This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.mft
File:                     30EC341CC59263F48799F70A95490826E78E6E11.mft (raw, json)
Hash identifier:          t+rwC1yAib7aBh+qGiEPDgU6nAKTyxKyXhDhY7yzq9A=
Subject key identifier:   4F:44:B2:B2:73:7E:60:89:CA:20:7D:85:83:AF:E2:5C:4A:E2:35:33
Authority key identifier: 30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11
Certificate issuer:       /CN=30EC341CC59263F48799F70A95490826E78E6E11
Certificate serial:       55BA076D2400A25CD8C880F63CE4FD02DFEA3C0E
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.mft
Manifest number:          0420
Signing time:             Wed 10 Dec 2025 06:08:27 +0000
Manifest this update:     Wed 10 Dec 2025 06:03:27 +0000
Manifest next update:     Thu 11 Dec 2025 09:44:27 +0000
Files and hashes:         1: 326131343a373538313a313030323a3a2f34382d3438203d3e20323135333634.roa (hash: aXuAVjQaQziBnhdY9fO8ymOesNBhdJyp9kz20z9DnYk=)
                          2: 326131343a373538313a3135333a3a2f34382d3438203d3e20323136333234.roa (hash: vhYSAJwWV/kUrFIYDy1kvhWF6QPE2LCkox0XSbnTkfw=)
                          3: 326131343a373538313a313030373a3a2f34382d3438203d3e20323135333634.roa (hash: wqeE5nh7JbnsQnlIfSuErABB8uVketpTJgfWTfxeIvg=)
                          4: 326131343a373538313a313030353a3a2f34382d3438203d3e20323135333634.roa (hash: O/hfz0aM2Fu4UMny04wjJ5FgsNZdjywDf4gCRUTA6do=)
                          5: 326131343a373538313a3230373a3a2f34382d3438203d3e20323136333234.roa (hash: U2ia1BZMBmWqT0U3lB0AwXV5OiguRKereHxdI3kXbvs=)
                          6: 326131343a373538313a313030383a3a2f34382d3438203d3e20323135333634.roa (hash: NNqmnSlBiewKjjUv0IQFmsLoHs8dIOQnPfgO0+urSwI=)
                          7: 326131343a373538313a3130323a3a2f34382d3438203d3e20323136333234.roa (hash: WYvVZ8fAuUsocTsVarqn75WcsZ7N/v67baANN5RqXDE=)
                          8: 326131343a373538313a3230363a3a2f34382d3438203d3e20323136333234.roa (hash: aafPrQqGPC5J6qpVCGFn9lsILmzjvZ8rKcEyTr7txQA=)
                          9: 326131343a373538313a3130353a3a2f34382d3438203d3e20323136333234.roa (hash: 1mjQTK2lJL4tc+S8VU0tMRSWqd4uZzYSjOZ3wTPofAQ=)
                          10: 326131343a373538313a313030363a3a2f34382d3438203d3e20323135333634.roa (hash: OCwycLFdhR0H9q9Nq5Z6ber9UihoWUXuc2ODQ/3Q0LU=)
                          11: 30EC341CC59263F48799F70A95490826E78E6E11.crl (hash: KpFqPDZWwAJE/Ez4r/iFDa8V16T7HNdkH+kMr3vEAa0=)
                          12: 326131343a373538313a3230313a3a2f34382d3438203d3e20323136333234.roa (hash: +Gu0hFKpsBJE6Nk0P3t6Myve+RW0iqZq35paeOwfFAE=)
                          13: 326131343a373538313a3161313a3a2f34382d3438203d3e20323135363137.roa (hash: LcoB7WDy2zFqL0IusHngV4nAMDB+ri5nZ3VtOLNnLsU=)
                          14: 326131343a373538313a3161313a3a2f34382d3438203d3e20323136333234.roa (hash: X6eaCQQCq+q1JN1IPEfDU7pdEdwDbNka4kB1Yw50KYY=)
                          15: 326131343a373538313a3161323a3a2f34382d3438203d3e20323135363137.roa (hash: QWmyZ3NwBgKAB9vvDkE+0Uy3DgpC9XfAtbSvaFUZSsQ=)
                          16: 326131343a373538313a3230353a3a2f34382d3438203d3e20323136333234.roa (hash: Zgu8b5H8OF2/vtfqtq6PcCEMnG4rdz8BYiX/0mAooHE=)
                          17: 326131343a373538313a3230303a3a2f34302d3430203d3e20323136333234.roa (hash: WTHPZzisRdhMFsVY7FNSDBkHvxdDxaXeABaBJ5Y3ZZQ=)
                          18: 326131343a373538313a3230383a3a2f34382d3438203d3e20323136333234.roa (hash: rkwP8fCnxTJdBDGsTpOldy7TJL4f3VSmjql6vLYbKHI=)
                          19: 326131343a373538313a3130333a3a2f34382d3438203d3e20323136333234.roa (hash: 3AX1McjNiDgH+3Qwn6EABosVdrcOBawKw5VzTiv+COk=)
                          20: 326131343a373538313a313030303a3a2f34382d3438203d3e20323135333634.roa (hash: bVfDGrPWdLwui8DtfBXvbCiHVGuacy8rV0eRqE8FYSQ=)
                          21: 326131343a373538313a313030393a3a2f34382d3438203d3e20323135323030.roa (hash: wO5JMaeGpMElDOXT4UXFnfYYDak9TYr+GxKmp4r0nic=)
                          22: 326131343a373538313a3231353a3a2f34382d3438203d3e20323136333234.roa (hash: Vb+sMvwMAgadBznl/ltLWjxRFyoNjCA0y0dZEt/pB78=)
                          23: 326131343a373538313a3230323a3a2f34382d3438203d3e20323136333234.roa (hash: hLe/TrmIP6kzrBHetdBf2bqTLSBZiaNnu0hk97FpfTU=)
                          24: 326131343a373538313a3231303a3a2f34382d3438203d3e20323136333234.roa (hash: TmjYuvvE7dkdGxJdUg55utrXQMF7Cqzr0X12Z4UGOMQ=)
                          25: 326131343a373538313a3266663a3a2f34382d3438203d3e20323136333234.roa (hash: U8uPwQ/EnJHFsJ+O7AhAOmuemkJEQ+vajwVFaReqvxc=)
                          26: 326131343a373538313a3230343a3a2f34382d3438203d3e20323136333234.roa (hash: NoWxEbVLZEw/NeLSDjZg9pC7TZtHNHXyDhBD3i2sTjY=)
                          27: 326131343a373538313a3130343a3a2f34382d3438203d3e20323136333234.roa (hash: fjC/MNBSyQpHbtFBo8msqH5uAIOKNGPqUoBQE12VUwM=)
                          28: 326131343a373538313a3230333a3a2f34382d3438203d3e20323136333234.roa (hash: k1Bl+G9czty8sHMW8O+46mNTqdftQUpqa17e2vnITlU=)
                          29: 326131343a373538313a3231313a3a2f34382d3438203d3e20323136333234.roa (hash: ln7f/nTPVw64Axiaf8MeJbFl6tF7vdv+bUCGg0VKncs=)
                          30: 326131343a373538313a313130303a3a2f34342d3438203d3e203339373533.roa (hash: IGLtteEBgCO2xx5IYUqP+uw67ctU4C6YlGR/MYSOOWU=)
                          31: 326131343a373538313a3230393a3a2f34382d3438203d3e20323136333234.roa (hash: msOOvmclEgpZ7xyy1O418S+yjyZxlJmnhgedrgB4ACw=)
                          32: 326131343a373538313a313030333a3a2f34382d3438203d3e20323135333634.roa (hash: 5GpojzizKt2bZ5refnbD+zMiFRRNOw/yzNlbrl849C4=)
                          33: 326131343a373538313a3231363a3a2f34382d3438203d3e20323136333234.roa (hash: NBku/GLKYozylvnwyxmXP0CwZstml2dHXgC2TzWnG90=)
                          34: 326131343a373538313a313030343a3a2f34382d3438203d3e20323135333634.roa (hash: C7N+D22gCOgPQZZMtrTq7FWJtgzmuDQvpuSvIDs/4/0=)
                          35: 326131343a373538313a3231373a3a2f34382d3438203d3e20323136333234.roa (hash: VPlwsBUm6J3GP5UbdGI89bEROzYaMwHfg/cRPr7L6Fk=)
                          36: 326131343a373538313a3231323a3a2f34382d3438203d3e20323136333234.roa (hash: bnZ8qUPjXECCR+J8qVtRk4+o0qyK0FyJIhKx6xyFjB8=)
                          37: 326131343a373538313a3130303a3a2f34302d3430203d3e20323136333234.roa (hash: 1ZRliiRchRYJb2ZnVZIJW6zuGLCEWcYxXjAo/vekCUw=)
                          38: 326131343a373538313a3130313a3a2f34382d3438203d3e20323136333234.roa (hash: J/2ajpwDKf6E9Q3DTjMfojSE4Io2RPp82MuQv5bNwJw=)
                          39: 326131343a373538313a3231343a3a2f34382d3438203d3e20323136333234.roa (hash: A9W63v6WN86jfgygNdFOAiE12IpEur51DdqaXSBqHwQ=)
                          40: 326131343a373538313a3231333a3a2f34382d3438203d3e20323136333234.roa (hash: bMKkgAzUCNxjLRjWoQ/h/hN0BWIz21lcfP6mV7tAUik=)
                          41: 326131343a373538313a3265323a3a2f34382d3438203d3e20323136333234.roa (hash: GKXLCSeFsPXA+5XR/7Yw2sxktMmqnqOuZqCtrK/Shm0=)
                          42: 326131343a373538313a3130303a3a2f34382d3438203d3e20323136333234.roa (hash: YvR2SDP7uSvYC3zyro7QC1DT4Tvc3lOUFtDv7iTN08w=)
                          43: 326131343a373538313a313030313a3a2f34382d3438203d3e20323135333634.roa (hash: kHIAlasYfLmhCgfPyjx/n2S+lF0FLpQ7UtqDO+efJ+o=)
                          44: 326131343a373538313a3231383a3a2f34382d3438203d3e20323136333234.roa (hash: yMhFT2myJieyG6VW/MJtfFtaA5FHlDTUwwXwa02pme0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Dec 2025 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:ba:07:6d:24:00:a2:5c:d8:c8:80:f6:3c:e4:fd:02:df:ea:3c:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30EC341CC59263F48799F70A95490826E78E6E11
        Validity
            Not Before: Dec 10 06:03:27 2025 GMT
            Not After : Dec 11 09:44:27 2025 GMT
        Subject: CN=4F44B2B2737E6089CA207D8583AFE25C4AE23533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:55:93:f5:9a:b6:21:50:51:72:b9:f7:4f:8e:
                    94:ab:96:8b:29:26:07:c5:95:5e:56:3a:73:12:16:
                    7b:8f:b7:47:27:03:2f:49:63:bf:1c:56:69:61:50:
                    58:c5:91:f9:c8:e5:de:34:e5:e2:bb:59:d7:78:94:
                    a2:e5:50:d0:89:8a:4c:48:cb:38:52:76:5d:86:67:
                    84:c6:30:c2:c5:94:dd:b8:bf:e4:c2:f2:d8:96:89:
                    ca:e6:b2:ec:eb:c3:78:54:e7:66:74:d8:f1:7c:87:
                    37:95:a6:81:09:60:bb:c9:08:cc:cd:ab:c0:a1:8b:
                    07:d0:61:67:1c:89:c3:7a:9a:ed:25:9b:00:76:de:
                    47:4a:03:76:d0:bc:78:6b:49:88:4d:60:dd:30:fa:
                    c2:11:79:88:47:3f:e6:87:0f:7e:56:aa:14:4c:f8:
                    d9:b8:87:fa:6d:91:eb:92:02:9c:1f:59:65:8e:38:
                    20:14:cd:f6:ce:32:93:72:ce:36:46:45:66:e0:e2:
                    21:f4:1c:43:25:15:24:84:ea:76:59:a6:d8:22:99:
                    ab:3a:74:dc:74:ba:9a:e8:a6:aa:ea:44:2c:04:51:
                    b3:98:69:b1:33:54:ba:cb:a4:f3:2d:bd:1b:cc:c9:
                    7c:48:13:0f:a9:f8:4c:fa:0e:ca:7c:9d:0b:01:db:
                    8c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:44:B2:B2:73:7E:60:89:CA:20:7D:85:83:AF:E2:5C:4A:E2:35:33
            X509v3 Authority Key Identifier:
                keyid:30:EC:34:1C:C5:92:63:F4:87:99:F7:0A:95:49:08:26:E7:8E:6E:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/30EC341CC59263F48799F70A95490826E78E6E11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/1/30EC341CC59263F48799F70A95490826E78E6E11.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:ce:45:fb:30:3c:6e:21:be:d7:69:f9:f4:6e:fd:4b:db:71:
         e7:06:71:01:8f:7b:13:70:1e:d6:ba:d6:67:44:9f:e6:3c:71:
         f3:61:d8:2d:39:85:98:33:06:9a:d7:7c:a2:26:29:5b:63:28:
         47:f6:e0:35:a9:20:8b:6f:78:67:c4:08:54:16:01:76:9e:c0:
         ae:e4:b6:af:5c:3f:f4:1a:d7:a8:89:7e:fe:fc:97:d0:0d:22:
         b7:90:a9:1b:03:83:02:d5:b5:e5:21:f9:6b:7b:73:4a:80:01:
         f5:c9:93:ba:fc:71:60:ae:cc:31:ac:9c:af:58:ab:80:62:d9:
         f5:9e:81:02:9f:38:09:07:2e:b7:ce:68:89:8d:58:a0:43:27:
         97:70:ca:00:b5:58:b4:3f:2d:40:ad:d1:88:4f:9c:e9:07:6a:
         07:33:3f:81:35:2d:8e:74:ac:92:fb:41:cd:b7:d9:9d:8d:91:
         7a:8d:70:db:46:1c:46:85:e9:d0:7b:44:5d:77:e6:94:24:00:
         0f:55:42:43:fc:9a:b8:d3:11:24:cb:5e:9c:68:02:40:6c:a8:
         08:6c:d7:04:bc:7d:58:e5:4f:bb:76:84:63:fa:24:83:c6:07:
         f5:04:67:e8:2d:48:cd:8b:6d:01:63:75:cd:d7:ba:12:0f:f5:
         34:93:24:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 10:53:57 2025 by rpki-client