This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/3/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.mft
File:                     FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.mft (raw, json)
Hash identifier:          PYlEKUvF8zXLXA6qB7Y3qxLpJK+cqVmawXCVLpZK1YY=
Subject key identifier:   3E:34:AD:A0:B0:7F:E9:40:E3:5C:B5:6C:3D:0B:B0:19:87:02:F8:38
Authority key identifier: FA:71:0E:21:BC:41:E9:82:7D:52:D6:6D:E9:8E:F8:E9:AC:E9:B1:E8
Certificate issuer:       /CN=FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8
Certificate serial:       17BABA2745F912F99075C18339BD9B5A84F19B84
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/3/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.mft
Manifest number:          D0
Signing time:             Sat 20 Dec 2025 21:53:02 +0000
Manifest this update:     Sat 20 Dec 2025 21:48:02 +0000
Manifest next update:     Mon 22 Dec 2025 01:45:02 +0000
Files and hashes:         1: 326131343a373538343a346630303a3a2f34302d3430203d3e20323132353136.roa (hash: CNfVsinVsceZGjOaXQsHUjsBZSefgQTBz85mK3PRJtU=)
                          2: FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.crl (hash: /AIRSoT5JAbGwwi/fOEl4qJqrZdhcYsgwruxwFdQMAc=)
                          3: 326131343a373538343a343130303a3a2f34302d3438203d3e20323136333039.roa (hash: J9Fi36nQGqAgueP6UU6iZv8HlrGSaFogPoGVrEhPYYg=)
                          4: 326131343a373538343a343030303a3a2f33362d3438203d3e2036353137.roa (hash: 9qxxzty+nI98+cY44+m4DwmBg2WIZrsDW0snWoFPb+U=)
                          5: 326131343a373538343a343830303a3a2f34382d3438203d3e20323131333538.roa (hash: dxI70qoTw8AqT4GSbNKeSr6HFS9kuFZrrwUT/py32Kc=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/3/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/3/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 15:46:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:ba:ba:27:45:f9:12:f9:90:75:c1:83:39:bd:9b:5a:84:f1:9b:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8
        Validity
            Not Before: Dec 20 21:48:02 2025 GMT
            Not After : Dec 22 01:45:02 2025 GMT
        Subject: CN=3E34ADA0B07FE940E35CB56C3D0BB0198702F838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:33:4a:3a:b5:cc:14:02:4d:df:dd:1e:99:1e:
                    5e:a5:a6:0f:d2:9d:11:85:5f:63:ed:89:25:23:38:
                    bb:73:41:8e:17:b0:b5:8d:16:44:33:ae:a0:90:26:
                    d0:f6:64:f1:6a:2a:b8:16:9d:0f:e9:02:3b:dc:48:
                    6c:24:43:06:c0:f9:7a:51:38:1e:19:bf:6b:40:06:
                    4b:04:2c:ae:f6:78:7c:24:28:e5:a2:0e:78:cb:8f:
                    7e:e7:22:99:53:cf:15:b1:1e:7a:3f:ae:9e:f0:e0:
                    17:ae:b7:29:6e:be:4d:29:fd:82:26:5e:02:8e:8b:
                    74:bd:e5:ae:a7:d9:a2:be:9b:ed:3b:0e:7b:7c:4b:
                    86:20:fd:d5:73:ee:e5:aa:30:e0:df:ec:a7:4c:14:
                    aa:c0:b3:40:4e:6e:b6:47:cb:60:05:06:b2:d5:90:
                    69:5b:82:39:31:56:e6:d2:e5:ab:7a:d5:f8:ba:94:
                    a9:88:94:42:fa:a0:cf:0b:f7:fc:e1:0f:0a:ba:67:
                    a6:0c:2a:1f:66:18:2d:84:77:8b:37:6e:d3:32:4e:
                    47:71:aa:09:f2:15:57:b4:fd:d1:22:95:10:ad:93:
                    50:75:cf:e6:01:a8:97:34:6f:dc:dd:13:98:ff:5b:
                    39:34:a0:e9:7b:68:e3:15:81:33:3f:94:5a:a1:a3:
                    72:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:34:AD:A0:B0:7F:E9:40:E3:5C:B5:6C:3D:0B:B0:19:87:02:F8:38
            X509v3 Authority Key Identifier:
                keyid:FA:71:0E:21:BC:41:E9:82:7D:52:D6:6D:E9:8E:F8:E9:AC:E9:B1:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/3/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/3/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:d4:32:fa:ae:bf:2e:60:b9:de:82:ff:e7:49:08:81:d4:0f:
         28:cb:2c:be:54:d5:49:9b:e4:4a:da:76:53:94:b7:3d:c2:e8:
         5e:a8:29:1d:50:a0:d3:90:12:cd:61:50:ac:68:c6:2f:1d:63:
         47:a8:fb:31:32:a0:99:7c:70:c3:5f:41:8c:8f:05:7e:ba:71:
         e9:6d:e0:4f:0b:0d:6c:4c:fa:b8:91:aa:dc:84:67:31:dd:2e:
         0d:31:07:2d:10:d8:9a:7d:a2:ad:3c:05:cf:92:47:5b:3f:34:
         b6:bd:e0:e0:53:a7:99:25:60:f4:f0:b1:3f:b4:78:ee:dc:e6:
         5d:5a:01:39:35:2c:bc:30:73:02:45:1e:5f:32:fd:a2:4b:31:
         19:ba:54:bd:44:45:fe:7f:e0:47:97:95:4f:68:d3:4d:5d:5f:
         d3:c1:ec:04:a9:0f:f8:62:b5:45:50:0a:02:7e:fd:a7:56:f9:
         9d:b6:18:de:b6:c4:5f:7c:7a:0a:77:fb:90:ea:3e:be:8c:c9:
         e8:88:e8:c6:b0:d9:e4:66:8d:9c:6c:3f:ae:d4:bd:f6:96:07:
         3f:b5:77:15:82:aa:54:e3:fd:71:8a:2b:62:e7:38:0f:2c:da:
         43:67:0c:96:b6:4d:14:6b:e9:93:23:41:e5:85:97:04:07:e6:
         31:d5:d9:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----