This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft
File:                     ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft (raw, json)
Hash identifier:          0lnjgY2waC1fKEBikRrPL2Ed39nVxkLGSeR/4MJdLHc=
Subject key identifier:   A9:FC:AA:A2:6D:33:70:AB:25:B4:D4:C0:38:04:46:9C:68:35:9B:6B
Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
Certificate issuer:       /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Certificate serial:       1FCEB400E328E919FF110D148144C3D50C08E727
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft
Manifest number:          04A0
Signing time:             Thu 11 Dec 2025 15:46:37 +0000
Manifest this update:     Thu 11 Dec 2025 15:41:37 +0000
Manifest next update:     Fri 12 Dec 2025 18:07:37 +0000
Files and hashes:         1: 38392e34322e3131302e302f32342d3234203d3e203631333137.roa (hash: VsyHwXGnPa9jTtnErp0xUSN9uxae8b2L7otiSzP7S2M=)
                          2: 34362e3130322e3233332e302f32342d3234203d3e203233383635.roa (hash: e+SnYwDfi/1yFie63JthDdkoXVxOgCTXFxhh6sC9If8=)
                          3: 39332e3131332e32352e302f32342d3234203d3e20323134323039.roa (hash: JoDR/IGOmrYGEwu1+N5VZtYwQlvGeImnksk34tLzkIU=)
                          4: 3139332e3230332e3230352e302f32342d3234203d3e203439343638.roa (hash: miGCXloG7luQuuhAJwRZ+kv5aIjNiE2JcKseZN1V68A=)
                          5: ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl (hash: kLE2LCnOvmBxj2wDomu0jYGPpp8rOyJhhQCAoGGnJH4=)
                          6: 39332e3131332e3231322e302f32342d3234203d3e203631333137.roa (hash: Mffmj9tigk0AvK8qUYEb5eCtUKaC20yQi7QyJq/JmDA=)
                          7: 3139332e3230332e3230342e302f32342d3234203d3e203439343638.roa (hash: QWu7fHTZ3PYuiSQam7CYDAJC5NNcXBc6g5huH6iiI3k=)
                          8: 38392e34322e3131312e302f32342d3234203d3e203631333137.roa (hash: T+9QQX64dOYanRzHKI9rhWnUyaZt9GgRQXrvhvIBrgs=)
                          9: 37372e38312e3133372e302f32342d3234203d3e20333939363431.roa (hash: xL9s9lGr6Y1GcoWPNRfoiIg5P1LyMl92tRndWKMRxvY=)
                          10: 37372e38312e3133382e302f32342d3234203d3e203136323736.roa (hash: QSH/lbFqFfB0kjPH8NXF1ssxXFJMA3tQTCmwcMlSfAQ=)
                          11: 34362e3130322e3233322e302f32342d3234203d3e203231383539.roa (hash: xmss+X7N7YEJYzsofqDqdmVc6hQlkz4fI2F5jzOV+w0=)
                          12: 3139332e3230332e3230342e302f32332d3233203d3e203439343638.roa (hash: SUmtopgHH8Nww5p/xP0ODKmemVjaFc93EIAThLWzp7U=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 18:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:ce:b4:00:e3:28:e9:19:ff:11:0d:14:81:44:c3:d5:0c:08:e7:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
        Validity
            Not Before: Dec 11 15:41:37 2025 GMT
            Not After : Dec 12 18:07:37 2025 GMT
        Subject: CN=A9FCAAA26D3370AB25B4D4C03804469C68359B6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ed:31:29:8a:09:c9:5e:00:a2:eb:3c:d6:06:
                    0b:4b:44:75:e1:08:29:d0:6f:24:92:ce:ef:f1:a6:
                    c4:83:34:61:9e:4f:ac:4d:60:b8:8a:c4:0a:57:f3:
                    e1:19:7a:69:90:bf:12:76:6e:3d:2b:b4:c1:d1:7b:
                    4e:ad:68:4e:13:ba:5d:15:d9:e5:db:f5:26:da:42:
                    45:e5:57:b8:1e:96:9a:b1:05:cc:e1:82:1a:2c:92:
                    32:70:d8:d5:e3:25:99:2a:56:95:74:1e:05:d6:d0:
                    b1:cd:63:e7:20:2c:39:75:00:14:34:39:58:82:26:
                    aa:a1:6d:54:5c:53:cf:0e:7d:cf:84:5a:f3:d7:23:
                    b6:e4:69:ef:0a:a4:65:60:a4:30:26:47:43:30:d3:
                    99:99:f2:a1:32:1d:41:b6:56:84:7e:dc:0f:29:ce:
                    df:d8:8b:24:d0:b5:18:53:cd:83:4f:31:bd:c7:d4:
                    bb:38:75:9d:62:3a:bb:03:48:b6:3d:7a:72:72:e5:
                    ca:2f:20:07:84:4d:4e:51:95:ba:26:da:57:d3:7e:
                    65:60:ac:d6:e9:c0:7b:bf:62:1e:46:45:08:04:4c:
                    d8:d7:62:d4:95:0a:59:b1:d6:6c:ca:32:af:a5:47:
                    86:8a:a3:b4:0c:8d:ae:4d:17:7d:dc:2c:17:5e:b1:
                    98:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:FC:AA:A2:6D:33:70:AB:25:B4:D4:C0:38:04:46:9C:68:35:9B:6B
            X509v3 Authority Key Identifier:
                keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:2e:0d:a4:a3:17:d7:70:30:38:13:b8:5e:93:72:25:6a:91:
         d5:22:76:10:2d:ac:74:77:e7:d7:ca:99:cd:63:43:89:50:d7:
         c3:c2:08:e7:a4:5a:e7:ed:c7:16:1a:a9:a4:51:d4:03:dc:b2:
         77:26:39:ca:18:82:a5:e1:c2:57:e0:f8:72:cb:63:49:39:e7:
         83:65:7f:ea:f4:a0:90:b7:55:f1:f3:86:bf:a3:52:40:aa:74:
         fc:a0:25:e7:a2:b8:25:e6:e4:69:ce:65:57:5b:01:96:5a:1f:
         08:bb:f6:78:57:c0:43:df:41:ed:f8:f9:a1:bc:08:51:cf:c1:
         be:06:bd:35:b5:35:bc:39:6c:0b:16:18:d1:28:11:7f:60:12:
         55:af:74:cd:6e:f6:50:fc:a7:a1:05:ba:1a:5c:13:f3:72:df:
         af:86:2d:30:6b:e5:9b:c5:7d:77:55:1d:1b:95:d3:af:25:f8:
         7f:1c:81:16:55:63:d7:a1:ac:67:b7:f0:94:4d:b7:52:40:08:
         38:00:52:a8:1b:31:e4:20:f5:fb:da:da:9a:5e:de:e0:2d:20:
         16:98:4b:29:fa:46:9f:c0:7b:f8:5a:f8:1c:2a:b0:70:88:7b:
         3a:ae:81:20:89:ef:65:93:43:e4:1e:11:06:45:91:33:34:8a:
         f1:f9:ce:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 01:16:11 2025 by rpki-client