This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
File:                     4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft (raw, json)
Hash identifier:          mx4jPNzRVddQLucav0p0He9xXf808AjJy7yqZuiIkEY=
Subject key identifier:   7C:99:3C:BB:5F:8F:13:01:F1:B2:AE:F5:9F:2A:F7:9E:A8:1F:06:24
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Certificate issuer:       /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial:       622A50E987AF03E73A5767A3EE9408D63AA57123
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
Manifest number:          3C
Signing time:             Fri 05 Dec 2025 21:51:17 +0000
Manifest this update:     Fri 05 Dec 2025 21:46:17 +0000
Manifest next update:     Sat 06 Dec 2025 22:35:17 +0000
Files and hashes:         1: 3231322e37342e34302e302f32322d3234203d3e20383334.roa (hash: 2AymSG1obDI5Lgxi2X9WGKfsJG40XOBhT+TMpBznMVg=)
                          2: 3138352e3136392e3132312e302f32342d3234203d3e20383334.roa (hash: 5ydZXyEJMLgmPqqodM7OR8o4h7aXX+g+j21lBhF51Hk=)
                          3: 352e3139392e32352e302f32342d3234203d3e20383334.roa (hash: MVErUVWhLRH809b+QYI+5PK9fhqDeaqu1d6Qy8LzR98=)
                          4: 39312e3234362e32362e302f32342d3234203d3e20323039333336.roa (hash: rEAGLVQ5nYAtmkH/uKeHkUcPnM4QU/FZwu/LTkZBgUo=)
                          5: 39312e3234362e32372e302f32342d3234203d3e203235313938.roa (hash: gHC7M+t1lIuQnK9rZvwmCUquDXmZVxO9w2zdBUhCF54=)
                          6: 352e3139392e32362e302f32332d3234203d3e20383334.roa (hash: 1QXdd6mBmXVNffnrIU1AUy68V+ojS5R+WxPDTzSdhBA=)
                          7: 352e3139392e31362e302f32322d3234203d3e20383334.roa (hash: gtGuCR7WqssHrln/Y4e465GTa/RHfpMeR/odre8pN2Y=)
                          8: 3231322e37342e33322e302f32342d3234203d3e20323039333336.roa (hash: FH6FqDXFQ/WAQOta0zaRvwGtWt4jNqdlI61tpxRU34g=)
                          9: 39312e3234362e32372e302f32342d3234203d3e20323035383836.roa (hash: mX462CgFns7W4X+4kzEy9rbR0Uh9rNqKOg71fpqrw7E=)
                          10: 352e3139392e33362e302f32332d3234203d3e20383334.roa (hash: e6C7uP4SsF+Xwc+yfszvXNHVIvJ/eTTJStryEC703oI=)
                          11: 3231322e37342e36322e302f32332d3234203d3e20383334.roa (hash: FhVIH1oqeyWRXelusY7VYX0XcSHjWuRSms602qLYDS8=)
                          12: 3231322e37342e36302e302f32342d3234203d3e203136323736.roa (hash: LfsfjRYplHNXIuKxg8KjUxNxR2TAxr0H5Pi7YQ3PchE=)
                          13: 352e3139392e31352e302f32342d3234203d3e203230343733.roa (hash: oVkiCPiNJRJM/W+z3ndD4pSoOtGs4Qbrd83E+p9HcJU=)
                          14: 3231322e37342e34362e302f32342d3234203d3e20383334.roa (hash: KfJI73ZD+uvgJ48Ob17/ZJXQ7VzBwmqCLnEln/1uBVY=)
                          15: 3138352e3136392e3132302e302f32342d3234203d3e20323035383836.roa (hash: Kl3yirtS/GQk6rUyZlPSoy//aSSwc7ETiQPS/ovJvdA=)
                          16: 3231322e37342e35362e302f32322d3234203d3e20383334.roa (hash: jWFWXkgGEzDyFbGzdlWX2LXoJglHkjfmQtBe6VTHs1U=)
                          17: 3138352e3136392e3132322e302f32342d3234203d3e20323035383836.roa (hash: +LcwJOkmCFcaKrlR2fH3FN/eQNaWZm4nD6af4WT6XXA=)
                          18: 352e3139392e322e302f32342d3234203d3e20383334.roa (hash: fJTauUb3C5ODwA3NEW/7tQUpv1UkXLGVmZVrDQotrds=)
                          19: 352e3139392e31322e302f32332d3234203d3e20383334.roa (hash: w5fYhqiORwySyVzI+lwW/lcap/TpvK9njxSZiAI7jCo=)
                          20: 352e3139392e34382e302f32302d3234203d3e20383334.roa (hash: KQYYTeYecaAjP4TsoYrv2gNBDDrXQX1i6HAjqN6cgos=)
                          21: 352e3139392e33322e302f32322d3234203d3e20383334.roa (hash: wHi/K7jkDZlOgAcLQ2orzAvP6GWa0NTiJ30LAzYTgs0=)
                          22: 352e3139392e32342e302f32342d3234203d3e203230343733.roa (hash: q7+glSxlm2qX+H1QjBKKgOd1wGs12LGnA8QDd8YyJhE=)
                          23: 326130303a313766383a3a2f33322d3634203d3e203439343338.roa (hash: /KtiO33L6se3kHkVpFIPImnjoEV3e3gPcr4HV+lO8sc=)
                          24: 3231322e37342e33382e302f32332d3234203d3e20383334.roa (hash: tbG9527WbTHnWwxz9Yd2tbsmD4sMWr9sPpLCOTleDso=)
                          25: 352e3139392e33382e302f32342d3234203d3e20383334.roa (hash: 0362QmgMfp+pm0iSet6T13/ixlJ04OKieIWwibbcZkk=)
                          26: 352e3139392e302e302f32332d3234203d3e2034373636.roa (hash: fkd1HaVNJf7l0mlOvixuLlNIhfpcobvMqSMFW5i9M+k=)
                          27: 3231322e37342e34342e302f32332d3234203d3e20383334.roa (hash: JzssRFw4LSgndSl0fuLw+ESi/HTgSpnBiMzqJOlTHDc=)
                          28: 352e3139392e33392e302f32342d3234203d3e20323035383836.roa (hash: G0dHN+CXIo4pUkp/sYtiWtOv7C+87LhSJVHOBYplH2Q=)
                          29: 3231322e37342e33342e302f32342d3234203d3e20323035383836.roa (hash: zdBl2MreUW7PfA24XlLpiDTC6G+xxiUpvRgXqSV13PE=)
                          30: 352e3139392e32322e302f32342d3234203d3e203230343733.roa (hash: OZli0DwLI2EHYi071cA1eilY9ouwYPaD3LYrqpRrOGo=)
                          31: 3231322e37342e36312e302f32342d3234203d3e20383334.roa (hash: rat/LL5/H+FNdHGzcg4DPrBChUJGwGzC1U4ONNItvRU=)
                          32: 3231322e37342e34382e302f32312d3234203d3e20383334.roa (hash: Td+J869St+dhm4LWIAGWNXZmf3uOkE9PSOXuPVKIF3U=)
                          33: 3138352e3136392e3132332e302f32342d3234203d3e20323035383836.roa (hash: sDe2VEOoKOG9mo4SeRNP3ZSs87O2mhleKKu6HFE3PpI=)
                          34: 352e3139392e34302e302f32312d3234203d3e20383334.roa (hash: RhmwnUF0evkCBGvNW9Pxo1FbNx1Hwmt7OynFlIb8KEI=)
                          35: 352e3139392e332e302f32342d3234203d3e203235313938.roa (hash: sqhE+ZIkxeIT3WBcQVH8OwR/DpijD0Jp/HrUaOEDhYE=)
                          36: 352e3139392e32382e302f32322d3234203d3e20383334.roa (hash: blzkIaXs4LsOOA2O5xYIWbW5hviQNa505WTGCpw8pB0=)
                          37: 3231322e37342e33362e302f32332d3234203d3e2034373636.roa (hash: +qRI5JDodbfFjoj/U6c37sePKQA9L/nQjiMHpoPan0k=)
                          38: 3231322e37342e33352e302f32342d3234203d3e20323035383836.roa (hash: J4GVIkO6TSYEbQLOirEiQ148hJHkKGgqVur53LKHR+M=)
                          39: 3231322e37342e33332e302f32342d3234203d3e20323136343035.roa (hash: b5R/eMW2JJAKZgMfOBawHgRL0h+fcttLr9lPC/e/oTc=)
                          40: 352e3139392e32332e302f32342d3234203d3e203230343733.roa (hash: 85emnoFIIZEck9qOCD8+fBhi9DyMDr+qHWMNX3Pl9pc=)
                          41: 352e3139392e382e302f32322d3234203d3e20383334.roa (hash: drQZmGogqeo3DDz/7imygJ/8r5KWWZO6Is6TgK1B5n4=)
                          42: 352e3139392e342e302f32322d3234203d3e20383334.roa (hash: 65MqopLjpyM8Mqlpr5SzIvO2zxNR0Tk0bh69luxGgCk=)
                          43: 3138352e3136392e3132302e302f32342d3234203d3e203235313938.roa (hash: NhwNgSRRC4ze1vFyna1H6oipTAX1WYy4vfkJyAyZaok=)
                          44: 352e3139392e31342e302f32342d3234203d3e20383334.roa (hash: Y/R322fr3rA/8G1jlm5vYU4HllA9nyOgFjszd7MIowI=)
                          45: 4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl (hash: 6IcC20HiphOqDhtTAAF1juvQNSNA/lvnd7XagT9TKq0=)
                          46: 3231322e37342e34372e302f32342d3234203d3e20323035383836.roa (hash: w0UpXoKkSl0862d4qInGSxq8jgcZBFr+wgvxyyT4sFI=)
                          47: 352e3139392e332e302f32342d3234203d3e20323035383836.roa (hash: 5o0z6/m5qhC51cnzv2r9K1IxTqAdaDlCpJLCCL1osiI=)
                          48: 3231322e37342e33342e302f32342d3234203d3e203235313938.roa (hash: u+CJFixb/TfQTFiPUcv8M19i1454ALxa1B6lNbpI3Ek=)
                          49: 352e3139392e32302e302f32332d3234203d3e20383334.roa (hash: QvTaZHbJDvGa5lY65f690MXZNG767G5Bd2a5bo5+3Bo=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 22:35:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:2a:50:e9:87:af:03:e7:3a:57:67:a3:ee:94:08:d6:3a:a5:71:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
        Validity
            Not Before: Dec  5 21:46:17 2025 GMT
            Not After : Dec  6 22:35:17 2025 GMT
        Subject: CN=7C993CBB5F8F1301F1B2AEF59F2AF79EA81F0624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c0:5b:59:5f:8c:a5:f0:44:90:5a:e1:9f:b5:
                    d5:c7:93:71:bd:ff:de:2a:69:f0:86:25:c3:d4:b4:
                    2e:f1:e3:19:b2:a5:a8:f3:dc:b4:51:f0:1d:eb:2d:
                    44:d8:dd:d3:8a:a8:15:38:9e:f0:53:66:b1:0c:84:
                    1f:79:f9:b9:21:24:38:85:bb:bc:f7:fb:ec:3f:f7:
                    c0:e4:66:87:45:8a:9b:e2:dc:bf:1f:d5:da:2f:28:
                    71:6f:78:74:e2:95:f9:83:62:12:b8:02:89:07:2e:
                    40:0e:37:32:8e:91:3d:df:58:a8:fc:c1:68:b1:2e:
                    cd:f0:f7:d8:91:5a:e8:32:71:29:b6:04:06:51:7a:
                    bb:07:58:0c:56:ea:bb:90:66:78:39:f7:a9:1a:9b:
                    e3:d7:45:c0:e9:b0:4e:cf:51:0f:bf:4d:c8:ad:c3:
                    ef:5b:ee:2f:38:c8:28:30:f3:51:f9:31:9b:a8:a9:
                    28:f1:c7:f6:6f:9e:18:a0:76:80:16:c6:8f:a9:63:
                    a4:60:61:99:40:2b:78:6e:f5:9c:1c:40:2d:f6:9a:
                    f8:d9:8a:31:ec:d3:ad:35:b8:c1:63:14:e2:d6:da:
                    24:d9:a8:30:74:77:79:c2:ae:39:34:05:17:e8:3b:
                    0d:e9:c6:b6:d8:1c:e3:3f:5d:43:9d:88:cb:83:94:
                    74:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:99:3C:BB:5F:8F:13:01:F1:B2:AE:F5:9F:2A:F7:9E:A8:1F:06:24
            X509v3 Authority Key Identifier:
                keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:b8:8f:3d:b7:65:1e:74:1c:b6:77:63:0b:a0:e9:da:73:cb:
         fd:1d:2b:93:fa:c6:13:64:ab:50:b2:4c:75:1e:c7:2f:11:ed:
         34:b6:20:53:82:17:eb:8d:d7:f1:89:db:ee:17:82:ce:08:2c:
         88:fb:b7:51:b3:0a:fd:4f:8d:2f:e4:ca:a8:3f:0f:3a:bc:fe:
         d5:8a:0a:4a:ec:ad:67:2c:00:b3:12:4f:59:02:ed:74:2a:ab:
         c0:0e:a6:f6:82:4f:2e:04:55:46:12:a6:21:98:f3:14:6b:b7:
         f1:e5:66:e5:bd:89:57:fb:59:84:b1:1e:f8:20:de:22:93:e2:
         59:d2:9f:75:a0:47:99:06:65:aa:d1:7c:37:9c:3e:c7:08:d4:
         2e:cb:50:03:75:c7:4a:bc:d4:60:82:7c:09:2d:f8:e0:10:96:
         8e:dd:3d:e0:02:be:1b:04:9d:17:80:8d:74:43:89:79:d0:f0:
         86:08:33:f9:18:ed:07:bd:45:5c:f5:d2:a3:12:d7:63:e5:a1:
         9d:5a:35:b1:09:4b:f5:f8:17:4a:dc:63:61:97:dd:98:d5:5c:
         40:1c:25:b3:4d:b1:6b:f8:ae:d4:61:51:74:77:a8:5a:5d:d4:
         61:0d:5b:4b:f0:1c:48:a0:6e:60:eb:00:35:01:54:20:c8:18:
         23:15:11:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:42:16 2025 by rpki-client