This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft
File:                     E205EBF065FC4929F1802662AE62D7F9762600E6.mft (raw, json)
Hash identifier:          s+jBiTLkiaLO4LYfQRUMrt0H9Ts8YQZiLMTxo7snPaM=
Subject key identifier:   A3:96:FA:1F:4E:AD:F1:9D:46:02:21:B3:0C:39:83:F8:D3:71:0D:9B
Authority key identifier: E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6
Certificate issuer:       /CN=e205ebf065fc4929f1802662ae62d7f9762600e6
Certificate serial:       07D0B46F5417E94C385E769A290F1FF8E02A2BFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft
Manifest number:          019D
Signing time:             Sat 20 Dec 2025 20:25:53 +0000
Manifest this update:     Sat 20 Dec 2025 20:20:53 +0000
Manifest next update:     Sun 21 Dec 2025 23:06:53 +0000
Files and hashes:         1: 326130663a356663303a6164643a3a2f34382d3438203d3e20323035303336.roa (hash: N543k0DcGiJuxubeGma9GZg+VhMwbPVS9ShNVwfZl30=)
                          2: 326130663a356663303a6261643a3a2f34382d3438203d3e20323035303336.roa (hash: tvkflaFeVW3sd8cXnqPd3goXjSItIqLYbambS6E6g9M=)
                          3: E205EBF065FC4929F1802662AE62D7F9762600E6.crl (hash: qPLAO3OiKG7rsr2UV5kKBvGli2QyTHSNlyGlaAaKlLU=)
                          4: 326130663a356663303a626162613a3a2f34382d3438203d3e20323035303336.roa (hash: kdDGBWrURu4f0ClnA4SfgsI29M2UtK1sJ9ldbUvOvNc=)
                          5: 326130663a356663303a666565643a3a2f34382d3438203d3e20323035303336.roa (hash: Qj8pflv8KszWoeUIqOpeKQUtZrsbyJDTmnxefpUjjlo=)
                          6: 39312e3230392e35302e302f32342d3234203d3e20323039333732.roa (hash: UjFw0WQQLm//XoiWgykA8VWz+amzh0YCKaelwGihPq4=)
                          7: 326130663a356663303a623030623a3a2f34382d3438203d3e20323035303336.roa (hash: dtubQqytFEqkt8TqTYJ+KlZgpXqOEEfNHG9KMyAKroE=)
                          8: 39312e3230392e35382e302f32342d3234203d3e203634323637.roa (hash: niqqI9l9161GkRQmVmDrxB+jdLZ/EVQM2QwxTZqxdr8=)
                          9: 326130663a356663303a646561643a3a2f34382d3438203d3e20323035303336.roa (hash: Z7YS72AkRUhmGE/8eVCwX/QArQ7kzj3DMVCvF8nhupE=)
                          10: 326130663a356663303a663030643a3a2f34382d3438203d3e20323035303336.roa (hash: Xgs2aXZ2twwalLnMnwHKHrLdiNgmex+4PLid272RcXc=)
                          11: 326130663a356663303a6163653a3a2f34382d3438203d3e20323035303336.roa (hash: s62/iVKVlW2KdVyTR+Xnv457Z0j5+aZNRyV7RtkAKNQ=)
                          12: 39312e3230392e34382e302f32342d3234203d3e2034363337.roa (hash: 4+D5jdmTDYB1GvCAU0z5GBGlSPW7Q/zpduO0wdWv8pU=)
                          13: 326130663a356663303a646565643a3a2f34382d3438203d3e20323035303336.roa (hash: 6WyHSY5Xp60q1IE95V4h6lwOICpnxsevWtnXKH+E1RA=)
                          14: 326130663a356663303a6265643a3a2f34382d3438203d3e20323035303336.roa (hash: Vn0tNJq84yvhpEx3djvegd0qElXvUXIj3d10CpoBDS8=)
                          15: 326130663a356663303a633064653a3a2f34382d3438203d3e20323035303336.roa (hash: vwuw8BagjBJB+QjPivE2w5i9soU6pwd3DUm4jYukQKs=)
                          16: 326130663a356663303a6465623a3a2f34382d3438203d3e20323035303336.roa (hash: HGgyYO79YRPv5eTIvRCSkvT+uzFYIDLIXRArnhiRVzA=)
                          17: 39312e3230392e34302e302f32342d3234203d3e203436383434.roa (hash: lOyC9nhHln4w/6aFWRWEGti2qbnJIh38POtRvVGBI4s=)
                          18: 326130663a356663303a636166653a3a2f34382d3438203d3e20323035303336.roa (hash: SIzDkF7YYsoaU9vFR/am7daSl1S+0BBZdMp9c5ogCY8=)
                          19: 326130663a356663303a626162653a3a2f34382d3438203d3e20323035303336.roa (hash: BEzvo1oTT3h/yITGofAX+DfQt9t+mraGyg3xFdVKM2I=)
                          20: 326130663a356663303a6665653a3a2f34382d3438203d3e20323035303336.roa (hash: sgKb1dwb+yOP2QySpduAJeLZbiJJdLEfbfVpO0+8Lgg=)
                          21: 326130663a356663303a6461643a3a2f34382d3438203d3e20323035303336.roa (hash: FjMn5kgc0Y1vdPNQCAd4cKVxUcNaP4msdjwOhjOI4iE=)
                          22: 326130663a356663303a646561663a3a2f34382d3438203d3e20323035303336.roa (hash: nBnCDOBWFR9glmAsUSRrLmDkLZa6Zi7bYUkIoT7Lpvs=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 15:46:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:d0:b4:6f:54:17:e9:4c:38:5e:76:9a:29:0f:1f:f8:e0:2a:2b:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e205ebf065fc4929f1802662ae62d7f9762600e6
        Validity
            Not Before: Dec 20 20:20:53 2025 GMT
            Not After : Dec 21 23:06:53 2025 GMT
        Subject: CN=A396FA1F4EADF19D460221B30C3983F8D3710D9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:96:eb:9d:4b:eb:df:1f:81:91:78:8a:96:81:
                    08:d1:b1:1d:2a:ec:b6:03:78:9a:2f:cf:25:99:0d:
                    f4:5d:3d:f0:25:ff:1f:50:c8:ff:05:b8:15:a7:26:
                    aa:5e:fe:eb:2a:d9:b3:eb:8b:a7:58:6a:ef:5e:2d:
                    28:b7:88:9f:d1:b5:32:ce:59:c6:88:8f:95:bb:a4:
                    22:24:e5:e4:7f:53:50:f0:e9:d1:42:8f:2f:13:ae:
                    ef:ac:6c:8e:66:d7:e2:8e:94:74:bb:9e:a9:62:21:
                    d1:85:97:a9:5e:68:bc:55:6f:36:a7:5f:69:bc:5f:
                    2c:24:34:30:3a:09:b4:ac:9f:fb:a0:7e:27:5d:4f:
                    71:a8:7b:24:e0:5e:58:72:b6:03:cf:20:86:96:18:
                    ff:3c:a3:52:6d:ae:64:55:82:3a:42:41:15:77:0b:
                    81:99:85:18:76:0e:27:53:ca:4f:14:6d:a7:7f:5c:
                    31:c6:7a:21:c7:72:a6:62:25:2e:77:29:a9:80:75:
                    39:ed:27:eb:a3:18:00:70:d4:d9:1c:02:d1:17:59:
                    5c:19:9f:05:57:6c:50:4e:0a:a8:1a:8a:66:3e:db:
                    22:1b:9b:7e:ec:c1:e9:3f:bf:8f:fc:4b:2d:5e:98:
                    44:61:ba:da:a6:f0:f8:8a:60:7f:7f:2c:ed:92:5c:
                    f1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:96:FA:1F:4E:AD:F1:9D:46:02:21:B3:0C:39:83:F8:D3:71:0D:9B
            X509v3 Authority Key Identifier:
                keyid:E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:fb:1a:78:55:b1:c0:54:ef:f6:87:a4:1f:7a:dd:00:06:85:
         c6:7e:4b:d1:d0:fa:be:d6:49:c6:44:c1:99:2c:d4:2d:37:81:
         fd:b6:55:ec:30:e8:79:ef:19:b2:92:42:be:cd:1e:27:f5:a0:
         cc:04:38:cd:1f:29:1e:82:44:e1:3d:0c:76:03:09:c2:98:3b:
         77:9a:34:c9:ac:3e:49:43:1e:4c:a4:d4:44:70:0e:e3:ee:57:
         e1:6c:4a:5b:7d:30:03:6d:d9:57:b2:a1:92:0d:aa:fb:06:09:
         20:05:63:50:bb:80:b3:27:01:04:3b:69:48:8f:7c:b0:f5:3c:
         c1:d8:cc:92:77:a5:7b:7b:79:1d:83:35:b2:8f:5a:ba:1b:2b:
         a9:1d:8e:37:31:29:f8:12:7d:90:d6:27:ca:b0:4e:e9:24:c2:
         45:4f:11:98:7f:10:07:94:ff:d6:85:89:35:3d:e1:85:f3:a5:
         30:cc:23:18:de:c9:2f:cd:15:43:2d:fe:87:ed:2e:99:58:57:
         8b:af:2e:c8:1f:e2:3d:11:66:52:f9:c6:aa:2a:21:13:79:af:
         ed:57:6e:3c:ef:12:f9:54:54:fe:ad:89:41:17:b1:c0:9f:9d:
         fb:fd:96:67:b0:39:fe:d2:42:6c:d6:5b:10:91:2b:4c:f5:0d:
         66:20:26:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 00:33:51 2025 by rpki-client