This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
File:                     62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft (raw, json)
Hash identifier:          PMjc2D+GIhDalfk5khqWbnmHJ7tcojDOO3qXtB03/H8=
Subject key identifier:   6C:8F:F7:59:06:56:AC:B0:C6:B6:3F:A6:41:2D:94:8C:3B:EB:EF:D7
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Certificate issuer:       /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial:       1B95856B6F84D749C830FE7AAD850822B2DC6020
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
Manifest number:          062E
Signing time:             Sat 20 Dec 2025 14:57:34 +0000
Manifest this update:     Sat 20 Dec 2025 14:52:34 +0000
Manifest next update:     Sun 21 Dec 2025 18:40:34 +0000
Files and hashes:         1: 34352e3135352e3135392e302f32342d3234203d3e20323038343833.roa (hash: SrUI7p9BkxLbUUoyJaLsvvKn3T5zHjIyvMH7Dv6IUL4=)
                          2: 34352e38382e31312e302f32342d3234203d3e20323131343135.roa (hash: 8S+s7zX0/TVUfJYDyhi9uvck98NpcZ10C34g0dxy76g=)
                          3: 37372e38332e3130342e302f32342d3234203d3e203531303832.roa (hash: f4KVXxUKp4riN8a3EihoRPkWdBINxwO2o5MNyOJ3lyE=)
                          4: 34352e36352e3131362e302f32332d3233203d3e20343030393039.roa (hash: fKw1U5Pbcr7KNwdfGbjOMehVygFRjMNJ4Bsi4VNVsdY=)
                          5: 34352e39352e36352e302f32342d3234203d3e20323130313634.roa (hash: NbpBHJJiQgJo53OF/NBAFNKkncA2uYBX59I7Jo0H+qo=)
                          6: 37372e38332e3130352e302f32342d3234203d3e203432383331.roa (hash: G5PlCw5ksoUk7ieeEHXCWXrLXJkbkpEfN03aETxQdg4=)
                          7: 3139342e3135302e3231302e302f32342d3234203d3e203239383032.roa (hash: xnxtrVEJ4jgTieKiLVrLmXgwS+MhKUeM+dBkJGGi38c=)
                          8: 34352e3134382e3134302e302f32342d3234203d3e203230363438.roa (hash: e6tDXaybQW5UmskVtMfDSsYmJ7p9HSw7TaF970AadHw=)
                          9: 34352e38382e392e302f32342d3234203d3e20323034393134.roa (hash: F//fl6lrN+InFBA9ItZ0AG1Ysqe7rqM4SqcHI/n1O8o=)
                          10: 3139342e3135302e3231312e302f32342d3234203d3e203630373532.roa (hash: 6yl6mmQHX9JRwHaNA+EixvXVkEfk55xDr3iAP7rq1mc=)
                          11: 34352e3135352e3135382e302f32342d3234203d3e203231383539.roa (hash: XuGO11wVvpuub4HELC4n1jHW4YCQnWV6MaqEEOcxysU=)
                          12: 34352e3134382e3134332e302f32342d3234203d3e203633303235.roa (hash: thntT1VXjBuiFDqfQZvfwarKn2geKOp4X1FsbBWh2cg=)
                          13: 3139342e35302e3233332e302f32342d3234203d3e2039303039.roa (hash: xEfuk5AWeAZfj+tZcldJdbXY5vKkWnXcUHGIm6yV4Lg=)
                          14: 37372e38332e3130372e302f32342d3234203d3e203136353039.roa (hash: dMlcET7DG0/2ASrNVCZkRdYW4GhaPbuzcQLK5J1CNrQ=)
                          15: 3139342e3135302e3230342e302f32342d3234203d3e20323132333335.roa (hash: 63C/hNRb0Drc8LY5qjMfJwTosG+OCfPY0R9pguNis8c=)
                          16: 34352e38382e382e302f32342d3234203d3e20323031393439.roa (hash: +cn/HoK+oYEcSR5pDXZXsbQ404gHhu7pStUUogb/v/E=)
                          17: 34352e36352e3131382e302f32342d3234203d3e20343030393039.roa (hash: 9n5NRyTUo8TlgAQfcuMCg+y7JOPeAkm5nm3LNDjjJCY=)
                          18: 34352e36352e3131362e302f32332d3234203d3e20323131393336.roa (hash: GXucdSTByrNZf/jA14dQ7LfXdfDVbmCUmr67C4aW9gc=)
                          19: 34352e36352e3131382e302f32342d3234203d3e2039303837.roa (hash: nyse/97oPTB6RYXcjHsejL9q8oz4QV04fzm+/z+4UtE=)
                          20: 37372e38332e3130372e302f32342d3234203d3e203134363138.roa (hash: zhLOS9e+6y7qGt/FKlY1R6hW3sK8JfM9GdZFMIQGZK0=)
                          21: 34352e38382e31302e302f32342d3234203d3e20323038393035.roa (hash: BHapRYbNju6hwZ6emNPrYuwSQ2OihFm78xu/yDCDgLw=)
                          22: 34352e36352e3131392e302f32342d3234203d3e20383334.roa (hash: 0/4NwfjBJZbjrQ1wV6nTraLnXq0b7mkcdY3WXztYgAA=)
                          23: 34352e39352e36362e302f32342d3234203d3e20383334.roa (hash: FMoD7Lw2WwKLLMJCbTA45RhWGZcomhDdl55vPp/Hgf8=)
                          24: 34352e39352e36352e302f32342d3234203d3e20323135373130.roa (hash: dF0q35w2KA0neeMPOaebLzzr7a28F6uxnXDW3p12DWE=)
                          25: 62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl (hash: IiDeatHqH+w7EEdjgZjN4vEUctu/XEjPI1hVp9wseUI=)
                          26: 34352e3134382e3134312e302f32342d3234203d3e203530363733.roa (hash: hozDDD12cZmU9uwqtlG3YW2MQMFya58e1DSCYqdV4xM=)
                          27: 34352e3135352e3135372e302f32342d3234203d3e20343030303331.roa (hash: ee9ZCdTZqPdudKM34Tqdt9Z4tCjrQwwkM8QRoW1IKQc=)
                          28: 3139342e3135302e3231302e302f32342d3234203d3e203631333137.roa (hash: VxZfu1utzRv0kh5tE9/89O9Iy7ekq1J3YpakQxAgpl4=)
                          29: 34352e3135352e3135362e302f32342d3234203d3e20343030303331.roa (hash: EVkA2Jv9qCjOmLzMQBqtVvmK1ApPdoWboKtBwn0hSko=)
                          30: 3139342e35302e3234332e302f32342d3234203d3e20333939363431.roa (hash: aRQf3ruVLXzzQ/FAWeCN4tpxuy455EHSMUangP0GVpQ=)
                          31: 3139342e35302e3232332e302f32342d3234203d3e203631333137.roa (hash: 1Z4zrEYo8/zD+rJWrObOhUVhxVPxhe8FurgIvn2Ox1c=)
                          32: 3139342e35302e3233332e302f32342d3234203d3e203535323836.roa (hash: e8pQ8DIoexv4eSgcmeIca6dPf9eFFltEvNMHVeGxj8g=)
                          33: 3139342e35302e3233332e302f32342d3234203d3e203336333532.roa (hash: fMy5Ibcr4i8ojGYObiUnUzKAAI18Gx6q8BkGOjs0huE=)
                          34: 34352e39352e36372e302f32342d3234203d3e203633303235.roa (hash: Edh9VJemZgxUF9J/JI4hV7WU9Tzu+uNaAwz4b+tj+k4=)
                          35: 34352e3135352e3135392e302f32342d3234203d3e203438363738.roa (hash: u1WBAghFeZR2xUdqMEiqWOz/pelKlX54cSNJdRoIvTc=)
                          36: 34352e3134382e3134322e302f32342d3234203d3e2035303635.roa (hash: XxuPnzv2zWfqRmQSBgzn2jkd1LQo9AMYkd0GkBdYieY=)
                          37: 34352e3135352e3135392e302f32342d3234203d3e20323134393431.roa (hash: WprLZ0caJLsKKnbXSREMKq6Jq8d42WBIKeez3W9qQzM=)
                          38: 37372e38332e3130362e302f32342d3234203d3e203539383935.roa (hash: rKcXYAbD0EzWWrrsYRhqwdMJomkAPyh4fXa29GzNLXk=)
                          39: 3139342e3135302e3230352e302f32342d3234203d3e20333939363431.roa (hash: idJKQPKJUF2hXAonhN1BXEAMnHfj84HnWx7yXLbBRME=)
                          40: 3139342e35302e3232342e302f32342d3234203d3e203631333137.roa (hash: WSiHOTFFPuzIwiI2LWhjblg/9Vv6C7o1LCtLb9TLrQc=)
                          41: 34352e39352e36342e302f32342d3234203d3e20323131333733.roa (hash: t/MYMgzDbaVA94OGDbJcLP85lGX3T66tzpNgs+P9sO4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 15:46:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:95:85:6b:6f:84:d7:49:c8:30:fe:7a:ad:85:08:22:b2:dc:60:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
        Validity
            Not Before: Dec 20 14:52:34 2025 GMT
            Not After : Dec 21 18:40:34 2025 GMT
        Subject: CN=6C8FF7590656ACB0C6B63FA6412D948C3BEBEFD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e9:2e:8c:2a:79:de:84:15:e6:3a:0e:0d:27:
                    71:aa:b9:01:48:9d:eb:0d:5a:74:05:1a:b4:7a:72:
                    d5:b9:ea:0c:0d:2a:d0:ef:ba:f5:4a:2b:31:83:3d:
                    c0:85:11:37:7e:b7:7d:70:31:12:cf:e0:17:eb:c3:
                    5b:55:ce:d0:b6:6e:a7:e5:7f:08:8a:f6:20:9e:6b:
                    6f:70:ca:dc:17:3d:2e:72:d8:fd:33:3e:02:f2:40:
                    21:80:7b:60:14:a5:be:0d:84:7a:74:13:f2:64:6b:
                    06:3f:4c:8f:8d:76:8c:af:8c:dc:3f:1c:78:d7:b9:
                    cb:5d:e2:00:2f:4a:20:78:d6:74:c8:06:34:e3:84:
                    18:73:7e:2e:d1:b4:ce:97:ea:a6:df:1d:6b:fc:05:
                    0d:c1:05:79:99:a4:5d:7a:d2:77:5c:61:cf:b6:7d:
                    1a:47:58:6b:23:7e:31:57:d3:5e:a7:99:21:28:b7:
                    3e:23:df:52:d2:bf:96:e5:e1:11:bf:90:c8:1a:8e:
                    7e:99:c4:14:2b:1e:d2:ff:c5:2d:86:cc:dd:00:49:
                    88:4c:7e:91:9d:c5:2c:71:95:89:88:d2:55:cd:01:
                    88:48:61:c7:45:78:a6:de:9f:1b:05:44:46:29:fe:
                    70:ce:e4:2a:2e:1a:8e:28:3c:2a:4c:cf:85:c0:4f:
                    e0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:8F:F7:59:06:56:AC:B0:C6:B6:3F:A6:41:2D:94:8C:3B:EB:EF:D7
            X509v3 Authority Key Identifier:
                keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:49:c6:73:86:f3:bb:3c:82:43:6b:14:dc:ac:cb:f3:f1:59:
         d5:16:e4:92:b9:35:19:68:25:15:2e:f4:bc:91:e5:d5:f4:89:
         1d:e6:c5:1c:fe:dc:df:98:7e:40:0a:18:40:47:95:32:bc:ec:
         1f:85:03:fe:05:c2:b1:54:10:53:a1:24:3d:de:7a:b3:f3:cd:
         03:52:6d:62:da:4e:e7:d1:68:ff:bf:8a:bf:5c:51:db:1f:13:
         38:9a:04:ff:cf:ef:c5:17:05:55:99:e6:cb:4c:bc:d8:9f:94:
         d8:52:b6:e0:7c:fa:8c:ef:b5:62:30:51:ab:46:8b:94:fc:c7:
         a4:f0:75:e9:6c:91:62:f3:5c:cf:32:ab:00:5b:60:b6:c3:e9:
         fb:c8:a0:14:93:73:c3:5e:91:34:2f:4d:a7:99:5f:a7:5b:5f:
         a9:bb:f1:25:a4:f9:5e:38:8f:ba:09:9f:7f:98:fd:12:5c:67:
         a2:6c:4b:a2:0f:97:80:ba:f4:ed:4c:9a:8f:be:80:08:10:42:
         06:07:4c:48:7c:88:87:3e:79:81:f5:d5:1e:93:d3:af:49:0c:
         e7:14:b0:c6:15:a0:b4:a7:31:c6:08:4e:64:46:8e:16:59:4b:
         1f:9a:93:61:15:ff:89:4f:57:e7:80:b7:74:73:9e:90:89:03:
         b4:78:2a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 22:06:45 2025 by rpki-client