This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft
File:                     B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft (raw, json)
Hash identifier:          viXrZQXun2yhoyfEXPwy1CU6IVSebprq2n0fw+tDhh8=
Subject key identifier:   A9:3B:33:FE:7D:12:A9:23:79:B3:89:3B:7F:7D:FB:58:5A:AD:9F:03
Authority key identifier: B5:F5:EC:5C:56:7F:D4:89:BE:73:90:28:62:EB:EE:81:CC:DE:E3:5C
Certificate issuer:       /CN=B5F5EC5C567FD489BE73902862EBEE81CCDEE35C
Certificate serial:       12DE4FD4E93E911D17C9EF18F258F43F7FFC7620
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft
Manifest number:          AF
Signing time:             Mon 15 Dec 2025 11:45:40 +0000
Manifest this update:     Mon 15 Dec 2025 11:40:40 +0000
Manifest next update:     Tue 16 Dec 2025 14:47:40 +0000
Files and hashes:         1: B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.crl (hash: 3pGBB50v/sE4bydwAEMleScu2cmsyE/Ei326vl/jnhk=)
                          2: 326130623a396534373a666666663a3a2f34382d3438203d3e20323132333936.roa (hash: 75MQYcrJ2fBMIggMxPD0oPJNZ5TBWMJfZ5gCQQu+izk=)
                          3: 326130623a396534303a3a2f33322d3332203d3e20323134343531.roa (hash: GwXhJxTPfppTl2To2mF3GpvFgaV+3IGFSczXonJ1+q0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 14:47:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:de:4f:d4:e9:3e:91:1d:17:c9:ef:18:f2:58:f4:3f:7f:fc:76:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5F5EC5C567FD489BE73902862EBEE81CCDEE35C
        Validity
            Not Before: Dec 15 11:40:40 2025 GMT
            Not After : Dec 16 14:47:40 2025 GMT
        Subject: CN=A93B33FE7D12A92379B3893B7F7DFB585AAD9F03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:5e:57:a2:1f:1e:63:23:01:96:0d:2d:40:b7:
                    d4:91:5d:43:59:c5:b5:b9:3a:89:c8:d1:8e:44:f0:
                    67:70:e2:b1:ab:f1:69:03:b2:5a:70:08:ff:11:6b:
                    a8:17:05:28:05:ea:fe:37:bc:b4:be:b4:88:1d:fe:
                    36:51:2d:5b:59:82:05:ae:0d:ad:22:a2:e0:65:b5:
                    2f:0a:c3:d0:5e:af:7d:dc:e8:c1:1c:53:81:85:a6:
                    02:38:c8:e1:47:a6:32:03:a0:0b:3d:30:ad:79:cf:
                    f7:eb:4b:d4:4e:47:7f:14:bd:aa:eb:69:60:c0:f1:
                    b6:4f:85:fe:d9:b3:76:47:97:eb:47:a8:43:7d:e2:
                    e5:6d:36:70:86:74:d4:c9:25:7e:07:25:33:14:c6:
                    53:7e:c3:72:b6:b9:5d:97:36:70:6c:28:8a:c4:a0:
                    7b:54:b5:98:56:5c:78:05:8a:7c:20:a0:7f:1a:45:
                    87:66:59:24:62:02:9c:74:c7:9a:d4:44:2d:8e:c1:
                    a0:95:9e:7a:f5:48:15:00:3b:eb:1c:45:a0:cb:37:
                    27:7b:e6:a8:78:59:12:a2:cf:d9:bc:f7:e8:c3:c1:
                    6f:ab:27:3c:43:a3:3d:9e:1c:4e:38:75:be:fd:6f:
                    0a:e4:e3:d0:23:9a:23:60:b0:d9:c5:fb:af:4c:fb:
                    6f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:3B:33:FE:7D:12:A9:23:79:B3:89:3B:7F:7D:FB:58:5A:AD:9F:03
            X509v3 Authority Key Identifier:
                keyid:B5:F5:EC:5C:56:7F:D4:89:BE:73:90:28:62:EB:EE:81:CC:DE:E3:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:5a:e4:3a:84:f0:54:18:a6:af:28:63:1d:6f:06:ed:8c:3d:
         41:4e:ad:54:21:3b:64:49:60:ff:8a:eb:55:d9:ce:f4:c4:32:
         1d:89:d6:92:73:0d:c9:4c:b2:42:94:fa:fb:32:91:b2:64:ab:
         e7:ed:90:09:91:b3:c7:f5:cb:53:d6:5e:e6:c8:0f:c0:9d:af:
         3c:43:27:42:af:d3:19:d0:d1:4c:26:d5:75:21:92:22:86:bd:
         ad:fd:0c:19:d6:2b:b3:b9:97:49:c9:90:e2:a4:f6:b3:06:39:
         ee:48:70:77:35:c0:14:1a:1c:a1:93:ae:e8:11:1e:7c:01:0c:
         e0:28:75:4b:da:e3:1e:65:97:b3:0a:d7:e6:b3:d5:03:9a:b9:
         e1:22:36:f8:5a:0f:0a:33:41:5f:92:64:78:4f:b4:68:4c:b0:
         63:77:66:f8:d4:03:07:3b:98:0a:8e:a1:66:b6:9f:4f:b6:e4:
         6c:65:3c:aa:16:cd:59:4c:c3:af:61:d5:eb:f0:14:dd:56:38:
         64:07:b7:fe:fc:4d:a2:0e:41:25:33:62:c7:ad:bb:8b:e5:10:
         a2:b8:ca:aa:07:4e:d5:89:8d:4b:f9:b9:29:b1:15:35:4e:f6:
         3c:e7:92:70:33:c2:e0:6c:33:1d:b8:f5:54:3b:49:6f:88:30:
         58:a0:8d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 23:29:33 2025 by rpki-client