This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft
File:                     8184669B0189B7FABE05E700325A0D74957BEB27.mft (raw, json)
Hash identifier:          kgIVHXCOp3wLlaVzNZ6UsZGPVE+JgYULsmuz9ZVClpk=
Subject key identifier:   F5:58:49:96:F4:6D:B7:97:6C:00:DF:C8:FC:D1:88:73:15:BF:BC:61
Authority key identifier: 81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27
Certificate issuer:       /CN=8184669b0189b7fabe05e700325a0d74957beb27
Certificate serial:       704899DF51796AAB73F9B4FA99D06267CCB8DD1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft
Manifest number:          0164
Signing time:             Tue 16 Dec 2025 04:32:18 +0000
Manifest this update:     Tue 16 Dec 2025 04:27:18 +0000
Manifest next update:     Wed 17 Dec 2025 07:43:18 +0000
Files and hashes:         1: 3231332e3135372e3131322e302f32322d3232203d3e203230353130.roa (hash: oXC9Asr9SJ7DSslxSZaWUX9xWnSBbY5iUxbxwvvcFUI=)
                          2: 3231332e3135372e3132312e302f32342d3234203d3e203633313939.roa (hash: dfTQeycU3bCp9xP/UQaKaAmwMbvByiZ/89C4YDPwYlY=)
                          3: 3231332e3135372e3130372e302f32342d3234203d3e203530323631.roa (hash: fkThFrWbc2SNg5nWL/DjCmp7efO9LKVSLfyHO63Odeo=)
                          4: 3231332e3135372e3131362e302f32332d3233203d3e203230353130.roa (hash: u6D0nQIamyf1rwT6EphlkmgpGmdsHhrROhbEzSFSSxQ=)
                          5: 3231332e3135372e3132302e302f32342d3234203d3e203432383331.roa (hash: obPbW0ZKO9rq4yp7c5UqzqijavPW0CV78gaYhHaBReI=)
                          6: 3231332e3135372e3132332e302f32342d3234203d3e20323035383836.roa (hash: 7VQoOdpqpVmjCELFW51uez7QJpyJbjW4JNhtOxfsg8E=)
                          7: 3231332e3135372e39362e302f32302d3230203d3e203230353130.roa (hash: cK22q6rO6KtktflqsQYlSr1z73xEpoVM/WNGnd6YIEI=)
                          8: 3231332e3135372e3132322e302f32342d3234203d3e2039333034.roa (hash: aUvc4UTsIU7R0m9dsnmxWesOTPr9WQo6/RshJ5X0hb4=)
                          9: 3231332e3135372e3132332e302f32342d3234203d3e203235313938.roa (hash: V87tDHJfEWPvC2C8BO/oDFyDQW6yLu4jA4a47My2iC0=)
                          10: 3231332e3135372e3131382e302f32332d3233203d3e203230353130.roa (hash: U2rsj2GmpPBYV9RPLITNHzbaDI2Gxelnlov5msxX9eI=)
                          11: 8184669B0189B7FABE05E700325A0D74957BEB27.crl (hash: 0L2pfShx7gyhY54+t3wLnC1NXHrabMmKiT2pR+F3k48=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:48:99:df:51:79:6a:ab:73:f9:b4:fa:99:d0:62:67:cc:b8:dd:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8184669b0189b7fabe05e700325a0d74957beb27
        Validity
            Not Before: Dec 16 04:27:18 2025 GMT
            Not After : Dec 17 07:43:18 2025 GMT
        Subject: CN=F5584996F46DB7976C00DFC8FCD1887315BFBC61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:08:99:f1:9b:4a:26:a2:49:2e:55:55:64:f6:
                    79:9e:b4:3c:67:6a:3a:58:fc:f9:30:03:a5:ef:d8:
                    ee:ca:bb:af:fb:75:b7:70:fd:a0:f2:d6:78:71:22:
                    b2:bd:a6:4d:41:89:a3:3d:bf:5c:5b:c7:59:45:e6:
                    22:6e:03:85:c9:31:32:60:78:b8:7f:3f:e3:2f:97:
                    21:46:5c:d7:67:ed:fc:28:b8:c4:d2:00:f9:a6:cf:
                    26:c5:86:9a:6f:3c:be:d8:4a:0d:be:a0:fa:13:04:
                    1d:66:4b:76:38:f0:bb:0e:d9:a3:53:ff:e8:60:c0:
                    02:26:6e:0f:33:79:d2:28:5d:b8:8b:3a:5b:f3:97:
                    31:0b:28:11:67:5d:e8:49:2a:1e:24:18:f9:55:a5:
                    fd:94:79:e9:59:60:ce:50:c0:30:76:cf:bb:7d:29:
                    16:ad:80:bd:dc:d0:96:4e:c4:bc:7c:e6:bb:c8:0a:
                    87:cc:17:dc:93:18:df:52:bc:f6:f9:b0:99:99:c3:
                    54:1b:42:b0:b1:93:e0:e7:08:ec:3e:f4:2d:2e:a0:
                    96:c2:c9:54:a2:f8:e3:60:fb:86:df:88:be:4b:41:
                    23:55:26:2b:05:9b:f9:79:b0:93:e6:00:c2:88:fe:
                    e1:02:e3:aa:32:45:b5:62:67:3a:cd:1b:6f:8e:fa:
                    05:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:58:49:96:F4:6D:B7:97:6C:00:DF:C8:FC:D1:88:73:15:BF:BC:61
            X509v3 Authority Key Identifier:
                keyid:81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:22:6e:c7:49:58:83:90:d3:b9:1c:66:d5:25:e7:89:05:2d:
         64:12:e5:3a:ee:a9:a2:60:a6:ea:0b:31:67:26:42:b2:55:36:
         55:b7:8c:bf:73:88:b1:b9:3f:7d:c4:86:0c:ba:dd:fe:b5:43:
         90:da:f6:b3:3c:8b:23:30:c2:fc:e2:5e:8a:67:15:08:1a:cc:
         fb:fa:68:3f:26:47:db:42:58:d9:97:4b:19:89:fb:b3:bb:b3:
         b5:16:f7:8d:dd:6d:23:99:23:7d:f8:d3:d9:94:c9:9d:1c:79:
         d7:41:54:d4:3a:d3:95:31:80:2e:a9:ff:55:4f:4b:38:12:ef:
         5b:23:ca:92:c2:dd:3c:c5:a5:70:14:bf:2f:6f:db:67:cd:4e:
         0e:af:bd:7e:23:90:ed:a5:01:2a:b4:28:88:6c:10:82:fb:05:
         c7:51:8b:30:ee:0e:d7:dd:32:84:7d:b6:4c:41:32:46:d6:ea:
         11:70:2b:72:71:3f:40:35:c7:4e:43:cd:56:55:96:4c:ad:d2:
         1f:bc:e7:32:da:56:45:6b:3c:35:10:12:bb:fa:55:5b:c4:ad:
         17:d5:93:d8:87:dd:62:d5:9d:1b:69:0b:67:31:87:54:05:d4:
         4d:de:2d:e4:29:f5:df:11:d5:71:5d:b5:64:26:8d:72:57:34:
         00:d6:85:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 09:45:10 2025 by rpki-client