This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
File:                     F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft (raw, json)
Hash identifier:          rkrf8scZdhv8KRORhjT5lZJyz9NBJw1tWeMG9DhfaU0=
Subject key identifier:   03:EC:11:2C:E0:3D:E1:68:E1:4F:1A:8E:0D:2B:B5:15:D0:1E:60:2F
Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
Certificate issuer:       /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Certificate serial:       1E873B8F6D2DB97891A5A543438A069665EFC24C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
Manifest number:          01DA
Signing time:             Sat 06 Dec 2025 03:51:17 +0000
Manifest this update:     Sat 06 Dec 2025 03:46:17 +0000
Manifest next update:     Sun 07 Dec 2025 06:52:17 +0000
Files and hashes:         1: 3130392e3233342e3231312e302f32342d3234203d3e203133333335.roa (hash: Ej1HuQzuhYe60A2HNErPZLUdfpH5EaYPpZ+PpBEwVxY=)
                          2: 3137382e3133322e3139382e302f32342d3234203d3e203133333335.roa (hash: 6TrR9eiRNzBfJRrubefTFudn86wqW7t6u+0cIxHNR5g=)
                          3: 352e3232362e3138392e302f32342d3234203d3e2039333034.roa (hash: KMYDoKnPWH3TUSOlAA/wzDsC66Y3O5PlUt+i9WMB8YA=)
                          4: 3130392e3233342e3231342e302f32342d3234203d3e203433363431.roa (hash: 6BGcWOFPHM6AYGamfRs+s+1VsWvQIYZ1oxiJHAvfJjg=)
                          5: 3130392e3233342e3230392e302f32342d3234203d3e203235313630.roa (hash: 4qmNKGx6VCIK53hbSqHwJPgKKMACqFJu608tkfoDU90=)
                          6: 352e3232362e3138362e302f32342d3234203d3e203633303233.roa (hash: kysMqqfL+cxQFiZ9hx+MYhVVLOWVsGxNP3RzuLn0/y4=)
                          7: 3137382e3133322e3139342e302f32342d3234203d3e2033333230.roa (hash: fQsEWjsrThcFlJLP0H4ir/IvOeNDAQWZ1RZpyw7wV08=)
                          8: 3130392e3233342e3230392e302f32342d3234203d3e20333935373933.roa (hash: o3GE/oY8MCJAGEjtcPLWPVhOZbFRZAMmde/X42j4j+s=)
                          9: 3130392e3233342e3231302e302f32342d3234203d3e203432383331.roa (hash: XdAkV6zbkuI1AZDLksTC73fyYmD1RaBTy+I3AGFuaxA=)
                          10: 3137382e3133322e3139332e302f32342d3234203d3e2033333230.roa (hash: oI+z5B0JaicbPoA0ktNCShJBGRgRTGuhGcC7A8+Ru9U=)
                          11: 352e3232362e3138372e302f32342d3234203d3e203331383938.roa (hash: kBpq1LEvwgTf4WM51jxpYydvFyszuazgeravGzXETJo=)
                          12: 3130392e3233342e3230382e302f32342d3234203d3e203331383938.roa (hash: b3VPqm78d32upkRS45HOejDpaZzakM7RvUm8zYxxirQ=)
                          13: 3137382e3133322e3139382e302f32342d3234203d3e20323133393230.roa (hash: 5LOGXsAFfY8MpN+3dgrjf5uTyIh00nk/J0/MSXxVmy4=)
                          14: 3137382e3133322e3139352e302f32342d3234203d3e20313335333931.roa (hash: RVvsf+GbQ+gvRF/WRSFeBmTdyh0atmXnd8DAVmdlYaw=)
                          15: 352e3232362e3139302e302f32342d3234203d3e20313337353137.roa (hash: dSlf5pGXbGsGZE5EEAyZeM/B2DRLa5hIPls1KRkA5S4=)
                          16: 352e3232362e3139312e302f32342d3234203d3e20323135323338.roa (hash: UAeHXbW3QhFNKys+iIRYQQp2rK+CbLJVmAbT44zmQ1k=)
                          17: 3137382e3133322e3139392e302f32342d3234203d3e203631333137.roa (hash: g03b1IthT7R6emRcKoovUUAfL6xJm+JexZ6oxCLs8E4=)
                          18: 3130392e3233342e3231322e302f32342d3234203d3e20313937353337.roa (hash: Lxa7aR1NsNsgX0Y0Me+SOrl9Sd6ODfPmrUUHY7uRFAg=)
                          19: 3137382e3133322e3139362e302f32342d3234203d3e20333933393432.roa (hash: D28ld5kVJceea0qzm5GNZqptmPyuFgFAFujny6boKiE=)
                          20: 352e3232362e3138352e302f32342d3234203d3e2034363337.roa (hash: xGDSj9rMMdhGkci1rj9QS/c2p6IRznTgPF56svMZjZY=)
                          21: 352e3232362e3138382e302f32342d3234203d3e20313532313739.roa (hash: nFzeEleWTSIYtIbjgNdPg9c+CwbgHF8u+W2VGtxEBpQ=)
                          22: 3137382e3133322e3139322e302f32342d3234203d3e203136353039.roa (hash: 0XlqzvD5WZeVhzrMIb+ArV6j60KVoqxW88qIB/mg2yk=)
                          23: 3130392e3233342e3231352e302f32342d3234203d3e20393733.roa (hash: 7XlPdZ+5k5dznfPMoT3Ni5uRfyL41Likgo5fplEaDTA=)
                          24: F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl (hash: VbYxvJ4GEQ3nU1/0HEDIFYZBk7EiTltbakKQg3NvpWY=)
                          25: 3137382e3133322e3139322e302f32342d3234203d3e203134363138.roa (hash: UgtgsSF4DmUx+FqAs5WV6TWI9fyKhqfkEeJgaHpzYEc=)
                          26: 3130392e3233342e3231332e302f32342d3234203d3e203434323133.roa (hash: pWCIuSrDYwp+tan25QY6TeO9jMNRWP/W0zj94P0620Y=)
                          27: 352e3232362e3138342e302f32342d3234203d3e20313534303439.roa (hash: H9hlRxAktpjIeT3DJhaD4nFRiEtoUGveoYH/KllFDKE=)
                          28: 3137382e3133322e3139382e302f32342d3234203d3e20323635393139.roa (hash: uhM+/0v8HioS/qE+KkDqR673YS11oQr5aznZkyp/yx4=)
                          29: 3137382e3133322e3139372e302f32342d3234203d3e2033333230.roa (hash: MuzLKtyseOT68ju0FOjjeN3pxilqG43fi3IvFyF1hyA=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:87:3b:8f:6d:2d:b9:78:91:a5:a5:43:43:8a:06:96:65:ef:c2:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
        Validity
            Not Before: Dec  6 03:46:17 2025 GMT
            Not After : Dec  7 06:52:17 2025 GMT
        Subject: CN=03EC112CE03DE168E14F1A8E0D2BB515D01E602F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:be:0d:44:a3:c5:10:c8:99:a7:c2:79:49:73:
                    5e:2d:aa:c8:dd:b0:f4:5d:04:f1:c4:fd:1c:7a:15:
                    89:cc:8f:77:6e:5f:cf:4b:4a:ee:99:ac:a3:11:df:
                    ea:1d:79:44:05:42:39:ce:cc:e7:52:0f:f0:c4:30:
                    a3:31:af:11:3f:7d:ab:f6:ac:b5:32:c0:7b:3e:f2:
                    76:29:5d:47:00:26:1c:a4:b0:7d:49:a0:24:db:0c:
                    dc:82:dd:23:8a:19:5e:10:32:3e:e3:58:23:2c:ad:
                    a6:b9:fd:bb:19:1a:e6:01:c9:09:92:fc:13:91:8d:
                    64:ab:fa:65:95:58:21:c0:48:5b:69:a5:c8:f8:55:
                    e6:bd:80:09:b9:b2:8c:bc:ab:17:a5:7d:c7:70:a6:
                    a8:98:ce:1e:65:48:72:2f:2b:e0:8a:94:c3:22:f9:
                    28:94:94:d6:84:14:0a:81:80:42:1f:6f:06:71:6b:
                    6e:29:53:10:26:82:75:30:01:26:42:24:fe:c4:cc:
                    1c:00:af:20:ba:b5:05:db:a0:bf:e6:9f:0c:12:7d:
                    20:11:91:f2:1c:59:e5:65:c4:b8:db:f6:25:53:92:
                    42:95:4b:e0:b1:d5:4f:50:e2:0e:69:3f:8c:6c:25:
                    94:64:76:87:d6:ad:d4:3c:c6:75:ca:46:16:4f:ad:
                    89:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:EC:11:2C:E0:3D:E1:68:E1:4F:1A:8E:0D:2B:B5:15:D0:1E:60:2F
            X509v3 Authority Key Identifier:
                keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:3c:7d:df:42:58:9a:dd:60:28:07:43:c3:44:50:13:09:8f:
         9f:c5:63:69:a4:d3:2b:c7:b2:b4:d4:96:43:e5:4f:94:6b:cc:
         ab:04:4b:0c:91:fd:70:1e:f0:d5:d8:41:91:fe:c0:75:ad:93:
         5c:b7:2c:ea:5c:17:21:16:6b:57:98:aa:ef:5d:e2:47:c4:8d:
         fe:b7:42:8c:9b:5d:ac:49:b1:05:20:12:36:b8:21:b0:c5:c3:
         3f:94:26:4c:ae:25:ac:2d:ad:aa:39:5e:b5:62:2e:9f:c1:82:
         c7:4a:ac:1a:3c:6e:9a:4c:05:86:aa:68:48:6f:2a:f0:01:7d:
         08:d9:dc:77:02:85:80:42:58:d0:35:39:ec:a4:eb:15:c4:32:
         42:46:5d:ae:41:ff:f9:06:b8:32:73:63:34:20:fd:2d:16:11:
         19:ba:a4:8e:11:78:69:e8:46:c8:fa:db:dc:c3:d1:92:77:db:
         32:03:bf:bd:22:8a:46:96:34:c2:a1:24:27:7a:48:e8:74:ed:
         44:b8:1f:9b:c5:94:92:41:92:05:3b:ab:1a:9c:fc:18:9c:a7:
         a3:5e:46:69:9c:3d:11:8b:af:8b:bf:39:16:a1:38:53:bc:4d:
         2a:77:d8:11:8f:c2:6a:31:3b:31:43:04:7f:20:35:2a:44:09:
         1d:37:50:65
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUHoc7j20tuXiRpaVDQ4oGlmXvwkwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZjc2OGZmNmU2ODE4NThjMGVjMTlmM2E5M2ZhMTc5MmNk
MTZjZWVkMzAeFw0yNTEyMDYwMzQ2MTdaFw0yNTEyMDcwNjUyMTdaMDMxMTAvBgNV
BAMTKDAzRUMxMTJDRTAzREUxNjhFMTRGMUE4RTBEMkJCNTE1RDAxRTYwMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2vg1Eo8UQyJmnwnlJc14tqsjd
sPRdBPHE/Rx6FYnMj3duX89LSu6ZrKMR3+odeUQFQjnOzOdSD/DEMKMxrxE/fav2
rLUywHs+8nYpXUcAJhyksH1JoCTbDNyC3SOKGV4QMj7jWCMsraa5/bsZGuYByQmS
/BORjWSr+mWVWCHASFtppcj4Vea9gAm5soy8qxelfcdwpqiYzh5lSHIvK+CKlMMi
+SiUlNaEFAqBgEIfbwZxa24pUxAmgnUwASZCJP7EzBwAryC6tQXboL/mnwwSfSAR
kfIcWeVlxLjb9iVTkkKVS+Cx1U9Q4g5pP4xsJZRkdofWrdQ8xnXKRhZPrYndAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUA+wRLOA94WjhTxqODSu1FdAeYC8wHwYDVR0j
BBgwFoAU92j/bmgYWMDsGfOpP6F5LNFs7tMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMGNjMDg3MzctOTI2Ny00MDJhLTk5ZDQtN2FhYWZlYTQ0
NGVkLzAvRjc2OEZGNkU2ODE4NThDMEVDMTlGM0E5M0ZBMTc5MkNEMTZDRUVEMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkyal9ibWdZV01Ec0dmT3BQNkY1TE5G
czd0TS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wY2MwODczNy05
MjY3LTQwMmEtOTlkNC03YWFhZmVhNDQ0ZWQvMC9GNzY4RkY2RTY4MTg1OEMwRUMx
OUYzQTkzRkExNzkyQ0QxNkNFRUQzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqjx930JYmt1gKAdDw0RQ
EwmPn8VjaaTTK8eytNSWQ+VPlGvMqwRLDJH9cB7w1dhBkf7Ada2TXLcs6lwXIRZr
V5iq713iR8SN/rdCjJtdrEmxBSASNrghsMXDP5QmTK4lrC2tqjletWIun8GCx0qs
GjxumkwFhqpoSG8q8AF9CNncdwKFgEJY0DU57KTrFcQyQkZdrkH/+Qa4MnNjNCD9
LRYRGbqkjhF4aehGyPrb3MPRknfbMgO/vSKKRpY0wqEkJ3pI6HTtRLgfm8WUkkGS
BTurGpz8GJyno15GaZw9EYuvi785FqE4U7xNKnfYEY/CajE7MUMEfyA1KkQJHTdQ
ZQ==
-----END CERTIFICATE-----
Generated at Sat Dec 6 06:58:12 2025 by rpki-client