This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft
File:                     B3F1737E90F240D7ABB33C72F84D71482FE62679.mft (raw, json)
Hash identifier:          S3MfEzlRhPNCwm/NuqdBLzyjs0H1rNBBh7FHNRZ6zYw=
Subject key identifier:   9C:D2:F2:91:DB:7B:1B:37:16:65:12:A8:30:1D:29:4E:47:5B:2E:2C
Authority key identifier: B3:F1:73:7E:90:F2:40:D7:AB:B3:3C:72:F8:4D:71:48:2F:E6:26:79
Certificate issuer:       /CN=B3F1737E90F240D7ABB33C72F84D71482FE62679
Certificate serial:       24CCAB42DB7635D118B7C82BB8BBCA86B8FF6DDB
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/B3F1737E90F240D7ABB33C72F84D71482FE62679.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft
Manifest number:          E8
Signing time:             Sat 20 Dec 2025 21:47:59 +0000
Manifest this update:     Sat 20 Dec 2025 21:42:59 +0000
Manifest next update:     Sun 21 Dec 2025 22:53:59 +0000
Files and hashes:         1: 326130373a353463373a356631303a3a2f34382d3438203d3e20323135353737.roa (hash: 7mCuwzfIey+Hcqy/Vhuj4zUx9bQcgkzpUeh+UNvlKO4=)
                          2: 326130373a353463373a356666653a3a2f34382d3438203d3e20323135353737.roa (hash: FG+PaaelFQQTh0Pl3BlClI1RFrk+FdkeBozLHlfkasU=)
                          3: 326130373a353463373a356630303a3a2f34342d3434203d3e20323135353737.roa (hash: x50UL+Ve3n2XGikbTbQdFLaQIWslIjcJnasiyHq58lM=)
                          4: B3F1737E90F240D7ABB33C72F84D71482FE62679.crl (hash: cLDyEG2NHQkaiRlVyaKlxY2Cofq9pdMMg/NIp2poqTE=)
                          5: 326130373a353463373a353030303a3a2f33362d3336203d3e20323136343535.roa (hash: dERySCDhc3+rlKwMAYMhD9XvddhhgSjXbVZeRoj98gc=)
                          6: 326130373a353463373a353939393a3a2f34382d3438203d3e20323136343535.roa (hash: SvnI/kKkXn3yiVhNqVKN9Taah5WCLs8Rw+D4PBjSrbo=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/B3F1737E90F240D7ABB33C72F84D71482FE62679.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 16:06:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:cc:ab:42:db:76:35:d1:18:b7:c8:2b:b8:bb:ca:86:b8:ff:6d:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3F1737E90F240D7ABB33C72F84D71482FE62679
        Validity
            Not Before: Dec 20 21:42:59 2025 GMT
            Not After : Dec 21 22:53:59 2025 GMT
        Subject: CN=9CD2F291DB7B1B37166512A8301D294E475B2E2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:72:65:6e:32:3e:0a:dd:58:67:a7:71:2f:c8:
                    b7:6e:ca:34:48:a3:6b:6c:59:1b:ed:79:3d:cb:35:
                    d5:46:9d:cb:07:06:63:a6:8c:57:42:06:55:28:33:
                    92:2d:4b:fc:29:4f:a9:a7:4c:12:34:a8:9a:3c:a1:
                    9a:a8:ff:79:67:3f:c2:e5:bf:6d:79:66:09:28:b4:
                    26:e0:62:d3:4a:ee:47:c9:00:c5:22:fd:05:ce:1f:
                    9f:2f:80:88:a4:83:ac:aa:dc:e2:7c:c0:d6:94:4e:
                    ae:d2:a4:84:2b:ca:6f:4d:6b:f8:f7:c1:57:1f:3a:
                    29:ae:61:3c:47:61:78:e5:0c:f3:00:b0:fd:1c:48:
                    62:cc:aa:56:96:1f:50:fe:b2:41:06:02:07:cc:5e:
                    fe:af:6e:5a:85:81:fe:c2:d5:31:c5:81:74:21:ef:
                    5d:3a:37:bf:a2:e9:b3:b0:63:eb:cd:ce:cf:8f:3d:
                    c3:d0:20:84:3e:b3:cb:80:f5:9c:97:15:6c:32:67:
                    6b:91:98:0c:14:e4:cd:40:c6:f1:e9:7b:4b:ce:fc:
                    bf:a6:90:36:77:55:24:bc:81:0c:42:23:50:88:81:
                    1e:ef:4f:43:58:70:25:2a:23:5e:57:a3:c1:b2:6d:
                    af:ee:71:59:78:fd:0b:9e:71:6d:7a:1f:a4:b7:fd:
                    00:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:D2:F2:91:DB:7B:1B:37:16:65:12:A8:30:1D:29:4E:47:5B:2E:2C
            X509v3 Authority Key Identifier:
                keyid:B3:F1:73:7E:90:F2:40:D7:AB:B3:3C:72:F8:4D:71:48:2F:E6:26:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/B3F1737E90F240D7ABB33C72F84D71482FE62679.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/2/B3F1737E90F240D7ABB33C72F84D71482FE62679.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:90:88:06:61:c7:25:93:8d:fa:08:68:f2:04:1b:4a:09:43:
         9e:84:c6:63:db:57:24:7e:bb:bd:f7:b3:f0:c3:f7:6f:a1:82:
         6a:63:4e:2b:ef:a3:24:0b:d5:f7:26:06:6d:5c:6f:e5:09:d5:
         bc:63:02:75:01:b2:4f:12:31:7e:74:b8:47:fb:f5:ce:30:f5:
         27:be:3e:b9:8f:fb:ba:3c:67:fe:b1:49:46:54:5e:de:af:4c:
         d2:6d:28:8f:77:2e:4e:05:3d:ec:27:da:38:91:fd:7d:17:c7:
         f7:b4:fc:3e:72:b6:6c:73:5e:6a:9a:18:fb:27:da:d4:a6:94:
         51:66:17:ee:61:45:75:87:50:e0:80:ab:73:7d:ea:a3:7b:c4:
         96:91:6a:d6:96:dc:b3:5d:35:57:65:57:15:5a:ee:89:00:4d:
         11:fb:9f:e1:6b:bf:ca:52:57:10:2a:7b:40:c7:67:41:ed:0d:
         c4:c7:7d:3d:ec:8a:2b:de:7a:a5:23:a0:4e:60:19:eb:9c:fc:
         ab:4c:a8:bc:a6:6e:00:d4:fb:49:ac:9b:17:9f:5d:ec:e6:eb:
         50:1e:10:1f:22:47:12:ea:ab:93:03:a4:67:a4:eb:c0:68:c9:
         74:6f:1c:d6:0c:7b:c0:d3:12:c0:0f:1e:f7:58:ab:d6:f7:14:
         b1:55:dc:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 05:20:14 2025 by rpki-client