This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft
File:                     5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft (raw, json)
Hash identifier:          4VeqChPs+ZuUDwjcKavZRsQY926OoPc+01ZdRX5mrdM=
Subject key identifier:   90:96:A1:A2:98:9D:69:AC:AB:AE:49:D9:97:4B:3D:BA:1F:64:1F:52
Authority key identifier: 5A:3F:78:19:35:3C:E0:FD:13:B8:FF:CD:CB:88:37:ED:0B:F5:91:5F
Certificate issuer:       /CN=5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F
Certificate serial:       6C55A55E845A41B13ECDD9EF7F7DE560C5D1B098
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft
Manifest number:          CF
Signing time:             Thu 04 Dec 2025 07:59:25 +0000
Manifest this update:     Thu 04 Dec 2025 07:54:25 +0000
Manifest next update:     Fri 05 Dec 2025 11:16:25 +0000
Files and hashes:         1: 5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl (hash: B9eSG7388PeUKkbxYj4OVGdDteerUIMXlEMvIYYrjOY=)
                          2: 326130363a396634313a3130303a3a2f34302d3430203d3e20323134373233.roa (hash: sTs8O8KBp3/QEgTlhnDJhb+nhykdynr848iPv4Z/TIo=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Dec 2025 00:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:55:a5:5e:84:5a:41:b1:3e:cd:d9:ef:7f:7d:e5:60:c5:d1:b0:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F
        Validity
            Not Before: Dec  4 07:54:25 2025 GMT
            Not After : Dec  5 11:16:25 2025 GMT
        Subject: CN=9096A1A2989D69ACABAE49D9974B3DBA1F641F52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a3:cb:2a:b1:61:d0:c8:64:11:45:23:91:74:
                    bb:d0:47:59:47:81:fd:5b:44:e8:38:af:91:1c:55:
                    96:87:62:b8:c6:e5:f0:59:06:37:5a:f3:a9:83:0f:
                    9f:6e:b6:40:30:de:07:01:4e:e3:0e:2b:12:bf:ba:
                    67:bc:9e:53:14:86:7c:9f:a5:92:95:81:59:5e:7c:
                    b0:3b:86:f0:42:d1:c3:d1:8c:9c:2d:87:7e:68:a7:
                    24:09:eb:fc:a6:f8:81:bc:55:c4:61:e0:c0:5c:60:
                    99:53:9d:73:a5:a3:91:d3:5d:1b:5c:ad:55:bf:38:
                    b5:3e:dd:44:9f:69:2b:4c:c0:27:e0:21:c9:19:b8:
                    cc:e7:92:bd:c7:dc:55:79:14:44:30:75:ed:3c:f6:
                    e0:72:e8:b3:74:58:4d:65:e8:05:e0:5f:f8:51:71:
                    cb:d4:b4:2b:61:80:da:cb:54:97:78:e8:59:f0:4e:
                    c6:31:7f:fd:c7:94:26:85:86:8b:68:43:c9:9a:16:
                    19:d9:27:9c:41:89:67:71:06:cd:95:af:15:3b:a3:
                    e1:48:45:c4:38:03:51:42:23:96:2c:83:1c:a7:e7:
                    b0:5e:a1:06:37:ec:49:81:da:a8:47:df:f5:cf:01:
                    95:c8:94:b0:92:5d:6d:05:97:61:02:8b:8f:41:c6:
                    22:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:96:A1:A2:98:9D:69:AC:AB:AE:49:D9:97:4B:3D:BA:1F:64:1F:52
            X509v3 Authority Key Identifier:
                keyid:5A:3F:78:19:35:3C:E0:FD:13:B8:FF:CD:CB:88:37:ED:0B:F5:91:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/5/5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:20:0c:9d:41:6c:7e:aa:3e:b2:fb:eb:1f:98:87:03:fe:d7:
         1c:04:47:6d:99:a8:1c:be:1a:91:52:26:5b:e8:7d:5a:e6:9e:
         e1:68:e4:1a:6d:d5:39:df:af:ca:b2:b6:98:9b:bf:b2:e5:24:
         1b:24:b5:37:f5:21:28:11:2e:8c:61:a1:86:98:53:31:8a:85:
         0d:9f:79:51:06:8a:73:27:d8:32:b5:fe:f4:1a:7b:e7:97:d5:
         22:cd:f0:36:44:9f:3e:df:90:6f:23:a0:e6:03:a2:54:f4:91:
         d7:2a:15:31:b0:39:bb:0f:92:f2:ef:b5:38:43:a0:09:cb:61:
         ed:35:08:44:36:80:67:6f:57:42:70:d6:b4:e4:1e:94:82:c0:
         22:21:e5:a5:26:1e:fe:44:e3:ae:43:81:f2:8c:d8:16:1f:51:
         b3:bc:89:30:10:4d:34:07:7d:65:7e:e9:4e:b3:c4:35:40:38:
         fe:0e:ba:ac:6a:fb:d8:0f:29:0d:1f:50:d7:88:60:9f:d3:c7:
         ff:c3:f8:60:d9:a7:a8:8c:a8:c2:ab:c0:89:bf:d2:51:cc:ff:
         85:44:f9:7b:9f:82:ca:1e:21:c3:80:39:35:35:ed:df:e5:ee:
         df:e0:b9:98:ef:cc:ad:c7:ff:36:21:c0:5d:b4:9e:40:b1:a5:
         2a:a0:75:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 09:53:09 2025 by rpki-client