This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
File:                     88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft (raw, json)
Hash identifier:          jvu8lP6e6sDsbg+UKQ07Ooe6SpHZVNbPqIQXOn+WR8w=
Subject key identifier:   B2:C2:48:7C:85:F8:C3:78:3A:AD:3E:1E:40:FB:D1:86:8E:23:8E:DB
Authority key identifier: 88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91
Certificate issuer:       /CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
Certificate serial:       27399947F44F408AAAF127CDD5C34C0B0A8F3DB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
Manifest number:          027D
Signing time:             Sat 06 Dec 2025 23:15:12 +0000
Manifest this update:     Sat 06 Dec 2025 23:10:12 +0000
Manifest next update:     Sun 07 Dec 2025 23:36:12 +0000
Files and hashes:         1: 3138352e3234322e3138302e302f32342d3234203d3e203431373230.roa (hash: m2CiuFBjrlRavusUidV8mkbKXKHzyUUUhDYGNFwtBAs=)
                          2: 326130643a623238303a3a2f32392d3239203d3e203431373230.roa (hash: UtcmwgPmmxIsh/ra+btug0leCQZCVTQekME41LiPWtU=)
                          3: 326130643a623238373a656334313a3a2f34382d3438203d3e20323132353136.roa (hash: S10o6lJcne+SfvZMZmd0ndSNpfqn8OsjAJw8rNDdBSw=)
                          4: 326130643a623238373a653930303a3a2f34302d3430203d3e203437313532.roa (hash: YeBU5ew7EbaM3M5c2zGWzk0Q7RzGkO4TGKp/4byQ64k=)
                          5: 326130643a623238373a656330303a3a2f34302d3430203d3e20323038333238.roa (hash: eT5l/HEUwKyeWtm/1X7rr0MrwygNo9k95lPs1zLe884=)
                          6: 326130643a623238303a383130303a3a2f34382d3438203d3e203431373230.roa (hash: ItyIHbG/IJlKjOf6vhLnjpZ9k/lt97Z65upW37DdGzA=)
                          7: 326130643a623238373a656130303a3a2f34302d3430203d3e20323032373034.roa (hash: JNRd26hu5UclLm2ralvA5Swgz/zS0HyqV27DJFHZj6c=)
                          8: AS41720.asa (hash: R9jFblFZaPwUK6Huk1SWnasBO6ka9sffBE6ldnurUoM=)
                          9: 326130643a623238373a646130313a3a2f34382d3438203d3e20323132353339.roa (hash: U56VGJcjuLrEYPpG7oABc/1/udX8BKChn+eBmuJZDts=)
                          10: 326130643a623238373a656530303a3a2f34302d3430203d3e20323038333238.roa (hash: Q6Io7mv8dNkJZap1oGvqDaJWxZcBIoRNlU5W1SfkDVo=)
                          11: 326130643a623238373a656230303a3a2f34302d3430203d3e20323133373039.roa (hash: Nk6ANHp8DkJz6kDCL9bvYoWgqeyO4UOw/aVOiTsobgk=)
                          12: 3138352e3234322e3138312e302f32342d3234203d3e203431373230.roa (hash: BJe1bO6YYCEXeriSlULaZwS25Q4hRdnweRF5hyXEuDY=)
                          13: 326130643a623238373a646430303a3a2f34302d3430203d3e20323136333039.roa (hash: mpzPSr1CBW6Ka5Te0DE52rLBHWk7ArDQlInbkbsiPzA=)
                          14: 326130643a623238373a646130303a3a2f34382d3438203d3e20323135313436.roa (hash: BOfTSY7wWayFslIYZyC++f09YnW0ZvOoQVsy6AzQanA=)
                          15: 88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl (hash: PU1y3LDmUZ40foTj82TkYFVnszupCWElP9TMAH9aDIE=)
                          16: 3138352e3234322e3138322e302f32342d3234203d3e203431373230.roa (hash: gAYzs7DeTkU9g1RDUiQKlOcpyqQALQV1LLqH3P6H/bU=)
                          17: 326130643a623238373a656334323a3a2f34382d3438203d3e20323134393235.roa (hash: JAmgJM2VGcbQzWkOuFvV1aRU7IhMtvcEw/0vm9hTp3I=)
                          18: 326130643a623238373a653966663a3a2f34382d3438203d3e20323038373533.roa (hash: kmFg1Ubyi8msuCXkZq9wTUwo9VmgSHMiCqLO0oSubS4=)
                          19: 326130643a623238373a646164303a3a2f34342d3434203d3e20323038343337.roa (hash: Lh+NThTArglnDdFNJgAbksxydedvZ3VhoYilxW6dgHQ=)
                          20: 3138352e3234322e3138332e302f32342d3234203d3e203431373230.roa (hash: V4bF3gDy6FE6zlNg9r0xUvpdAXLZEuLnN1FQtQz0KTM=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:29:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:39:99:47:f4:4f:40:8a:aa:f1:27:cd:d5:c3:4c:0b:0a:8f:3d:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88cdd9c193da9185a4ac15b2ade875fe97b6f491
        Validity
            Not Before: Dec  6 23:10:12 2025 GMT
            Not After : Dec  7 23:36:12 2025 GMT
        Subject: CN=B2C2487C85F8C3783AAD3E1E40FBD1868E238EDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:92:7b:29:fa:c6:10:ee:2a:b0:bb:d7:53:bc:
                    b7:4d:a8:c1:48:65:fe:3c:bb:5c:cd:81:3b:ae:0a:
                    49:f4:2d:29:f2:de:03:e7:85:90:71:1a:de:1a:55:
                    5d:c6:77:54:5c:e9:cc:cd:cf:10:5e:4d:ca:cd:69:
                    ad:7b:79:50:b4:87:d8:9c:b2:ae:9b:82:57:8a:45:
                    8a:bb:a6:86:6d:05:1f:f6:0c:99:33:1a:31:95:65:
                    cb:14:94:26:be:17:c6:c2:82:8f:3d:18:8e:0d:85:
                    34:89:fc:8e:26:8e:a6:78:68:45:c1:41:2d:28:5d:
                    57:f2:c0:8b:4c:e6:c9:44:40:04:f0:39:c4:96:f2:
                    2e:5f:bf:a5:72:38:cd:48:a5:2b:5a:ab:5a:60:97:
                    1b:f2:df:c6:a9:83:ed:87:73:ec:3d:5a:d0:80:2f:
                    e4:c6:98:33:f7:17:f8:3e:86:0e:f9:33:57:db:d8:
                    c7:a7:10:12:b8:7e:3d:40:0e:76:d8:9e:d2:cf:74:
                    00:94:50:4f:34:c9:3a:22:1c:c8:73:f4:1d:b6:6f:
                    09:0a:99:06:ad:a3:6e:02:f3:b1:48:54:f6:05:2d:
                    7f:6a:ec:31:fb:26:6b:c3:f3:e8:af:1a:5c:28:f6:
                    c3:6f:6e:95:b5:f4:39:17:03:1c:df:df:9f:33:49:
                    2b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:C2:48:7C:85:F8:C3:78:3A:AD:3E:1E:40:FB:D1:86:8E:23:8E:DB
            X509v3 Authority Key Identifier:
                keyid:88:CD:D9:C1:93:DA:91:85:A4:AC:15:B2:AD:E8:75:FE:97:B6:F4:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iM3ZwZPakYWkrBWyreh1_pe29JE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e6aff234-61c5-4290-8a6d-5f2b9027322f/0/88CDD9C193DA9185A4AC15B2ADE875FE97B6F491.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:3c:ad:da:e3:2c:e9:dd:8a:b7:7d:8b:c4:1a:d8:b9:84:89:
         f9:b2:d7:92:15:7c:52:86:db:d3:3e:75:c3:65:00:52:ed:57:
         10:af:44:7c:41:f4:52:33:e3:2c:af:84:58:5d:27:1c:c8:9c:
         3f:90:49:29:eb:8b:29:bf:2d:41:2c:2a:31:23:b9:43:09:b5:
         82:fe:12:7b:76:cd:25:d3:20:6d:89:2a:5f:0b:c9:bd:f9:4d:
         16:d4:18:84:2a:c7:71:70:c4:ae:01:94:e8:66:b1:5e:5f:85:
         1a:84:48:6e:05:64:6d:ae:9e:20:79:b3:2e:75:64:41:de:2b:
         67:09:d7:c4:2c:23:99:55:b5:1d:f0:51:f6:ee:43:d2:69:d0:
         55:06:89:66:f3:7e:0c:c1:8d:b9:ea:2b:7f:20:75:10:35:8d:
         76:4e:b5:6d:fa:91:01:e6:0d:c3:a1:59:4f:ec:0b:2d:33:a4:
         f0:04:20:e6:27:42:4d:0b:dc:11:17:79:0b:55:3f:30:e9:2f:
         76:05:b4:41:7e:6c:a6:ca:76:77:f6:75:be:fd:e3:36:8e:e7:
         a0:92:d4:fd:39:51:e8:5f:20:20:c9:a9:ae:77:74:cc:32:cd:
         f6:71:82:fb:74:e7:30:ab:f5:21:37:29:70:2d:af:b4:68:3a:
         58:a4:08:8a
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUJzmZR/RPQIqq8SfN1cNMCwqPPbkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhjZGQ5YzE5M2RhOTE4NWE0YWMxNWIyYWRlODc1ZmU5
N2I2ZjQ5MTAeFw0yNTEyMDYyMzEwMTJaFw0yNTEyMDcyMzM2MTJaMDMxMTAvBgNV
BAMTKEIyQzI0ODdDODVGOEMzNzgzQUFEM0UxRTQwRkJEMTg2OEUyMzhFREIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZknsp+sYQ7iqwu9dTvLdNqMFI
Zf48u1zNgTuuCkn0LSny3gPnhZBxGt4aVV3Gd1Rc6czNzxBeTcrNaa17eVC0h9ic
sq6bgleKRYq7poZtBR/2DJkzGjGVZcsUlCa+F8bCgo89GI4NhTSJ/I4mjqZ4aEXB
QS0oXVfywItM5slEQATwOcSW8i5fv6VyOM1IpStaq1pglxvy38apg+2Hc+w9WtCA
L+TGmDP3F/g+hg75M1fb2MenEBK4fj1ADnbYntLPdACUUE80yToiHMhz9B22bwkK
mQato24C87FIVPYFLX9q7DH7JmvD8+ivGlwo9sNvbpW19DkXAxzf358zSStNAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUssJIfIX4w3g6rT4eQPvRho4jjtswHwYDVR0j
BBgwFoAUiM3ZwZPakYWkrBWyreh1/pe29JEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZTZhZmYyMzQtNjFjNS00MjkwLThhNmQtNWYyYjkwMjcz
MjJmLzAvODhDREQ5QzE5M0RBOTE4NUE0QUMxNUIyQURFODc1RkU5N0I2RjQ5MS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNM1p3WlBha1lXa3JCV3lyZWgxX3Bl
MjlKRS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lNmFmZjIzNC02
MWM1LTQyOTAtOGE2ZC01ZjJiOTAyNzMyMmYvMC84OENERDlDMTkzREE5MTg1QTRB
QzE1QjJBREU4NzVGRTk3QjZGNDkxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARTyt2uMs6d2Kt32LxBrY
uYSJ+bLXkhV8Uobb0z51w2UAUu1XEK9EfEH0UjPjLK+EWF0nHMicP5BJKeuLKb8t
QSwqMSO5Qwm1gv4Se3bNJdMgbYkqXwvJvflNFtQYhCrHcXDErgGU6GaxXl+FGoRI
bgVkba6eIHmzLnVkQd4rZwnXxCwjmVW1HfBR9u5D0mnQVQaJZvN+DMGNueorfyB1
EDWNdk61bfqRAeYNw6FZT+wLLTOk8AQg5idCTQvcERd5C1U/MOkvdgW0QX5spsp2
d/Z1vv3jNo7noJLU/TlR6F8gIMmprnd0zDLN9nGC+3TnMKv1ITcpcC2vtGg6WKQI
ig==
-----END CERTIFICATE-----
Generated at Sun Dec 7 02:17:54 2025 by rpki-client