This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft
File:                     3134EE987E08D8B5583FEEF621A03150C4F35434.mft (raw, json)
Hash identifier:          LVEF4Tqt8crqSHn0j21QEHV9JjtE7+uAdpGLZP509w0=
Subject key identifier:   71:04:31:86:11:6D:AC:8A:CF:F2:C2:31:D5:65:6D:CD:A9:6F:40:AB
Authority key identifier: 31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
Certificate issuer:       /CN=3134ee987e08d8b5583feef621a03150c4f35434
Certificate serial:       245510406100141DD3CDB3184B8C0608D58A7E67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft
Manifest number:          0385
Signing time:             Sat 06 Dec 2025 11:58:48 +0000
Manifest this update:     Sat 06 Dec 2025 11:53:48 +0000
Manifest next update:     Sun 07 Dec 2025 14:31:48 +0000
Files and hashes:         1: 326131343a316563373a666666633a3a2f34382d3438203d3e20323136333339.roa (hash: Xpu7YHsE9Uu/Z34+AM32q6wFmIndeEkcOzm4kV29gZU=)
                          2: 326131343a316563373a666666643a3a2f34382d3438203d3e20323038343533.roa (hash: cQGzH58GG/5AlClFkvMjXXZFAsalmfdZS0xTjTmJx5Q=)
                          3: 326131343a316563373a666530303a3a2f34302d3438203d3e20323135343637.roa (hash: 8asU86WRYRMPRuHXiCGWb31YsN6wlyGCHOUyjPq08QE=)
                          4: 326131343a316563373a666330303a3a2f34302d3438203d3e20323130363435.roa (hash: D0UhxJixjH/6ED4b7asHdvZhN16xQRz9JstOKq1KOMc=)
                          5: 326131343a316563373a663530303a3a2f34302d3430203d3e20323038343533.roa (hash: 26SEXU3Pd+BR8SHx6kufhwY94Io89XBTIVQPTTPnVB8=)
                          6: 326131343a316563373a663630303a3a2f34302d3438203d3e20323133393938.roa (hash: jfvc4Qyrnftgf9GYsuLUox0bHp6mia0CtR4lMdTVrZY=)
                          7: 326131343a316563373a663330303a3a2f34302d3438203d3e20323132303835.roa (hash: /N5wUQJdysICqY/mrt3+ONpnXUY6EQuvRkeb07T1NVw=)
                          8: 326131343a316563373a663730303a3a2f34342d3438203d3e20333937343233.roa (hash: 3NaEQ7JEzM4oESWmvkMu3mTAfj7phWpZMjjU4RHfTkQ=)
                          9: 326131343a316563373a663732303a3a2f34342d3438203d3e203139333138.roa (hash: 354DUYTmwYIpJ7s6pAfElMpcSbsG0UySE6atyDydlaw=)
                          10: 39312e3139362e362e302f32342d3234203d3e20323135333138.roa (hash: j1BjBA5NyrZGkTgGio3bSgpZw6QFV9sBz2jgQ+DhB30=)
                          11: 1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer (hash: BF/TWOjb2Ii4r0osOdYS/rUG+zOQPpS2tAXbzEo5Wzo=)
                          12: 326131343a316563373a666661303a3a2f34382d3438203d3e20323133353135.roa (hash: uw8e5+V55rs+wlENeJdGRICWtffz7xQmePuL+3U/nIU=)
                          13: 326131343a316563373a313030303a3a2f33362d3438203d3e20323134343831.roa (hash: mAC3tE41nQDojIaT/TKY9BuNdhC77RQ6VPm5O+XWCIE=)
                          14: 326131343a316563373a663130303a3a2f34302d3438203d3e20323134313838.roa (hash: l6K8Ipuv+LpAjKBvLV7xS+N25xPDi1Q5md9XNlMDt3o=)
                          15: 326131343a316563373a323030303a3a2f34302d3438203d3e20323133353135.roa (hash: ei7uKbr21cStunIFD4/+QnxpXX+lUv4yRtUBnFqqQIw=)
                          16: 326131343a316563373a663830313a3a2f34382d3438203d3e20323131303139.roa (hash: q5taedROXWkWDrb/6D/rTI85VzK640g7YzLTCK454po=)
                          17: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer (hash: jLV89odZdgTYzYRcumFoTReP+gmmk+raXpcoYf0+wxA=)
                          18: 326131343a316563373a666130303a3a2f34302d3438203d3e20323134333635.roa (hash: D7vq42LlJ1JkjKrlS8EXaLer6htaFFui19vj1Iz46+0=)
                          19: 326131343a316563373a666666663a3a2f34382d3438203d3e20323030313739.roa (hash: jxX5jejatt6POI8r69/OIdC4tpqjlqDh7/l5cMHt1Lc=)
                          20: 326131343a316563373a663730303a3a2f34302d3438203d3e20323033363632.roa (hash: TXZSGetReOdbEu0rJcDlVY8E6EFEIEHEr5rTFcqv3xU=)
                          21: 326131343a316563323a3a2f34302d3434203d3e20323135333138.roa (hash: 1f8XyNlehbCOnOttGzyrDosIHnqaI9sKAvrNf1ADCiI=)
                          22: 326131343a316563373a663230303a3a2f34302d3438203d3e20323036353430.roa (hash: qSdNZRVsblfNLTN5jWJzdVW0nG7dD+fw8GdvqXWqzCg=)
                          23: 326131343a316563343a3a2f33322d3430203d3e203535323031.roa (hash: J7TluaWBMRkzmoR+yQUgqy6TY9pp5e+qFllmxawGaBk=)
                          24: 326131343a316563373a313130303a3a2f34302d3438203d3e20323135343337.roa (hash: LSZWA34YwCO9D6JtWEG8LpUQ1o3Anb+MGXWPU43gT4A=)
                          25: 2AFACA7F316DBE0CFF394F9D5952E52992F185F1.cer (hash: TzD6pGlBEMmZI/OlLFvK4Q5nKNXovDA7wOkDjfwohQo=)
                          26: 326131343a316563373a663731303a3a2f34342d3438203d3e20323030303838.roa (hash: AEg6jBnmgaUb2x64BLtcycaY+zMRMacIwLXjCKOp0Kc=)
                          27: 326131343a316563373a666666653a3a2f34382d3438203d3e20323135343733.roa (hash: tXMEYMrTa38uR0L+SQ9LimzmDrpxo8zhMIaTp0PKkR0=)
                          28: 3134EE987E08D8B5583FEEF621A03150C4F35434.crl (hash: Lz8y+TEsj3b74h1sCamyM7BHdU5G3hFHINLLt1CwIBU=)
                          29: 326131343a316563373a666230303a3a2f34302d3438203d3e20323134373435.roa (hash: 6hKao63oIzBdls8N02e3UeaWWtVa56Xgit+XQJDfjec=)
                          30: 326131343a316563373a663733303a3a2f34342d3438203d3e20313336353537.roa (hash: EjYVXtoGI4pKSiTLS0VJX0KMS0fHh7kyk5vR1WUohgI=)
                          31: 326131343a316563373a663930303a3a2f34302d3438203d3e20323131363733.roa (hash: eFx1IPRipEBged0ZijUlxcw0OO6jOfnGP3TjandnEEA=)
                          32: 326131343a316563373a663830303a3a2f34382d3438203d3e20323131303139.roa (hash: IUL9dWtw0Umsxfs7xwdo1JVZ6ulAsKal+ROC0kpiHgM=)
                          33: 326131343a316563373a666430303a3a2f34302d3438203d3e20323136323034.roa (hash: s/Nou3yfPszN+70d0fh1KxFGk9lHz9YF1rBNojiEJcI=)
                          34: AS215318.asa (hash: Cq1YNeZujV2DCB3+fofzEgyWvtRNnETlVqcvQ1iCKVE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 14:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:55:10:40:61:00:14:1d:d3:cd:b3:18:4b:8c:06:08:d5:8a:7e:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3134ee987e08d8b5583feef621a03150c4f35434
        Validity
            Not Before: Dec  6 11:53:48 2025 GMT
            Not After : Dec  7 14:31:48 2025 GMT
        Subject: CN=71043186116DAC8ACFF2C231D5656DCDA96F40AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:08:d1:a8:00:ca:fb:ac:eb:0d:3d:01:09:4f:
                    6c:ce:6e:94:83:d7:3f:47:a8:e8:d0:9b:36:75:28:
                    58:55:db:66:fe:08:68:c8:8e:7d:8c:d8:e7:ad:ae:
                    46:d5:47:65:7c:80:0b:2f:aa:ba:2a:5e:3b:3e:7f:
                    bb:1a:87:d6:c0:f2:49:55:2b:12:fe:be:36:6b:86:
                    96:b4:21:59:da:3b:54:4b:cc:e1:81:cf:02:92:c7:
                    eb:ab:ee:1d:7d:43:93:48:bd:d9:79:b9:d7:5c:8a:
                    90:3b:b9:5a:58:ec:2e:4c:5b:75:73:3f:20:2a:6e:
                    ab:71:56:87:f7:91:1a:dd:29:88:58:e4:a0:7d:95:
                    6d:51:b4:3c:78:86:77:83:63:b1:b9:41:89:93:c2:
                    ec:89:21:76:41:e6:d1:b3:93:8b:c2:a6:28:5a:27:
                    d1:7b:e9:bd:27:02:f1:fc:e2:1b:96:34:0f:72:c4:
                    37:f0:f2:c2:7c:6b:98:ed:f7:5a:1b:3a:54:44:a6:
                    3f:fa:db:12:b1:03:3a:9c:11:1f:fe:c3:64:f7:61:
                    d7:3e:9d:e1:94:8a:5a:e9:b0:ec:23:86:ad:74:79:
                    8a:67:81:8d:95:f9:f4:c6:a1:c4:27:4c:51:80:8a:
                    18:2e:22:47:5d:57:0f:8b:a6:04:f6:68:aa:2e:65:
                    1d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:04:31:86:11:6D:AC:8A:CF:F2:C2:31:D5:65:6D:CD:A9:6F:40:AB
            X509v3 Authority Key Identifier:
                keyid:31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:a7:c3:b0:2d:2a:d0:1c:0b:60:8f:74:79:90:9e:83:2a:de:
         bf:cf:62:d4:6c:6b:09:8e:12:4a:b7:d2:93:b3:b6:6c:60:8e:
         9c:d3:66:15:6c:43:8e:16:c0:c6:9a:dc:ed:8e:dd:77:c2:8f:
         03:c3:66:a0:bd:aa:e7:48:a7:8d:46:a9:02:46:82:2f:50:da:
         ff:cb:fa:22:09:71:e1:cb:2f:6b:c4:ed:06:87:1d:83:45:4a:
         f7:21:7a:3e:16:d2:82:71:5c:d6:bb:97:04:42:cf:eb:b8:de:
         0d:95:45:3b:3a:b5:4d:f7:53:cb:56:57:74:43:ea:76:c6:6a:
         93:70:b4:99:d5:c2:44:f7:1c:cb:79:6d:ba:1d:e3:59:4c:d4:
         ad:b0:1b:2c:6d:83:00:8e:e1:3f:92:bf:d1:5d:f7:4a:b1:d2:
         c5:08:4f:e8:6d:56:51:14:9f:62:39:05:3f:ec:9a:92:5e:37:
         f6:62:dc:67:1c:e3:1b:41:39:5f:2f:65:31:be:a0:e7:66:fa:
         1d:23:fd:fe:99:4b:fb:f5:ca:77:3d:0a:ac:92:40:c2:a1:16:
         cd:25:37:78:46:b2:8d:c7:e4:b5:16:6e:48:df:05:ff:57:73:
         13:f9:05:9f:37:50:32:73:05:a6:5a:2a:95:71:d4:b4:42:5b:
         8e:de:e6:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:33:38 2025 by rpki-client