This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft
File:                     E205EBF065FC4929F1802662AE62D7F9762600E6.mft (raw, json)
Hash identifier:          g20D+38KtlN0gK8WuSlSacDTsNCBH+/l5VaSELJSfhg=
Subject key identifier:   D0:0A:96:49:66:C5:8C:58:3D:BD:AD:93:44:39:0E:44:22:A3:31:B0
Authority key identifier: E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6
Certificate issuer:       /CN=e205ebf065fc4929f1802662ae62d7f9762600e6
Certificate serial:       428D06AEBBEABF976A9C55F240E24D550A6E1C22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft
Manifest number:          0192
Signing time:             Sun 14 Dec 2025 03:17:09 +0000
Manifest this update:     Sun 14 Dec 2025 03:12:09 +0000
Manifest next update:     Mon 15 Dec 2025 05:44:09 +0000
Files and hashes:         1: 39312e3230392e35382e302f32342d3234203d3e203634323637.roa (hash: vVPhAwxMoGbJX95BZTqrmZCi086rlFMNDRhMBQEniYs=)
                          2: 326130663a356663303a6163653a3a2f34382d3438203d3e20323035303336.roa (hash: s62/iVKVlW2KdVyTR+Xnv457Z0j5+aZNRyV7RtkAKNQ=)
                          3: 39312e3230392e35302e302f32342d3234203d3e20323039333732.roa (hash: UjFw0WQQLm//XoiWgykA8VWz+amzh0YCKaelwGihPq4=)
                          4: 326130663a356663303a6465623a3a2f34382d3438203d3e20323035303336.roa (hash: HGgyYO79YRPv5eTIvRCSkvT+uzFYIDLIXRArnhiRVzA=)
                          5: 39312e3230392e34382e302f32342d3234203d3e2034363337.roa (hash: 4+D5jdmTDYB1GvCAU0z5GBGlSPW7Q/zpduO0wdWv8pU=)
                          6: 326130663a356663303a623030623a3a2f34382d3438203d3e20323035303336.roa (hash: dtubQqytFEqkt8TqTYJ+KlZgpXqOEEfNHG9KMyAKroE=)
                          7: 326130663a356663303a646561643a3a2f34382d3438203d3e20323035303336.roa (hash: Z7YS72AkRUhmGE/8eVCwX/QArQ7kzj3DMVCvF8nhupE=)
                          8: 326130663a356663303a6164643a3a2f34382d3438203d3e20323035303336.roa (hash: N543k0DcGiJuxubeGma9GZg+VhMwbPVS9ShNVwfZl30=)
                          9: 326130663a356663303a646561663a3a2f34382d3438203d3e20323035303336.roa (hash: nBnCDOBWFR9glmAsUSRrLmDkLZa6Zi7bYUkIoT7Lpvs=)
                          10: 326130663a356663303a633064653a3a2f34382d3438203d3e20323035303336.roa (hash: vwuw8BagjBJB+QjPivE2w5i9soU6pwd3DUm4jYukQKs=)
                          11: 326130663a356663303a626162613a3a2f34382d3438203d3e20323035303336.roa (hash: kdDGBWrURu4f0ClnA4SfgsI29M2UtK1sJ9ldbUvOvNc=)
                          12: 326130663a356663303a663030643a3a2f34382d3438203d3e20323035303336.roa (hash: Xgs2aXZ2twwalLnMnwHKHrLdiNgmex+4PLid272RcXc=)
                          13: E205EBF065FC4929F1802662AE62D7F9762600E6.crl (hash: U89F3oxOoAqhqqJz5GWqfY07IKgEDR3QiBMlm12mkYM=)
                          14: 326130663a356663303a6265643a3a2f34382d3438203d3e20323035303336.roa (hash: Vn0tNJq84yvhpEx3djvegd0qElXvUXIj3d10CpoBDS8=)
                          15: 326130663a356663303a6665653a3a2f34382d3438203d3e20323035303336.roa (hash: sgKb1dwb+yOP2QySpduAJeLZbiJJdLEfbfVpO0+8Lgg=)
                          16: 326130663a356663303a646565643a3a2f34382d3438203d3e20323035303336.roa (hash: 6WyHSY5Xp60q1IE95V4h6lwOICpnxsevWtnXKH+E1RA=)
                          17: 326130663a356663303a636166653a3a2f34382d3438203d3e20323035303336.roa (hash: SIzDkF7YYsoaU9vFR/am7daSl1S+0BBZdMp9c5ogCY8=)
                          18: 326130663a356663303a626162653a3a2f34382d3438203d3e20323035303336.roa (hash: BEzvo1oTT3h/yITGofAX+DfQt9t+mraGyg3xFdVKM2I=)
                          19: 326130663a356663303a666565643a3a2f34382d3438203d3e20323035303336.roa (hash: Qj8pflv8KszWoeUIqOpeKQUtZrsbyJDTmnxefpUjjlo=)
                          20: 326130663a356663303a6261643a3a2f34382d3438203d3e20323035303336.roa (hash: tvkflaFeVW3sd8cXnqPd3goXjSItIqLYbambS6E6g9M=)
                          21: 326130663a356663303a6461643a3a2f34382d3438203d3e20323035303336.roa (hash: FjMn5kgc0Y1vdPNQCAd4cKVxUcNaP4msdjwOhjOI4iE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:8d:06:ae:bb:ea:bf:97:6a:9c:55:f2:40:e2:4d:55:0a:6e:1c:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e205ebf065fc4929f1802662ae62d7f9762600e6
        Validity
            Not Before: Dec 14 03:12:09 2025 GMT
            Not After : Dec 15 05:44:09 2025 GMT
        Subject: CN=D00A964966C58C583DBDAD9344390E4422A331B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:cb:cb:81:46:67:80:a7:18:f7:ef:10:6d:bd:
                    86:02:ef:bb:f3:17:00:54:38:1e:4e:27:3f:b9:48:
                    9f:7b:d4:ea:d7:fe:fc:ff:58:ee:a3:50:41:8a:88:
                    27:a8:e5:ea:0b:f8:99:af:62:d0:ab:c2:0b:b5:14:
                    d2:bc:f6:f0:ac:7b:e2:1a:40:14:3b:c4:c9:9d:4c:
                    b3:a2:d2:9b:30:20:a4:81:77:99:c4:02:aa:09:a5:
                    0d:92:72:ef:a2:d6:7b:50:9c:68:89:2c:23:97:d2:
                    48:93:0e:d5:83:07:ba:6e:73:bb:9e:b6:ba:61:ba:
                    de:ff:58:af:52:c2:09:4e:c5:84:af:0b:7b:e9:78:
                    f8:36:42:e1:3b:a1:45:37:b6:20:80:9a:c8:13:5f:
                    1c:15:0a:b9:e6:7c:70:a7:4b:ff:17:f4:e4:74:0d:
                    af:58:3c:d8:55:34:f0:7d:e1:b7:36:3f:0d:7b:77:
                    49:36:bb:2f:06:41:78:66:e6:88:3f:97:57:19:79:
                    12:dc:db:ad:da:cd:17:05:ae:76:87:d8:42:9c:63:
                    09:5f:c2:dc:e2:f5:3a:1f:a5:a4:59:98:e4:ad:6d:
                    27:e6:c3:31:e6:92:f2:2d:f9:0d:6f:a7:34:ef:88:
                    30:bc:2f:0a:c2:10:d6:51:29:c5:32:e8:70:84:60:
                    65:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:0A:96:49:66:C5:8C:58:3D:BD:AD:93:44:39:0E:44:22:A3:31:B0
            X509v3 Authority Key Identifier:
                keyid:E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:38:fd:82:94:c4:ca:f1:ee:96:ea:b1:f9:18:21:56:e6:fa:
         a5:c5:49:17:1c:be:a3:a5:02:c7:19:dd:9e:c6:25:19:12:82:
         fd:bb:93:13:60:a9:73:66:c8:32:41:7f:a5:b3:94:f8:b3:db:
         8c:6c:c0:46:e1:32:12:16:ab:8c:44:bb:5b:bc:00:9e:eb:40:
         26:7b:e8:1b:90:35:ab:c4:e3:50:09:f7:5e:54:aa:c5:1f:50:
         ef:d9:12:2e:16:44:53:e5:e3:76:b5:84:a9:a6:f2:8f:87:92:
         c8:9c:0a:6f:31:6c:e2:cd:15:37:96:d3:08:7a:9b:b7:0f:38:
         7d:7a:72:71:1f:4f:f8:a4:ac:8d:48:29:c2:d0:be:44:83:5a:
         3d:91:50:d9:66:f7:9f:2d:4b:66:30:b8:df:b0:35:1e:fe:96:
         c0:6a:fd:06:1f:1c:7e:62:6e:44:bf:9c:5f:b3:e0:63:57:3f:
         7d:0d:db:d8:d4:50:0c:6c:a2:84:da:88:63:e2:b4:98:f3:0f:
         c7:3b:6d:ee:28:22:19:3d:ee:ba:1f:f7:d9:5f:db:2d:1c:9e:
         58:b8:a1:1e:2b:ad:b0:15:9b:ed:42:cf:6d:15:e4:0b:43:70:
         b8:09:12:e4:d5:13:00:68:60:4e:85:2e:8e:67:ac:02:a3:09:
         bd:97:12:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 12:07:02 2025 by rpki-client