This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft
File:                     A1EE5D09A0F5D0D87611013175C62E35777DA926.mft (raw, json)
Hash identifier:          DBbAOPdJrMJtC6rLmC2k5ey1n1uutSy26nx9Wiks4Pc=
Subject key identifier:   5F:DF:E1:0F:2B:5B:96:16:B6:03:29:10:BA:93:DC:D2:8F:8F:46:A4
Authority key identifier: A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26
Certificate issuer:       /CN=A1EE5D09A0F5D0D87611013175C62E35777DA926
Certificate serial:       1AC682374EFE8C63F06AD677D81F85B91654F3EC
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft
Manifest number:          02DD
Signing time:             Sat 20 Dec 2025 07:03:19 +0000
Manifest this update:     Sat 20 Dec 2025 06:58:19 +0000
Manifest next update:     Sun 21 Dec 2025 08:38:19 +0000
Files and hashes:         1: 326131343a373538313a6666303a3a2f34382d3438203d3e20323135333634.roa (hash: nCwmmbP9gIjoEy95/v504iaQnyadcB1V8SB+J8/exJE=)
                          2: 326131343a373538313a393130303a3a2f34382d3438203d3e20323134383431.roa (hash: TejNBoLvDqd6zzS1lptpFez+EdbwzXYJ6yM06vDQ9j0=)
                          3: 326131343a373538313a393031303a3a2f34342d3438203d3e20313430393135.roa (hash: 34CzDRdWck3x5QdKwY21JLn4ljy5X8PbpWV6VL1UPl8=)
                          4: 326131343a373538313a393230303a3a2f34302d3438203d3e203134343437.roa (hash: kZ5VHXe1kAhX5tvSZsX77jhReBFDdvoZNrdYu896udw=)
                          5: 326131343a373538313a393030303a3a2f33382d3338203d3e20323135333634.roa (hash: coziJfcvV7NZzAVbts1JQ6BKxT5yxFwdbwzsra8WCDw=)
                          6: 326131343a373538313a393061303a3a2f34332d3438203d3e20323135333634.roa (hash: imEjvtvCCz1eqwuI8/eFHCFB+WwTlJEDfPXRombfVNU=)
                          7: 326131343a373538313a393030303a3a2f34342d3438203d3e20323135333634.roa (hash: a41Xyu+1QM63sJBLjRXDXCMByy5FuK1D59e4kuksRCE=)
                          8: 326131343a373538313a393330303a3a2f34302d3438203d3e20323039313039.roa (hash: TWxboGw6/lxhoMiWiDnyOg4O9SxsEOXusyizWuah2wo=)
                          9: 326131343a373538313a393066663a3a2f34382d3438203d3e20323135363137.roa (hash: JYfFIGSSsdhSc4V2wOJu9QFkSSC76MmCAjKsdTBmtQA=)
                          10: 326131343a373538313a393230303a3a2f34302d3438203d3e20323039313039.roa (hash: pMn1lmNiSpZ9TgFB+IRiwlTd7+lbxKBF0vBWWTkkXYs=)
                          11: 326131343a373538313a393066653a3a2f34382d3438203d3e20323135333634.roa (hash: MyeYfbLc0//rjwnR8ZJ3TnxqQq4JflTHlrUTLQvk3gU=)
                          12: 326131343a373538313a393165313a3a2f34382d3438203d3e20323135333634.roa (hash: F9b5BNgK8TO7NWcYalz+qyjvcxyYqlq+/TYg6mk1sTI=)
                          13: 326131343a373538313a393032303a3a2f34342d3438203d3e203339373533.roa (hash: 0nNVfH0UNkgevPAH9ITuwY5tE24LlYCDjFx46F3vtM0=)
                          14: A1EE5D09A0F5D0D87611013175C62E35777DA926.crl (hash: PVr74I8wRmSQGzRFQZ2wbsAVhVv/159SS3IU0KfiggA=)
                          15: 326131343a373538313a393065653a3a2f34382d3438203d3e20323135333634.roa (hash: 5IFSShC1J1DPKr9fgEjy0DHzTqmR8W17B+sGrWUb29Q=)
                          16: 326131343a373538313a393165303a3a2f34382d3438203d3e20323135333634.roa (hash: 2aDuD/D+lIpzPYcnGpfR3f4GvH7bzD6tXNlt4SzLv7s=)
                          17: 326131343a373538313a393063303a3a2f34342d3438203d3e203134343437.roa (hash: 1KwjyQC5mQq96/1cZ1aeVWaWGIQIpF6Ei+ZSWIfd5WM=)
                          18: 326131343a373538313a393130613a3a2f34382d3438203d3e20323135313438.roa (hash: g9TWsQZsTWz7mSDp6Y61gNZDSwAn6dADsEyVm1AJtlU=)
                          19: 326131343a373538313a393061303a3a2f34332d3438203d3e203134343437.roa (hash: jsviVwthOZBlV5+oRRFYDUvQF+OHc4iDYR8PVPHLwkA=)
                          20: 326131343a373538313a393230303a3a2f34302d3430203d3e203134343437.roa (hash: wCZcPZ1Lk7X2Qee1qTSfN0RGP0Z21kPGqT0D7sgtD64=)
                          21: 326131343a373538313a393062303a3a2f34342d3438203d3e203134343437.roa (hash: 0s1d24KMFu1kYJPCMrebtn4XcHECqVsweN9wGCszluU=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 08:38:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:c6:82:37:4e:fe:8c:63:f0:6a:d6:77:d8:1f:85:b9:16:54:f3:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1EE5D09A0F5D0D87611013175C62E35777DA926
        Validity
            Not Before: Dec 20 06:58:19 2025 GMT
            Not After : Dec 21 08:38:19 2025 GMT
        Subject: CN=5FDFE10F2B5B9616B6032910BA93DCD28F8F46A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d1:9d:d9:24:b7:62:d4:c6:27:c5:26:97:02:
                    83:43:33:e0:bc:e8:ce:6b:c7:03:a8:5b:a5:7e:b9:
                    57:78:6e:e9:e1:1d:bc:bb:4c:c5:c2:7a:29:d2:e4:
                    82:29:36:77:c0:ae:08:08:e2:dd:22:99:26:6e:81:
                    83:6f:03:56:b2:bb:9c:98:bf:3b:f0:ab:47:e9:a5:
                    4a:02:ed:9f:52:8d:e6:34:ba:37:2f:43:30:26:65:
                    14:39:ea:fa:8c:2c:32:72:8f:5a:72:95:f7:38:a6:
                    cf:b3:f9:2e:f6:f0:49:f0:ee:f5:34:0c:f8:da:a9:
                    52:30:28:27:aa:7a:2a:f9:59:ed:f8:48:fd:34:90:
                    1e:c9:2f:7a:b4:fe:f9:f8:2c:7d:b4:b8:35:f4:f5:
                    46:65:26:d5:91:35:79:92:e3:2c:06:35:a5:ff:64:
                    91:83:14:ca:c8:c3:5b:c9:09:6b:c3:34:38:8a:7b:
                    7b:b2:87:ae:9c:35:78:fd:7d:b7:59:03:a4:23:56:
                    5d:b7:5c:6b:31:3d:89:56:9c:55:1e:5b:f4:a8:95:
                    9e:7b:bb:21:98:8b:63:b6:9a:ac:71:a3:a5:8b:d3:
                    4a:af:bd:9c:2d:93:ec:ee:5d:8c:a4:06:7a:9a:80:
                    ad:c5:4d:24:00:c1:6e:d3:f9:34:0d:d2:ea:97:70:
                    d7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:DF:E1:0F:2B:5B:96:16:B6:03:29:10:BA:93:DC:D2:8F:8F:46:A4
            X509v3 Authority Key Identifier:
                keyid:A1:EE:5D:09:A0:F5:D0:D8:76:11:01:31:75:C6:2E:35:77:7D:A9:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/0/A1EE5D09A0F5D0D87611013175C62E35777DA926.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:bd:a2:78:f4:71:98:eb:01:22:85:18:6a:cd:9b:49:cf:2a:
         ca:0b:de:6a:46:d4:b6:ff:ee:b8:00:f7:62:cb:d0:c9:97:2d:
         9b:83:b9:30:82:f8:9a:26:5e:40:46:b3:3d:32:42:3a:bb:64:
         5d:d2:ba:6f:76:23:45:dd:db:8d:b7:bc:72:fd:00:43:62:f6:
         c9:6a:bd:16:f9:c6:52:74:39:70:c8:35:8c:0b:c7:0d:e6:24:
         bb:e5:f0:d9:a8:e3:b5:b7:28:99:b4:35:92:d2:5c:82:af:1a:
         6f:88:42:5a:8c:b9:2d:d8:78:92:9b:ea:6a:8e:99:61:e1:21:
         0d:fc:e4:2b:75:86:d1:a0:e2:d8:aa:1a:d9:6f:e6:a8:45:c2:
         b6:8e:a8:c4:8b:95:cf:79:c2:4f:b2:01:08:1d:ab:b4:a0:d9:
         cd:4b:0f:0c:33:e3:6c:21:7d:a2:04:40:51:15:f9:bb:de:f0:
         b5:47:59:12:a7:fc:3e:20:a2:8f:e7:95:89:c4:fa:1a:1c:9a:
         0a:fb:87:5e:dc:ca:dd:31:e5:e3:e7:7a:e5:91:87:83:37:a1:
         66:d5:bb:28:a3:cd:3d:ed:3f:32:31:e4:ba:93:5f:ac:f8:05:
         34:c6:cd:34:ec:02:2c:73:2c:b7:a4:a1:29:24:2a:d0:c0:61:
         43:1b:79:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 12:38:05 2025 by rpki-client