This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
File:                     0839A93DAB544C296FFA143456844A8B2818B1D0.mft (raw, json)
Hash identifier:          tkE5W3D/bfxG4axbF0HiA7l/WLy9NcbkTn+FUU0FomA=
Subject key identifier:   F5:A3:5C:78:02:81:C1:B3:9C:A4:B3:34:F1:AF:71:AF:B5:86:75:C3
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Certificate issuer:       /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial:       7679A292AF756491381AAC06E28710A73AB1F057
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
Manifest number:          033F
Signing time:             Fri 19 Dec 2025 21:24:18 +0000
Manifest this update:     Fri 19 Dec 2025 21:19:15 +0000
Manifest next update:     Sat 20 Dec 2025 23:40:15 +0000
Files and hashes:         1: 326131313a663263303a323a3a2f34382d3438203d3e20323032333539.roa (hash: SlyimbxFLoCHsFWWpUZjHgmLHKv7rmMtitzOtZT7wdo=)
                          2: 3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer (hash: NscCIMsZ2yU9wFViqqUFMP9l2GG+IJImIYDZVt1y4cg=)
                          3: 323030313a3637383a6663383a3a2f34382d3438203d3e20323037393630.roa (hash: UNIFWQcfDb9TIYM9mTcmUs06i4tbcfV6n3m2ESGFPVM=)
                          4: 970AD94C83244100A97F9186D53DADAB07995EE9.cer (hash: RWBnNEK86OTd+EsaiL4tRRo/ytLMfihyN/KLzSQWa5Y=)
                          5: 1D570B984E9C5E382B0A879AA21F6518621F059F.cer (hash: w4LlrRiZpjCqpbWEegKCJHPhvyvwSjODOuNEEV+R23o=)
                          6: 3139332e332e3136352e302f32342d3234203d3e203434333535.roa (hash: 8+PpyJbtCrTrR5hMXklV6jn0Gbpl8JRn1mZ/sbUihXw=)
                          7: 4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer (hash: 1nhiF+DUP666qHgL0W5CdOzUBH6sH332zL1MCTVIgUk=)
                          8: 10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.cer (hash: CEGJbTLl4BFPIQu0BkXUdZ1K35M3vSyHeqh8rVvhUfc=)
                          9: 2B3B97334DA06978185DAC76A2F3EA3585E8231E.cer (hash: pxz0LR+iQ3l1lE7tkI4TpOm1EbpH5/e/dD9vYzgfMps=)
                          10: 1FB9C850F913D6C09A776D8BB38327BE701B0F87.cer (hash: EluTWf0GQ95lG3mbjIrTeS+cckdmvkzXIoud3lIjd+s=)
                          11: 6D0EF2AC1D235D1B50ED776E6CE4C3CB36AF062F.cer (hash: 6I8CkH37Y+2qxrW8WAlVcQiiukOkkakJShyNFWsBV3k=)
                          12: 326131313a663263303a3a2f34382d3438203d3e20323037393630.roa (hash: 3TxnMdPT5hHYItzRe6t9ErU/wv40unaDW97hsOh3H4M=)
                          13: C2724A29EF989A4340933B8130B402DD4627A501.cer (hash: 984ckCJkp1VtRhMMUPKyUG2Uubk2ftZ4dLd3NzPeeY0=)
                          14: BBED14E9793905EC1EA5CE10AA03C497D737B115.cer (hash: m+ztv5UmtHgdFMzFwqLzYGsJqAw/AeqFEUgffywu2Zc=)
                          15: FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer (hash: Z+xIm/9vNqFKmLWBcsaGK8BJ1alQ9TOcEU4cwskAlyE=)
                          16: B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer (hash: 8IYDJ2eIDos7JCscqio8m4CtvsMZIm87tSAcUKKXKKg=)
                          17: AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer (hash: e/9HYgp/mohWVL/xi7PmXFlHj2B3IcMqES1nyxAUKjo=)
                          18: 326131313a663263303a313a3a2f34382d3438203d3e20323032333539.roa (hash: ZivrOJ7iiOCUg/HqF4j2xuXr75dIBf1hdqQTAxY+xwU=)
                          19: 326131313a663263303a3a2f32392d3239203d3e2030.roa (hash: SFi79UqiX3kS2cuHdwRtphv59FDPSt5CMOnrnul0UdU=)
                          20: 3139332e332e3136352e302f32342d3234203d3e20323032333539.roa (hash: PN7OPw6x8T4uLhMmLkm8sVVlgwZlpPub1GieXN4o6dQ=)
                          21: 067DBC6BCF0F9582DF78366389AEAF5965565EF5.cer (hash: fBqC9ryjQi6+GMXhqT8gchFPNagFwAwTKLhvHv66WwQ=)
                          22: AS202359.asa (hash: 6VIFnTZlZo7nQ/fI9Z3+DaeUn3Y1Zv+vHdQ94mzfXkg=)
                          23: 0839A93DAB544C296FFA143456844A8B2818B1D0.crl (hash: wOoNA73PYfQbX4wXG2o1HalQVnckES1l1c9tWOalgGo=)
                          24: 6482EA67DB858D1440DD67B955223E4341BA4E97.cer (hash: lKlfGm9oX8e/vMr1ifVDL2vFahUuPFOtcD1F8uJvy/E=)
                          25: 16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer (hash: jH9R6EtyMHUcM8XcpEu+SmgJb0fp9TQ+h2bdy0JKm8s=)
                          26: 4742E76772F118A935D69FD40F69858085C80999.cer (hash: PXNlleSIOJFtms7j+EwWK+dQ4coJG0uvhI3LcgkFsFw=)
                          27: AS207960.asa (hash: dkR0kCK9ItfbDdB+lcz8NXX/OgW2AxH6xzmW14rh/hI=)
                          28: 31586760843F668A816117EA02F6F30FE8F9C359.cer (hash: sdjQP12grMA84wrOD8soDanrM9KsCHOhQQgZ6YwFl/w=)
                          29: 09F041F60B21B649820D0FEE0D7654D63DDD080D.cer (hash: YD4L9bqvaUV95bBh8Ju1YuFHRvMJfo/DkcF98/HxW9I=)
                          30: 326131313a663263303a666630303a3a2f34382d3438203d3e20323037393630.roa (hash: 6+o/SVChTjHbiYUJ03zyc6Ju+ZkXcW4hDy3lbeRRz+k=)
                          31: 326131313a663263303a343a3a2f34382d3438203d3e20323032333539.roa (hash: B4MACJgrYv8gOFyM+OgYWOFeMkOQBLykzkdPSnyxEgo=)
                          32: 62A86C7D9E920A161C8A4CEDDD0EE1BB74C581AC.cer (hash: L9VSFOsG4sCFFaXWcNTMiKK4PkL1oeVJZtfXUCMq90Y=)
                          33: B50D92304CA867525C648A07380EA065FD352DEC.cer (hash: jeLezi/e/tiKuflcEffKB+Cet8nw848xqf2VW1otgMA=)
                          34: B8222A845C0CDC59E8D369AE23E116CDDEA08777.cer (hash: zKaN08cZjSwmv4VxKubYdVn/CoX70Fn+0x6DYvBEbBM=)
                          35: 5ABE2F609996476AAFE146BC5A72429B0B205FC0.cer (hash: fNICkLgDOQLQyXcYC+Mx7zWPSiGBhLSE5Btg3FNYCrk=)
                          36: 6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer (hash: W+HO8geKxnrsSrA4saAs5TYSPA0bVhZHBTNxns4Da/E=)
                          37: 326131313a663263303a666635303a3a2f34382d3438203d3e20323032333539.roa (hash: RTtc7kvQY4mgVpXb0OGaj3d8CGbqE+rrAFaJtMYV3Gw=)
                          38: 1ABB08D41A5A6974320D97887769A15BA6B7EF71.cer (hash: gW5/r+rTqmiwY5x1Qtx3z5ezWcBU9AkoYGR7QTJTGt8=)
                          39: 1A889E0950A8B6489E67E7C7189539FB887EAD71.cer (hash: QvMFt41RXdcJq7gp5tnRNXaXgfSmaaXZCupMATLSYFk=)
                          40: E02C2B37910DB974089166C0D244DE386B5762C2.cer (hash: NQL7Q+vPifLFy80HHQ35NSOJH0JVOxv33NgrFx9SMgU=)
                          41: 44C4C913D58F5EF847996241E969B60A1E3F1389.cer (hash: E3ak7egeb7oLQq4pNOV672llzd9VjZ7X1tZw4IAYLms=)
                          42: 326131313a663263303a333a3a2f34382d3438203d3e20323032333539.roa (hash: XIj+fw+vRgYTpRxwvO3XvTkfLsFczQo4AujMyz3iud4=)
                          43: F794DFA009EA90B4CBBB340DE4C255446986D7C6.cer (hash: +U9s3nk3zcGTMVxdfeeaoEIEhjnpyi2zUiI59YfVir8=)
                          44: 69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.cer (hash: Zmzv7fBFqGLxjYc480gPrSI5W4OUPciQIi5quu5IaLg=)
                          45: F5D54631B7091E1F4B8B02E70FF76F073F8B2320.cer (hash: xVngRZoqmU3ug9ZE0lvPtcRq8CjSyQiMIGiV8ww3DYk=)
                          46: 16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer (hash: xWjJR6Nxgh4wTbQyfSpM8roZ9e57XZ5G/Wz+HfAB8Qw=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Dec 2025 23:40:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:79:a2:92:af:75:64:91:38:1a:ac:06:e2:87:10:a7:3a:b1:f0:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
        Validity
            Not Before: Dec 19 21:19:15 2025 GMT
            Not After : Dec 20 23:40:15 2025 GMT
        Subject: CN=F5A35C780281C1B39CA4B334F1AF71AFB58675C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8f:3d:0e:75:88:83:4e:00:48:77:34:26:4d:
                    46:86:bb:b5:a4:53:16:89:f1:d8:dc:36:a6:0d:e9:
                    60:e8:19:4d:c7:36:ae:f6:fd:de:0e:87:01:bc:48:
                    fd:d3:6b:93:b9:a4:ed:76:0e:59:15:a9:71:11:de:
                    4d:15:d4:fb:14:5d:1e:84:06:a6:b1:5e:cf:ac:c2:
                    c0:7e:21:93:d8:05:e0:dc:45:53:20:02:17:b4:b7:
                    8f:06:39:55:56:8c:e3:b9:7e:9c:f6:e4:f8:c7:bd:
                    3f:85:5c:0e:b9:48:1d:62:0d:6d:17:c4:d0:fe:d2:
                    a9:c4:69:04:33:61:85:df:99:f3:3d:43:22:02:cd:
                    09:00:bf:b2:38:3b:78:ba:ac:16:ed:06:fe:4d:9a:
                    df:2b:c0:ac:cb:b3:a1:f5:5a:6e:39:4f:22:29:de:
                    f4:31:e1:4d:3e:f3:29:01:99:a9:3a:f4:38:c5:c7:
                    90:25:2b:7b:b5:1f:ce:06:1a:af:25:cf:7c:bd:6f:
                    88:fd:37:95:f3:63:30:98:46:3f:40:06:10:a7:3f:
                    72:e9:2e:76:47:2a:fb:da:10:9d:f0:34:3c:b1:90:
                    e9:c9:5b:65:8e:95:7a:6a:fd:b3:13:35:ef:d1:1b:
                    d9:a5:11:40:be:e3:ff:f8:9b:8c:d7:22:16:83:8b:
                    1f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:A3:5C:78:02:81:C1:B3:9C:A4:B3:34:F1:AF:71:AF:B5:86:75:C3
            X509v3 Authority Key Identifier:
                keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:85:1c:4d:dd:ee:ff:46:67:90:5f:0c:46:62:f3:16:55:8f:
         18:f5:5d:fb:44:76:be:0f:5e:98:f9:2a:c9:5c:a0:26:7e:68:
         3d:2a:f8:06:ea:e9:d7:b0:86:25:a4:66:3f:67:0e:b6:3a:9d:
         da:09:b2:17:52:27:4b:f8:f0:f9:10:ce:83:c3:20:86:a2:2b:
         d9:26:f4:5e:42:41:34:28:c8:35:b4:d2:db:8c:b6:c9:74:59:
         b5:bd:67:97:04:2f:9b:97:53:0f:cc:6e:0d:2d:b4:ed:ea:b1:
         4e:0c:66:51:8c:cb:45:6a:1c:ee:09:ef:76:00:4b:cc:52:ba:
         dd:b0:f1:3c:6a:54:15:69:43:b6:ad:79:41:8f:6a:fe:95:05:
         8a:7a:7a:72:2a:c9:07:ed:be:ec:34:d8:a1:a0:e4:09:54:4d:
         c4:1d:4e:dc:eb:01:7c:ee:0f:5c:56:8c:65:81:0d:ab:9e:02:
         31:48:e2:f2:59:61:21:63:22:e7:da:83:3c:27:f7:00:b9:63:
         e9:0f:8b:55:78:fc:fc:0d:65:03:5a:03:8d:25:be:88:5f:6a:
         ee:34:7a:88:5a:73:b3:ce:8f:7d:3c:5e:09:68:37:64:9d:3c:
         a8:ad:1e:a3:e8:a1:b4:7b:ec:55:e0:5f:2a:da:9b:d8:66:1d:
         23:1a:77:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----