This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft
File:                     51917E722DB03952D9056BED2F6BD4BF98B78976.mft (raw, json)
Hash identifier:          gqTxo3nVgKyDNCORgd7Pe+fypEpyx6q38bDCR/gUe6g=
Subject key identifier:   FC:6F:40:11:0B:83:59:09:1B:6B:CD:4B:1C:1E:27:5D:8C:B0:09:DB
Authority key identifier: 51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76
Certificate issuer:       /CN=51917E722DB03952D9056BED2F6BD4BF98B78976
Certificate serial:       54EE0814435096718884E6F94C4068D205F4EEF5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft
Manifest number:          0129
Signing time:             Fri 19 Dec 2025 18:04:54 +0000
Manifest this update:     Fri 19 Dec 2025 17:59:54 +0000
Manifest next update:     Sat 20 Dec 2025 18:38:54 +0000
Files and hashes:         1: 326131343a373538303a666635313a3a2f34382d3438203d3e20323039373130.roa (hash: KcfiSDiqDvlLOqfaLqph9s6F4NvpySAcmNFiwDriyms=)
                          2: 326131343a373538303a666635323a3a2f34382d3438203d3e20323039373130.roa (hash: vs66PWFM6L/hirNyhIXTRaz65c001j+IhkCdp8VdfS4=)
                          3: 326131343a373538303a666635303a3a2f34382d3438203d3e20323039373130.roa (hash: RhrZumuCHn+6y3yZr34sdgh4sb8kS47/Ka9E3B3UluQ=)
                          4: 326131343a373538303a3530303a3a2f34302d3430203d3e20323039373130.roa (hash: UtWLjV2JD6X8emwUC9bu8RyXGCD7bzymrTBVIEkaVv8=)
                          5: 326131343a373538303a666635353a3a2f34382d3438203d3e20323039373130.roa (hash: 5weylF9E+kZUqdJn7nMGLccAIkWjUNuo5MqarqyfkO8=)
                          6: 326131343a373538303a666635333a3a2f34382d3438203d3e20323039373130.roa (hash: UpFVw7x1NBf/Uix4G0zJEj+QV4riL3tEIjso5GywhOU=)
                          7: 326131343a373538303a666635363a3a2f34382d3438203d3e20323039373130.roa (hash: SwKF9ZgurLBB1Omp9sHNYZoTnYJ/E2ALGPkMC5kD1BA=)
                          8: 326131343a373538303a666635343a3a2f34382d3438203d3e20323039373130.roa (hash: i7VkbN6Rb5CnHlmR8BF2dlC+Uq3PFV4wJTcaolWAu+U=)
                          9: 326131343a373538303a3530303a3a2f34322d3432203d3e203331383938.roa (hash: 7z5RoyaJRkP9nx99eQ4HknE9KjY7eFLuMQrU4NhLP9s=)
                          10: 51917E722DB03952D9056BED2F6BD4BF98B78976.crl (hash: TDvQFnE0e7TDNaJPYuGj+yICUrjTdVpBrDRGqYRIENY=)
                          11: 326131343a373538303a666635303a3a2f34342d3434203d3e20323039373130.roa (hash: SHYewRnAEyfHeIS/ErCy1dNpuo8kVPzhKkgjNNzYVkM=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 18:38:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:ee:08:14:43:50:96:71:88:84:e6:f9:4c:40:68:d2:05:f4:ee:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51917E722DB03952D9056BED2F6BD4BF98B78976
        Validity
            Not Before: Dec 19 17:59:54 2025 GMT
            Not After : Dec 20 18:38:54 2025 GMT
        Subject: CN=FC6F40110B8359091B6BCD4B1C1E275D8CB009DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f9:1b:2c:e4:96:08:c7:cd:43:da:26:d8:95:
                    21:f1:1a:6a:98:7b:f2:db:e9:2c:cb:f1:b9:0e:92:
                    24:b5:8a:3e:3e:77:10:c8:eb:8e:3e:65:77:92:bc:
                    da:19:58:6c:21:d7:b3:67:ab:e4:fa:bf:c3:1f:10:
                    b6:9e:26:d7:11:95:a0:94:5a:24:5f:e1:a3:89:61:
                    9b:4e:ac:7f:da:30:2f:66:2d:8e:10:8e:69:bf:c6:
                    0e:29:75:77:c1:2e:52:98:da:0c:00:1e:aa:60:a7:
                    70:33:a9:24:51:15:b1:e0:ba:e8:a5:be:30:4c:74:
                    03:06:b9:bb:d5:e1:eb:f1:05:a5:5d:2d:46:0d:a2:
                    b6:ac:cb:01:9a:ea:2b:9c:ff:e9:ea:52:c8:6f:f6:
                    f2:bc:3b:f2:0c:13:ee:19:bc:d2:50:24:15:b3:01:
                    2e:65:a0:9e:f5:10:14:7e:2a:23:e0:79:af:ce:fc:
                    99:b3:d3:fc:a4:88:57:29:09:91:ba:ee:ee:31:94:
                    75:80:9e:fb:9d:65:38:b8:b1:16:a9:1a:74:38:5a:
                    ba:4b:e7:65:56:4a:93:26:3c:c1:0f:12:2f:3b:1f:
                    75:5a:5b:a8:87:e5:8c:bd:89:a3:d9:1a:22:d7:b5:
                    6f:1d:00:e9:14:a9:40:36:4a:50:1f:e3:e2:d0:cb:
                    d4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:6F:40:11:0B:83:59:09:1B:6B:CD:4B:1C:1E:27:5D:8C:B0:09:DB
            X509v3 Authority Key Identifier:
                keyid:51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:00:34:10:44:02:9e:fa:7c:d4:07:e4:04:41:47:3e:5c:98:
         22:bf:e5:09:2b:31:9a:d8:11:f1:b7:50:7b:28:85:5b:44:ed:
         24:bd:5c:5f:04:07:29:ea:43:a0:cf:48:f5:f6:56:27:a1:36:
         b0:98:a0:76:82:4b:08:d4:5f:36:7a:b8:57:c0:dc:0d:db:96:
         d7:a6:d9:6b:e3:a0:88:44:9b:e6:30:80:5b:14:3c:f9:6d:b8:
         99:10:11:5c:e5:8b:b6:99:fa:ad:d0:39:d8:40:26:c5:c6:0a:
         ae:30:7c:fa:52:5c:41:dd:63:e5:46:01:a9:b6:9a:cd:e8:c0:
         f9:d2:a0:a2:28:cb:25:8a:7f:ac:d3:15:52:5a:a9:13:cb:17:
         fb:b4:67:54:ec:cb:96:25:96:03:8e:05:25:68:72:80:51:be:
         b7:d8:5a:8b:56:d8:97:80:6f:d3:d8:54:3d:5b:88:f6:76:dc:
         c2:e6:e8:09:fa:09:22:8c:83:da:f8:94:9d:bd:d5:b8:32:45:
         b2:62:4e:ab:51:af:4a:d6:e5:5e:49:dd:37:8b:36:01:72:c6:
         30:4e:53:90:78:17:80:9c:bc:05:f0:24:04:5b:69:26:c8:7f:
         2f:0f:be:bf:93:89:b7:0d:d9:ab:04:6a:9c:bf:f7:26:bb:7d:
         f5:68:57:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 08:46:36 2025 by rpki-client