This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft
File:                     3134EE987E08D8B5583FEEF621A03150C4F35434.mft (raw, json)
Hash identifier:          qYww/mDvyHrStV2gJPBpyC3yB0WXOb2At7A11799xjE=
Subject key identifier:   D2:BB:50:2A:B6:26:9D:A3:5F:B2:7B:C8:81:8E:A5:FB:4A:D7:ED:D6
Authority key identifier: 31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
Certificate issuer:       /CN=3134ee987e08d8b5583feef621a03150c4f35434
Certificate serial:       1F9CAAFA87A5760D7DFDA30E896F78F51C52CD3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft
Manifest number:          0383
Signing time:             Fri 05 Dec 2025 15:12:33 +0000
Manifest this update:     Fri 05 Dec 2025 15:07:33 +0000
Manifest next update:     Sat 06 Dec 2025 17:41:33 +0000
Files and hashes:         1: 326131343a316563373a666661303a3a2f34382d3438203d3e20323133353135.roa (hash: uw8e5+V55rs+wlENeJdGRICWtffz7xQmePuL+3U/nIU=)
                          2: 1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer (hash: BF/TWOjb2Ii4r0osOdYS/rUG+zOQPpS2tAXbzEo5Wzo=)
                          3: 326131343a316563373a663732303a3a2f34342d3438203d3e203139333138.roa (hash: 354DUYTmwYIpJ7s6pAfElMpcSbsG0UySE6atyDydlaw=)
                          4: 326131343a316563373a313130303a3a2f34302d3438203d3e20323135343337.roa (hash: LSZWA34YwCO9D6JtWEG8LpUQ1o3Anb+MGXWPU43gT4A=)
                          5: 326131343a316563373a666330303a3a2f34302d3438203d3e20323130363435.roa (hash: D0UhxJixjH/6ED4b7asHdvZhN16xQRz9JstOKq1KOMc=)
                          6: 326131343a316563343a3a2f33322d3430203d3e203535323031.roa (hash: J7TluaWBMRkzmoR+yQUgqy6TY9pp5e+qFllmxawGaBk=)
                          7: 326131343a316563373a663730303a3a2f34302d3438203d3e20323033363632.roa (hash: TXZSGetReOdbEu0rJcDlVY8E6EFEIEHEr5rTFcqv3xU=)
                          8: AS215318.asa (hash: Cq1YNeZujV2DCB3+fofzEgyWvtRNnETlVqcvQ1iCKVE=)
                          9: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer (hash: jLV89odZdgTYzYRcumFoTReP+gmmk+raXpcoYf0+wxA=)
                          10: 326131343a316563373a663733303a3a2f34342d3438203d3e20313336353537.roa (hash: EjYVXtoGI4pKSiTLS0VJX0KMS0fHh7kyk5vR1WUohgI=)
                          11: 326131343a316563373a323030303a3a2f34302d3438203d3e20323133353135.roa (hash: ei7uKbr21cStunIFD4/+QnxpXX+lUv4yRtUBnFqqQIw=)
                          12: 326131343a316563373a663230303a3a2f34302d3438203d3e20323036353430.roa (hash: qSdNZRVsblfNLTN5jWJzdVW0nG7dD+fw8GdvqXWqzCg=)
                          13: 326131343a316563373a666666643a3a2f34382d3438203d3e20323038343533.roa (hash: cQGzH58GG/5AlClFkvMjXXZFAsalmfdZS0xTjTmJx5Q=)
                          14: 326131343a316563373a663731303a3a2f34342d3438203d3e20323030303838.roa (hash: AEg6jBnmgaUb2x64BLtcycaY+zMRMacIwLXjCKOp0Kc=)
                          15: 326131343a316563373a663130303a3a2f34302d3438203d3e20323134313838.roa (hash: l6K8Ipuv+LpAjKBvLV7xS+N25xPDi1Q5md9XNlMDt3o=)
                          16: 3134EE987E08D8B5583FEEF621A03150C4F35434.crl (hash: 1rF7F7OqL1+ZwoHBXTbGpxVhNF2/w6nbPoOZXuxJJwk=)
                          17: 326131343a316563373a663730303a3a2f34342d3438203d3e20333937343233.roa (hash: 3NaEQ7JEzM4oESWmvkMu3mTAfj7phWpZMjjU4RHfTkQ=)
                          18: 326131343a316563373a663830313a3a2f34382d3438203d3e20323131303139.roa (hash: q5taedROXWkWDrb/6D/rTI85VzK640g7YzLTCK454po=)
                          19: 326131343a316563323a3a2f34302d3434203d3e20323135333138.roa (hash: 1f8XyNlehbCOnOttGzyrDosIHnqaI9sKAvrNf1ADCiI=)
                          20: 326131343a316563373a313030303a3a2f33362d3438203d3e20323134343831.roa (hash: mAC3tE41nQDojIaT/TKY9BuNdhC77RQ6VPm5O+XWCIE=)
                          21: 326131343a316563373a663930303a3a2f34302d3438203d3e20323131363733.roa (hash: eFx1IPRipEBged0ZijUlxcw0OO6jOfnGP3TjandnEEA=)
                          22: 2AFACA7F316DBE0CFF394F9D5952E52992F185F1.cer (hash: TzD6pGlBEMmZI/OlLFvK4Q5nKNXovDA7wOkDjfwohQo=)
                          23: 326131343a316563373a666666663a3a2f34382d3438203d3e20323030313739.roa (hash: jxX5jejatt6POI8r69/OIdC4tpqjlqDh7/l5cMHt1Lc=)
                          24: 326131343a316563373a666666633a3a2f34382d3438203d3e20323136333339.roa (hash: Xpu7YHsE9Uu/Z34+AM32q6wFmIndeEkcOzm4kV29gZU=)
                          25: 326131343a316563373a666666653a3a2f34382d3438203d3e20323135343733.roa (hash: tXMEYMrTa38uR0L+SQ9LimzmDrpxo8zhMIaTp0PKkR0=)
                          26: 39312e3139362e362e302f32342d3234203d3e20323135333138.roa (hash: j1BjBA5NyrZGkTgGio3bSgpZw6QFV9sBz2jgQ+DhB30=)
                          27: 326131343a316563373a666530303a3a2f34302d3438203d3e20323135343637.roa (hash: 8asU86WRYRMPRuHXiCGWb31YsN6wlyGCHOUyjPq08QE=)
                          28: 326131343a316563373a663630303a3a2f34302d3438203d3e20323133393938.roa (hash: jfvc4Qyrnftgf9GYsuLUox0bHp6mia0CtR4lMdTVrZY=)
                          29: 326131343a316563373a666230303a3a2f34302d3438203d3e20323134373435.roa (hash: 6hKao63oIzBdls8N02e3UeaWWtVa56Xgit+XQJDfjec=)
                          30: 326131343a316563373a666130303a3a2f34302d3438203d3e20323134333635.roa (hash: D7vq42LlJ1JkjKrlS8EXaLer6htaFFui19vj1Iz46+0=)
                          31: 326131343a316563373a666430303a3a2f34302d3438203d3e20323136323034.roa (hash: s/Nou3yfPszN+70d0fh1KxFGk9lHz9YF1rBNojiEJcI=)
                          32: 326131343a316563373a663830303a3a2f34382d3438203d3e20323131303139.roa (hash: IUL9dWtw0Umsxfs7xwdo1JVZ6ulAsKal+ROC0kpiHgM=)
                          33: 326131343a316563373a663530303a3a2f34302d3430203d3e20323038343533.roa (hash: 26SEXU3Pd+BR8SHx6kufhwY94Io89XBTIVQPTTPnVB8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 17:41:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:9c:aa:fa:87:a5:76:0d:7d:fd:a3:0e:89:6f:78:f5:1c:52:cd:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3134ee987e08d8b5583feef621a03150c4f35434
        Validity
            Not Before: Dec  5 15:07:33 2025 GMT
            Not After : Dec  6 17:41:33 2025 GMT
        Subject: CN=D2BB502AB6269DA35FB27BC8818EA5FB4AD7EDD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:12:cb:91:56:73:bb:e7:31:cc:f0:b3:04:72:
                    a5:c3:80:61:1d:16:85:9b:c2:23:4c:52:8e:a2:81:
                    dc:80:db:63:f0:7a:47:04:9b:63:bc:b1:4e:ca:7c:
                    44:0a:02:e3:bc:36:c5:05:20:2e:ce:20:5b:50:f9:
                    c2:a6:87:0d:6c:8f:eb:fc:5a:5a:84:e7:bb:07:af:
                    ea:a8:f4:fa:01:db:71:eb:ec:c4:da:ab:3b:9b:54:
                    d7:95:fd:fc:67:61:51:9a:0d:21:b7:c2:31:3a:2d:
                    6a:d1:7a:31:6b:f4:64:25:53:93:f2:38:cc:4c:f6:
                    ca:03:27:69:2b:80:f8:47:39:bb:3d:01:40:07:6a:
                    eb:32:ce:ce:16:3d:a7:ce:ab:74:d8:fb:f4:4b:c8:
                    fd:09:3c:6f:4f:24:6b:4e:ed:06:b6:54:e8:83:d4:
                    46:27:ee:53:ad:20:df:da:da:03:06:f3:0b:77:23:
                    cc:6d:40:2f:99:3d:95:57:f4:04:bc:f8:bb:79:9f:
                    c2:66:fb:c7:23:71:82:a3:05:03:2d:fe:df:82:a9:
                    83:7d:88:de:07:5d:07:eb:6a:ac:67:91:46:ef:88:
                    09:2f:7c:15:c4:cf:08:c7:e0:7a:1c:9d:3f:87:e5:
                    37:81:e2:f6:57:45:b0:ff:be:1b:53:5c:b9:e9:7c:
                    6c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:BB:50:2A:B6:26:9D:A3:5F:B2:7B:C8:81:8E:A5:FB:4A:D7:ED:D6
            X509v3 Authority Key Identifier:
                keyid:31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:67:5b:60:02:05:13:0f:5b:2a:a4:ac:80:e7:de:3b:b4:94:
         6a:cb:f0:60:fd:70:2d:02:69:a9:16:9c:13:2e:90:f8:be:59:
         a7:11:a0:6f:cc:0e:cf:74:cb:63:5c:7e:7e:f5:ec:f9:6e:95:
         e4:29:a7:0c:b1:79:b5:3d:f1:c7:ed:9a:10:e6:6a:bf:3c:5a:
         23:6d:97:f3:b6:97:f1:38:cd:65:ad:fb:c4:2b:d3:72:3c:24:
         ea:cd:df:ba:07:5d:8e:f3:3c:41:c6:e1:c2:31:aa:e0:81:dc:
         0f:87:d4:cb:49:56:85:b0:23:18:7e:31:9c:03:e7:97:e9:bb:
         ce:89:e5:69:c5:a3:cc:92:ad:39:e0:57:f0:82:cb:67:cb:20:
         6d:8d:3e:cc:5c:bf:43:2d:d7:68:71:de:5e:aa:2b:65:3a:c7:
         4b:59:7d:b0:97:f6:a5:fe:48:bc:11:15:e6:b0:67:d6:a1:e6:
         bd:ea:4d:57:05:c0:1b:46:44:ad:df:de:2b:a8:06:af:b9:44:
         35:81:3d:9a:f2:7c:52:c7:64:78:c7:77:b1:7f:ae:f2:ac:c5:
         11:0a:cd:66:9a:ca:46:d2:01:8b:54:2b:3c:9e:f7:34:e9:89:
         ee:15:87:ad:36:13:ff:2a:25:fc:26:27:b0:c7:fd:7b:d1:c0:
         bf:71:e5:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:25:24 2025 by rpki-client