                          36: AS7029.roa (hash: EQdsNpFUDlB6ynhRTbcYQBl7UF6yGjIXmjLtDYAN+1w=)
                          37: AS214271.roa (hash: Ryxr7X7Ltqo6eG8diqWyYYKBcmlEtpuVl7WOq2jpWd4=)
                          38: AS834.roa (hash: LHgqYdZH32fgBrUpuF6Ip+ppTGXXgd4A7vaShWcRjwM=)
                          39: AS174.roa (hash: gSp0Qhfbko2L/Uwwa69PRUe0heBn9jeFBc7NNsYK+IQ=)
                          40: AS152179.roa (hash: CLoHb65khJ/xkZgyKfE4QHe9gx+LzXYYD8aDDeekOmU=)
                          41: AS5065.roa (hash: JGE9pcBF2Jpsr5+PtvnbT/gcrMiv31piwJgRI0akVTQ=)
                          42: AS60123.roa (hash: QtgZXfsHBEnogO7UuZmZIr/ZqG9Z8/NgNBqi4sK9HBo=)
                          43: AS13335.roa (hash: d1T4k2GKdCN6l2wTM8AzWL9EUnZokcmdFZNLtewAX9k=)
                          44: AS60128.roa (hash: LYwh4MoU7+i8XzsRvFs92IcyFCoJKzZY9vGXelEbElA=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 13:06:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:68:2c:c6:2c:e3:dd:89:e1:f8:b4:90:53:19:31:15:74:32:ef:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3feccb17be51ee59ec74d64eed917e221ee28a1b
        Validity
            Not Before: Dec 19 11:12:06 2025 GMT
            Not After : Dec 20 13:06:06 2025 GMT
        Subject: CN=5D3588B7B22F4AD26994AB6336BEF6ED27D88063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:6f:3f:19:5e:9a:89:40:a6:83:6d:bd:87:d7:
                    79:e0:8d:c4:b1:98:b0:3e:22:3a:07:da:2b:f7:5c:
                    6c:84:45:23:28:7e:05:dc:67:c7:32:38:87:ee:67:
                    66:be:da:fc:e2:26:9e:79:24:e5:e1:22:ab:06:ac:
                    ec:df:5d:2f:2a:24:16:cf:71:63:f8:2b:a0:a5:43:
                    ae:b6:67:c7:23:74:9c:27:bd:89:11:58:1d:1e:ac:
                    72:27:ea:4f:bf:91:ed:78:02:1c:0b:12:e3:d1:f9:
                    18:ec:1f:47:1d:73:8c:b9:5b:df:3c:cf:61:b9:1d:
                    e7:d1:9c:20:43:2a:d9:74:9a:d6:74:1f:34:34:dc:
                    dc:1b:f1:5c:13:c1:e3:3d:3a:c4:ea:f6:02:a9:63:
                    4a:3e:56:07:2c:3a:69:52:d5:21:08:06:db:f3:eb:
                    8b:49:3b:e1:ab:97:55:f1:af:f8:27:7e:56:5b:cc:
                    38:79:de:9d:19:20:cc:4f:19:0e:d9:fe:bb:22:94:
                    97:4d:1f:cf:38:2e:14:4f:3a:48:61:75:5e:3c:fa:
                    b5:93:13:7b:3f:e9:72:63:d0:53:15:fd:bc:43:33:
                    af:a6:55:73:43:d2:0f:d4:ee:83:85:88:bc:35:db:
                    a7:e5:a9:7e:4c:d2:2f:c4:ea:72:3a:5e:3b:fc:d7:
                    2d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:35:88:B7:B2:2F:4A:D2:69:94:AB:63:36:BE:F6:ED:27:D8:80:63
            X509v3 Authority Key Identifier:
                keyid:3F:EC:CB:17:BE:51:EE:59:EC:74:D6:4E:ED:91:7E:22:1E:E2:8A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-zLF75R7lnsdNZO7ZF-Ih7iihs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22db7555-9aa4-4983-9316-73809dd354bc/0/3FECCB17BE51EE59EC74D64EED917E221EE28A1B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:4e:fa:73:e1:55:52:94:10:fa:f0:4a:ac:57:2d:8c:60:6b:
         2f:43:5f:df:40:f3:87:0e:d3:31:4c:37:c6:5a:bf:e4:e8:18:
         9c:f6:ab:51:90:e3:90:84:25:93:a3:89:26:05:9d:88:f8:10:
         58:ec:47:8f:5f:07:ac:e7:f0:25:2a:1d:f7:44:bd:15:6a:9a:
         dc:99:d4:e1:0c:1e:5d:7a:00:d0:cb:83:17:ec:c3:59:c4:51:
         a0:40:0e:57:56:c3:1f:5d:1d:72:f4:33:e7:dc:ef:fc:f7:d0:
         31:a7:07:ed:37:b2:1d:2a:87:d5:d0:92:1c:d9:5d:e8:58:08:
         d7:e3:63:63:9d:bd:f2:31:bf:44:fc:c3:09:81:29:f7:59:50:
         34:e2:58:c5:04:7c:39:79:22:f3:79:46:61:74:fe:4a:22:bf:
         49:1f:c8:02:df:02:6a:e4:fe:22:9b:8e:25:27:1a:01:73:5b:
         9c:8e:19:9e:e3:3a:b5:96:53:e7:1d:12:ca:b5:6d:1e:b7:ad:
         07:89:90:b3:43:6f:97:ed:c1:bf:0c:eb:40:34:49:3b:60:40:
         d9:a8:6d:d7:1a:dc:c2:21:f6:24:fa:96:1b:bc:3b:b3:dc:a6:
         af:cd:30:c7:07:07:93:17:f7:3b:ef:c6:da:92:cc:fa:b9:25:
         02:29:4b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 02:40:04 2025 by rpki-client