This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft
File:                     51917E722DB03952D9056BED2F6BD4BF98B78976.mft (raw, json)
Hash identifier:          7SFIyTbXP/ndlCbWb4cCDB2P8anoDNvXhZgOEpIE3xI=
Subject key identifier:   09:20:FF:19:0A:AF:63:46:7F:34:C7:49:83:5A:D3:10:73:E7:D8:38
Authority key identifier: 51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76
Certificate issuer:       /CN=51917E722DB03952D9056BED2F6BD4BF98B78976
Certificate serial:       0FE9A4841BF103D7F2A237125E01A7EE7520755B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft
Manifest number:          0120
Signing time:             Fri 12 Dec 2025 17:19:47 +0000
Manifest this update:     Fri 12 Dec 2025 17:14:47 +0000
Manifest next update:     Sat 13 Dec 2025 21:07:47 +0000
Files and hashes:         1: 326131343a373538303a666635323a3a2f34382d3438203d3e20323039373130.roa (hash: vs66PWFM6L/hirNyhIXTRaz65c001j+IhkCdp8VdfS4=)
                          2: 326131343a373538303a666635333a3a2f34382d3438203d3e20323039373130.roa (hash: UpFVw7x1NBf/Uix4G0zJEj+QV4riL3tEIjso5GywhOU=)
                          3: 326131343a373538303a666635353a3a2f34382d3438203d3e20323039373130.roa (hash: 5weylF9E+kZUqdJn7nMGLccAIkWjUNuo5MqarqyfkO8=)
                          4: 326131343a373538303a3530303a3a2f34322d3432203d3e203331383938.roa (hash: 7z5RoyaJRkP9nx99eQ4HknE9KjY7eFLuMQrU4NhLP9s=)
                          5: 326131343a373538303a3530303a3a2f34302d3430203d3e20323039373130.roa (hash: UtWLjV2JD6X8emwUC9bu8RyXGCD7bzymrTBVIEkaVv8=)
                          6: 326131343a373538303a666635343a3a2f34382d3438203d3e20323039373130.roa (hash: i7VkbN6Rb5CnHlmR8BF2dlC+Uq3PFV4wJTcaolWAu+U=)
                          7: 326131343a373538303a666635303a3a2f34342d3434203d3e20323039373130.roa (hash: SHYewRnAEyfHeIS/ErCy1dNpuo8kVPzhKkgjNNzYVkM=)
                          8: 326131343a373538303a666635303a3a2f34382d3438203d3e20323039373130.roa (hash: RhrZumuCHn+6y3yZr34sdgh4sb8kS47/Ka9E3B3UluQ=)
                          9: 326131343a373538303a666635313a3a2f34382d3438203d3e20323039373130.roa (hash: KcfiSDiqDvlLOqfaLqph9s6F4NvpySAcmNFiwDriyms=)
                          10: 51917E722DB03952D9056BED2F6BD4BF98B78976.crl (hash: ytnbtpY1uJJc75Q1fOd8j+UQAWC/tRM0yNi/cgcNr9M=)
                          11: 326131343a373538303a666635363a3a2f34382d3438203d3e20323039373130.roa (hash: SwKF9ZgurLBB1Omp9sHNYZoTnYJ/E2ALGPkMC5kD1BA=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Dec 2025 21:07:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:e9:a4:84:1b:f1:03:d7:f2:a2:37:12:5e:01:a7:ee:75:20:75:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51917E722DB03952D9056BED2F6BD4BF98B78976
        Validity
            Not Before: Dec 12 17:14:47 2025 GMT
            Not After : Dec 13 21:07:47 2025 GMT
        Subject: CN=0920FF190AAF63467F34C749835AD31073E7D838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:dd:fd:ff:8c:6c:c5:6e:ba:7b:44:3b:15:16:
                    b9:ab:e0:03:f7:c7:c9:80:60:15:a7:47:a0:0c:8b:
                    27:58:fb:6d:2f:37:a1:0e:5a:74:24:d2:b2:0c:e9:
                    a5:2f:21:f9:60:96:83:12:cb:90:3d:b3:c5:b2:a2:
                    2b:bb:66:ea:95:3b:a7:d6:46:5e:7c:7f:12:67:03:
                    e4:45:d9:e7:fc:76:45:40:33:67:44:fb:07:7b:66:
                    0e:4e:f5:4b:b7:65:80:03:f8:d8:68:2c:5b:44:30:
                    87:c4:34:a7:e6:f9:1c:b2:c6:4f:e4:a1:fb:a3:e5:
                    a4:0e:2a:df:f1:b1:f4:65:51:fd:21:6a:bd:c9:91:
                    c0:c7:59:a5:ab:42:52:5f:72:89:cd:99:f8:34:98:
                    54:d3:78:40:3d:0b:bf:f9:7c:a2:24:7b:00:fa:2e:
                    d5:2a:03:fe:e7:0f:8b:62:c4:ab:83:0a:81:4b:36:
                    61:11:76:1c:3e:7b:8a:12:c9:14:b8:bb:e7:e3:9b:
                    35:d4:91:ca:66:10:32:17:9e:92:c2:b5:50:20:bc:
                    18:2f:ff:68:ea:f0:72:fe:d9:d3:57:fd:a3:08:ad:
                    b9:91:ec:ca:9d:ec:5f:6c:a4:c5:83:cf:70:77:61:
                    e2:cf:ec:b4:80:0c:4f:1f:b9:ee:48:c9:57:9a:7b:
                    df:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:20:FF:19:0A:AF:63:46:7F:34:C7:49:83:5A:D3:10:73:E7:D8:38
            X509v3 Authority Key Identifier:
                keyid:51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:56:c9:ee:75:87:96:06:11:5b:e2:3a:1e:01:53:d2:c5:1e:
         81:5e:8c:a6:a8:67:b0:48:d3:95:4b:d5:ed:51:cc:cd:7b:d7:
         9b:e5:b6:5f:f0:a6:4f:cd:15:dd:7b:f7:28:55:21:26:42:bd:
         2b:a8:7f:23:4a:cc:ab:76:0c:da:40:a4:1a:d3:65:02:b5:9d:
         ba:43:76:1d:8e:17:63:fe:8f:53:71:43:88:09:17:95:3f:0b:
         72:96:51:a7:30:50:7b:b9:83:ca:a2:85:e4:38:22:89:66:86:
         2d:bd:eb:03:c0:31:83:fc:30:c0:23:4f:5d:73:cd:6d:01:91:
         7e:1b:41:dc:f6:fc:a2:97:1d:c4:65:1f:0d:08:fe:29:c2:4a:
         06:ce:8f:1f:f8:2e:dd:b6:96:f0:c6:7d:1d:3c:a0:33:eb:f6:
         85:e9:d6:9d:d7:50:6c:f8:0c:79:bf:8f:2a:cf:42:dd:c3:90:
         c0:dc:fb:97:72:77:50:1b:a9:24:44:4c:f3:62:22:b0:4c:b7:
         e3:0c:2e:6f:e3:03:48:4d:5b:37:68:f0:94:43:93:7e:79:f0:
         1b:26:98:00:88:37:bb:92:9f:27:02:7c:44:48:aa:40:55:62:
         c0:e4:01:44:84:05:77:7e:8a:50:1e:61:a1:b5:9a:0b:92:2d:
         49:b9:02:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 13 08:21:27 2025 by rpki-client