This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft
File:                     1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft (raw, json)
Hash identifier:          ANlO+hhiCElVe9f+7XSuvGCpDsTYSL5K0v+SOt/a+IA=
Subject key identifier:   20:1D:BD:A2:1C:2D:FC:1C:57:16:BA:EE:4E:A6:A5:48:8E:A9:EA:26
Authority key identifier: 1D:BD:1D:47:FD:8E:45:74:C8:42:17:43:C9:CC:5F:0E:F8:3E:0E:71
Certificate issuer:       /CN=1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71
Certificate serial:       5FDC231A6482E1E8E73B53C5A191A6EE8222B3F6
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft
Manifest number:          034F
Signing time:             Sat 20 Dec 2025 05:41:39 +0000
Manifest this update:     Sat 20 Dec 2025 05:36:39 +0000
Manifest next update:     Sun 21 Dec 2025 09:27:39 +0000
Files and hashes:         1: 326131343a316563373a663030643a3a2f34382d3438203d3e20323136313133.roa (hash: RA+L2a9rUnQEkE0h3dE9SdgUVHKokLJZl3eEmnwupDU=)
                          2: 326131343a316563373a663030653a3a2f34382d3438203d3e203336383332.roa (hash: NchO6Xk6Xarz93hp9H8fOtN5l3Sk4YKm9dDl0QiIwEY=)
                          3: 326131343a316563373a663030303a3a2f34302d3430203d3e20323038343533.roa (hash: kUd+OV7q9DAowS2L3/fdq/oS4HUMTFtScny+gWU7CG0=)
                          4: 326131343a316563373a663030663a3a2f34382d3438203d3e20323038343533.roa (hash: ZBQrTYQq6EzEXXQqVVLmnECxmx5vDStz1fI8gjrWa9o=)
                          5: 1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl (hash: AxImLjMAEny4oWhNG5nEDJqVyGB0b8qeX99UH8wfdpk=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 09:27:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:dc:23:1a:64:82:e1:e8:e7:3b:53:c5:a1:91:a6:ee:82:22:b3:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71
        Validity
            Not Before: Dec 20 05:36:39 2025 GMT
            Not After : Dec 21 09:27:39 2025 GMT
        Subject: CN=201DBDA21C2DFC1C5716BAEE4EA6A5488EA9EA26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:de:36:60:b7:d7:19:1e:b3:1d:17:65:b3:bb:
                    16:f4:ee:38:53:4f:3b:96:ed:ad:db:36:c9:94:59:
                    40:c1:69:d4:cb:9d:45:b8:13:fc:32:64:67:84:49:
                    0d:8a:92:7e:9d:2f:49:c1:8a:1a:82:bb:b1:0f:1f:
                    53:f5:ed:15:d7:3d:be:6c:64:26:8e:bb:18:1c:33:
                    4c:31:06:69:a9:0b:f0:3a:21:03:db:4a:49:bd:c5:
                    d1:e7:ec:b1:e2:23:2c:b9:8e:35:b4:56:dd:7d:1d:
                    fb:39:c8:7d:76:4c:0e:03:94:95:2f:10:42:22:4b:
                    b7:c4:30:31:9d:d5:04:b1:bf:aa:f9:db:0e:19:00:
                    3e:d3:69:92:8d:4b:ca:4b:68:60:00:8d:7b:8d:f0:
                    c2:6b:06:43:00:9c:72:a4:46:c3:8c:bf:4a:32:74:
                    6e:eb:0d:52:68:0b:fd:a9:6c:70:68:22:84:19:89:
                    83:42:ed:cd:90:ec:50:03:62:76:9c:ae:0a:6d:29:
                    6b:03:31:6b:d2:6f:ff:a9:97:f9:79:cb:97:ba:bf:
                    c5:97:2c:a8:9c:31:13:4f:c0:28:26:4c:84:f9:4b:
                    bd:7f:85:a8:1e:bb:8f:0d:7a:55:23:2c:dd:1a:5b:
                    f5:22:5b:ae:e3:80:2f:a6:57:6d:3b:2f:c6:29:14:
                    c7:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:1D:BD:A2:1C:2D:FC:1C:57:16:BA:EE:4E:A6:A5:48:8E:A9:EA:26
            X509v3 Authority Key Identifier:
                keyid:1D:BD:1D:47:FD:8E:45:74:C8:42:17:43:C9:CC:5F:0E:F8:3E:0E:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:22:7d:2d:68:f7:6c:0d:b8:1a:60:e8:ff:20:1d:52:7f:f6:
         52:fd:45:2b:8e:b5:fa:f1:c9:c2:d5:b9:4b:2c:90:8a:65:4d:
         21:e3:41:07:be:b7:b7:37:83:56:4b:71:77:6c:1c:fc:29:6d:
         9f:58:e8:b5:1c:62:d7:0f:6d:4a:2c:f3:e8:e9:e2:90:d5:09:
         d9:33:85:17:3f:45:f9:d8:24:1a:8a:e6:2e:79:5a:c8:7c:9c:
         1e:6f:16:6a:8b:30:c3:71:60:e0:60:6c:63:e1:c1:2b:e1:c1:
         a2:0e:8d:e8:b2:f0:c6:fd:57:3f:d3:2e:16:42:a2:85:5e:fa:
         f6:86:44:46:e9:0a:1d:4c:3a:96:b6:c8:27:08:b5:45:7a:89:
         38:9c:0d:52:c5:f8:fc:81:6d:52:d5:02:ff:86:54:42:8a:a6:
         35:fa:32:1c:d3:ab:da:72:47:f8:f5:45:5f:64:66:79:48:2e:
         0a:0f:7f:fd:ba:05:e9:9b:3d:74:fd:62:0c:28:02:09:aa:87:
         04:15:b0:c3:15:4e:ac:11:1c:28:ff:e7:f8:eb:8e:73:a7:69:
         79:e4:66:7b:ad:88:c3:62:c4:cf:3e:dc:28:67:9c:c6:a0:88:
         ad:7a:f5:be:28:c7:52:24:ce:ba:f6:df:6b:cd:59:9a:2e:48:
         f3:19:b6:4b
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUX9wjGmSC4ejnO1PFoZGm7oIis/YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMURCRDFENDdGRDhFNDU3NEM4NDIxNzQzQzlDQzVGMEVG
ODNFMEU3MTAeFw0yNTEyMjAwNTM2MzlaFw0yNTEyMjEwOTI3MzlaMDMxMTAvBgNV
BAMTKDIwMURCREEyMUMyREZDMUM1NzE2QkFFRTRFQTZBNTQ4OEVBOUVBMjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ3jZgt9cZHrMdF2Wzuxb07jhT
TzuW7a3bNsmUWUDBadTLnUW4E/wyZGeESQ2Kkn6dL0nBihqCu7EPH1P17RXXPb5s
ZCaOuxgcM0wxBmmpC/A6IQPbSkm9xdHn7LHiIyy5jjW0Vt19Hfs5yH12TA4DlJUv
EEIiS7fEMDGd1QSxv6r52w4ZAD7TaZKNS8pLaGAAjXuN8MJrBkMAnHKkRsOMv0oy
dG7rDVJoC/2pbHBoIoQZiYNC7c2Q7FADYnacrgptKWsDMWvSb/+pl/l5y5e6v8WX
LKicMRNPwCgmTIT5S71/hageu48NelUjLN0aW/UiW67jgC+mV207L8YpFMdVAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUIB29ohwt/BxXFrruTqalSI6p6iYwHwYDVR0j
BBgwFoAUHb0dR/2ORXTIQhdDycxfDvg+DnEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE0NzZkNjItOWNmYS00ODcxLWEyZDktZmFkZjU3ODFj
MTFiLzIvMURCRDFENDdGRDhFNDU3NEM4NDIxNzQzQzlDQzVGMEVGODNFMEU3MS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05OGE0LTRj
N2UtYTBlMS04MDU3YTRmMDg2YzkvMC8xREJEMUQ0N0ZEOEU0NTc0Qzg0MjE3NDND
OUNDNUYwRUY4M0UwRTcxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzcxNDc2ZDYyLTljZmEtNDg3MS1hMmQ5LWZhZGY1NzgxYzExYi8yLzFEQkQxRDQ3
RkQ4RTQ1NzRDODQyMTc0M0M5Q0M1RjBFRjgzRTBFNzEubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBuIn0t
aPdsDbgaYOj/IB1Sf/ZS/UUrjrX68cnC1blLLJCKZU0h40EHvre3N4NWS3F3bBz8
KW2fWOi1HGLXD21KLPPo6eKQ1QnZM4UXP0X52CQaiuYueVrIfJwebxZqizDDcWDg
YGxj4cEr4cGiDo3osvDG/Vc/0y4WQqKFXvr2hkRG6QodTDqWtsgnCLVFeok4nA1S
xfj8gW1S1QL/hlRCiqY1+jIc06vackf49UVfZGZ5SC4KD3/9ugXpmz10/WIMKAIJ
qocEFbDDFU6sERwo/+f4645zp2l55GZ7rYjDYsTPPtwoZ5zGoIitevW+KMdSJM66
9t9rzVmaLkjzGbZL
-----END CERTIFICATE-----