This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/3/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.mft
File:                     FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.mft (raw, json)
Hash identifier:          Mb84CUGJBX7zcpHHXy4JoBAsNHawqi78LzC6LpdN+as=
Subject key identifier:   DA:B8:CD:58:3B:D2:A2:3E:30:19:05:53:B6:0E:6C:9B:DA:9D:8E:10
Authority key identifier: FA:71:0E:21:BC:41:E9:82:7D:52:D6:6D:E9:8E:F8:E9:AC:E9:B1:E8
Certificate issuer:       /CN=FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8
Certificate serial:       106090002AC88E42AA6BC6A5BD5F737176A67DEF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/3/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.mft
Manifest number:          C2
Signing time:             Wed 10 Dec 2025 07:02:11 +0000
Manifest this update:     Wed 10 Dec 2025 06:57:11 +0000
Manifest next update:     Thu 11 Dec 2025 10:25:11 +0000
Files and hashes:         1: 326131343a373538343a343830303a3a2f34382d3438203d3e20323131333538.roa (hash: dxI70qoTw8AqT4GSbNKeSr6HFS9kuFZrrwUT/py32Kc=)
                          2: 326131343a373538343a346630303a3a2f34302d3430203d3e20323132353136.roa (hash: CNfVsinVsceZGjOaXQsHUjsBZSefgQTBz85mK3PRJtU=)
                          3: 326131343a373538343a343030303a3a2f33362d3438203d3e2036353137.roa (hash: 9qxxzty+nI98+cY44+m4DwmBg2WIZrsDW0snWoFPb+U=)
                          4: FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.crl (hash: O4wxwR052K4GtbbfFL49J9K43vRd/Mm+YvHH/D5o7BE=)
                          5: 326131343a373538343a343130303a3a2f34302d3438203d3e20323136333039.roa (hash: J9Fi36nQGqAgueP6UU6iZv8HlrGSaFogPoGVrEhPYYg=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/3/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/3/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Dec 2025 10:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:60:90:00:2a:c8:8e:42:aa:6b:c6:a5:bd:5f:73:71:76:a6:7d:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8
        Validity
            Not Before: Dec 10 06:57:11 2025 GMT
            Not After : Dec 11 10:25:11 2025 GMT
        Subject: CN=DAB8CD583BD2A23E30190553B60E6C9BDA9D8E10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:67:29:cf:ea:a1:61:03:6f:4d:4d:b3:0c:99:
                    ad:7c:1f:e6:ec:cf:a5:36:35:e2:f6:2b:b8:e8:18:
                    a5:b9:01:44:78:22:10:0b:06:fb:93:bc:26:72:7f:
                    bb:eb:54:97:7b:c2:05:58:82:77:5f:52:95:a4:51:
                    a8:ca:b5:73:2d:15:62:2f:1d:02:ac:60:61:c7:7b:
                    78:e2:6c:b1:36:4d:8c:9f:e1:4c:b1:ab:b6:ae:03:
                    2e:50:8b:e1:8f:be:6d:8f:42:87:87:1e:5d:1c:36:
                    2b:6d:8f:91:62:9b:ea:17:4b:22:16:86:86:8a:e7:
                    d5:1f:2d:a6:85:33:64:48:87:13:fb:6b:28:b7:c5:
                    ee:15:05:9f:f0:8a:5f:07:35:db:08:a7:d6:c0:17:
                    d9:70:2c:2e:a8:df:58:93:a2:78:cb:7c:a1:5e:c3:
                    f1:ad:85:57:e0:e2:36:cc:f3:45:ab:9c:a4:e7:7d:
                    69:68:5c:87:c4:f7:bf:02:5d:9f:0c:52:62:aa:48:
                    45:a8:42:21:d1:5f:9f:04:7e:bc:6a:97:6b:43:c5:
                    b6:c3:19:64:a2:8f:55:ed:15:4b:f2:35:32:00:ac:
                    13:c2:14:cb:68:7f:48:bf:a2:64:39:71:f2:1d:fe:
                    db:a7:30:0d:65:21:ce:4a:aa:14:0d:18:15:7d:ba:
                    da:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:B8:CD:58:3B:D2:A2:3E:30:19:05:53:B6:0E:6C:9B:DA:9D:8E:10
            X509v3 Authority Key Identifier:
                keyid:FA:71:0E:21:BC:41:E9:82:7D:52:D6:6D:E9:8E:F8:E9:AC:E9:B1:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/3/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/3/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e3:39:9c:b5:d2:47:6d:96:8f:5c:a8:20:7e:35:75:8a:a2:e7:
         50:56:5d:c0:56:9f:f2:ff:c2:2b:4c:8b:a8:c7:83:85:69:40:
         1d:46:99:6f:8c:09:6f:5f:1e:c9:67:55:10:b0:46:c8:07:40:
         d8:51:6b:7f:c6:a1:2a:6b:44:6c:bd:73:b2:42:99:9e:80:f3:
         ed:cc:ad:56:eb:e6:50:a5:00:15:b4:c6:5f:5a:8c:a2:32:52:
         07:92:67:cb:a0:61:83:5f:96:e1:25:8b:dc:43:60:a0:70:e1:
         b9:97:90:05:b1:81:96:92:54:51:f4:e6:3e:ab:4f:32:28:bb:
         ab:38:03:5c:e2:1e:0f:7d:2e:3c:57:20:94:79:1e:4c:72:e2:
         22:54:dd:84:fd:6a:8a:0b:b6:0e:9f:b3:ec:18:8a:47:7c:00:
         7f:d2:31:8c:89:aa:0f:1e:6d:11:a7:15:ca:a7:34:bb:81:11:
         ef:4c:63:10:6e:29:00:63:3f:d7:6f:48:ce:53:2d:d1:99:72:
         58:52:11:c3:b2:30:cf:bf:0f:a2:58:e9:a5:c6:a7:2a:21:8d:
         05:ef:14:b4:e3:33:00:d7:72:8a:14:d6:33:6f:f5:c5:19:d2:
         a2:7d:23:c0:d7:e6:b3:b3:75:54:1d:c3:c7:21:1b:14:3e:42:
         4e:34:50:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----