This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
File:                     0839A93DAB544C296FFA143456844A8B2818B1D0.mft (raw, json)
Hash identifier:          bh1V6bcvv0YZv/40p5mIdTJdDfSBTZqrosMtUBFVW6o=
Subject key identifier:   C0:05:76:DB:FE:D2:61:B9:85:65:02:6A:9F:94:E1:DF:C1:70:F8:5F
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Certificate issuer:       /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial:       2841E5B7A4ECE41625079AD43A170D642DE97D33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
Manifest number:          0333
Signing time:             Fri 12 Dec 2025 10:16:31 +0000
Manifest this update:     Fri 12 Dec 2025 10:11:31 +0000
Manifest next update:     Sat 13 Dec 2025 13:14:31 +0000
Files and hashes:         1: 326131313a663263303a313a3a2f34382d3438203d3e20323032333539.roa (hash: ZivrOJ7iiOCUg/HqF4j2xuXr75dIBf1hdqQTAxY+xwU=)
                          2: 6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer (hash: 7vWzoO24JPLcJIRkdp0t5SircHQEVrRAYCuf9fG6TR4=)
                          3: E02C2B37910DB974089166C0D244DE386B5762C2.cer (hash: NQL7Q+vPifLFy80HHQ35NSOJH0JVOxv33NgrFx9SMgU=)
                          4: 09F041F60B21B649820D0FEE0D7654D63DDD080D.cer (hash: YD4L9bqvaUV95bBh8Ju1YuFHRvMJfo/DkcF98/HxW9I=)
                          5: 6482EA67DB858D1440DD67B955223E4341BA4E97.cer (hash: lKlfGm9oX8e/vMr1ifVDL2vFahUuPFOtcD1F8uJvy/E=)
                          6: 31586760843F668A816117EA02F6F30FE8F9C359.cer (hash: sdjQP12grMA84wrOD8soDanrM9KsCHOhQQgZ6YwFl/w=)
                          7: 323030313a3637383a6663383a3a2f34382d3438203d3e20323037393630.roa (hash: UNIFWQcfDb9TIYM9mTcmUs06i4tbcfV6n3m2ESGFPVM=)
                          8: B50D92304CA867525C648A07380EA065FD352DEC.cer (hash: jeLezi/e/tiKuflcEffKB+Cet8nw848xqf2VW1otgMA=)
                          9: 4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer (hash: 1nhiF+DUP666qHgL0W5CdOzUBH6sH332zL1MCTVIgUk=)
                          10: 44C4C913D58F5EF847996241E969B60A1E3F1389.cer (hash: E3ak7egeb7oLQq4pNOV672llzd9VjZ7X1tZw4IAYLms=)
                          11: F794DFA009EA90B4CBBB340DE4C255446986D7C6.cer (hash: +U9s3nk3zcGTMVxdfeeaoEIEhjnpyi2zUiI59YfVir8=)
                          12: 326131313a663263303a333a3a2f34382d3438203d3e20323032333539.roa (hash: XIj+fw+vRgYTpRxwvO3XvTkfLsFczQo4AujMyz3iud4=)
                          13: 1A889E0950A8B6489E67E7C7189539FB887EAD71.cer (hash: QvMFt41RXdcJq7gp5tnRNXaXgfSmaaXZCupMATLSYFk=)
                          14: 1D570B984E9C5E382B0A879AA21F6518621F059F.cer (hash: w4LlrRiZpjCqpbWEegKCJHPhvyvwSjODOuNEEV+R23o=)
                          15: 16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer (hash: xWjJR6Nxgh4wTbQyfSpM8roZ9e57XZ5G/Wz+HfAB8Qw=)
                          16: 62A86C7D9E920A161C8A4CEDDD0EE1BB74C581AC.cer (hash: L9VSFOsG4sCFFaXWcNTMiKK4PkL1oeVJZtfXUCMq90Y=)
                          17: AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer (hash: e/9HYgp/mohWVL/xi7PmXFlHj2B3IcMqES1nyxAUKjo=)
                          18: 6D0EF2AC1D235D1B50ED776E6CE4C3CB36AF062F.cer (hash: 6I8CkH37Y+2qxrW8WAlVcQiiukOkkakJShyNFWsBV3k=)
                          19: 326131313a663263303a666630303a3a2f34382d3438203d3e20323037393630.roa (hash: 6+o/SVChTjHbiYUJ03zyc6Ju+ZkXcW4hDy3lbeRRz+k=)
                          20: 10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.cer (hash: CEGJbTLl4BFPIQu0BkXUdZ1K35M3vSyHeqh8rVvhUfc=)
                          21: F5D54631B7091E1F4B8B02E70FF76F073F8B2320.cer (hash: xVngRZoqmU3ug9ZE0lvPtcRq8CjSyQiMIGiV8ww3DYk=)
                          22: 326131313a663263303a3a2f34382d3438203d3e20323037393630.roa (hash: 3TxnMdPT5hHYItzRe6t9ErU/wv40unaDW97hsOh3H4M=)
                          23: 69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.cer (hash: Zmzv7fBFqGLxjYc480gPrSI5W4OUPciQIi5quu5IaLg=)
                          24: 326131313a663263303a323a3a2f34382d3438203d3e20323032333539.roa (hash: SlyimbxFLoCHsFWWpUZjHgmLHKv7rmMtitzOtZT7wdo=)
                          25: AS207960.asa (hash: dkR0kCK9ItfbDdB+lcz8NXX/OgW2AxH6xzmW14rh/hI=)
                          26: 970AD94C83244100A97F9186D53DADAB07995EE9.cer (hash: RWBnNEK86OTd+EsaiL4tRRo/ytLMfihyN/KLzSQWa5Y=)
                          27: C2724A29EF989A4340933B8130B402DD4627A501.cer (hash: 984ckCJkp1VtRhMMUPKyUG2Uubk2ftZ4dLd3NzPeeY0=)
                          28: B8222A845C0CDC59E8D369AE23E116CDDEA08777.cer (hash: zKaN08cZjSwmv4VxKubYdVn/CoX70Fn+0x6DYvBEbBM=)
                          29: 067DBC6BCF0F9582DF78366389AEAF5965565EF5.cer (hash: fBqC9ryjQi6+GMXhqT8gchFPNagFwAwTKLhvHv66WwQ=)
                          30: 16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer (hash: jH9R6EtyMHUcM8XcpEu+SmgJb0fp9TQ+h2bdy0JKm8s=)
                          31: 326131313a663263303a343a3a2f34382d3438203d3e20323032333539.roa (hash: B4MACJgrYv8gOFyM+OgYWOFeMkOQBLykzkdPSnyxEgo=)
                          32: 4742E76772F118A935D69FD40F69858085C80999.cer (hash: PXNlleSIOJFtms7j+EwWK+dQ4coJG0uvhI3LcgkFsFw=)
                          33: 3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer (hash: NscCIMsZ2yU9wFViqqUFMP9l2GG+IJImIYDZVt1y4cg=)
                          34: AS202359.asa (hash: 6VIFnTZlZo7nQ/fI9Z3+DaeUn3Y1Zv+vHdQ94mzfXkg=)
                          35: 3139332e332e3136352e302f32342d3234203d3e20323032333539.roa (hash: PN7OPw6x8T4uLhMmLkm8sVVlgwZlpPub1GieXN4o6dQ=)
                          36: 0839A93DAB544C296FFA143456844A8B2818B1D0.crl (hash: DAd/APHGMjQ/po6yGUtH1NELqsdDwj+IwuGCUxl+5EU=)
                          37: 3139332e332e3136352e302f32342d3234203d3e203434333535.roa (hash: 8+PpyJbtCrTrR5hMXklV6jn0Gbpl8JRn1mZ/sbUihXw=)
                          38: B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer (hash: 8IYDJ2eIDos7JCscqio8m4CtvsMZIm87tSAcUKKXKKg=)
                          39: 326131313a663263303a666635303a3a2f34382d3438203d3e20323032333539.roa (hash: RTtc7kvQY4mgVpXb0OGaj3d8CGbqE+rrAFaJtMYV3Gw=)
                          40: BBED14E9793905EC1EA5CE10AA03C497D737B115.cer (hash: m+ztv5UmtHgdFMzFwqLzYGsJqAw/AeqFEUgffywu2Zc=)
                          41: 2B3B97334DA06978185DAC76A2F3EA3585E8231E.cer (hash: pxz0LR+iQ3l1lE7tkI4TpOm1EbpH5/e/dD9vYzgfMps=)
                          42: 1ABB08D41A5A6974320D97887769A15BA6B7EF71.cer (hash: gW5/r+rTqmiwY5x1Qtx3z5ezWcBU9AkoYGR7QTJTGt8=)
                          43: 5ABE2F609996476AAFE146BC5A72429B0B205FC0.cer (hash: fNICkLgDOQLQyXcYC+Mx7zWPSiGBhLSE5Btg3FNYCrk=)
                          44: FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer (hash: Z+xIm/9vNqFKmLWBcsaGK8BJ1alQ9TOcEU4cwskAlyE=)
                          45: 326131313a663263303a3a2f32392d3239203d3e2030.roa (hash: SFi79UqiX3kS2cuHdwRtphv59FDPSt5CMOnrnul0UdU=)
                          46: 1FB9C850F913D6C09A776D8BB38327BE701B0F87.cer (hash: EluTWf0GQ95lG3mbjIrTeS+cckdmvkzXIoud3lIjd+s=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Dec 2025 08:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:41:e5:b7:a4:ec:e4:16:25:07:9a:d4:3a:17:0d:64:2d:e9:7d:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
        Validity
            Not Before: Dec 12 10:11:31 2025 GMT
            Not After : Dec 13 13:14:31 2025 GMT
        Subject: CN=C00576DBFED261B98565026A9F94E1DFC170F85F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:cb:3b:bb:88:6d:1c:20:eb:6e:79:1e:6e:b7:
                    91:3c:63:2b:8e:af:73:27:37:a1:7a:85:3e:7a:3a:
                    29:6f:36:37:ff:2a:bb:30:0b:d5:a0:90:6f:9a:60:
                    c8:cc:75:c3:e5:d6:8d:a4:21:9b:06:dd:a0:6a:a6:
                    2e:68:3b:52:39:de:b8:26:1f:56:7b:21:10:c3:67:
                    00:3c:15:08:a9:c3:be:5e:2b:3a:42:83:40:fa:8a:
                    ce:4c:46:b5:14:d9:6e:c9:b7:61:2a:e7:cf:37:bf:
                    2d:68:80:4b:ca:cf:e8:9b:94:f6:5c:8c:81:09:71:
                    1e:3f:79:e1:9e:4e:48:82:db:25:40:86:9a:2a:50:
                    2d:78:86:ef:90:5b:e4:33:18:3c:e7:e8:a5:2f:f2:
                    2e:9f:d6:81:c3:5e:d6:26:af:37:42:28:b7:d0:dc:
                    c2:01:e9:b5:92:2a:b8:d2:df:39:69:81:e6:46:ae:
                    0b:23:a5:57:1e:d5:c3:c4:bb:8b:29:34:7f:f0:7a:
                    74:d9:cb:68:fb:28:18:15:9e:31:17:3a:8f:7e:20:
                    c2:50:6e:3f:22:fe:38:1f:26:30:f1:f5:5e:19:25:
                    88:41:24:36:23:f4:f6:3b:68:13:a4:30:e3:1a:60:
                    2f:20:08:4d:3b:de:89:24:34:f8:73:da:5e:ef:62:
                    b8:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:05:76:DB:FE:D2:61:B9:85:65:02:6A:9F:94:E1:DF:C1:70:F8:5F
            X509v3 Authority Key Identifier:
                keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:38:66:4a:65:16:27:06:04:9c:fa:f6:bd:59:d0:b3:82:dc:
         72:e9:6b:9d:a7:2e:59:78:b8:30:d5:d8:93:2c:cc:a6:ce:9f:
         d2:04:8a:39:81:4c:86:66:e9:6a:8e:cd:9e:a8:6f:a7:0b:fd:
         64:04:a0:50:13:d2:c7:fb:df:b1:c6:06:0b:7e:86:bc:fc:a8:
         7b:88:6a:81:87:e2:fb:0b:26:b5:0c:86:fb:66:45:dc:8e:51:
         9f:b3:d7:4f:92:2b:2c:65:55:f9:97:d6:bd:06:9c:a6:b2:15:
         b4:88:cb:b7:56:1d:85:eb:14:9e:f3:c7:1b:6c:a1:a0:9f:5c:
         c6:b3:84:93:95:7f:30:c6:ca:15:86:bf:50:f2:e7:2e:dc:fe:
         60:95:60:0a:f8:ad:f2:7c:9f:38:df:62:37:88:78:36:a0:c6:
         92:e0:a8:7a:0a:a2:86:3b:f6:ac:15:77:8d:ec:df:0b:62:00:
         c2:31:24:a7:6a:9b:b0:6f:ed:36:6d:01:e7:b7:56:9c:d1:16:
         1e:6c:95:a7:ab:a9:0f:24:82:e0:e9:35:07:da:a0:6c:6d:ca:
         a6:82:e1:ad:4b:65:1f:83:be:a6:b8:e5:c6:5d:c0:3a:72:1d:
         da:fb:2c:6b:35:b9:b0:e5:c5:85:7e:33:e7:e7:a6:59:f1:cf:
         41:55:10:af
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUKEHlt6Ts5BYlB5rUOhcNZC3pfTMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDgzOWE5M2RhYjU0NGMyOTZmZmExNDM0NTY4NDRhOGIy
ODE4YjFkMDAeFw0yNTEyMTIxMDExMzFaFw0yNTEyMTMxMzE0MzFaMDMxMTAvBgNV
BAMTKEMwMDU3NkRCRkVEMjYxQjk4NTY1MDI2QTlGOTRFMURGQzE3MEY4NUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDyzu7iG0cIOtueR5ut5E8YyuO
r3MnN6F6hT56OilvNjf/KrswC9WgkG+aYMjMdcPl1o2kIZsG3aBqpi5oO1I53rgm
H1Z7IRDDZwA8FQipw75eKzpCg0D6is5MRrUU2W7Jt2Eq5883vy1ogEvKz+iblPZc
jIEJcR4/eeGeTkiC2yVAhpoqUC14hu+QW+QzGDzn6KUv8i6f1oHDXtYmrzdCKLfQ
3MIB6bWSKrjS3zlpgeZGrgsjpVce1cPEu4spNH/wenTZy2j7KBgVnjEXOo9+IMJQ
bj8i/jgfJjDx9V4ZJYhBJDYj9PY7aBOkMOMaYC8gCE073okkNPhz2l7vYrjlAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUwAV22/7SYbmFZQJqn5Th38Fw+F8wHwYDVR0j
BBgwFoAUCDmpPatUTClv+hQ0VoRKiygYsdAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZGRlODM3ZmItNjM5MC00MWI1LTgyYTAtZjBkMDJjMDNh
MmM2LzcvMDgzOUE5M0RBQjU0NEMyOTZGRkExNDM0NTY4NDRBOEIyODE4QjFEMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NEbXBQYXRVVENsdi1oUTBWb1JLaXln
WXNkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02
MzkwLTQxYjUtODJhMC1mMGQwMmMwM2EyYzYvNy8wODM5QTkzREFCNTQ0QzI5NkZG
QTE0MzQ1Njg0NEE4QjI4MThCMUQwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnjhmSmUWJwYEnPr2vVnQ
s4LcculrnacuWXi4MNXYkyzMps6f0gSKOYFMhmbpao7Nnqhvpwv9ZASgUBPSx/vf
scYGC36GvPyoe4hqgYfi+wsmtQyG+2ZF3I5Rn7PXT5IrLGVV+ZfWvQacprIVtIjL
t1YdhesUnvPHG2yhoJ9cxrOEk5V/MMbKFYa/UPLnLtz+YJVgCvit8nyfON9iN4h4
NqDGkuCoegqihjv2rBV3jezfC2IAwjEkp2qbsG/tNm0B57dWnNEWHmyVp6upDySC
4Ok1B9qgbG3KpoLhrUtlH4O+prjlxl3AOnId2vssazW5sOXFhX4z5+emWfHPQVUQ
rw==
-----END CERTIFICATE-----