This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.mft
File:                     735D93706CBF4688CE7D60FC0ED693D4CC4A9326.mft (raw, json)
Hash identifier:          tL1Ed9R35OP0xc753V1ltYajfQZ48xRISeFa9xUaHlA=
Subject key identifier:   F4:07:A1:33:D8:26:80:86:8D:45:5D:9A:D4:AF:7A:DB:B8:FF:D6:2D
Authority key identifier: 73:5D:93:70:6C:BF:46:88:CE:7D:60:FC:0E:D6:93:D4:CC:4A:93:26
Certificate issuer:       /CN=735d93706cbf4688ce7d60fc0ed693d4cc4a9326
Certificate serial:       45D2C70B5F6971F0404C858B7BDDA3B692023669
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.mft
Manifest number:          04B2
Signing time:             Sun 21 Dec 2025 07:08:23 +0000
Manifest this update:     Sun 21 Dec 2025 07:03:23 +0000
Manifest next update:     Mon 22 Dec 2025 11:01:23 +0000
Files and hashes:         1: 735D93706CBF4688CE7D60FC0ED693D4CC4A9326.crl (hash: wH7hQwvNwjO5bw7MeRxiadlmZLq/G1i+RRp0l/CuBW0=)
                          2: AS42689.roa (hash: OGi0fOBGeOOs5mHqzbV17lZisG6Hn/1OzlvinOYWVW8=)
                          3: AS7029.roa (hash: 8PLTntWjTUT/j3wb4jf3whlNbIemwNkkni4M1Q4/mDw=)
                          4: AS6079.roa (hash: cwt2kgma2qYi3LhLoT0eQ8hzydzk6ECH01Cp7+lYh5Q=)
                          5: AS48961.roa (hash: 3cIbAXwf9Yl1EVegsCq9QH9D9FfXgLy3FkzfZ43rjN4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 04:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:d2:c7:0b:5f:69:71:f0:40:4c:85:8b:7b:dd:a3:b6:92:02:36:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=735d93706cbf4688ce7d60fc0ed693d4cc4a9326
        Validity
            Not Before: Dec 21 07:03:23 2025 GMT
            Not After : Dec 22 11:01:23 2025 GMT
        Subject: CN=F407A133D82680868D455D9AD4AF7ADBB8FFD62D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ee:02:fb:55:7c:2f:3e:70:0e:27:26:13:e6:
                    1c:70:a4:6c:1c:a8:60:61:ce:cb:64:d2:c8:22:c5:
                    8e:93:92:9b:c5:96:d4:0e:48:42:d4:e1:13:00:93:
                    77:3c:5d:11:16:d6:1e:63:9d:58:e9:7f:99:71:37:
                    79:cc:84:fd:eb:d9:d4:a4:55:4f:5f:b9:ed:9a:69:
                    ac:93:29:db:2c:0a:2c:fe:ae:2e:01:6a:a1:37:9a:
                    db:70:86:6e:bb:9d:0d:a8:1d:ce:a3:4a:4c:a0:70:
                    5a:4c:ae:51:a0:bd:5a:10:bf:d2:a0:ec:06:ed:10:
                    79:a8:cb:a5:b7:02:d2:61:1a:7a:c3:7b:9b:20:5d:
                    0f:7c:ae:89:79:a6:47:f5:c3:05:24:dd:f2:24:1f:
                    2f:5d:40:93:c0:59:81:2c:cb:ab:76:9a:2c:e8:9b:
                    0d:8b:c6:66:c0:01:62:52:94:2d:9f:64:87:09:0c:
                    6d:db:8c:ed:43:5e:62:e7:79:7e:fc:ef:35:5a:81:
                    a4:13:d0:56:a1:17:df:01:f1:fb:06:28:f1:80:fb:
                    85:7a:25:85:4a:a3:c7:c9:5c:1b:2d:e4:b8:7b:57:
                    31:a7:ed:c8:13:c7:fa:bd:fb:75:63:04:2d:d2:8c:
                    da:84:ce:bb:c0:1d:d2:2c:ac:06:a6:4e:c2:34:bf:
                    7d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:07:A1:33:D8:26:80:86:8D:45:5D:9A:D4:AF:7A:DB:B8:FF:D6:2D
            X509v3 Authority Key Identifier:
                keyid:73:5D:93:70:6C:BF:46:88:CE:7D:60:FC:0E:D6:93:D4:CC:4A:93:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:c4:22:00:14:35:78:91:ed:ba:d9:93:8b:1c:b8:a8:74:b8:
         9c:4f:73:37:9f:49:89:b7:62:44:39:ee:bb:7e:5c:2a:6e:b8:
         1b:8d:df:a2:95:95:4e:d2:49:af:3f:91:9f:bc:5d:96:db:34:
         f6:4c:89:e3:ae:d7:a3:55:33:4c:ab:9e:7f:79:a7:c6:0d:1b:
         4a:ed:1d:d2:1e:94:11:03:86:63:33:d8:62:b4:32:fd:0b:22:
         0f:2e:c0:e0:80:21:f3:5e:77:de:88:de:9f:67:74:d1:12:a5:
         3a:1f:2d:15:1a:c3:30:36:e5:3e:cc:1c:e7:59:02:91:65:a0:
         d2:b8:88:8f:48:98:be:5e:d5:c0:01:7a:1a:7b:a9:18:5b:25:
         81:29:8a:05:ae:28:97:45:cc:f7:01:99:12:4f:05:c8:15:98:
         08:b9:01:8b:c8:33:2f:a4:a7:b3:9c:f3:cb:ad:dc:80:11:3c:
         12:53:ec:eb:0e:b9:1b:fe:cf:39:f2:b0:0e:f2:24:b2:19:16:
         2e:17:bc:93:12:e0:91:01:0b:8a:a9:46:4f:1d:aa:49:e8:d8:
         22:31:d9:3a:0f:7d:5b:84:f2:f7:08:52:4d:80:4b:67:12:10:
         24:ca:8b:19:c7:05:5b:42:ff:02:7c:72:80:00:a9:cf:1c:a5:
         a9:b4:0f:dc
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIURdLHC19pcfBATIWLe92jtpICNmkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzM1ZDkzNzA2Y2JmNDY4OGNlN2Q2MGZjMGVkNjkzZDRj
YzRhOTMyNjAeFw0yNTEyMjEwNzAzMjNaFw0yNTEyMjIxMTAxMjNaMDMxMTAvBgNV
BAMTKEY0MDdBMTMzRDgyNjgwODY4RDQ1NUQ5QUQ0QUY3QURCQjhGRkQ2MkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA7gL7VXwvPnAOJyYT5hxwpGwc
qGBhzstk0sgixY6TkpvFltQOSELU4RMAk3c8XREW1h5jnVjpf5lxN3nMhP3r2dSk
VU9fue2aaayTKdssCiz+ri4BaqE3mttwhm67nQ2oHc6jSkygcFpMrlGgvVoQv9Kg
7AbtEHmoy6W3AtJhGnrDe5sgXQ98rol5pkf1wwUk3fIkHy9dQJPAWYEsy6t2mizo
mw2LxmbAAWJSlC2fZIcJDG3bjO1DXmLneX787zVagaQT0FahF98B8fsGKPGA+4V6
JYVKo8fJXBst5Lh7VzGn7cgTx/q9+3VjBC3SjNqEzrvAHdIsrAamTsI0v33NAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU9AehM9gmgIaNRV2a1K9627j/1i0wHwYDVR0j
BBgwFoAUc12TcGy/RojOfWD8DtaT1MxKkyYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMmU2ZGE1YzctNjcwYS00MWIxLTk2ZWItMzg5OTM4OGIy
OTJjLzAvNzM1RDkzNzA2Q0JGNDY4OENFN0Q2MEZDMEVENjkzRDRDQzRBOTMyNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MxMlRjR3lfUm9qT2ZXRDhEdGFUMU14
S2t5WS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yZTZkYTVjNy02
NzBhLTQxYjEtOTZlYi0zODk5Mzg4YjI5MmMvMC83MzVEOTM3MDZDQkY0Njg4Q0U3
RDYwRkMwRUQ2OTNENENDNEE5MzI2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW8QiABQ1eJHtutmTixy4
qHS4nE9zN59JibdiRDnuu35cKm64G43fopWVTtJJrz+Rn7xdlts09kyJ467Xo1Uz
TKuef3mnxg0bSu0d0h6UEQOGYzPYYrQy/QsiDy7A4IAh81533ojen2d00RKlOh8t
FRrDMDblPswc51kCkWWg0riIj0iYvl7VwAF6GnupGFslgSmKBa4ol0XM9wGZEk8F
yBWYCLkBi8gzL6Sns5zzy63cgBE8ElPs6w65G/7POfKwDvIkshkWLhe8kxLgkQEL
iqlGTx2qSejYIjHZOg99W4Ty9whSTYBLZxIQJMqLGccFW0L/AnxygACpzxylqbQP
3A==
-----END CERTIFICATE-----
Generated at Sun Dec 21 13:57:18 2025 by rpki-client