This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft
File:                     0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft (raw, json)
Hash identifier:          5K35XA/qhM+Uske2+i3hR/tw0mCrea3wdHvk6cp8+/c=
Subject key identifier:   44:E1:C4:97:7C:84:20:59:C9:79:B7:46:2E:54:37:42:56:B6:9E:D0
Authority key identifier: 0B:C6:D2:25:F0:CE:3E:60:77:12:A9:A9:8C:45:61:91:2F:34:32:B6
Certificate issuer:       /CN=0BC6D225F0CE3E607712A9A98C4561912F3432B6
Certificate serial:       09B019307F81D03F1E3D0D48C613BAB1F759405C
Authority info access:    rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft
Manifest number:          A0
Signing time:             Sat 06 Dec 2025 21:39:27 +0000
Manifest this update:     Sat 06 Dec 2025 21:34:27 +0000
Manifest next update:     Mon 08 Dec 2025 00:21:27 +0000
Files and hashes:         1: 0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl (hash: JGZ4bekGfLpSQJAs0Oy5FyO1WK0RE86DStIFm2P6sSI=)
                          2: 326130623a346530373a316330303a3a2f34382d3438203d3e20313531373034.roa (hash: GbSyn/a7s2Tct/cl+IXObaOaKJfLlKE/P5lfI5qam+k=)
                          3: 326130623a346530373a316330323a3a2f34382d3438203d3e20323133383632.roa (hash: /X68JagauxWyaFcSb3BbJbw5DWqXyP6Pe5X7avcQNQs=)
                          4: 326130623a346530373a316330313a3a2f34382d3438203d3e20313531373034.roa (hash: VQpA5o0Pq6sWKS236BEYQWIKLgBdNGi2BEIwMERcePY=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 17:58:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:b0:19:30:7f:81:d0:3f:1e:3d:0d:48:c6:13:ba:b1:f7:59:40:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BC6D225F0CE3E607712A9A98C4561912F3432B6
        Validity
            Not Before: Dec  6 21:34:27 2025 GMT
            Not After : Dec  8 00:21:27 2025 GMT
        Subject: CN=44E1C4977C842059C979B7462E54374256B69ED0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:47:83:05:f0:1a:23:26:d0:09:ec:56:ff:57:
                    91:23:12:0b:e7:4a:a6:b2:51:cf:99:5b:70:23:82:
                    99:12:1c:60:2c:09:37:c1:5c:8d:0f:e2:03:f6:8a:
                    03:9a:61:c0:58:9f:af:13:de:bf:bd:cb:d8:dd:58:
                    aa:2b:e2:99:23:49:59:98:35:3f:65:e0:45:73:09:
                    66:84:67:37:7a:81:c5:fc:f8:65:3f:b3:fb:79:68:
                    f6:f5:93:5e:8a:55:45:ce:b5:64:7b:2b:7b:11:7e:
                    6a:cd:17:dd:26:75:9d:6c:d6:7f:c8:bd:98:23:b6:
                    b5:7f:3c:d4:48:ca:3b:fb:b2:0d:cd:4c:6c:ac:03:
                    34:71:c0:35:e3:4d:49:7b:83:a9:3c:42:8a:91:96:
                    87:2c:1b:ea:d3:30:78:31:de:6a:68:13:e1:22:e1:
                    b7:e8:03:82:1a:42:1c:ce:db:02:05:cd:0c:2f:52:
                    fc:15:68:cf:30:86:32:5d:b0:b1:dc:40:57:0a:4e:
                    33:0f:de:e3:11:f1:cf:bf:d9:61:c3:ae:49:54:79:
                    e8:3a:64:8d:90:5f:7a:06:21:56:0a:2a:cd:f1:b4:
                    68:2b:e8:6a:b4:96:7f:29:93:d0:ab:e6:5d:2a:82:
                    33:38:a7:a1:9a:b0:7c:93:bf:c8:74:74:68:6d:ac:
                    86:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:E1:C4:97:7C:84:20:59:C9:79:B7:46:2E:54:37:42:56:B6:9E:D0
            X509v3 Authority Key Identifier:
                keyid:0B:C6:D2:25:F0:CE:3E:60:77:12:A9:A9:8C:45:61:91:2F:34:32:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/0BC6D225F0CE3E607712A9A98C4561912F3432B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/3/0BC6D225F0CE3E607712A9A98C4561912F3432B6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:cc:0c:48:73:47:ef:97:4d:de:a9:63:af:1f:e4:32:b3:91:
         e8:17:92:87:55:72:35:bb:28:c0:13:0c:bd:63:90:49:57:57:
         b7:e7:c8:3c:a9:c4:1b:2d:47:12:b6:72:1f:cc:98:b0:46:b1:
         34:9c:6f:00:0b:6e:31:f3:9f:44:dd:5b:78:50:90:02:b7:18:
         30:69:33:c9:b1:d0:53:5d:f6:38:27:df:d0:3e:c5:33:66:88:
         d1:e4:c8:07:1f:81:e3:10:07:be:39:fe:0c:8c:ad:45:86:a7:
         83:b2:d1:52:e6:29:30:d8:96:52:01:87:b2:99:fc:6b:d1:ac:
         06:2e:e0:d7:6f:d5:44:84:e9:3f:a1:c8:d2:9c:0b:e0:c5:4c:
         9b:eb:01:3d:70:a7:1a:f0:e7:e7:38:17:b4:b3:ab:c9:d5:63:
         99:c9:21:bf:3d:3b:41:21:ae:93:1d:16:7f:08:b8:2c:80:3a:
         da:6f:92:74:ff:5d:26:ac:d2:71:ac:6e:12:06:76:73:16:2b:
         25:51:80:c1:32:0b:1b:95:f4:29:5e:ac:a5:68:a9:9f:7f:98:
         33:57:dd:d4:a4:4d:22:49:a3:53:22:87:b7:5a:12:86:7c:92:
         fc:51:b5:42:3e:73:d0:84:08:a8:f7:d8:23:6d:8c:b2:9d:cf:
         71:90:a9:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:38:14 2025 by rpki-client