This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
File:                     3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft (raw, json)
Hash identifier:          1BdfI9W7g/rpoZvJtghAiJ8p95XuGmS79ZD0HLfccf0=
Subject key identifier:   77:E1:25:F0:91:40:74:98:54:7C:97:FB:D7:AC:82:46:88:81:DC:C3
Authority key identifier: 3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
Certificate issuer:       /CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Certificate serial:       6E020FE483CFB05449B49A86B5A68062A110B59F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
Manifest number:          02ED
Signing time:             Sun 07 Dec 2025 12:28:47 +0000
Manifest this update:     Sun 07 Dec 2025 12:23:47 +0000
Manifest next update:     Mon 08 Dec 2025 12:59:47 +0000
Files and hashes:         1: 326131343a366634303a3a2f33322d3438203d3e20323030323432.roa (hash: wghHBUAPyTh1k75qu9+3ST+twxsY88XGIADNiAK2tow=)
                          2: 326131343a366634343a353630383a3a2f34382d3438203d3e20323030323432.roa (hash: tIzxcCSG/V5QyAqn4lWVGbnRYKGordkU7LLlPvgkHMc=)
                          3: 326131343a366634343a623030623a3a2f34382d3438203d3e20313939353832.roa (hash: jzgTEml4YLsCpJ5PWa0CjR2ZyZx1iGCX4c7IWy4h9Uw=)
                          4: 04C92D9B1C8307B70C47290166D5989CEFABDCC4.cer (hash: WC2xT6FYiM9dJRxOd1eaHqB3GTC9TL6xOPD7Nd7Wdro=)
                          5: 326131343a366634343a3432303a3a2f34342d3438203d3e20323036373531.roa (hash: tAH3E769OlzQWJEjgXPQBoGBF8R2vjgSThIJK0OhT8g=)
                          6: 326131343a366634343a65663a3a2f34382d3438203d3e20323136303338.roa (hash: QG09fxLJtKa1Y7d6YZoiVLo1F1ttiuWxvVNqxNhuPNo=)
                          7: 326131343a366634343a633730313a3a2f34382d3438203d3e203438343336.roa (hash: ga3nLrPruxDKXz/HZkq9lRMiU1IAca5YQ8TT+rGp+T4=)
                          8: 326131343a366634303a3a2f32392d3438203d3e20323030323432.roa (hash: x7hOPFZjN7RZHBsYqLnDpQUy2G9KH75g5Bkk7YCqeYo=)
                          9: 326131343a366634343a633730313a3a2f34382d3438203d3e20313938333432.roa (hash: 7HzMy3EQC4VhBpQQuwAgqmxWq4MZqQyb1t+9r/yAxck=)
                          10: 326131343a366634343a623030623a3a2f34382d3438203d3e20323130363637.roa (hash: m8+D+okBVVmTzlPUuDfmEBZbvua+N+sKP5fs6j2S33Y=)
                          11: 326131343a366634353a646561643a3a2f34382d3438203d3e20313938333432.roa (hash: 9H5bHORS1buGdk6dUDjyuqRIpPDaKxv77H5RNmLlgrw=)
                          12: 326131343a366634353a3a2f33362d3438203d3e203530323234.roa (hash: Cm6iG7rXYSmOBRLZv4C/D104nGz4969UDdr1rCKUD0A=)
                          13: 326131343a366634343a623030623a3a2f34382d3438203d3e20313937393139.roa (hash: Wi5+YIc762ypl+B2WINgJse4hzMgAIpn5Ywt7Gts2zw=)
                          14: 326131343a366634343a636166653a3a2f34382d3438203d3e20323035373839.roa (hash: Gh/w94WLUPZNwP3yscIWB0P8fPzMkD8rKLwHE/CiSik=)
                          15: 326131343a366634353a633030303a3a2f33362d3438203d3e20313938333432.roa (hash: E5i+93dh5I/S5MMaZahzwFpc+FrF3/j8/oPFxMb1ofg=)
                          16: 326131343a366634343a323339303a3a2f34342d3438203d3e20323136313135.roa (hash: mVRk7OX5nwehY6QXOhw6587D02FFEQfLM0VwJdYXtak=)
                          17: 326131343a366634343a646561643a3a2f34382d3438203d3e203534363831.roa (hash: +RB/H3yC2Zhqk6dbZnb2AoHhKMIePUOM6t4+sjUxfqU=)
                          18: 326131343a366634343a633066663a3a2f34382d3438203d3e203534363831.roa (hash: dC8rQUoWVp/X7YVAzZ2dHrxEZrdm+LkwjO9CaebKOYE=)
                          19: 326131343a366634353a623030623a3a2f34382d3438203d3e20323134373537.roa (hash: J9QsdPj5DQDhu5mtlU23kktl0EvwgihwetcbiHJN5aI=)
                          20: 326131343a366634343a656465383a3a2f34382d3438203d3e20323035373839.roa (hash: 37pW5zkUWwecCqjFHAdYxHEZTGOlFK8BvptTevydiHI=)
                          21: 326131343a366634343a353336303a3a2f34342d3438203d3e20323136303338.roa (hash: kV9C6QKeijySZWnfoj92GJUvF6GdpqcT/jUq1YV72FQ=)
                          22: 326131343a366634343a343430303a3a2f34302d3438203d3e20323133313336.roa (hash: HawlF8j6AaLKvNQu2aTpKUa6yLzB5NKlnnf7Xm6b/mk=)
                          23: 326131343a366634353a633030303a3a2f33362d3438203d3e203438343336.roa (hash: buWW9LxxoX84xDGlXRuc7ac6Vqdjfpe3tuguLo1bU7c=)
                          24: 326131343a366634323a3a2f33312d3438203d3e20323030323432.roa (hash: ITJiuOJiPhL9zGFnR/kFwwhgRvQux+ehMzGBms69CVM=)
                          25: 326131343a366634343a633064653a3a2f34382d3438203d3e203438343336.roa (hash: g+1tMLXY3SN1Y/zUSSaWRJc99akoWdOPFvMCxkZrGLU=)
                          26: AS200242.asa (hash: 1AlMG2dsNj+2a3kLp0CpSmy1LKhmLk73ZFr/4CSbD+w=)
                          27: 3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl (hash: AEOeLMPegEw5manwUTB/6lp1g0OMzD9Sz31hUyDUhXI=)
                          28: 326131343a366634343a633064653a3a2f34382d3438203d3e20313938333432.roa (hash: CR1Da8B3Ve/Ki5AH4lTB+zn6wD6Vb8CX/Tfk65mSnm4=)
                          29: 326131343a366634343a623030623a3a2f34382d3438203d3e20323135343733.roa (hash: FmiBX7ObUBJXMx50BEJxB5rcHYX/1xnmOVK+ALpTHJE=)
                          30: 326131343a366634353a646561643a3a2f34382d3438203d3e203438343336.roa (hash: qTx2l+4Rmw9QcHHVu+RMfEZ9wVvbUUTMbX9wtkxLgYk=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Dec 2025 12:59:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:02:0f:e4:83:cf:b0:54:49:b4:9a:86:b5:a6:80:62:a1:10:b5:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
        Validity
            Not Before: Dec  7 12:23:47 2025 GMT
            Not After : Dec  8 12:59:47 2025 GMT
        Subject: CN=77E125F091407498547C97FBD7AC82468881DCC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d2:01:f1:d9:d0:3c:b3:7f:f7:0b:b9:79:31:
                    3f:39:c9:69:39:74:39:b5:d9:76:bf:30:b8:e0:18:
                    9f:c3:c6:cb:e8:35:10:8b:e0:56:e0:f1:24:6b:94:
                    d2:c2:eb:aa:5b:ed:c8:7f:f1:13:40:12:5a:ce:61:
                    34:f9:86:a5:21:02:df:7a:d9:c6:4b:d1:38:26:89:
                    48:d5:84:bc:44:ca:1e:ad:d4:4e:1e:22:fb:78:11:
                    dd:0c:5a:18:ca:0d:1a:54:8a:89:76:d8:f2:36:6d:
                    9a:b2:e1:55:26:ad:75:d5:70:cf:c7:8c:45:7d:28:
                    a4:67:ed:e4:fa:26:cd:94:67:5e:e2:8e:7d:48:97:
                    18:3a:32:a2:d5:99:b8:1e:03:31:c0:29:90:63:d1:
                    7e:40:69:3a:e5:15:be:ff:79:b4:44:06:24:69:5d:
                    5c:31:16:b4:0e:37:d9:4c:04:28:2e:72:b9:e4:e3:
                    b1:2a:c4:af:d9:6f:31:a3:df:7d:33:db:3f:49:55:
                    8a:d1:5f:6c:a0:08:c0:51:30:91:c5:ec:87:5f:fb:
                    18:5a:ca:fa:83:ed:55:e5:de:ee:36:a5:50:d1:4e:
                    19:8c:92:eb:1f:f2:1f:0a:3f:96:2f:35:87:a2:6d:
                    22:df:a6:c5:c5:09:12:cb:93:cb:e9:72:d8:8d:19:
                    42:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:E1:25:F0:91:40:74:98:54:7C:97:FB:D7:AC:82:46:88:81:DC:C3
            X509v3 Authority Key Identifier:
                keyid:3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:c9:3f:30:d4:99:7c:8f:1c:e9:91:4e:65:9e:6d:ad:f8:28:
         4e:99:91:32:c7:8b:fb:ff:68:a3:54:16:59:2e:48:e4:70:ec:
         9f:d2:b1:7f:53:b9:bd:6d:69:f0:f3:af:6f:75:be:47:a1:9b:
         fd:5c:36:19:9f:3e:f2:45:ee:1e:26:76:7a:00:2d:79:ec:88:
         79:7e:d9:ba:fe:97:a2:5a:02:02:18:d5:23:86:d0:da:65:f6:
         5f:11:3c:43:48:50:70:57:af:80:ad:4f:9e:89:63:2c:f4:ce:
         77:ab:70:79:b6:f4:e9:44:f8:04:c3:64:83:a2:3e:7f:e0:c2:
         20:a4:70:46:c8:7b:20:d3:a1:2e:2a:83:b9:4c:67:fd:a9:76:
         b4:94:61:cd:c0:8f:88:57:7d:79:37:57:ee:d5:b9:41:8c:4c:
         31:da:d7:d2:3f:b1:95:13:83:4d:3f:82:ff:d7:55:3e:4b:11:
         bb:05:b5:87:67:47:e6:4b:2b:44:07:b3:e8:c2:84:28:8b:7f:
         67:58:c9:73:cf:77:41:0c:01:3d:87:53:d9:77:db:71:db:e0:
         69:0f:a5:18:5d:ac:48:5a:3c:b6:58:43:e5:21:30:c1:77:e6:
         39:b5:e2:0c:6f:10:06:2a:53:43:ed:99:08:90:e1:7b:0b:55:
         9e:60:f4:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----