This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
File:                     B683F2EB50C5999A77456E8826831609D48C7D3E.mft (raw, json)
Hash identifier:          48hOM4A17oNu6BuyRg16u7+4coHQZv+/ExdsH0E2ktM=
Subject key identifier:   38:16:67:FF:DA:B4:33:BD:BC:FB:8E:88:A2:1B:6F:19:C4:1D:AC:C3
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Certificate issuer:       /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial:       44E70BCC423300EE166F4DE1F2888E60BCC55C38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
Manifest number:          065B
Signing time:             Fri 05 Dec 2025 20:06:16 +0000
Manifest this update:     Fri 05 Dec 2025 20:01:16 +0000
Manifest next update:     Sat 06 Dec 2025 23:59:16 +0000
Files and hashes:         1: 3231332e3133392e37322e302f32342d3234203d3e203230383630.roa (hash: NjWmld7in/C2wyn6DXt7Xnv7mQPq1jiHpZcTZuGeBQ0=)
                          2: 3231332e3133392e37312e302f32342d3234203d3e203631333137.roa (hash: DZpFNtIJlcLHmoaMDeodOmCa2IVlyKcWWOjWi093JRY=)
                          3: 3231332e3133392e39322e302f32342d3234203d3e20383334.roa (hash: v0tNFH1u/s9uww1+x0zLopoqAlrYrdWeRhsSzqaLV6I=)
                          4: 3231332e3133392e38372e302f32342d3234203d3e2039303039.roa (hash: euqkb79t1OVkqJLV4h0sY2Fb9LyHpO6FssRdPdeta2o=)
                          5: 3231332e3133392e39352e302f32342d3234203d3e2039303039.roa (hash: CLzyfVEPAwKX3mhx3cFkDV2A+7c3eW1iEPnVFN3/un0=)
                          6: B683F2EB50C5999A77456E8826831609D48C7D3E.crl (hash: JgAXr70qGdMSwy5Mj2KxIxUP7U/ImFSBBFvNoiG5cm0=)
                          7: 3231332e3133392e38332e302f32342d3234203d3e2039303039.roa (hash: IdSy9DI41okmJzC8kiYhvPIkxbhT29hGtDcstol94Gs=)
                          8: 3231332e3133392e37382e302f32342d3234203d3e20323036343436.roa (hash: LCM/dunTFfsiENo1u3oy0PNFVtxRWwm9bEHFaBempdc=)
                          9: 3231332e3133392e38342e302f32342d3234203d3e2039303039.roa (hash: recgwGLHRmHMtvRRJVUhe6BWHyw6Djaciag4FXuYftw=)
                          10: 3231332e3133392e37372e302f32342d3234203d3e20333938323536.roa (hash: AAU8mMA/8qMP5OVFvU4ND40XGDRIHcFw5zTvG37HSds=)
                          11: 3231332e3133392e37392e302f32342d3234203d3e20323037333838.roa (hash: ++GZ339S0KrF867J3TV0tr4TdthWz9Doq5ZUIyvykVE=)
                          12: 3231332e3133392e38322e302f32342d3234203d3e2039303039.roa (hash: zOTGboIZBsrY2C4wOPiGbp4YdGPWL/CIf9OR+DPh8lw=)
                          13: 3231332e3133392e36362e302f32342d3234203d3e203134363138.roa (hash: D6sys78d1VHUPnQGvPOUfa9pG9olePRUcwiyJ1CBP8Y=)
                          14: 3231332e3133392e37302e302f32342d3234203d3e203631333137.roa (hash: imvON1NIsf5RjQ1xycG0mxKjYBudQ7J1/WlKrbcZWA4=)
                          15: 3231332e3133392e37392e302f32342d3234203d3e20323132313530.roa (hash: 0JPdHuSbHUk0VXaqk6MQ9H7eLXZuOQ1QZwBPgp3LcZ4=)
                          16: 3231332e3133392e36342e302f32342d3234203d3e2039303039.roa (hash: r1pjD687zCx4FmCuXlGB5h73ScKoFYopGKhXlE6KUfY=)
                          17: 3231332e3133392e36392e302f32342d3234203d3e20313337353137.roa (hash: HH3jqYI0MpU2yLi9Hw8yJjtic3EBakXCP+g63lrfqjg=)
                          18: 3231332e3133392e37352e302f32342d3234203d3e20323731393837.roa (hash: qsm72iRYseRLkO/eaTDbU1ka1enp1cU6d6BLc+o+lFc=)
                          19: 3231332e3133392e39332e302f32342d3234203d3e2039303039.roa (hash: 9cktvEdh4jpik+wY0YHKxFgG9OCHki2tIjn/mKo9IKg=)
                          20: 3231332e3133392e36352e302f32342d3234203d3e20323035383836.roa (hash: TLjNf6jdRZO58fxugLhMHgmUmrBaMgZk1lVvehOQHy0=)
                          21: 3231332e3133392e38392e302f32342d3234203d3e2039303039.roa (hash: pjnqIb4dxS7ohemcNICs3/5MSebDeHfZm+o3ScY7Wbs=)
                          22: 3231332e3133392e38302e302f32332d3234203d3e20383334.roa (hash: Ks087DEiqVukKepl+oMIjJV++Ljikiz+JnpLTJRh6FI=)
                          23: 3231332e3133392e39312e302f32342d3234203d3e2039303039.roa (hash: iHrVGYqO0jEnmhXvt0u+E3Fi7EyKrYFB7bEQzlX2suw=)
                          24: 3231332e3133392e39342e302f32342d3234203d3e2039303039.roa (hash: CZYh6lYb4N4Hi46B2oVp46GIE/gWlkXTwUlUU+TKpIw=)
                          25: 3231332e3133392e37362e302f32342d3234203d3e20323132333834.roa (hash: M5KJEFx6ngzgWcWaswPQRo9lko/DzsisbWDI/JPapI0=)
                          26: 3231332e3133392e38382e302f32342d3234203d3e2039303039.roa (hash: FBtJ+MNYwdWO4In9hmlePFb198UWpspP65HhFA9Ht28=)
                          27: 3231332e3133392e36372e302f32342d3234203d3e2039333034.roa (hash: 18Z/kr0BOMbrD7s6WTSNdpCR4gQ+ao7oXZdueQ4RROc=)
                          28: 3231332e3133392e39302e302f32342d3234203d3e2039303039.roa (hash: 4HobDf2IR5LvPu11gvXGRRjA/4KYDCBMeX1L5falDQI=)
                          29: 3231332e3133392e38362e302f32342d3234203d3e2039303039.roa (hash: FfLZiCS8Nd3284OE5qfthGu+7ch+27qC/k5QS2NyeLA=)
                          30: 3231332e3133392e36382e302f32342d3234203d3e2039303039.roa (hash: 3sBgBPhXGekAATE8XJ410DzQWJqVxKjP0XKZZazqwjc=)
                          31: 3231332e3133392e37332e302f32342d3234203d3e20323132323338.roa (hash: Dtv0Rk3S6CYGgeyc9Utp8OCStFSnf/fyoGbb6uGogTI=)
                          32: 3231332e3133392e37342e302f32342d3234203d3e203239383032.roa (hash: aplL4eWGO1854T22hYUsUkBTP8Rpw5inKqfwVoAi4uA=)
                          33: 3231332e3133392e36362e302f32342d3234203d3e203136353039.roa (hash: FY200EeTGQqoD9S8sjuLjCwpFp/7NCHvuVTZp+n3GiM=)
                          34: 3231332e3133392e37392e302f32342d3234203d3e2033333230.roa (hash: PtRMyKTdbfZGfPE5XdhdhFh3qhxKx8+kxVjMWXNcsWU=)
                          35: 3231332e3133392e38352e302f32342d3234203d3e2039303039.roa (hash: m9VEyjC6AstkEvUHZu0nndWjDPejGmt2Un1d+bIvwNg=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 23:59:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:e7:0b:cc:42:33:00:ee:16:6f:4d:e1:f2:88:8e:60:bc:c5:5c:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
        Validity
            Not Before: Dec  5 20:01:16 2025 GMT
            Not After : Dec  6 23:59:16 2025 GMT
        Subject: CN=381667FFDAB433BDBCFB8E88A21B6F19C41DACC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7d:e2:dc:1d:89:9d:f9:79:62:c1:ea:5d:47:
                    73:9f:dd:fc:bd:3a:f6:84:b6:cf:96:3d:8e:21:c0:
                    50:46:7b:54:a4:7a:2d:7c:7d:3e:74:dd:2e:65:2d:
                    f1:86:96:4b:81:3b:17:24:0c:f1:5b:f7:17:ff:1e:
                    5b:a6:34:80:3a:ed:99:7d:de:b8:62:c9:79:b7:ad:
                    29:c0:07:a3:a3:ec:98:c7:d1:6b:2b:74:9c:a8:15:
                    df:4a:dd:b8:8b:67:29:3e:db:4b:75:33:60:3a:f8:
                    4f:d7:a2:43:02:f0:20:8a:c7:38:21:4f:89:1e:5c:
                    ec:ff:79:39:80:48:a0:e1:c6:83:9f:7f:9e:ae:4f:
                    15:cb:ba:53:90:c9:b4:31:e9:f4:f8:b7:f1:87:45:
                    4a:43:47:94:a6:9a:e3:e1:b6:a7:09:2d:48:ba:4c:
                    da:c6:c9:87:65:6e:d7:61:5b:f8:36:21:f0:ea:47:
                    b9:1d:a7:e9:53:66:c0:80:ac:15:9b:15:9b:75:3f:
                    4a:8b:48:d8:1e:94:8d:13:d6:34:55:07:11:bf:f4:
                    d9:9f:4e:31:a5:ba:bb:5b:28:cf:ba:3f:38:28:c0:
                    3e:5b:24:ba:77:69:1c:99:06:4d:ea:c2:9b:1f:d4:
                    48:6a:57:a7:ac:4c:23:15:d7:66:c7:e1:82:11:7e:
                    c9:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:16:67:FF:DA:B4:33:BD:BC:FB:8E:88:A2:1B:6F:19:C4:1D:AC:C3
            X509v3 Authority Key Identifier:
                keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:30:ce:19:fc:bb:e5:f9:de:f9:24:d6:b6:73:36:0b:29:f7:
         44:67:da:39:c0:18:8e:5d:b2:0b:1c:a0:ab:93:29:bb:04:01:
         92:d6:68:92:f1:4d:9b:44:35:ca:1b:d9:f2:45:5a:6c:6c:25:
         b1:37:97:7a:47:77:e6:70:69:bf:d2:14:14:07:98:c2:85:02:
         a4:96:10:30:65:e4:23:c3:64:9f:39:04:9e:cb:df:f3:bb:01:
         db:f1:47:85:c4:62:07:bd:1c:18:68:cc:c2:89:62:75:8b:4c:
         ef:ad:8f:3e:9f:5e:25:4b:86:7f:91:bb:f4:5a:b6:fa:47:f1:
         53:26:08:ff:70:71:80:e5:d3:ee:a0:ac:ce:be:b3:2f:3b:f4:
         d5:1b:fe:c5:37:af:f3:a6:5a:dd:9f:53:5a:7f:71:75:e7:05:
         ba:e3:4a:41:0a:c0:05:81:03:e2:d0:c5:1a:3d:51:9e:41:b3:
         3b:b2:72:d5:ca:cc:ee:0b:da:ba:22:79:59:48:0f:45:09:0a:
         d0:3b:fb:bc:e2:9a:a7:e5:16:d4:e5:5b:a5:b6:79:39:af:d7:
         b4:96:7f:6c:b8:37:c9:ae:22:78:4d:65:27:a7:fb:8c:d9:a7:
         51:45:ef:95:c5:41:ef:49:e2:26:27:be:55:cc:1e:b2:97:0a:
         bc:ad:57:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:06:06 2025 by rpki-client