This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
File:                     CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft (raw, json)
Hash identifier:          mtmqMsxaSThKXvaxxRxUmMOQvWiZGrmbD1lSzjxvChk=
Subject key identifier:   01:B5:80:74:44:1F:AC:4D:F0:BF:F8:C6:18:8A:40:91:D9:0B:6C:59
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Certificate issuer:       /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial:       31B951982076E3DFBF7153306F4EBB4159694790
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
Manifest number:          05C3
Signing time:             Mon 08 Dec 2025 05:31:20 +0000
Manifest this update:     Mon 08 Dec 2025 05:26:20 +0000
Manifest next update:     Tue 09 Dec 2025 08:05:20 +0000
Files and hashes:         1: 34352e382e3137332e302f32342d3234203d3e20323135303531.roa (hash: KTke8ZWqVLA3ANHJ800vvcDHEpQ20KNFTJcuTxVUvFI=)
                          2: CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl (hash: nfdLPkZOgq2tgoEmDMxMjuz0EppjQqPzlc5R/4aWNHY=)
                          3: 3133302e3139332e37352e302f32342d3234203d3e2035353131.roa (hash: /BJwUN9ogW9gUI5fEpq5TqdItx+gr05E4PzR5YVIKUQ=)
                          4: 322e35382e38342e302f32342d3234203d3e20323136323231.roa (hash: U1S3You+fAZhVhvcdrRdWu8kGCzRG+R0tCv8DlClNys=)
                          5: 34352e31332e3134382e302f32332d3233203d3e203632333837.roa (hash: 5EJNV4UhdWOuwnTNcgbmbjrtx0zc2Gwd0NznlniRrK0=)
                          6: 322e35382e38372e302f32342d3234203d3e20323634343039.roa (hash: mkGL2Y74THGESksATgz18aFujAfAh2hZzUMM/zMEgtE=)
                          7: 36322e3132322e3138352e302f32342d3234203d3e20333937343233.roa (hash: xE+Kag7RYYIC/6Gdcunr8SGE54x+vaEZMv3MSSvdWDk=)
                          8: 3134362e31392e35332e302f32342d3234203d3e20313432313131.roa (hash: 65asAzRxJvDe1YCujUmWbIiKCzT1TU5iNap0EoVkO3Y=)
                          9: 3138352e3231322e3131332e302f32342d3234203d3e20323032363738.roa (hash: 0I5n2Zxpd6ZVl5qO7efqO/5G3aMiaibcayoOxL2ddNw=)
                          10: 3231322e31382e3131352e302f32342d3234203d3e20323135323234.roa (hash: 3xKezHtI+fBhKmdU9ku1wV8BXxr20U7aYSfVPGdTqek=)
                          11: 34352e31332e3135312e302f32342d3234203d3e20323135373033.roa (hash: aPdRk0yj6WHAWMnGbb2l+kFCRQlNzfB9p5fiHofDu7s=)
                          12: 36322e332e31382e302f32342d3234203d3e20323136323931.roa (hash: Mv5UcVUln6H+m2ppbCqxuT1Ft1vn2bxsaMxY5fGcRzU=)
                          13: 34352e36362e3134392e302f32342d3234203d3e20323132323338.roa (hash: UYRhWU2YtAQySXQJqSHhc8PkHnSqANYorHfiKIAiPmA=)
                          14: 38392e3130372e392e302f32342d3234203d3e20313534303439.roa (hash: W8Nr5Pu7VW6wiorrg4hzFmpLYlb8TxaBJrzhK/IwqPg=)
                          15: 34352e382e3137342e302f32342d3234203d3e2037353632.roa (hash: M0Bu6CLDPFxg3KYMEJy4xB3uyzQGHvj9eJ5j3Kf1CaE=)
                          16: 3134362e31392e3231352e302f32342d3234203d3e20323036323136.roa (hash: bpy3XEt/Glb0ctRVcD/5DBdI9ndCLAP4MyfQv0tMcPQ=)
                          17: 3134362e31392e3231352e302f32342d3234203d3e203432383331.roa (hash: iRYq59bmQokDL09C0IXxdPyvoOhAH6U1C6tDW9/0QSs=)
                          18: 34352e382e3137322e302f32342d3234203d3e20323035373333.roa (hash: 1rINDmT9fsbaOlLLqeJ7eTf+zBwneu4N6jBRg+Yc4gc=)
                          19: 3134362e31392e3231362e302f32342d3234203d3e20313334363737.roa (hash: r2VWTeXnfDWuim8gDU2ktI3y2NGYwT6ofTi2l1VlIzk=)
                          20: 322e35382e38372e302f32342d3234203d3e203631353936.roa (hash: M45ljxfpitcFdQWEd3Fma8ldSrrzn4db+RAFQgTFz/E=)
                          21: 36322e332e31382e302f32342d3234203d3e20323136323232.roa (hash: xpvX4DbRPgQDl25Wd7lh+sIK3ZuIxEe17qogwqcSmAY=)
                          22: 34352e36362e3135302e302f32342d3234203d3e20333937333733.roa (hash: 5DUJVA+pSWGfl0obwZfoWi9lZoQLdECnA4H9VJT+xbw=)
                          23: 3134362e31392e35332e302f32342d3234203d3e20313532363732.roa (hash: R9JC3sHytncw5nwNxoiEF3pniUcJV4GyDa9/Vt4/Lgk=)
                          24: 38332e3133382e35302e302f32342d3234203d3e20333936303236.roa (hash: X0JUgkm7bWAXyQ4SYkYDH/4wFz74Xhku1L5c/GFGAX0=)
                          25: 3231322e31382e3131362e302f32342d3234203d3e203139343337.roa (hash: 2oZavsRfA1Q40x9PaOnupB4Ub1RzFaGZLNyIg+RCt6s=)
                          26: 34352e36362e3135312e302f32342d3234203d3e20333933393432.roa (hash: WkX/VhOIB2Xh55Xo8/0X7WB7DxjTEctJTPIyu/NmXnQ=)
                          27: 36322e3132322e3138362e302f32342d3234203d3e203631333137.roa (hash: gCbw4t50he127cuIH8e7X9edy5RGT/dSqPZYrNWwgUg=)
                          28: 3139332e33352e3232362e302f32342d3234203d3e203536393632.roa (hash: 4UgfT6p/2Q50B5wnsVKN4mv/hFd7RZLIZ15wgnKLY7k=)
                          29: 34352e36362e3134382e302f32342d3234203d3e203631333137.roa (hash: 9x1QRSqxq7oLu3gp885IDU4m85ilCP4ZqtuwIJ3/i80=)
                          30: 3138352e3235312e32332e302f32342d3234203d3e20323030303137.roa (hash: 1nHeHr5ez78VSQCwBDXobb8Hijb3cSpgsJnQt2+b4+w=)
                          31: 3133302e3139332e37352e302f32342d3234203d3e20323132383135.roa (hash: 0KfkzJx6v7WvN2jvvqOfF0fI8+Z91Ctb8PuaEX/6n0M=)
                          32: 3134362e31392e32322e302f32342d3234203d3e2039323934.roa (hash: 4ThssK8ksZD7mFwPOIttfQuPgXi87SmagzrwaTeHUHI=)
                          33: 322e35382e38362e302f32342d3234203d3e203432383331.roa (hash: Ga9fSUVi9MuY7PSZ+TJisDhWnGoWEZ4TH7+EN9QxZpk=)
                          34: 3137362e3132362e3130352e302f32342d3234203d3e20313432313131.roa (hash: BtY1Y1S506xUDGL3HPYJouh8HE8Bfu5LiAut28ETk7w=)
                          35: 3137362e3132362e3130352e302f32342d3234203d3e20313532363732.roa (hash: ds/1M3gFH31reCXMtWJtKut2HrejgsPE/Ioz8CidATY=)
                          36: 3133302e3139332e37352e302f32342d3234203d3e20323135373237.roa (hash: DfFd6UBLBkplTu5ftGj8Fsf1wrwJQPF9A4xQAHF4/X8=)
                          37: 322e35382e38352e302f32342d3234203d3e2039333034.roa (hash: tirW2IpV28pqP9ZeL9zAVzFPWptjwkyUdF/HXTrgIfQ=)
                          38: 3231322e32342e3132372e302f32342d3234203d3e203136323736.roa (hash: Rs7w/chVuiM2q/eQlWg7hYcTj07lMXsGjRzGrKCmtq8=)
                          39: 3133302e3139332e37352e302f32342d3234203d3e20323136313539.roa (hash: OScz32SKWiRDIr+bw6qduusJprZYMrHU3JDPa1ynUL8=)
                          40: 3231332e352e3132382e302f32342d3234203d3e20313939303538.roa (hash: gEy9Oc8qQMzfRi3Vg23eKfgAotPRUQjE79aKVoo7YPw=)
                          41: 34352e382e3137352e302f32342d3234203d3e2037353632.roa (hash: gPOJ5OYy4C3HcRMZFW4SHF49vn1yyv2a5aCn7ZHuj8I=)
                          42: 3133302e3139332e37352e302f32342d3234203d3e20313938383833.roa (hash: X0vCJBzdFH4FS7gRUxhOxAXsLYNsOL4GffJBGoP62Nc=)
                          43: 34352e382e3137332e302f32342d3234203d3e20323032363733.roa (hash: 5zwugYWKE+SXj7j9OQLYcPTCHp3CNiw9ZvtoZL3oq9E=)
                          44: 34352e31332e3134392e302f32342d3234203d3e203631333137.roa (hash: Q3PPUlB/JvHRLRIa7IieyrUl/m1wHR8wutqNN0xNel0=)
                          45: 34352e31332e3135302e302f32342d3234203d3e2039323934.roa (hash: GNXJYPkhU5PAMN0CYYnBrOwVIuiyCeBKcANNAOXiG4w=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Dec 2025 08:05:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:b9:51:98:20:76:e3:df:bf:71:53:30:6f:4e:bb:41:59:69:47:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
        Validity
            Not Before: Dec  8 05:26:20 2025 GMT
            Not After : Dec  9 08:05:20 2025 GMT
        Subject: CN=01B58074441FAC4DF0BFF8C6188A4091D90B6C59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e0:4b:b6:7b:ee:fc:e2:16:eb:07:a3:fc:95:
                    51:2a:5e:6b:cc:a6:4f:e9:89:d0:68:e1:79:c9:a2:
                    62:16:7f:d9:5d:1f:c9:89:29:e8:09:66:ca:4d:07:
                    89:f3:b9:01:3e:7d:2b:c2:03:55:e5:21:fa:97:75:
                    52:6a:cf:ed:6a:88:66:92:b0:9a:19:41:29:3e:ec:
                    ea:ce:a9:b1:e9:20:85:bf:bb:63:2a:80:09:81:d5:
                    47:23:f5:cc:56:24:5e:2e:06:60:1d:d4:20:60:1c:
                    c2:fc:fb:de:54:2e:5e:31:1d:17:e9:40:a1:a1:10:
                    d1:27:b0:fb:44:74:b2:63:11:0e:62:b6:8f:7f:4b:
                    15:58:9d:5c:0a:e6:ad:f7:45:d9:49:d1:57:4c:a6:
                    a3:53:65:73:64:a8:85:c6:8b:81:2c:f7:19:50:62:
                    2c:31:17:c0:cf:9a:c8:b6:19:be:2f:4b:08:2c:e9:
                    c6:12:a9:e2:86:23:9d:ba:e9:51:6f:fb:29:4d:49:
                    41:48:68:86:04:5e:7d:9c:c7:d1:f6:40:16:3e:d2:
                    44:d5:62:dc:a9:46:58:2a:7c:eb:80:a6:26:84:17:
                    32:85:e3:0e:68:c1:44:97:ff:0b:ca:3e:87:d8:b0:
                    f3:8b:d2:e6:01:d1:f9:ac:9d:e4:ae:1e:98:d4:28:
                    58:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B5:80:74:44:1F:AC:4D:F0:BF:F8:C6:18:8A:40:91:D9:0B:6C:59
            X509v3 Authority Key Identifier:
                keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:38:03:b9:82:2c:99:58:9b:df:c0:3d:ce:ba:01:f6:49:7d:
         1a:6a:a0:14:13:bd:e7:07:e5:90:3a:5d:d1:e9:d9:f3:c7:0f:
         a7:42:84:24:3c:14:f0:39:9d:8c:43:4c:f5:24:1c:71:3e:ab:
         21:36:15:d2:ac:c2:8e:4f:cf:fb:f4:76:17:c6:2d:4f:79:9c:
         f7:90:f4:c8:10:5b:13:04:3b:b0:15:f5:b1:1e:ed:f0:1b:5c:
         41:62:28:fe:47:e6:b1:5c:04:86:08:05:47:24:eb:9e:74:ed:
         f6:ba:5b:b0:dd:ad:1f:c3:a0:0b:23:8c:2a:cb:b5:fa:ea:8a:
         cc:8e:c2:4e:e7:49:ed:fa:55:61:95:8e:91:a0:5f:17:9d:d1:
         cf:d0:b6:ba:d5:db:36:a3:64:33:b1:c6:3f:07:a5:15:7a:e0:
         32:9c:b7:33:d9:af:c1:b7:2d:c5:17:4a:37:f2:9e:d2:5d:3f:
         5b:fb:b2:98:5e:29:93:cc:f0:64:c0:e8:11:f3:ee:f7:9e:6f:
         92:2d:6d:a9:91:70:47:21:51:5f:6f:a3:95:a4:f3:ff:5f:03:
         c8:39:0a:f9:02:fe:72:c8:cc:e2:05:31:a9:aa:ab:3f:03:94:
         cd:e2:be:0a:ac:2d:b9:04:83:ad:fe:3c:ff:72:c7:75:55:6e:
         a2:06:b2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 22:46:31 2025 by rpki-client