This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
File:                     CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft (raw, json)
Hash identifier:          JosokDjNjogcPzgkdHJH3CdHTAbrXWTXVSOZNipv+/o=
Subject key identifier:   AA:1D:2B:B3:96:D4:65:8A:62:C3:60:71:08:23:E0:35:8E:61:48:49
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Certificate issuer:       /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial:       0A4F7257770DD3771CD904AAD983764A6384D04B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
Manifest number:          05AE
Signing time:             Sat 22 Nov 2025 19:46:04 +0000
Manifest this update:     Sat 22 Nov 2025 19:41:04 +0000
Manifest next update:     Sun 23 Nov 2025 20:51:04 +0000
Files and hashes:         1: 34352e31332e3135312e302f32342d3234203d3e20323135373033.roa (hash: aPdRk0yj6WHAWMnGbb2l+kFCRQlNzfB9p5fiHofDu7s=)
                          2: 3231322e31382e3131352e302f32342d3234203d3e20323135323234.roa (hash: 3xKezHtI+fBhKmdU9ku1wV8BXxr20U7aYSfVPGdTqek=)
                          3: 34352e31332e3134392e302f32342d3234203d3e203631333137.roa (hash: Q3PPUlB/JvHRLRIa7IieyrUl/m1wHR8wutqNN0xNel0=)
                          4: 3134362e31392e3231352e302f32342d3234203d3e203432383331.roa (hash: iRYq59bmQokDL09C0IXxdPyvoOhAH6U1C6tDW9/0QSs=)
                          5: 34352e382e3137342e302f32342d3234203d3e2037353632.roa (hash: M0Bu6CLDPFxg3KYMEJy4xB3uyzQGHvj9eJ5j3Kf1CaE=)
                          6: 3133302e3139332e37352e302f32342d3234203d3e20313938383833.roa (hash: X0vCJBzdFH4FS7gRUxhOxAXsLYNsOL4GffJBGoP62Nc=)
                          7: 322e35382e38342e302f32342d3234203d3e20323136323231.roa (hash: U1S3You+fAZhVhvcdrRdWu8kGCzRG+R0tCv8DlClNys=)
                          8: 322e35382e38372e302f32342d3234203d3e203631353936.roa (hash: M45ljxfpitcFdQWEd3Fma8ldSrrzn4db+RAFQgTFz/E=)
                          9: CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl (hash: sKPlZKUOV4lBUkVYI5L6E5RWVDI5vnk330EYJ+bh9P0=)
                          10: 38332e3133382e35302e302f32342d3234203d3e20333936303236.roa (hash: X0JUgkm7bWAXyQ4SYkYDH/4wFz74Xhku1L5c/GFGAX0=)
                          11: 3139332e33352e3232362e302f32342d3234203d3e203536393632.roa (hash: 4UgfT6p/2Q50B5wnsVKN4mv/hFd7RZLIZ15wgnKLY7k=)
                          12: 34352e31332e3134382e302f32332d3233203d3e203632333837.roa (hash: 5EJNV4UhdWOuwnTNcgbmbjrtx0zc2Gwd0NznlniRrK0=)
                          13: 3133302e3139332e37352e302f32342d3234203d3e20323135373237.roa (hash: DfFd6UBLBkplTu5ftGj8Fsf1wrwJQPF9A4xQAHF4/X8=)
                          14: 3134362e31392e35332e302f32342d3234203d3e20313432313131.roa (hash: 65asAzRxJvDe1YCujUmWbIiKCzT1TU5iNap0EoVkO3Y=)
                          15: 3137362e3132362e3130352e302f32342d3234203d3e20313532363732.roa (hash: ds/1M3gFH31reCXMtWJtKut2HrejgsPE/Ioz8CidATY=)
                          16: 38392e3130372e392e302f32342d3234203d3e20313534303439.roa (hash: W8Nr5Pu7VW6wiorrg4hzFmpLYlb8TxaBJrzhK/IwqPg=)
                          17: 322e35382e38352e302f32342d3234203d3e2039333034.roa (hash: tirW2IpV28pqP9ZeL9zAVzFPWptjwkyUdF/HXTrgIfQ=)
                          18: 3138352e3235312e32332e302f32342d3234203d3e20323030303137.roa (hash: 1nHeHr5ez78VSQCwBDXobb8Hijb3cSpgsJnQt2+b4+w=)
                          19: 3134362e31392e35332e302f32342d3234203d3e20313532363732.roa (hash: R9JC3sHytncw5nwNxoiEF3pniUcJV4GyDa9/Vt4/Lgk=)
                          20: 3133302e3139332e37352e302f32342d3234203d3e20323136313539.roa (hash: OScz32SKWiRDIr+bw6qduusJprZYMrHU3JDPa1ynUL8=)
                          21: 3134362e31392e32322e302f32342d3234203d3e2039323934.roa (hash: 4ThssK8ksZD7mFwPOIttfQuPgXi87SmagzrwaTeHUHI=)
                          22: 3134362e31392e3231362e302f32342d3234203d3e20313334363737.roa (hash: r2VWTeXnfDWuim8gDU2ktI3y2NGYwT6ofTi2l1VlIzk=)
                          23: 36322e3132322e3138362e302f32342d3234203d3e203631333137.roa (hash: gCbw4t50he127cuIH8e7X9edy5RGT/dSqPZYrNWwgUg=)
                          24: 34352e382e3137322e302f32342d3234203d3e20323035373333.roa (hash: 1rINDmT9fsbaOlLLqeJ7eTf+zBwneu4N6jBRg+Yc4gc=)
                          25: 36322e3132322e3138352e302f32342d3234203d3e20333937343233.roa (hash: xE+Kag7RYYIC/6Gdcunr8SGE54x+vaEZMv3MSSvdWDk=)
                          26: 34352e31332e3135302e302f32342d3234203d3e2039323934.roa (hash: GNXJYPkhU5PAMN0CYYnBrOwVIuiyCeBKcANNAOXiG4w=)
                          27: 34352e36362e3134382e302f32342d3234203d3e203631333137.roa (hash: 9x1QRSqxq7oLu3gp885IDU4m85ilCP4ZqtuwIJ3/i80=)
                          28: 34352e36362e3134392e302f32342d3234203d3e20323132323338.roa (hash: UYRhWU2YtAQySXQJqSHhc8PkHnSqANYorHfiKIAiPmA=)
                          29: 3231332e352e3132382e302f32342d3234203d3e20313939303538.roa (hash: gEy9Oc8qQMzfRi3Vg23eKfgAotPRUQjE79aKVoo7YPw=)
                          30: 34352e36362e3135312e302f32342d3234203d3e20333933393432.roa (hash: WkX/VhOIB2Xh55Xo8/0X7WB7DxjTEctJTPIyu/NmXnQ=)
                          31: 3137362e3132362e3130352e302f32342d3234203d3e20313432313131.roa (hash: BtY1Y1S506xUDGL3HPYJouh8HE8Bfu5LiAut28ETk7w=)
                          32: 322e35382e38362e302f32342d3234203d3e203432383331.roa (hash: Ga9fSUVi9MuY7PSZ+TJisDhWnGoWEZ4TH7+EN9QxZpk=)
                          33: 34352e382e3137332e302f32342d3234203d3e20323135303531.roa (hash: KTke8ZWqVLA3ANHJ800vvcDHEpQ20KNFTJcuTxVUvFI=)
                          34: 34352e382e3137332e302f32342d3234203d3e20323032363733.roa (hash: 5zwugYWKE+SXj7j9OQLYcPTCHp3CNiw9ZvtoZL3oq9E=)
                          35: 36322e332e31382e302f32342d3234203d3e20323136323931.roa (hash: Mv5UcVUln6H+m2ppbCqxuT1Ft1vn2bxsaMxY5fGcRzU=)
                          36: 322e35382e38372e302f32342d3234203d3e20323634343039.roa (hash: mkGL2Y74THGESksATgz18aFujAfAh2hZzUMM/zMEgtE=)
                          37: 3133302e3139332e37352e302f32342d3234203d3e2035353131.roa (hash: /BJwUN9ogW9gUI5fEpq5TqdItx+gr05E4PzR5YVIKUQ=)
                          38: 3138352e3231322e3131332e302f32342d3234203d3e20323032363738.roa (hash: 0I5n2Zxpd6ZVl5qO7efqO/5G3aMiaibcayoOxL2ddNw=)
                          39: 3231322e32342e3132372e302f32342d3234203d3e203136323736.roa (hash: Rs7w/chVuiM2q/eQlWg7hYcTj07lMXsGjRzGrKCmtq8=)
                          40: 3133302e3139332e37352e302f32342d3234203d3e20323132383135.roa (hash: 0KfkzJx6v7WvN2jvvqOfF0fI8+Z91Ctb8PuaEX/6n0M=)
                          41: 34352e36362e3135302e302f32342d3234203d3e20333937333733.roa (hash: 5DUJVA+pSWGfl0obwZfoWi9lZoQLdECnA4H9VJT+xbw=)
                          42: 36322e332e31382e302f32342d3234203d3e20323136323232.roa (hash: xpvX4DbRPgQDl25Wd7lh+sIK3ZuIxEe17qogwqcSmAY=)
                          43: 3231322e31382e3131362e302f32342d3234203d3e203139343337.roa (hash: 2oZavsRfA1Q40x9PaOnupB4Ub1RzFaGZLNyIg+RCt6s=)
                          44: 34352e382e3137352e302f32342d3234203d3e2037353632.roa (hash: gPOJ5OYy4C3HcRMZFW4SHF49vn1yyv2a5aCn7ZHuj8I=)
                          45: 3134362e31392e3231352e302f32342d3234203d3e20323036323136.roa (hash: bpy3XEt/Glb0ctRVcD/5DBdI9ndCLAP4MyfQv0tMcPQ=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Nov 2025 20:51:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:4f:72:57:77:0d:d3:77:1c:d9:04:aa:d9:83:76:4a:63:84:d0:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
        Validity
            Not Before: Nov 22 19:41:04 2025 GMT
            Not After : Nov 23 20:51:04 2025 GMT
        Subject: CN=AA1D2BB396D4658A62C360710823E0358E614849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6a:9e:ad:2f:32:3a:13:08:58:bc:42:b7:d4:
                    c1:eb:34:4d:e4:da:44:33:ef:91:94:46:00:f9:22:
                    15:ab:38:cb:2a:3d:35:31:38:8a:15:72:f7:41:45:
                    a7:82:8b:c6:7c:cd:4e:fb:26:9b:b3:ba:a1:69:aa:
                    e3:ef:53:86:71:20:20:b3:3c:a5:ee:2e:7d:3a:36:
                    dc:df:b8:1c:c7:c4:85:16:da:68:0d:46:a0:03:03:
                    67:f9:21:a8:a9:e8:42:0a:cf:e8:34:10:ec:e1:74:
                    6d:a6:f6:de:b8:38:2a:18:fc:62:e6:23:f5:1a:f1:
                    01:af:e2:86:0d:ed:83:37:08:e8:80:40:ed:71:9f:
                    ec:44:a7:5c:7c:f7:14:23:f0:3f:ef:fd:f9:d6:7d:
                    48:b2:cc:16:04:cf:52:4b:d3:cb:7a:ab:f3:b9:d3:
                    bb:26:e5:88:bb:11:86:f6:14:13:3b:7e:24:be:b3:
                    55:44:33:07:4a:64:af:82:b6:66:83:f9:8f:23:60:
                    e3:96:54:86:61:87:1e:65:21:a3:aa:ad:28:5f:71:
                    45:69:61:d0:47:f6:fe:b7:0a:04:6d:57:57:8d:52:
                    30:da:4b:a1:4a:a8:4b:b8:f8:86:5c:7d:61:73:c0:
                    26:e2:5e:41:53:25:85:00:e1:75:0a:7b:ea:fd:99:
                    13:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:1D:2B:B3:96:D4:65:8A:62:C3:60:71:08:23:E0:35:8E:61:48:49
            X509v3 Authority Key Identifier:
                keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:7c:20:9b:21:16:b4:40:5a:60:3f:ed:71:28:6e:0e:4a:60:
         87:d0:50:68:66:8a:8e:90:a7:2d:52:04:01:80:a3:60:79:47:
         2f:4f:50:b5:6b:3b:44:69:97:59:ae:9b:58:a5:81:38:08:61:
         e1:59:1d:1d:a8:13:b7:18:8f:89:25:8d:89:bf:63:0e:f1:09:
         b3:ab:19:7b:4e:1a:bf:a4:bc:8d:c7:6f:b7:91:11:a0:8d:0e:
         6b:a5:d5:f5:7c:5a:8f:6a:15:9e:0d:29:ba:6c:d6:10:5d:e7:
         08:ec:70:e5:11:4b:3f:74:73:bb:69:18:64:02:8d:f2:2b:f4:
         09:46:1f:09:ad:e3:04:55:69:1f:38:85:4c:ee:a6:2b:a0:99:
         46:17:d6:7e:7a:05:83:e7:06:0a:53:36:d6:ef:5f:12:e4:2f:
         04:3a:8a:24:e3:b3:01:c0:e0:86:d5:70:e2:8d:25:f6:98:41:
         e7:f4:5e:da:df:20:21:63:19:e5:77:29:13:1d:3c:c4:fc:ac:
         3f:42:d6:b0:ca:14:43:8c:b5:3d:bb:5e:4d:06:20:d3:ed:32:
         62:95:4c:e4:18:94:9c:4a:9d:f6:1d:c4:d6:c0:8c:66:a1:de:
         27:92:2c:74:2d:de:20:0b:de:1c:e5:b3:dd:59:99:7b:41:a3:
         82:0b:6c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 23 11:58:35 2025 by rpki-client