This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft
File:                     24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft (raw, json)
Hash identifier:          ogTHoOqp4nA2K8rbj4AqngCbE+ZBwNMtaWV1AluCCrQ=
Subject key identifier:   98:A0:90:77:B9:DC:09:50:DC:88:23:22:2C:6D:B2:C1:B5:DB:CC:4D
Authority key identifier: 24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00
Certificate issuer:       /CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00
Certificate serial:       2A7E490852D9EAF9C18AA3658F1AAEDDECB1D4D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft
Manifest number:          04FD
Signing time:             Sat 06 Dec 2025 01:46:17 +0000
Manifest this update:     Sat 06 Dec 2025 01:41:17 +0000
Manifest next update:     Sun 07 Dec 2025 03:36:17 +0000
Files and hashes:         1: 34362e3138332e32342e302f32342d3234203d3e20313432313436.roa (hash: U6sIE1tc5XNg8Vw7jnbxLLCNANnB9wH3voxb1FhuZwc=)
                          2: 34362e3138332e32352e302f32342d3234203d3e203633303233.roa (hash: 4jq0qwMJqWtfRUuzz3vPyKHtua4FM5/8Y3cvVGfTKBM=)
                          3: 24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl (hash: 6t/egnn0fj2xDYud36On7IttV9Dyq63xoWVFvdcZB04=)
                          4: 34362e3138332e32382e302f32342d3234203d3e203631333137.roa (hash: EQc8ZSWRYu3w3yABE1KT+uLZnchUtUDhUBMKc9gsz8U=)
                          5: 34362e3138332e32362e302f32342d3234203d3e2039303039.roa (hash: ckwThy9Ftd6Jb/nTbj53dd12b3F3RSR9Etp8JSW5svM=)
                          6: 34362e3138332e32392e302f32342d3234203d3e2039333034.roa (hash: 4l3m4JRRITIOBfhSXA3v4T1Tc1t3gHbU2TsBgQabcVg=)
                          7: 34362e3138332e33302e302f32342d3234203d3e203631333137.roa (hash: pxnqedD3kuwz1m+9x0q4e9R46P3xXGAP6tM7JZr4zqQ=)
                          8: 34362e3138332e32352e302f32342d3234203d3e20323132323338.roa (hash: lxi2m0tJ4IwcIv1Qu/mxuwgzf8BGdtHdxfKNM9mKZEQ=)
                          9: 34362e3138332e32372e302f32342d3234203d3e20323132323338.roa (hash: MBTQi0HOcbTwY/4fQl+vTOHLOQ2FmR/EhBIZ6Dj3u14=)
                          10: 34362e3138332e33312e302f32342d3234203d3e20313734.roa (hash: 3Z7e+5TwzBef1b9VYHjpmL+5jzamN8gXYO/wLKWP7lA=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:7e:49:08:52:d9:ea:f9:c1:8a:a3:65:8f:1a:ae:dd:ec:b1:d4:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00
        Validity
            Not Before: Dec  6 01:41:17 2025 GMT
            Not After : Dec  7 03:36:17 2025 GMT
        Subject: CN=98A09077B9DC0950DC8823222C6DB2C1B5DBCC4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:25:13:ab:a7:36:02:a0:47:50:a9:43:a0:a4:
                    da:b3:0f:7c:46:20:4a:eb:4d:3d:58:1e:bf:9e:d5:
                    7d:d5:14:9a:7f:87:0e:0e:c1:2e:5e:2c:3a:cc:aa:
                    61:26:e9:b0:65:7d:64:ad:ce:c4:bb:95:b9:17:32:
                    ae:cf:7b:08:bd:a6:ed:40:e5:b3:ae:94:2d:62:65:
                    9f:7d:36:4b:a2:ab:59:a9:05:40:d4:36:42:33:16:
                    b2:a0:3e:e9:5b:6c:ad:6b:65:3e:63:8a:e8:b1:1b:
                    cc:5d:a0:03:82:68:df:9b:b4:86:a1:8e:21:59:75:
                    d2:26:f7:0c:e3:1f:f9:59:a7:e0:fe:8f:44:bb:cf:
                    a3:e5:07:68:68:cf:44:12:94:66:26:ad:f9:62:c9:
                    9f:b3:59:f9:a4:f5:ab:3b:f0:56:b6:8d:af:06:6d:
                    64:e2:22:9d:83:44:e1:db:2f:9c:98:31:c9:57:df:
                    e9:73:39:36:08:31:cb:d3:c2:75:c8:1f:68:b5:87:
                    84:b2:d8:d8:34:6b:43:01:a6:57:e4:d5:e1:bb:cf:
                    ed:bf:db:a5:f2:73:34:2f:15:3f:01:c0:28:b7:cb:
                    db:81:ab:12:59:9e:a6:67:dc:4b:58:31:68:a7:b1:
                    ea:c7:16:63:73:e6:ee:65:5e:50:49:a3:35:8a:2e:
                    f3:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:A0:90:77:B9:DC:09:50:DC:88:23:22:2C:6D:B2:C1:B5:DB:CC:4D
            X509v3 Authority Key Identifier:
                keyid:24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:17:0e:32:81:39:6b:41:7a:82:b1:22:81:4f:5f:28:ff:59:
         ab:cd:c5:f6:72:35:0c:a7:59:69:09:0f:51:9f:5b:62:3f:8d:
         7e:eb:57:83:0e:36:1d:ff:c0:7a:38:48:f5:f7:78:0a:1d:95:
         df:2f:42:d0:32:6c:7e:89:03:cb:b9:76:01:13:b5:41:1b:af:
         49:af:aa:dd:97:10:82:80:63:1d:bf:e1:53:07:eb:07:a7:8c:
         f6:dc:28:45:c5:1b:90:d8:08:e4:b1:36:6b:9d:82:67:6d:c0:
         a9:68:9e:62:ac:a0:72:c8:e4:e7:e9:9c:de:b7:99:83:2a:80:
         b0:ee:e1:9a:e9:6e:a8:2e:30:04:15:2f:ec:e0:fe:9e:11:64:
         6d:f2:28:16:d6:a7:11:fe:6b:95:16:9c:f5:b2:98:b4:97:2d:
         90:7e:99:e6:06:2c:b7:00:ef:12:af:af:3a:dd:c0:06:56:f4:
         04:88:60:1a:56:bb:ac:54:35:ad:b3:7e:09:ac:6d:d5:fc:a5:
         36:02:e3:21:6a:0a:fc:38:55:8b:80:9c:0a:6c:30:7b:80:cb:
         ae:eb:73:fa:94:c8:c4:ec:8b:dd:46:2c:31:f2:df:32:52:c9:
         4f:3b:69:ed:29:5e:be:98:09:00:92:b0:1b:a4:9e:6d:ac:76:
         5b:7f:b4:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:46:34 2025 by rpki-client