This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.mft
File:                     B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.mft (raw, json)
Hash identifier:          wOr3fbXbiKXRcRqBdYEtX7B20sZd2y7E0EYapSKKUFc=
Subject key identifier:   D6:56:C4:81:77:2B:04:89:17:F3:AE:81:F9:F2:F7:75:3C:52:6B:DE
Authority key identifier: B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
Certificate issuer:       /CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Certificate serial:       33AB190E9E9D75930BA86041E44B66D231ECC310
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.mft
Manifest number:          04E1
Signing time:             Thu 04 Dec 2025 21:06:14 +0000
Manifest this update:     Thu 04 Dec 2025 21:01:14 +0000
Manifest next update:     Fri 05 Dec 2025 23:50:14 +0000
Files and hashes:         1: 3139352e382e34392e302f32342d3234203d3e203630343538.roa (hash: 4nPeE4WDot0aQzE1E2AL4UC2dMhv5fMNvAbvgkN5zUQ=)
                          2: 3138352e3232362e3135322e302f32342d3234203d3e203432383331.roa (hash: HpM8i92Nx8n+PHLNcWeurSiekKwVSUI6F0Ofn+tlEDo=)
                          3: 3138352e3130302e37322e302f32322d3232203d3e203630343538.roa (hash: tt+7v33pgcfL/OR4IEoj2XRjnG0uMYFwUsQyGd/wSJQ=)
                          4: 39312e3139392e3130322e302f32342d3234203d3e203630343538.roa (hash: RopopLlJOVRjGz4avSxfYPvo0OC9G/eDY75KWGAV/aw=)
                          5: 34352e3133312e38302e302f32322d3232203d3e203630343538.roa (hash: oqXmbxyjeaOX95W9eJVEUG/807pdk0CrvL0gbJu3djk=)
                          6: 39312e3139392e39302e302f32342d3234203d3e203630343538.roa (hash: 24Wi6BO1o+rN9DTXADpFgbBkLMPIwcsuYBHhIDkNNJk=)
                          7: 3138352e3231352e3131342e302f32342d3234203d3e203631333137.roa (hash: R9WhNu2MdPr1NOFjMmZeGBiIE2nwtlE4Jo64OX4u4HA=)
                          8: 3138352e3230322e3134342e302f32342d3234203d3e203630343538.roa (hash: wz4+Z748yPCelmg+RPJx6JGtTSzenzKPpdD84rUDauM=)
                          9: 33312e3231372e3235302e302f32342d3234203d3e2039303039.roa (hash: L+538BnpKcoPw9UMvgnBDsovbAC1nWxPwoO/WNMOxrE=)
                          10: 3138352e3136372e32352e302f32342d3234203d3e203630343538.roa (hash: PR56mJAfACxvVOTWCWLvFZ+zDPcod8MGy8q5KeWDe1I=)
                          11: 3138352e3136322e3137312e302f32342d3234203d3e203630343538.roa (hash: dIPcyVrIf7ut3mplg6I+FaMP77/taZ1uyGrgWAEtw1I=)
                          12: 39312e3139392e3130382e302f32342d3234203d3e203630343538.roa (hash: Ltqzgt94mzKk47x8Q+jGxz5JrNySG/Y0tzlAfjYhG0M=)
                          13: 3138352e33372e3232392e302f32342d3234203d3e203630343538.roa (hash: HYaWDlREHWbcyxGyqKTrHitDp9vR4XbaPjWC/NS6hv0=)
                          14: 3138352e3230322e3134362e302f32342d3234203d3e203630343538.roa (hash: RGdxLEzytt0V9LWy9RSfzKHfvGrjEh/8BhnnQWUWyk0=)
                          15: 3138352e3136372e32362e302f32342d3234203d3e203630343538.roa (hash: AU1XTzixRsIIk2ZdZN58IrYKd8IFItgt7vU8fJub8+o=)
                          16: 3138352e3136322e3137302e302f32342d3234203d3e203630343538.roa (hash: v9yukWrQuv+5l5wy9/dUA6cYOeUvX0B8QwsY9W2Wlgk=)
                          17: 34352e3134332e3134382e302f32322d3232203d3e203630343538.roa (hash: Sww7+LIBcy25xOjBNTHS8houn90nQJV29QTFkg33x0A=)
                          18: 3138352e33372e3233312e302f32342d3234203d3e203630343538.roa (hash: fMMz/NMrWe4m6FBXtQw+qCDaXqsRssd0JOLvgwTj808=)
                          19: 39312e3139392e3132332e302f32342d3234203d3e203630343538.roa (hash: BatNReK7gXNaqXPa5VRtj5h++zM7ew2F8IoAg/I/2U8=)
                          20: B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl (hash: B7AGqYFzzd22G3yycVrcSjIrZHJCnGIUah+uQb28jY4=)
                          21: 3138352e33372e3233302e302f32342d3234203d3e203630343538.roa (hash: IY6mHaJKET6LoAapCaxdFKM5n9LWTpQVBjwiMh+lOuI=)
                          22: 3139352e3231312e35312e302f32342d3234203d3e203235313938.roa (hash: 8WrV/v4Pwustk3GJ32BOtmYy9iPLVN7gRV+lKsziw5I=)
                          23: 3138352e3136372e32372e302f32342d3234203d3e203630343538.roa (hash: qmcJVcdT4rmfgLdWbchNjQUjUr84q4fznJ3O5A3Ac6k=)
                          24: 3138352e3132352e37362e302f32342d3234203d3e203630343538.roa (hash: E1EBzi/x9bAqWwU2+c2DtydupdQVlQih+ZQ9KG5XJM8=)
                          25: 3139352e382e3131392e302f32342d3234203d3e203630343538.roa (hash: uYf/vuY3IMzkKnywh+WrIJi9K5kM4HORH0NByn4xLTY=)
                          26: 3138352e3230322e3134372e302f32342d3234203d3e203630343538.roa (hash: 4WWLNzVcecuIV7DQH3TBRPk5m1a8bolBgWM4/XkK+mA=)
                          27: 3138352e3132352e37382e302f32342d3234203d3e203630343538.roa (hash: p8VAezPiQ82kk+zpMKLkJeAo6bWXq8DJwyiOE3M0QAE=)
                          28: 3138352e3135362e3231392e302f32342d3234203d3e203630343538.roa (hash: 8XkoDAvNeGNoBWLohtYrD/bWj0oa0HEtFyjdhTJh8rk=)
                          29: 3138352e3135362e3231372e302f32342d3234203d3e203630343538.roa (hash: rjDp5tr7Ibp1svXb6aTy1VUyxTkkVlR9zj5PgrnqiGs=)
                          30: 34352e3135312e3139322e302f32322d3232203d3e203630343538.roa (hash: MsQjsESlTuEcbjS9mONurH+MDUvuc4E1Aq8WiShITro=)
                          31: 3138352e3231372e3134302e302f32342d3234203d3e20323131333733.roa (hash: hNnRgizTxivmocfPjGcdnyRRZ7RF0OREZEdxCth7bFY=)
                          32: 3138352e3230322e3134352e302f32342d3234203d3e203630343538.roa (hash: W83bzJQhGHobYnfM1tmulNDtSSyNf73jimSZ1AGOpI0=)
                          33: 3138352e3136372e32342e302f32342d3234203d3e203630343538.roa (hash: bOe+V/bSkHZWJOaV1Qj2XTs/2xeIT/LkKzSKku71Icc=)
                          34: 3138352e3132352e37392e302f32342d3234203d3e203630343538.roa (hash: chFrGzVrsGDgHbR9U302S1vgNYtyu8hjjwKJPtAYWHA=)
                          35: 3139352e3231312e35312e302f32342d3234203d3e20343030393039.roa (hash: 0gSBq8V9lU7SHxebbh3UieoZZ+QMrAfR0WkkimNMOGY=)
                          36: 34352e3134362e3138382e302f32322d3232203d3e203630343538.roa (hash: oKJ0nojLfMNgIC0ZVHO9adCFA5GxNLUlSGYZ+ppZl7U=)
                          37: 3138352e33372e3232382e302f32332d3233203d3e203630343538.roa (hash: vZ0xeNj44WIw/+zpqjsYVz/OQXDqqT3PO1sgTbLjyjI=)
                          38: 3139352e382e34382e302f32342d3234203d3e203630343538.roa (hash: 0QQ/atSVhgxbxnMmZi2CZaSsjgioOzPYv64es6L7MGQ=)
                          39: 3138352e3132352e37372e302f32342d3234203d3e203630343538.roa (hash: iBX/+QeuXYuSCTlJT7cmF+tQX/4HCmniMjyG8lOqUWA=)
                          40: 3138352e3136322e3136382e302f32332d3233203d3e203630343538.roa (hash: FhpX/C9zk9FVjj10PImD/wKS/RfpAC0kUdP0bDZAwyg=)
                          41: 3138352e33372e3232382e302f32342d3234203d3e203630343538.roa (hash: mw435AXz9xHWhN238pBrnHfvo9tx+w0yMNZcNgIAnFw=)
                          42: 3138352e3232362e3135342e302f32342d3234203d3e20393834.roa (hash: OnyMDDjhfbjBWnmH/O9nK3hLulu4nf9Z9u4/z8prRCw=)
                          43: 3138352e3232362e3135352e302f32342d3234203d3e203634323637.roa (hash: BphaL/Q+MmU9qXxX06J/d3Yz3MPwKV/7sGiY2uy2MYY=)
                          44: 36322e3132322e3138392e302f32342d3234203d3e2033313730.roa (hash: mbpZXZK/fM7vaFZ5y82xMnQ6rCPjr7XSXm9Q6bD78C4=)
                          45: 3138352e3135362e3231362e302f32342d3234203d3e203630343538.roa (hash: EvCO85+TEFrCa3fyF2Hvn+tlr4Nv9RYk07bI6yFMPvw=)
                          46: 3138352e3232362e3135332e302f32342d3234203d3e20323131343430.roa (hash: rGW7/8GB609/SHNrTEWoAaTI5dQHouhe15jjA9R2QwM=)
                          47: 3138352e3135362e3231382e302f32342d3234203d3e203630343538.roa (hash: IhLfWMdp3wfBoJIgMf1dZQYIiVjH+IC6uyZDFZApUo0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Dec 2025 23:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:ab:19:0e:9e:9d:75:93:0b:a8:60:41:e4:4b:66:d2:31:ec:c3:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0170abdc955aa176be2af26299678f2f7c9aca0
        Validity
            Not Before: Dec  4 21:01:14 2025 GMT
            Not After : Dec  5 23:50:14 2025 GMT
        Subject: CN=D656C481772B048917F3AE81F9F2F7753C526BDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:9a:90:47:90:e5:f7:55:bf:f8:04:a4:28:fa:
                    fa:a8:69:26:1e:5c:44:0c:22:1c:36:b4:04:71:d0:
                    ca:47:67:72:a1:31:45:18:a4:7e:98:ee:0a:50:2f:
                    62:c8:93:eb:fc:ad:96:e9:ab:f2:e5:b5:0e:97:30:
                    c4:92:22:e6:61:81:2b:7c:af:54:29:df:73:f3:b0:
                    fd:4f:d8:5c:75:8c:e3:3c:c3:b4:e6:69:38:a2:62:
                    6c:5b:20:67:52:47:73:d6:ad:11:ae:d7:f0:1f:e7:
                    e4:9d:6a:bb:83:b5:ad:8c:dc:dd:6c:27:3b:31:a8:
                    86:bd:b0:9c:74:0f:63:28:ed:54:77:ad:2a:03:c6:
                    f7:77:c1:c9:65:b5:e7:c1:6e:b1:ce:ed:dc:4c:33:
                    73:8d:04:e9:47:33:7c:3b:d4:47:18:e7:55:d5:19:
                    04:03:80:d7:61:82:ef:7a:00:c7:ac:67:4e:17:a6:
                    60:3c:11:2c:13:1e:a1:df:86:19:b1:55:01:c6:06:
                    95:aa:88:93:82:2d:35:0d:59:71:57:76:fd:7e:b1:
                    61:1f:9b:ae:c0:f0:41:14:27:ac:36:9f:5b:53:13:
                    ca:63:28:61:f4:46:02:24:2f:06:b4:aa:b8:98:20:
                    f7:45:89:0e:f3:65:78:79:7f:5a:20:af:7d:3d:05:
                    48:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:56:C4:81:77:2B:04:89:17:F3:AE:81:F9:F2:F7:75:3C:52:6B:DE
            X509v3 Authority Key Identifier:
                keyid:B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:7f:03:41:7d:f8:77:98:60:de:d0:9d:17:3d:09:36:80:e1:
         ee:b9:42:cb:2f:c4:6e:6f:bd:f9:6e:49:01:a8:7c:1d:04:86:
         82:12:d4:82:f0:4f:33:77:02:eb:2d:fe:19:44:a2:36:2c:c9:
         7e:1c:35:dd:2c:dc:ea:f7:98:82:7a:4b:5e:30:e2:b0:c6:ed:
         f8:bc:54:b7:cd:57:d1:81:dc:57:d2:d3:d5:c1:a4:2f:e6:83:
         af:fb:1a:17:80:20:c1:b2:a1:2e:23:d2:51:c6:3d:12:0d:44:
         f3:03:f7:a8:b7:5f:e4:98:94:bd:3a:6e:b1:cf:3a:58:0d:88:
         4f:0c:df:87:f6:4a:fd:b5:49:8f:1f:62:aa:79:cf:80:8e:60:
         4f:79:b7:2a:34:91:3c:3d:a2:4d:32:2b:17:11:c8:68:dc:ca:
         1a:42:45:33:da:1b:c2:59:a9:af:d2:39:64:ae:34:78:3d:4d:
         0a:cb:34:8a:1f:d6:3b:61:0d:01:3b:ea:d9:90:31:5d:58:eb:
         c9:9c:7e:1d:5a:0d:f6:47:a5:05:44:79:3d:5f:7b:02:d2:5c:
         52:a4:9d:7f:4f:d7:d2:93:c7:af:88:09:80:0d:e5:a2:1d:09:
         43:06:7e:2d:64:1a:69:6c:32:6d:3e:67:e3:2c:53:58:11:4b:
         c2:73:92:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 16:54:59 2025 by rpki-client