This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft
File:                     D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft (raw, json)
Hash identifier:          p9YnQGOg/G8nTT1vfAZwSt7syv8WD6E2NvKZcnmdw64=
Subject key identifier:   17:9C:D3:E1:9E:D9:CF:79:78:EA:D8:E9:8A:CC:BB:8F:59:87:28:76
Authority key identifier: D2:FF:07:93:2C:3F:4C:1B:34:65:FF:4F:0D:96:48:47:33:E0:2E:AD
Certificate issuer:       /CN=d2ff07932c3f4c1b3465ff4f0d96484733e02ead
Certificate serial:       2432F04B519D486015F09C16F07D0A5A569901F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0v8Hkyw_TBs0Zf9PDZZIRzPgLq0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft
Manifest number:          04EB
Signing time:             Mon 15 Dec 2025 21:43:51 +0000
Manifest this update:     Mon 15 Dec 2025 21:38:51 +0000
Manifest next update:     Wed 17 Dec 2025 01:23:51 +0000
Files and hashes:         1: D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.crl (hash: Qa37POzSUjbbqE+a7ZpK4dV33P2t4JyWoaIoYu5ZlhU=)
                          2: 323030313a3637633a6264633a3a2f34382d3438203d3e203531303139.roa (hash: WwIB1vpX/Ksy3lM5t4KklPIgz20phM5/z2U20FASusY=)
                          3: AS51019.asa (hash: AiRPUbx35MM7Uk9u1a659xIRQwxzEohuToTzU6obyN0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0v8Hkyw_TBs0Zf9PDZZIRzPgLq0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:32:f0:4b:51:9d:48:60:15:f0:9c:16:f0:7d:0a:5a:56:99:01:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2ff07932c3f4c1b3465ff4f0d96484733e02ead
        Validity
            Not Before: Dec 15 21:38:51 2025 GMT
            Not After : Dec 17 01:23:51 2025 GMT
        Subject: CN=179CD3E19ED9CF7978EAD8E98ACCBB8F59872876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:25:5b:4c:74:93:ba:0c:cb:0c:ed:7e:83:fa:
                    a3:08:16:24:b0:a9:51:06:55:d3:c6:a8:ae:f7:e8:
                    7d:22:82:ff:55:e8:b2:c5:00:a1:d0:b7:04:e3:05:
                    0b:10:13:f2:30:c9:54:a7:ce:17:91:d8:0a:98:54:
                    b4:f7:e8:cb:8d:2b:4d:bd:3b:0d:ba:8d:6c:bc:57:
                    95:50:e9:b5:fb:d4:bd:69:0f:9d:75:8d:75:e6:5c:
                    03:22:05:e1:d2:de:33:74:9c:8a:77:3c:d3:06:c3:
                    b0:76:6d:ec:e0:dc:81:48:1a:44:19:f0:db:57:47:
                    4e:ad:f5:7c:eb:d2:55:09:86:8f:93:e2:c0:e8:0f:
                    98:ac:62:60:9b:10:66:08:e1:48:0e:14:5c:cc:5f:
                    06:6f:9b:f9:91:ae:3f:df:ee:10:38:30:38:f3:0b:
                    86:43:9c:5a:cc:9c:33:c8:55:77:3d:95:3c:39:10:
                    a1:22:b6:e5:71:e4:b6:2f:83:4b:d8:70:9f:b2:c5:
                    4e:24:1b:fe:ed:41:59:a7:02:29:9a:72:2c:55:0d:
                    d5:68:07:be:43:ea:2a:27:9e:c9:d1:d4:8c:a7:27:
                    67:52:a0:89:17:30:5f:6d:45:36:ec:88:47:3e:8d:
                    f1:37:ce:a6:9a:6b:44:e1:50:62:56:bc:ac:67:23:
                    18:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:9C:D3:E1:9E:D9:CF:79:78:EA:D8:E9:8A:CC:BB:8F:59:87:28:76
            X509v3 Authority Key Identifier:
                keyid:D2:FF:07:93:2C:3F:4C:1B:34:65:FF:4F:0D:96:48:47:33:E0:2E:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0v8Hkyw_TBs0Zf9PDZZIRzPgLq0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:c8:fd:c9:93:14:8c:7d:d3:66:e3:3e:76:25:82:d4:f3:a8:
         3d:0f:45:9b:5f:86:33:5a:29:07:b3:3b:e6:93:ed:f7:d2:75:
         fc:b9:0f:3c:2e:85:fc:86:f2:a6:41:a2:8c:c5:3c:85:ee:17:
         e0:ca:12:f0:ee:c1:04:f3:c8:b4:4a:9e:06:13:75:d0:f9:50:
         7c:fe:4c:63:6e:c7:31:ae:d8:11:4e:fc:19:92:a9:93:73:0f:
         97:e2:f1:0b:fb:6d:be:8f:f5:80:76:83:40:71:13:61:66:bc:
         11:a7:05:36:66:c8:cb:40:c4:3a:f0:ff:ed:e3:de:21:67:fa:
         b5:21:92:d0:af:35:cd:b4:74:f7:6d:bc:fd:f6:9a:e7:f2:79:
         56:39:27:b7:63:56:88:0b:e6:87:24:93:86:2f:62:11:30:b2:
         17:e0:ea:b5:ff:c8:2e:e2:d9:3f:b1:4f:4b:fb:5b:cf:91:0c:
         bd:be:64:59:12:c2:75:0f:a1:75:40:65:5b:33:2d:54:82:7c:
         88:81:99:9a:a2:b0:ad:d9:a9:ed:6f:81:ff:03:16:df:28:00:
         38:4d:c6:bb:9c:5c:51:af:d9:47:47:e4:70:fe:fd:3a:a3:19:
         b0:19:5b:01:e9:08:be:d9:d6:41:7e:b1:1a:87:54:02:00:25:
         f2:9e:ee:a3
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUJDLwS1GdSGAV8JwW8H0KWlaZAfcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDJmZjA3OTMyYzNmNGMxYjM0NjVmZjRmMGQ5NjQ4NDcz
M2UwMmVhZDAeFw0yNTEyMTUyMTM4NTFaFw0yNTEyMTcwMTIzNTFaMDMxMTAvBgNV
BAMTKDE3OUNEM0UxOUVEOUNGNzk3OEVBRDhFOThBQ0NCQjhGNTk4NzI4NzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQJVtMdJO6DMsM7X6D+qMIFiSw
qVEGVdPGqK736H0igv9V6LLFAKHQtwTjBQsQE/IwyVSnzheR2AqYVLT36MuNK029
Ow26jWy8V5VQ6bX71L1pD511jXXmXAMiBeHS3jN0nIp3PNMGw7B2bezg3IFIGkQZ
8NtXR06t9Xzr0lUJho+T4sDoD5isYmCbEGYI4UgOFFzMXwZvm/mRrj/f7hA4MDjz
C4ZDnFrMnDPIVXc9lTw5EKEituVx5LYvg0vYcJ+yxU4kG/7tQVmnAimacixVDdVo
B75D6ionnsnR1IynJ2dSoIkXMF9tRTbsiEc+jfE3zqaaa0ThUGJWvKxnIxj5AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUF5zT4Z7Zz3l46tjpisy7j1mHKHYwHwYDVR0j
BBgwFoAU0v8Hkyw/TBs0Zf9PDZZIRzPgLq0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh
ZTNmLzIvRDJGRjA3OTMyQzNGNEMxQjM0NjVGRjRGMEQ5NjQ4NDczM0UwMkVBRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzB2OEhreXdfVEJzMFpmOVBEWlpJUnpQ
Z0xxMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00
MTliLTRkYjUtYmJkMy01Y2NhNjMzY2FlM2YvMi9EMkZGMDc5MzJDM0Y0QzFCMzQ2
NUZGNEYwRDk2NDg0NzMzRTAyRUFELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPcj9yZMUjH3TZuM+diWC
1POoPQ9Fm1+GM1opB7M75pPt99J1/LkPPC6F/IbypkGijMU8he4X4MoS8O7BBPPI
tEqeBhN10PlQfP5MY27HMa7YEU78GZKpk3MPl+LxC/ttvo/1gHaDQHETYWa8EacF
NmbIy0DEOvD/7ePeIWf6tSGS0K81zbR09228/faa5/J5Vjknt2NWiAvmhySThi9i
ETCyF+Dqtf/ILuLZP7FPS/tbz5EMvb5kWRLCdQ+hdUBlWzMtVIJ8iIGZmqKwrdmp
7W+B/wMW3ygAOE3Gu5xcUa/ZR0fkcP79OqMZsBlbAekIvtnWQX6xGodUAgAl8p7u
ow==
-----END CERTIFICATE-----
Generated at Tue Dec 16 07:30:13 2025 by rpki-client