This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft
File:                     ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft (raw, json)
Hash identifier:          JjTlDCNBWKtohcK4w1s3laTs1FvPMemRcNHwjjznI+A=
Subject key identifier:   1F:4C:7D:27:33:85:D8:22:8E:9D:F6:BE:94:D2:7C:A9:5A:9E:A3:9E
Authority key identifier: ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B
Certificate issuer:       /CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b
Certificate serial:       0D93F82472FBEF8FDED29A06A8A138BACCC87091
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft
Manifest number:          2F
Signing time:             Thu 18 Dec 2025 11:42:32 +0000
Manifest this update:     Thu 18 Dec 2025 11:37:32 +0000
Manifest next update:     Fri 19 Dec 2025 15:30:32 +0000
Files and hashes:         1: 3139342e3234362e33372e302f32342d3234203d3e20313534303439.roa (hash: qsoqYvzpUXEnewa636Uqf3ZdHju9vYqXC78N1RH7Kt0=)
                          2: 34352e3134332e3136312e302f32342d3234203d3e203631333137.roa (hash: 8ZjMd6obm3N7HBniZT8uftJQwQbBGvAMihymyaoAi+E=)
                          3: 34352e3134392e3136352e302f32342d3234203d3e20323039303433.roa (hash: xof4y/WucaiGMtyPzgbTPsOcPFlb9obn6jFW42zp3IM=)
                          4: 3139342e3234372e34352e302f32342d3234203d3e20313337353137.roa (hash: 7Uz0iGXKq5oSbUI44D0T64XUT0jHl47mRLVxjRhD2eU=)
                          5: 34352e3134332e3136332e302f32342d3234203d3e203139343337.roa (hash: M8Y5TaWjTiVOLanqncdwCCTpjaAInXMAJmIU/gVIuL8=)
                          6: 3139342e35302e312e302f32342d3234203d3e203634323637.roa (hash: Y111o5heSVgTuvX1afqOIbWwexv6C9e08p+YRNlvpVI=)
                          7: 3139342e3234372e34342e302f32342d3234203d3e20313432313436.roa (hash: TqX0P9wlnvbZoWAo8DlV20oJQITx6kCNiVhWbz6v/l4=)
                          8: 34352e3134392e36302e302f32342d3234203d3e20383334.roa (hash: HuEEuRf4Jr4z3JTWzq3FSu67ML5pTmz1yPEl7HwtSVY=)
                          9: 3139342e35302e342e302f32342d3234203d3e20343030303339.roa (hash: 1KQ8U/cyI6RlRLUmJsQ7MnZR4YGCCRfjVSVg2/aEhuA=)
                          10: 34352e3134392e3136372e302f32342d3234203d3e20323132363639.roa (hash: G5FQ1l+cRk3n7sDIEiJiOqD91u3IjodfdNcjTCN0Zms=)
                          11: ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl (hash: Ai8K8Mx3R/aPbt7h1146oAzzfbx7Xi9KL4c6ZnAeb38=)
                          12: 34352e3134332e3136302e302f32342d3234203d3e203232313638.roa (hash: R01FRlBDr9pZoq05BG3LRHuNkIAJs+FNxUn/NkK9at8=)
                          13: 34352e3134392e3136362e302f32342d3234203d3e20323132333834.roa (hash: oGRqBKIGwkwo89Qzo8J8QE2XhyVF3R37X5VJTJkYTLY=)
                          14: 3139342e35302e312e302f32342d3234203d3e203534323532.roa (hash: ruvdsYTXtE0Ab54FYmgOEkBccmfDScUwXgNFAX7lgcQ=)
                          15: 34352e3134392e3136342e302f32342d3234203d3e203235333639.roa (hash: a0LqwFPI6pwa1fZnOKWJVr+UvNzZLlo/pfpnRlcnUlw=)
                          16: 34352e3134392e36312e302f32342d3234203d3e20313335333931.roa (hash: CjBHEb6e8KCFokD4ry4Ct4NNWk9/i3N//pYJT3Rzvpg=)
                          17: 3139342e35302e312e302f32342d3234203d3e20333937363330.roa (hash: TeUJtf1ikY7LLYRPrAz/E+BsfW9QE1+7cNe6Ilv12VI=)
                          18: 34352e3134392e36322e302f32342d3234203d3e203633313939.roa (hash: vZtUK+cyWn9HqZW47BPiCvcZESw+S9eULE1Gd8jVpHQ=)
                          19: 34352e3134332e3136322e302f32342d3234203d3e203233343730.roa (hash: OcZ6EMgc6x8+IMfJh9quglLv9DVchqMI90FMfGysZqA=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 15:30:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:93:f8:24:72:fb:ef:8f:de:d2:9a:06:a8:a1:38:ba:cc:c8:70:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b
        Validity
            Not Before: Dec 18 11:37:32 2025 GMT
            Not After : Dec 19 15:30:32 2025 GMT
        Subject: CN=1F4C7D273385D8228E9DF6BE94D27CA95A9EA39E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2f:38:5c:6e:06:e1:92:55:18:6d:8e:f4:b7:
                    ba:e2:df:db:e2:b9:31:5c:2a:31:00:a0:fe:64:b6:
                    8b:f2:cb:7d:bc:4a:21:13:71:22:dd:01:01:10:ae:
                    11:c3:c2:d0:a2:b7:98:80:73:24:87:27:f1:4d:f9:
                    92:ed:dd:e8:38:1f:62:52:48:c6:04:9f:e2:bf:f2:
                    d8:aa:d7:5b:be:75:cf:c4:c1:4b:84:fb:a2:fa:84:
                    7e:ce:8d:8e:8b:7d:0f:25:60:c0:23:ba:5a:0c:36:
                    5f:9f:43:5e:62:26:bc:2d:07:fc:d4:25:cc:d6:47:
                    2b:f5:3e:8a:ec:dc:86:6d:62:d8:ec:54:27:9c:6b:
                    d1:5a:c7:0e:2f:25:3c:ab:4d:87:80:a8:f7:98:6c:
                    ac:38:1f:bd:dd:7e:a7:46:e0:56:8e:9d:1b:2d:04:
                    fb:0b:3e:46:98:6c:a5:ab:c2:77:43:c7:85:3b:27:
                    a4:a0:d5:95:92:71:40:ab:dc:8a:82:ed:69:e0:03:
                    5d:80:af:53:ba:d4:df:12:4f:2b:e7:c5:83:8c:79:
                    ec:77:bf:83:72:c5:b5:7c:88:86:35:ad:46:30:82:
                    cb:13:aa:a2:c3:83:fd:15:5c:f2:3b:2b:da:2d:b1:
                    90:4f:c5:14:b9:01:0d:9c:4b:27:8e:7b:41:80:01:
                    46:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:4C:7D:27:33:85:D8:22:8E:9D:F6:BE:94:D2:7C:A9:5A:9E:A3:9E
            X509v3 Authority Key Identifier:
                keyid:ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:82:27:9e:dc:9e:f1:3b:44:0e:d8:ec:43:68:d4:7c:38:d7:
         cb:f0:11:ba:b6:f8:27:03:47:c1:7d:be:39:aa:78:28:e4:d4:
         6b:55:8f:53:99:d5:6d:b1:35:2b:7e:f4:d1:cb:01:d7:0f:33:
         f1:a7:72:cc:80:ca:f7:af:c5:fa:14:b2:b0:e6:2e:97:98:1a:
         12:9c:b8:cf:15:70:55:ed:e7:c9:ee:3f:b6:7f:a2:69:0d:60:
         71:66:2d:b9:15:0d:fe:03:c6:59:88:20:ce:a8:65:7f:3a:e3:
         f3:93:3e:61:59:73:37:ac:5c:ad:4b:51:ef:c5:a7:4f:54:53:
         ea:28:a9:49:43:7d:d8:af:a8:51:6e:ba:3d:3b:3a:83:d1:0b:
         88:9a:b8:fe:a6:c5:2d:3f:e2:dc:73:59:d1:95:1b:91:10:c7:
         a7:fa:be:3a:66:86:38:7f:e5:10:be:77:59:72:16:5c:13:83:
         7e:f6:04:4f:19:eb:f3:4b:f0:47:95:28:a5:a9:72:9f:c9:26:
         e4:00:36:d2:e7:34:81:d0:0f:19:01:a8:7f:ba:16:32:11:31:
         2f:76:18:c9:ee:77:be:c3:3a:61:91:ad:fe:95:bd:ee:48:a0:
         7d:96:61:8b:75:15:27:71:f0:3e:2f:db:36:0b:ad:4f:94:98:
         d5:43:de:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 07:42:53 2025 by rpki-client