This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft
File:                     202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft (raw, json)
Hash identifier:          KmZQSlVNufut7mG3AOBtO76iGnPkLTpVuDafPb0ppUk=
Subject key identifier:   3E:51:D7:0A:D6:99:FE:40:65:4A:2E:D3:CD:86:9B:AC:FC:B5:09:1B
Authority key identifier: 20:2A:82:DA:6E:73:CE:42:62:E1:8B:AE:D6:0A:3F:A6:C8:89:23:F0
Certificate issuer:       /CN=202A82DA6E73CE4262E18BAED60A3FA6C88923F0
Certificate serial:       24C7F8C72E86E5B0DE01A6A95A4EBB716E33E6DB
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft
Manifest number:          91
Signing time:             Tue 09 Dec 2025 22:07:42 +0000
Manifest this update:     Tue 09 Dec 2025 22:02:42 +0000
Manifest next update:     Wed 10 Dec 2025 22:24:42 +0000
Files and hashes:         1: 326131343a373538313a333062363a3a2f34382d3438203d3e20323037323939.roa (hash: QF7sj3Q22cpFIfftMWFUaaWBXSTUWiNGhFKa4Gm8DjQ=)
                          2: 202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl (hash: l0STBs7iSrFxpLHuMB4dmXQWkxe8mlcsfs4vQoM5q+M=)
                          3: 326131343a373538313a333062353a3a2f34382d3438203d3e20323131373239.roa (hash: tFUXq6i30FxB1SNNhCRKk78oQl/FXFjJBGghOw722to=)
                          4: 64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.cer (hash: Cg46VfMFxkibHVY72VspTJE2BjBtIpE0lG8+Ny9YFKc=)
                          5: 326131343a373538313a333039303a3a2f34342d3434203d3e20323034323131.roa (hash: an2CTnY48XCjuCGH81CGgjVXZdlCvh7kWv6euA7rsaw=)
                          6: 326131343a373538313a333030303a3a2f34302d3438203d3e20323037353239.roa (hash: 49tQr1GLN9QvPACiaQcXfaSDsuhRZJax3rEAyqF9fvs=)
                          7: 326131343a373538303a666666353a3a2f34382d3438203d3e20323037353239.roa (hash: 8GEpSwKR5aAKrW7JpZcQNrVUIUKVu8YVCYytf208qTw=)
                          8: 326131343a373538313a333062363a3a2f34382d3438203d3e203331383938.roa (hash: EiykYxl+6FaTNBSgNTe5hk8ztAyCkiKmYpqs3J6XV7E=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Dec 2025 22:24:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:c7:f8:c7:2e:86:e5:b0:de:01:a6:a9:5a:4e:bb:71:6e:33:e6:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=202A82DA6E73CE4262E18BAED60A3FA6C88923F0
        Validity
            Not Before: Dec  9 22:02:42 2025 GMT
            Not After : Dec 10 22:24:42 2025 GMT
        Subject: CN=3E51D70AD699FE40654A2ED3CD869BACFCB5091B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:79:06:88:a2:7c:17:a0:d5:41:97:d6:7c:21:
                    50:0c:32:53:39:bd:45:a3:14:3a:74:bf:c2:d9:a3:
                    03:44:28:b3:b3:0b:a1:fd:f6:4c:99:58:44:0d:eb:
                    66:1e:cb:27:ec:cd:3f:59:3d:ef:4f:5f:9e:de:e1:
                    ab:14:31:e8:fe:7a:66:b0:12:53:f1:97:f3:b3:ce:
                    44:89:62:13:68:e6:6f:f6:b9:72:b1:e5:c5:ce:bc:
                    ac:f8:57:91:a6:32:a8:8e:14:a9:50:e0:6b:83:bc:
                    38:29:17:1f:85:96:d6:f6:7c:86:78:ec:ad:7f:e0:
                    e3:c5:d0:10:55:de:12:6b:f0:74:7b:8a:8f:f4:49:
                    b4:f5:8d:be:d4:57:ef:af:e4:db:6a:a9:3a:1b:23:
                    66:13:e2:3d:95:f3:86:95:4d:bb:b1:c3:38:ab:4e:
                    61:3f:41:41:44:8e:75:c1:8e:4a:77:bb:e8:77:54:
                    16:3e:dc:cb:7f:b4:ae:54:59:05:60:7c:b9:ea:ad:
                    5a:22:7f:8e:33:09:40:1b:6d:6f:47:e6:ae:0d:47:
                    51:6d:4e:53:27:31:80:b9:fa:9d:5b:3c:ce:41:81:
                    46:03:d9:87:b5:64:f0:a2:83:49:91:c0:2f:4e:25:
                    5e:8d:73:da:a2:32:50:0f:42:bf:0b:d9:e7:22:2f:
                    a2:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:51:D7:0A:D6:99:FE:40:65:4A:2E:D3:CD:86:9B:AC:FC:B5:09:1B
            X509v3 Authority Key Identifier:
                keyid:20:2A:82:DA:6E:73:CE:42:62:E1:8B:AE:D6:0A:3F:A6:C8:89:23:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:a1:17:fa:d6:2f:ef:df:1a:93:2f:8a:df:45:ab:78:31:36:
         d3:21:67:99:a3:f0:a7:bd:6f:83:22:a4:85:e9:f4:41:7e:8d:
         26:f6:1f:8d:58:d4:57:8a:ac:3b:06:31:46:ff:b8:2a:d7:7c:
         61:a4:1e:04:e9:4a:c2:87:01:42:b1:21:6a:14:ec:b1:af:25:
         55:32:15:d7:56:ed:7c:6e:3d:3e:60:6b:ea:13:69:3e:66:70:
         f2:ee:9c:06:1a:db:2a:a8:0d:fd:ba:2d:b5:5a:ab:50:eb:5c:
         d4:9e:bb:14:e3:92:f1:91:82:03:7d:e8:91:42:7c:17:df:67:
         2b:e1:ab:40:64:44:4b:43:25:bc:29:29:b7:89:0b:cc:ce:6d:
         ab:ae:d6:e1:5f:0c:93:9a:8e:43:9d:06:c8:4b:d3:13:b5:0e:
         d2:71:4d:47:9e:2a:3f:13:6b:6c:e6:e8:d3:9b:bd:02:82:ea:
         fe:0a:09:cf:42:97:d0:94:ac:fb:85:89:f7:3d:61:8f:88:ff:
         20:c7:12:6f:74:c6:84:24:d6:e8:4a:0b:df:6d:dd:c3:45:98:
         df:a1:b8:e5:7a:34:e2:e2:73:2b:a8:5c:4e:24:9f:7f:f5:78:
         48:6b:29:79:01:f6:55:80:fd:1b:23:e4:75:5b:9b:9c:a6:7c:
         58:8b:cd:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----