This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
File:                     1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft (raw, json)
Hash identifier:          zzdtXBk9Q7q0798qTO1MvFxBL31VO5It2q9c0mMDhOI=
Subject key identifier:   0E:DE:E2:78:AC:4E:ED:9A:43:EB:75:3C:4F:76:FD:1F:22:51:D5:70
Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77
Certificate issuer:       /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
Certificate serial:       54527AFD6509C72E97B6D14C687FE3CDD0E7EAB0
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
Manifest number:          0303
Signing time:             Sun 23 Nov 2025 12:00:40 +0000
Manifest this update:     Sun 23 Nov 2025 11:55:40 +0000
Manifest next update:     Mon 24 Nov 2025 13:04:40 +0000
Files and hashes:         1: 326130663a383563313a3766363a3a2f34382d3438203d3e20323135323432.roa (hash: sqekG79xztP1stI8964y8O+ILcqcxMBKS5vM2N9Yeq4=)
                          2: 326130663a383563313a3766393a3a2f34382d3438203d3e20323135323432.roa (hash: ZhIUpj5tVPDcWiQ+3SY61ZE9RRhM2AJ7zchpU/cGNbk=)
                          3: 326130663a383563313a3766323a3a2f34382d3438203d3e20323135323432.roa (hash: sEiHLlrRoeeUa4AJCYCoXBnr24SESsEbTviJLVfMEys=)
                          4: 326130663a383563313a3766383a3a2f34382d3438203d3e20323135323432.roa (hash: 7RQ0gXCWkNwXJyLVMAjMT4ifOZKJ140AG/jnIia+kz4=)
                          5: 326130663a383563313a3766303a3a2f34382d3438203d3e20323033353131.roa (hash: F6VJOi3vW8ih7gU8rCzD7A7gIu39IHtVGsLlId1ILkM=)
                          6: 326130663a383563313a3361323a3a2f34382d3438203d3e20323135323432.roa (hash: Gz7cU4OgmvLm8iR5sxlLJ8umD/eM2550DADKq1NdbVY=)
                          7: 326130663a383563313a3766373a3a2f34382d3438203d3e20323135323432.roa (hash: polxJUQuuGvo82QFQvRtgLcGzpMrITqZaH9JMW5PByU=)
                          8: 326130663a383563313a3766343a3a2f34382d3438203d3e20323135323432.roa (hash: Sqqkf1ajVYDwVw2KSKZnr/tFVnDaWUIPFwaxuN/hzVk=)
                          9: 326130663a383563313a3766623a3a2f34382d3438203d3e20323135323432.roa (hash: 6RxmKyitzJl4tEe1yv4vU5lxANHGsLOEl2k3HSP2ddo=)
                          10: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl (hash: OEaFQTQAMAE4IQZxmKtUxpiAntUX+CPYOnzcjUwEHSk=)
                          11: 326130663a383563313a3766313a3a2f34382d3438203d3e20323035343633.roa (hash: QtxzWf2JsAYGrlxsDmcE2oi7tthkDrQ3wvK+rgUOQxg=)
                          12: 326130663a383563313a3730313a3a2f34382d3438203d3e20323033353131.roa (hash: Tk4tJu5bvTD5dR9NoM2pYvWxSXCc2/x84lQAlZZqzIs=)
                          13: 326130663a383563313a3766313a3a2f34382d3438203d3e20323135313234.roa (hash: gq6me54MBqnqosS7iLksDmqAJs8yyfHwMXcZfgP1ijQ=)
                          14: 326130663a383563313a3766333a3a2f34382d3438203d3e20323035343633.roa (hash: YxuKH5bQA8YI1bwf7mCp5od3hfadKIetOc5KHPtspsc=)
                          15: 326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa (hash: LIVxcxtvoeze2S46mPqGSXeLOCk0JK2W2QKOiQjUdZQ=)
                          16: 326130663a383563313a3766613a3a2f34382d3438203d3e20323135323432.roa (hash: M4zqLtdUHSAbU4GatESAUlsOQgWU2zpPTfy3/5JmOsg=)
                          17: 326130663a383563313a3766353a3a2f34382d3438203d3e20323135373631.roa (hash: byQYxxoRiZMkalXd6RzudJTQa4Ua3fqFXKXTWNIB1fs=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Nov 2025 13:04:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:52:7a:fd:65:09:c7:2e:97:b6:d1:4c:68:7f:e3:cd:d0:e7:ea:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
        Validity
            Not Before: Nov 23 11:55:40 2025 GMT
            Not After : Nov 24 13:04:40 2025 GMT
        Subject: CN=0EDEE278AC4EED9A43EB753C4F76FD1F2251D570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:9f:de:44:38:86:e1:c1:b4:c4:81:78:72:2d:
                    4a:24:e9:48:81:8a:7e:ab:cc:49:2b:ac:5c:97:a6:
                    2d:6c:72:d2:bd:73:17:1f:4f:24:e0:fc:2d:7a:ca:
                    0a:4b:3e:25:d1:60:f9:75:c3:f6:1d:e8:7c:91:2d:
                    a6:88:67:35:d0:23:03:5f:95:e7:58:ca:fc:1b:3c:
                    da:a4:9d:8b:1e:a6:e9:78:9f:3c:47:d7:0c:da:27:
                    87:6b:da:23:e9:71:36:6f:44:08:77:00:06:83:57:
                    ac:8a:ee:26:9b:9d:77:41:b3:c5:9c:b3:22:ac:a9:
                    be:c4:fb:44:13:50:26:31:63:dd:b2:9f:20:cd:77:
                    1d:cf:4a:c4:be:88:f3:ad:57:6e:5e:4f:87:a4:13:
                    88:19:b1:dd:ff:1c:2c:2e:74:f1:a2:7d:88:c6:11:
                    24:d0:5b:1e:81:6f:8e:39:1d:5f:64:5c:f2:18:b5:
                    16:07:7e:9f:1c:34:ac:be:f5:0c:03:d3:d0:57:94:
                    b7:11:8c:4f:97:fe:8f:26:d7:20:5d:40:a6:e9:a6:
                    87:47:18:a4:1a:fd:13:ca:72:ff:5c:ef:7a:39:5e:
                    f3:a1:d2:2f:84:c8:63:9d:9f:db:5d:bb:17:51:45:
                    d0:1e:f9:96:05:61:c0:38:c0:9a:8b:50:35:00:8d:
                    11:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:DE:E2:78:AC:4E:ED:9A:43:EB:75:3C:4F:76:FD:1F:22:51:D5:70
            X509v3 Authority Key Identifier:
                keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:cc:4e:e4:96:df:1b:1b:ff:4e:55:32:38:c3:70:68:d8:60:
         d0:b8:02:38:a0:54:3d:d0:9f:b3:31:4a:41:eb:f8:01:e5:8b:
         d6:2e:ec:11:87:b2:6b:be:c6:3f:6c:93:77:2a:9d:c3:66:7d:
         ae:4c:52:09:4e:ba:71:5d:d6:d0:eb:fe:17:97:e8:45:e9:8f:
         a2:0c:45:7d:bb:6a:70:db:97:c0:82:e3:4d:04:df:3a:ac:d9:
         df:7c:9a:2f:42:15:80:54:db:86:58:05:95:bf:a8:4b:62:0d:
         4a:22:3d:b7:38:6b:48:2a:a8:ea:74:c5:c8:a1:a7:69:96:fe:
         19:76:f4:d1:86:73:14:b0:b9:cb:15:e0:ac:16:70:1f:28:78:
         57:31:11:e5:5a:59:1e:5b:55:52:50:70:24:26:16:e4:28:c5:
         c2:9d:2c:10:a3:52:59:95:0d:84:51:b3:10:40:cb:f8:24:cc:
         98:fc:bb:45:9a:47:33:92:13:4d:6a:97:a9:82:56:db:2b:04:
         c0:12:7f:de:49:d2:0f:55:3e:85:59:57:92:b8:70:8b:24:72:
         10:13:20:be:c3:45:fe:38:ec:2c:74:ec:b2:0f:17:70:3a:ea:
         29:62:1d:40:3f:83:83:0a:67:66:55:a7:4e:a7:21:29:fc:00:
         a7:71:ed:83
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUVFJ6/WUJxy6XttFMaH/jzdDn6rAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0
OUMxODM3NzAeFw0yNTExMjMxMTU1NDBaFw0yNTExMjQxMzA0NDBaMDMxMTAvBgNV
BAMTKDBFREVFMjc4QUM0RUVEOUE0M0VCNzUzQzRGNzZGRDFGMjI1MUQ1NzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyn95EOIbhwbTEgXhyLUok6UiB
in6rzEkrrFyXpi1sctK9cxcfTyTg/C16ygpLPiXRYPl1w/Yd6HyRLaaIZzXQIwNf
ledYyvwbPNqknYsepul4nzxH1wzaJ4dr2iPpcTZvRAh3AAaDV6yK7iabnXdBs8Wc
syKsqb7E+0QTUCYxY92ynyDNdx3PSsS+iPOtV25eT4ekE4gZsd3/HCwudPGifYjG
ESTQWx6Bb445HV9kXPIYtRYHfp8cNKy+9QwD09BXlLcRjE+X/o8m1yBdQKbppodH
GKQa/RPKcv9c73o5XvOh0i+EyGOdn9tduxdRRdAe+ZYFYcA4wJqLUDUAjRETAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUDt7ieKxO7ZpD63U8T3b9HyJR1XAwHwYDVR0j
BBgwFoAUGpCmrhVCo1PMp0l36yv+KknBg3cwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDA2MzMzYzYtOTQ2ZC00YjBiLTk1ZWYtZGFiYTI2MmE0
MmUxLzEvMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0OUMxODM3Ny5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3
MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8xQTkwQTZBRTE1NDJBMzUzQ0NBNzQ5NzdF
QjJCRkUyQTQ5QzE4Mzc3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L2QwNjMzM2M2LTk0NmQtNGIwYi05NWVmLWRhYmEyNjJhNDJlMS8xLzFBOTBBNkFF
MTU0MkEzNTNDQ0E3NDk3N0VCMkJGRTJBNDlDMTgzNzcubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAWzE7k
lt8bG/9OVTI4w3Bo2GDQuAI4oFQ90J+zMUpB6/gB5YvWLuwRh7JrvsY/bJN3Kp3D
Zn2uTFIJTrpxXdbQ6/4Xl+hF6Y+iDEV9u2pw25fAguNNBN86rNnffJovQhWAVNuG
WAWVv6hLYg1KIj23OGtIKqjqdMXIoadplv4ZdvTRhnMUsLnLFeCsFnAfKHhXMRHl
WlkeW1VSUHAkJhbkKMXCnSwQo1JZlQ2EUbMQQMv4JMyY/LtFmkczkhNNapepglbb
KwTAEn/eSdIPVT6FWVeSuHCLJHIQEyC+w0X+OOwsdOyyDxdwOuopYh1AP4ODCmdm
VadOpyEp/ACnce2D
-----END CERTIFICATE-----
Generated at Sun Nov 23 21:11:29 2025 by rpki-client