This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft
File:                     1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft (raw, json)
Hash identifier:          KHY4rARF9rsv6nRtwBoOaazcaCca2WP8j3PwxeRnSwI=
Subject key identifier:   D3:3F:1A:70:E7:00:0D:8A:48:B0:F6:D2:9B:F9:9D:9C:8E:9C:50:F0
Authority key identifier: 1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB
Certificate issuer:       /CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB
Certificate serial:       144D3187DD40C06F5618254BE4D3783768BAF28C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft
Manifest number:          02E9
Signing time:             Fri 19 Dec 2025 08:01:56 +0000
Manifest this update:     Fri 19 Dec 2025 07:56:56 +0000
Manifest next update:     Sat 20 Dec 2025 11:51:56 +0000
Files and hashes:         1: 1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl (hash: vWlTzoPkCdc7AliXZdWqURlxfYLssUagYNLrXi5xBoo=)
                          2: 326131343a373538313a643038303a3a2f34312d3431203d3e203337393838.roa (hash: BL4+PYIdcLs3fiOkkamkg94lgyO9kcRHp6ACoQUQ5y8=)
                          3: 326131343a373538313a643330303a3a2f34302d3430203d3e2037353435.roa (hash: 9phDdz/jhh9vxdEc5WXHXIl+cdnJzAyh/6SdvyVejiI=)
                          4: 326131343a373538313a643030303a3a2f34312d3431203d3e203337393838.roa (hash: DvQHKT6M+fkiG6o9KW4wBm0yNbqCXWjg78L/cu4BiJ0=)
                          5: 326131343a373538313a643230303a3a2f34302d3430203d3e203533363637.roa (hash: KPVNDBydB4lEOCddQAWiNda/rm6IVb4G2i+sUeOhrYg=)
                          6: 326131343a373538313a643130303a3a2f34302d3438203d3e203533363637.roa (hash: e+p8+Sw9X8S3Ty3gF9pg+LdvDbV5qMXAYBBthQD4LPE=)
                          7: 326131343a373538313a643230303a3a2f34302d3438203d3e203633343733.roa (hash: OTYsTfrglFs/JKFj7RJtAXdrMe1OUcjbc3WSXqeD0dk=)
                          8: 326131343a373538313a643030303a3a2f34302d3430203d3e203337393838.roa (hash: R4oy1L8+rEt1QdmoGVV7PiYt423B/xK5i6kPhc7W9aI=)
                          9: 326131343a373538313a643130303a3a2f34302d3430203d3e203533363637.roa (hash: M0+yHEN3VX8K+aVDmpusml/7Hx8dbBnadNDMaFbGOzQ=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 11:51:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:4d:31:87:dd:40:c0:6f:56:18:25:4b:e4:d3:78:37:68:ba:f2:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB
        Validity
            Not Before: Dec 19 07:56:56 2025 GMT
            Not After : Dec 20 11:51:56 2025 GMT
        Subject: CN=D33F1A70E7000D8A48B0F6D29BF99D9C8E9C50F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a5:ff:05:a4:ea:52:c9:44:fa:39:04:57:61:
                    89:15:cd:dd:71:36:2c:c4:0a:91:6a:47:72:93:7b:
                    12:58:e8:5b:34:32:12:47:c5:f8:03:d8:50:37:16:
                    ad:3d:94:5f:68:27:4d:ca:f0:f3:5b:67:83:4e:b5:
                    47:f7:83:94:07:4f:1e:0d:1a:2f:fa:bc:4d:80:1f:
                    0b:65:45:fc:40:44:c6:8c:c8:ee:fd:fa:4a:a9:0a:
                    eb:e5:de:71:15:81:b0:f2:7a:f9:b8:bb:ac:bd:bc:
                    0b:4b:e7:b6:5d:35:68:5d:ff:bb:0e:f1:f4:8b:57:
                    e4:de:cf:fa:74:8e:c9:48:ca:01:5f:82:ef:2a:30:
                    c3:ab:46:30:28:0a:fb:e4:79:a9:4a:d0:3c:8b:53:
                    42:87:55:04:0e:5f:7b:da:54:4a:16:fd:d0:a5:b3:
                    4a:46:db:12:bd:61:af:f9:fa:3e:8f:8f:c2:b2:34:
                    ae:b8:c8:25:54:06:93:75:ef:09:76:1a:d8:7a:37:
                    e8:21:d1:f5:ed:72:93:bb:92:d5:cc:60:0e:45:4a:
                    d9:ff:d4:cb:9f:a0:4c:8d:d1:38:0d:ab:eb:c1:0e:
                    47:37:58:7b:22:06:8e:97:16:f6:21:d2:7a:52:64:
                    c9:a5:8a:1c:e1:da:ad:15:c4:20:3f:8d:8c:dd:70:
                    ac:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:3F:1A:70:E7:00:0D:8A:48:B0:F6:D2:9B:F9:9D:9C:8E:9C:50:F0
            X509v3 Authority Key Identifier:
                keyid:1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:24:a5:21:c7:ff:8e:63:45:b9:26:de:78:24:cc:77:ee:fe:
         58:75:b4:15:33:8a:df:7b:0c:86:c9:d8:cb:84:84:4a:74:69:
         97:5a:d5:89:a8:1c:17:8e:bf:4e:f2:b4:ee:a5:1a:ba:47:2c:
         17:9f:53:e1:62:c0:6f:d2:0c:3a:fb:2a:ba:32:23:0a:8d:38:
         1e:aa:d2:d1:54:fe:89:f9:b0:86:66:07:30:06:bf:9f:72:0d:
         2c:5c:d4:0d:e8:8b:99:b3:5f:86:37:66:4c:1d:99:04:4e:ec:
         e2:5d:d3:69:2d:fe:89:43:d2:a8:d9:9e:89:01:4f:44:60:96:
         84:4d:4b:60:56:b9:c8:7e:76:c8:ec:e7:f1:a7:b3:40:44:21:
         b6:83:a4:c1:38:12:84:46:94:a2:8d:e7:0d:26:82:b6:c2:92:
         34:82:d3:95:eb:d5:a2:52:64:a1:b0:84:f7:17:53:8e:ee:71:
         73:1f:a0:d8:3c:1b:68:39:90:82:8b:2a:75:1c:14:19:3a:14:
         35:20:3a:17:a1:2c:e9:9e:c4:00:fa:83:d6:d7:f8:fe:3b:ea:
         a5:d5:3b:e1:68:d5:c7:5c:fa:7c:08:8f:44:dc:44:3e:93:de:
         ed:09:03:89:e6:75:ce:55:0d:99:51:11:82:a2:c0:86:df:5d:
         84:92:29:49
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUFE0xh91AwG9WGCVL5NN4N2i68owwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUY0QzgyODI3NkE5OTY2ODY1QUIyQjU5NTMzRDFDQjFC
RUM4OTBCQjAeFw0yNTEyMTkwNzU2NTZaFw0yNTEyMjAxMTUxNTZaMDMxMTAvBgNV
BAMTKEQzM0YxQTcwRTcwMDBEOEE0OEIwRjZEMjlCRjk5RDlDOEU5QzUwRjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3pf8FpOpSyUT6OQRXYYkVzd1x
NizECpFqR3KTexJY6Fs0MhJHxfgD2FA3Fq09lF9oJ03K8PNbZ4NOtUf3g5QHTx4N
Gi/6vE2AHwtlRfxARMaMyO79+kqpCuvl3nEVgbDyevm4u6y9vAtL57ZdNWhd/7sO
8fSLV+Tez/p0jslIygFfgu8qMMOrRjAoCvvkealK0DyLU0KHVQQOX3vaVEoW/dCl
s0pG2xK9Ya/5+j6Pj8KyNK64yCVUBpN17wl2Gth6N+gh0fXtcpO7ktXMYA5FStn/
1MufoEyN0TgNq+vBDkc3WHsiBo6XFvYh0npSZMmlihzh2q0VxCA/jYzdcKwRAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQU0z8acOcADYpIsPbSm/mdnI6cUPAwHwYDVR0j
BBgwFoAUH0yCgnaplmhlqytZUz0csb7IkLswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYjU5YzEwNmMtNTNiNC00ZTkyLTlmYmEtZDYwODI3YjVi
ZGI4LzAvMUY0QzgyODI3NkE5OTY2ODY1QUIyQjU5NTMzRDFDQjFCRUM4OTBCQi5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8xRjRDODI4Mjc2QTk5NjY4NjVBQjJCNTk1
MzNEMUNCMUJFQzg5MEJCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L2I1OWMxMDZjLTUzYjQtNGU5Mi05ZmJhLWQ2MDgyN2I1YmRiOC8wLzFGNEM4Mjgy
NzZBOTk2Njg2NUFCMkI1OTUzM0QxQ0IxQkVDODkwQkIubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAcJKUh
x/+OY0W5Jt54JMx37v5YdbQVM4rfewyGydjLhIRKdGmXWtWJqBwXjr9O8rTupRq6
RywXn1PhYsBv0gw6+yq6MiMKjTgeqtLRVP6J+bCGZgcwBr+fcg0sXNQN6IuZs1+G
N2ZMHZkETuziXdNpLf6JQ9Ko2Z6JAU9EYJaETUtgVrnIfnbI7Ofxp7NARCG2g6TB
OBKERpSijecNJoK2wpI0gtOV69WiUmShsIT3F1OO7nFzH6DYPBtoOZCCiyp1HBQZ
OhQ1IDoXoSzpnsQA+oPW1/j+O+ql1TvhaNXHXPp8CI9E3EQ+k97tCQOJ5nXOVQ2Z
URGCosCG312EkilJ
-----END CERTIFICATE-----
Generated at Fri Dec 19 18:46:17 2025 by rpki-client