This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/1/8BD4F7EBFF9763C061D537B8A1D0872D70697632.mft
File:                     8BD4F7EBFF9763C061D537B8A1D0872D70697632.mft (raw, json)
Hash identifier:          EIT1wsgcIbZM9AKN5A8M7BE2/ujhZdUkqfQkViepXAI=
Subject key identifier:   18:1A:09:14:F0:12:EE:46:DC:04:8B:AD:05:38:F0:57:FE:3B:44:8C
Authority key identifier: 8B:D4:F7:EB:FF:97:63:C0:61:D5:37:B8:A1:D0:87:2D:70:69:76:32
Certificate issuer:       /CN=8BD4F7EBFF9763C061D537B8A1D0872D70697632
Certificate serial:       32E2CD0FFDDE4516FE144C01EF406045AA117F1F
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8BD4F7EBFF9763C061D537B8A1D0872D70697632.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/1/8BD4F7EBFF9763C061D537B8A1D0872D70697632.mft
Manifest number:          8D
Signing time:             Wed 10 Dec 2025 06:32:34 +0000
Manifest this update:     Wed 10 Dec 2025 06:27:34 +0000
Manifest next update:     Thu 11 Dec 2025 07:51:34 +0000
Files and hashes:         1: 326131343a373538333a663532613a3a2f34382d3438203d3e20323133363035.roa (hash: aV7gG9d5Jm1xL7quU3kvraReedZSPl0atIf2oiaL4bI=)
                          2: 326131343a373538333a663532613a3a2f34382d3438203d3e20323130343430.roa (hash: ZdNC5XbbwwexZ9fJQgyFujAFE+pNtA0LnoesNkwLRvA=)
                          3: 326131343a373538333a663566303a3a2f34342d3438203d3e20323135373532.roa (hash: CQeQBv1si6HjY/pqPKCiw+E43BXtrCR5FS8uJNoFCsQ=)
                          4: 8BD4F7EBFF9763C061D537B8A1D0872D70697632.crl (hash: w+gO+4SX+9kpnzX74YcWQL5scGIUgAFsUYCeXagE8yA=)
                          5: 326131343a373538333a663530303a3a2f34382d3438203d3e20323133363035.roa (hash: 9/oPKwR86cNPm2ExAL4kDJvYHegTDwwsjfTcMTofdOY=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/1/8BD4F7EBFF9763C061D537B8A1D0872D70697632.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/1/8BD4F7EBFF9763C061D537B8A1D0872D70697632.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8BD4F7EBFF9763C061D537B8A1D0872D70697632.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Dec 2025 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:e2:cd:0f:fd:de:45:16:fe:14:4c:01:ef:40:60:45:aa:11:7f:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BD4F7EBFF9763C061D537B8A1D0872D70697632
        Validity
            Not Before: Dec 10 06:27:34 2025 GMT
            Not After : Dec 11 07:51:34 2025 GMT
        Subject: CN=181A0914F012EE46DC048BAD0538F057FE3B448C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:74:b9:b9:87:3f:37:ee:5a:d8:04:7f:92:a2:
                    f5:42:d9:11:7e:11:4e:01:0e:bc:22:99:70:34:81:
                    e4:96:3a:4c:60:d2:11:e0:0d:cc:96:e7:1c:48:d6:
                    74:f9:6d:ce:ac:13:f2:e7:ca:88:a4:25:c8:07:2e:
                    c7:77:bc:8d:a3:a7:00:0d:c9:6d:61:63:74:3f:bb:
                    26:5e:e7:4a:e8:6e:1e:04:03:4b:ce:88:89:7c:3d:
                    49:91:26:4a:e3:d1:2a:1d:dc:11:a0:d9:01:e1:99:
                    76:30:77:7f:1c:fe:b9:ed:40:d1:79:06:83:f5:3a:
                    a0:1a:b6:5c:cd:b1:71:b4:26:e1:8e:a9:99:33:56:
                    bd:a5:e6:79:3f:3d:44:d4:a7:85:2b:59:c6:8e:3b:
                    ad:84:bc:8d:aa:7d:f1:52:56:04:80:2f:1e:4c:bc:
                    8f:fb:08:49:3a:48:f2:f8:04:7f:05:4f:e7:9e:f8:
                    5a:a0:59:59:1a:07:ff:f9:18:be:8f:e4:16:44:82:
                    85:60:87:e7:0c:92:eb:5f:f7:76:d7:c1:2e:83:01:
                    15:9a:6a:0d:8e:ac:64:a5:6e:4c:96:99:6d:68:01:
                    22:59:8b:0e:4d:ea:aa:89:0c:36:ff:bb:ce:19:87:
                    c4:7e:2e:ca:90:c5:b6:11:58:d0:a7:64:9d:b7:ca:
                    fb:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:1A:09:14:F0:12:EE:46:DC:04:8B:AD:05:38:F0:57:FE:3B:44:8C
            X509v3 Authority Key Identifier:
                keyid:8B:D4:F7:EB:FF:97:63:C0:61:D5:37:B8:A1:D0:87:2D:70:69:76:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/1/8BD4F7EBFF9763C061D537B8A1D0872D70697632.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8BD4F7EBFF9763C061D537B8A1D0872D70697632.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/1/8BD4F7EBFF9763C061D537B8A1D0872D70697632.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:34:a5:e6:ea:db:83:db:8d:b3:09:77:01:7d:bc:9b:39:24:
         59:55:34:e3:30:8d:21:ef:58:92:5f:93:a1:3e:7e:5f:64:0b:
         65:f9:5d:86:00:20:55:ca:7e:9b:e5:87:08:8e:e2:e8:e7:ad:
         3b:20:e1:45:11:b8:3c:d0:c9:9f:ca:c6:2e:9a:69:01:d3:cb:
         18:f9:cb:2d:bf:f5:91:5e:ad:c8:a0:db:23:da:bc:e4:4f:c9:
         82:53:cd:c3:21:7f:11:4a:aa:c0:ab:74:d2:4e:29:4f:0e:01:
         e8:2c:5d:fa:49:ae:4c:3a:61:d7:a4:44:ed:48:3c:c1:81:34:
         8c:5a:2d:45:e1:54:b8:85:5d:d7:0d:f1:a4:a6:1e:f1:f0:f1:
         2f:cb:d2:55:76:e0:08:e1:4c:1d:6d:c9:8d:ea:b2:aa:cf:58:
         71:5b:60:5a:94:b0:4d:d0:84:86:8a:db:ab:78:63:25:22:a2:
         1e:d5:17:fe:ab:d3:b8:46:e4:f0:22:e5:0c:70:64:05:b6:6f:
         fb:b9:56:92:72:b7:24:7f:63:85:9e:47:ae:d8:50:04:64:9c:
         ea:e9:2c:0a:7d:37:85:04:73:23:19:9e:c3:aa:94:c3:d3:d6:
         24:db:6c:af:67:d1:80:1b:f3:6f:ff:3c:a4:23:60:37:b2:18:
         f8:a1:bb:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----