This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft
File:                     B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft (raw, json)
Hash identifier:          K9Vmhfx4TiegOw9tdD/hP5Qu1s31v1i/5zC+WjZYjpw=
Subject key identifier:   13:ED:38:86:EE:6F:DF:DA:9B:DE:38:AA:1B:16:11:AD:CA:04:06:B2
Authority key identifier: B6:47:9E:09:04:B3:01:97:5B:19:D2:BF:F4:2B:E0:8D:BF:D6:8D:65
Certificate issuer:       /CN=B6479E0904B301975B19D2BFF42BE08DBFD68D65
Certificate serial:       4A1DEFE9CDC31B43A5F9156C39A5EF49BD7C7C8B
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B6479E0904B301975B19D2BFF42BE08DBFD68D65.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft
Manifest number:          D1
Signing time:             Sat 06 Dec 2025 12:41:39 +0000
Manifest this update:     Sat 06 Dec 2025 12:36:39 +0000
Manifest next update:     Sun 07 Dec 2025 13:58:39 +0000
Files and hashes:         1: 326130353a646663353a623030623a3a2f34382d3438203d3e20323033303639.roa (hash: pe/tp2bLBPulUkbhZe9b5ATBM6Rh5HMZWo4IJTXGPDU=)
                          2: B6479E0904B301975B19D2BFF42BE08DBFD68D65.crl (hash: +UzGHfglF+9yi5iKdq4C6kPMqd7JuwngIqd1MGaGU3c=)
                          3: 326130353a646663353a31303a3a2f34372d3437203d3e20323033303639.roa (hash: t/2Kihb52wxLH3GVF+LrphldGHxVkV2gtesMFke+X4A=)
                          4: 326130353a646663353a326630303a3a2f34302d3430203d3e20323033303639.roa (hash: ikPIiFRhFNPp4wzJn8w9YCg2eDdJG03INaF7Jeb4D9A=)
                          5: 326130353a646663353a3a2f34372d3437203d3e20323033303639.roa (hash: tIjYpQd9GyWainiE9GzQFbd7ZqDFGn1arDb1AExxerU=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B6479E0904B301975B19D2BFF42BE08DBFD68D65.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:1d:ef:e9:cd:c3:1b:43:a5:f9:15:6c:39:a5:ef:49:bd:7c:7c:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6479E0904B301975B19D2BFF42BE08DBFD68D65
        Validity
            Not Before: Dec  6 12:36:39 2025 GMT
            Not After : Dec  7 13:58:39 2025 GMT
        Subject: CN=13ED3886EE6FDFDA9BDE38AA1B1611ADCA0406B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:42:0a:3e:ec:be:70:4d:64:1a:83:55:94:f7:
                    33:6a:d9:d8:42:f9:25:0c:5d:06:e3:c6:39:36:6a:
                    fb:42:fa:cf:f9:f6:3b:49:da:8a:b6:61:c6:b7:7c:
                    49:f8:ee:97:59:58:ee:a3:4a:33:be:3e:da:33:84:
                    2c:f3:b5:2c:c6:26:e2:a4:f2:a9:02:77:03:87:2d:
                    0d:45:0d:ec:12:1d:ad:ab:14:f2:28:80:01:15:0d:
                    a8:1a:62:f4:08:a3:c6:43:3d:4d:bb:2e:b3:d1:7a:
                    81:74:e3:94:aa:50:1a:4b:03:f2:72:c6:b3:60:1c:
                    25:31:99:be:5d:dc:2b:10:66:cf:cf:51:8a:b4:f9:
                    29:69:4d:f7:1c:71:af:e0:37:2e:9f:2d:3c:51:ac:
                    71:fc:e2:df:ed:85:db:b1:2c:d9:b3:18:9c:eb:16:
                    cd:f7:02:06:e5:25:02:43:db:39:0e:8d:4c:cb:3d:
                    c2:05:41:72:b1:14:04:aa:dd:c0:fa:86:d6:3c:69:
                    43:be:0a:94:df:f2:b4:90:05:06:93:ed:6f:0b:2a:
                    28:d6:b5:d2:9c:6a:0e:4a:02:56:1c:b1:55:7b:2a:
                    fa:9f:2d:cf:3f:0f:c5:4a:be:83:60:ad:30:ce:7f:
                    23:24:86:fb:ee:f3:65:5f:b7:c7:ff:f8:e0:1f:23:
                    8d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:ED:38:86:EE:6F:DF:DA:9B:DE:38:AA:1B:16:11:AD:CA:04:06:B2
            X509v3 Authority Key Identifier:
                keyid:B6:47:9E:09:04:B3:01:97:5B:19:D2:BF:F4:2B:E0:8D:BF:D6:8D:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B6479E0904B301975B19D2BFF42BE08DBFD68D65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/9/B6479E0904B301975B19D2BFF42BE08DBFD68D65.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:00:1c:04:32:47:67:1b:0e:f5:29:4e:60:7b:3f:4b:bc:7a:
         e4:30:6e:03:1d:7f:71:4c:79:94:99:e7:70:77:8a:57:c6:ea:
         21:c1:15:2c:f4:19:8d:c7:6e:af:53:bc:89:24:f2:3c:ab:af:
         1d:c4:de:ce:b8:2e:00:e2:88:ef:0f:9a:0a:18:56:f4:15:6e:
         24:4b:57:89:54:9b:71:a2:31:5b:31:ae:33:55:8b:3d:a3:ed:
         e9:6d:2f:c0:a3:18:eb:b8:cc:eb:b4:fd:c3:11:b1:d3:37:06:
         b7:ff:4e:d9:f1:fd:59:43:03:1d:8b:6b:04:d1:fb:b2:4f:79:
         d5:d6:62:5f:28:5e:f6:05:bc:44:2f:7d:9d:db:80:2f:d9:c0:
         24:ca:a0:48:13:d1:1c:dd:8c:33:0b:d7:cf:01:4a:f1:39:3e:
         28:31:3d:17:1b:34:5f:e7:77:e8:3d:c1:a9:a4:27:17:69:2d:
         f9:37:0a:29:4e:35:e9:61:dd:68:75:50:51:27:09:85:8e:1a:
         ac:da:df:8b:53:cd:ab:ba:42:52:71:92:00:17:24:aa:45:70:
         47:ea:6f:2a:d5:75:76:82:8a:38:2e:f7:fa:d4:0c:8b:ef:35:
         f1:ef:e2:1a:e7:ec:ab:78:32:f0:78:5b:92:d1:00:f3:f0:2a:
         1e:79:e7:13
-----BEGIN CERTIFICATE-----
MIIFbTCCBFWgAwIBAgIUSh3v6c3DG0Ol+RVsOaXvSb18fIswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjY0NzlFMDkwNEIzMDE5NzVCMTlEMkJGRjQyQkUwOERC
RkQ2OEQ2NTAeFw0yNTEyMDYxMjM2MzlaFw0yNTEyMDcxMzU4MzlaMDMxMTAvBgNV
BAMTKDEzRUQzODg2RUU2RkRGREE5QkRFMzhBQTFCMTYxMUFEQ0EwNDA2QjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwQgo+7L5wTWQag1WU9zNq2dhC
+SUMXQbjxjk2avtC+s/59jtJ2oq2Yca3fEn47pdZWO6jSjO+PtozhCzztSzGJuKk
8qkCdwOHLQ1FDewSHa2rFPIogAEVDagaYvQIo8ZDPU27LrPReoF045SqUBpLA/Jy
xrNgHCUxmb5d3CsQZs/PUYq0+SlpTfccca/gNy6fLTxRrHH84t/thduxLNmzGJzr
Fs33AgblJQJD2zkOjUzLPcIFQXKxFASq3cD6htY8aUO+CpTf8rSQBQaT7W8LKijW
tdKcag5KAlYcsVV7KvqfLc8/D8VKvoNgrTDOfyMkhvvu82Vft8f/+OAfI42bAgMB
AAGjggJ3MIICczAdBgNVHQ4EFgQUE+04hu5v39qb3jiqGxYRrcoEBrIwHwYDVR0j
BBgwFoAUtkeeCQSzAZdbGdK/9Cvgjb/WjWUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi
ZTRlLzkvQjY0NzlFMDkwNEIzMDE5NzVCMTlEMkJGRjQyQkUwOERCRkQ2OEQ2NS5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzcvQjY0NzlFMDkwNEIzMDE5NzVCMTlEMkJGRjQyQkUwOERCRkQ2
OEQ2NS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYmY4ZTk3Ny03
Mjc4LTQ2Y2YtYWJkMS05OWNkMWZkMmJlNGUvOS9CNjQ3OUUwOTA0QjMwMTk3NUIx
OUQyQkZGNDJCRTA4REJGRDY4RDY1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiQAcBDJHZxsO9SlOYHs/
S7x65DBuAx1/cUx5lJnncHeKV8bqIcEVLPQZjcdur1O8iSTyPKuvHcTezrguAOKI
7w+aChhW9BVuJEtXiVSbcaIxWzGuM1WLPaPt6W0vwKMY67jM67T9wxGx0zcGt/9O
2fH9WUMDHYtrBNH7sk951dZiXyhe9gW8RC99nduAL9nAJMqgSBPRHN2MMwvXzwFK
8Tk+KDE9Fxs0X+d36D3BqaQnF2kt+TcKKU416WHdaHVQUScJhY4arNrfi1PNq7pC
UnGSABckqkVwR+pvKtV1doKKOC73+tQMi+818e/iGufsq3gy8HhbktEA8/AqHnnn
Ew==
-----END CERTIFICATE-----
Generated at Sat Dec 6 16:06:24 2025 by rpki-client