This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft
File:                     7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft (raw, json)
Hash identifier:          axQOWYOBmgt5lZO4u8baWScJ5IB/WXHQcUmDreLB0Hk=
Subject key identifier:   20:9B:61:BB:4E:80:D4:F7:3A:73:36:9B:3F:D9:9D:19:DA:3D:C8:6B
Authority key identifier: 7F:21:6F:49:A3:B9:A8:4A:0E:85:E8:0A:2C:42:87:4F:09:EA:39:85
Certificate issuer:       /CN=7f216f49a3b9a84a0e85e80a2c42874f09ea3985
Certificate serial:       6623F3BE31D55ECAA608F2273EC1AA9E44ED8020
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fyFvSaO5qEoOhegKLEKHTwnqOYU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft
Manifest number:          0175
Signing time:             Sat 06 Dec 2025 17:32:40 +0000
Manifest this update:     Sat 06 Dec 2025 17:27:40 +0000
Manifest next update:     Sun 07 Dec 2025 18:09:40 +0000
Files and hashes:         1: 326130653a666434353a326535303a3a2f34382d3438203d3e20323135333730.roa (hash: S2x/glwBFQqLmSWyNwtm4qEtJyulbbnFBue99o2JPS8=)
                          2: 326130393a626534303a323830303a3a2f34302d3438203d3e20313939393530.roa (hash: AiP13DNBwIkSFzdQdSir0FYGd4okcKOcyfxhs/nt0mM=)
                          3: 326130653a666434353a353030303a3a2f34302d3438203d3e20323034383330.roa (hash: 9ztDCaU6aAMVKVrLFNLTSsl1A84X7CinJDw99b10Wgk=)
                          4: 326130653a666434353a326366303a3a2f34382d3438203d3e20323032383535.roa (hash: lpEMU1X1JLSHAOWUFG4frUPhBZsu7LhlBnijuGC43xs=)
                          5: 326130653a666434353a326630303a3a2f34382d3438203d3e20323132393636.roa (hash: fCahoT0DASmE4L0CnNku4FHnUTfBEMsJKaoRBnEvKJY=)
                          6: 326130653a666434353a326633303a3a2f34382d3438203d3e20323039333130.roa (hash: Ah9wB6P+J6/u6bq6IHZMWUCN9kLwcy3+ovMQjaM+Mjs=)
                          7: 326130653a666434353a326634303a3a2f34342d3438203d3e20323132353931.roa (hash: m8ac/OmE29DqLuwrvKPJFKpYCamTHx1fmPvpHqRkArI=)
                          8: 326130393a626534303a323830303a3a2f34302d3438203d3e20323133313730.roa (hash: bGsR+5RlWB67shIeVpz1QNwpCAPKyIXgoOV7T0RQXx8=)
                          9: 7F216F49A3B9A84A0E85E80A2C42874F09EA3985.crl (hash: FDQUVGK9UH1DTfHNYu1I93gyFVJFlEmM6a+1E+qj3ag=)
                          10: 326130653a666434353a326538303a3a2f34382d3438203d3e20323134373233.roa (hash: OBdYMpDCrnydUqYR/9aR6OWDxV3xrASuK04QdHbbnp4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fyFvSaO5qEoOhegKLEKHTwnqOYU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:23:f3:be:31:d5:5e:ca:a6:08:f2:27:3e:c1:aa:9e:44:ed:80:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f216f49a3b9a84a0e85e80a2c42874f09ea3985
        Validity
            Not Before: Dec  6 17:27:40 2025 GMT
            Not After : Dec  7 18:09:40 2025 GMT
        Subject: CN=209B61BB4E80D4F73A73369B3FD99D19DA3DC86B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ad:ea:1c:4f:1a:c6:2c:fd:a9:c1:39:c7:ac:
                    10:72:40:fc:d1:35:1a:d0:63:9e:9c:f5:71:b7:54:
                    1e:5c:00:f0:e2:eb:7a:e2:40:6d:ba:e8:20:c9:2a:
                    a8:bf:29:8b:ed:ea:6e:35:45:c2:3f:86:77:6a:2e:
                    f2:b8:9b:35:20:28:44:62:b7:b8:f5:c2:ca:4e:e5:
                    47:81:87:6b:4b:df:50:a0:6a:18:f1:13:4a:64:14:
                    76:a6:d3:8e:50:0b:61:33:34:fa:72:9d:76:7f:99:
                    cd:e5:2e:98:d7:95:4d:21:6f:73:fa:78:f4:7b:2d:
                    16:76:3b:7a:00:cc:a1:eb:d2:eb:08:d9:ba:5f:b1:
                    97:e9:5f:ae:b1:c6:63:4d:41:44:8b:57:44:34:ad:
                    87:6b:ff:05:f0:6f:e7:e3:e0:24:7c:39:95:b9:5c:
                    0d:0d:ea:40:63:46:b4:97:2c:69:1f:d6:45:9f:53:
                    dd:52:cb:9b:2c:23:91:e8:0f:2e:d1:9e:1f:21:0c:
                    f4:17:e3:ff:fd:fa:13:af:d5:4a:c1:f6:11:7d:f3:
                    c9:4c:8b:c7:96:f8:58:e4:e8:0f:a0:c7:e8:38:1b:
                    ad:62:d9:db:1d:a9:b8:ed:dc:f5:58:99:98:ee:4a:
                    5e:7b:81:80:c4:c9:60:c6:ab:d0:8b:d8:ee:c8:bb:
                    19:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:9B:61:BB:4E:80:D4:F7:3A:73:36:9B:3F:D9:9D:19:DA:3D:C8:6B
            X509v3 Authority Key Identifier:
                keyid:7F:21:6F:49:A3:B9:A8:4A:0E:85:E8:0A:2C:42:87:4F:09:EA:39:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fyFvSaO5qEoOhegKLEKHTwnqOYU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:23:0f:d8:02:df:13:54:34:8a:be:9b:f0:be:da:90:4c:12:
         f6:51:49:82:b9:34:e6:c2:b6:f6:cc:39:af:2e:88:0f:94:20:
         1f:24:54:52:45:e1:bc:60:fe:72:6f:4e:07:62:e8:3e:e0:b0:
         6d:98:c1:bb:e4:5c:c6:70:97:54:51:7c:37:c7:bf:9e:db:63:
         e9:fd:92:06:17:e3:be:e3:08:5f:2e:95:8d:d5:07:e2:ee:43:
         c2:1a:36:6f:4e:57:a4:4d:bd:26:af:06:49:bc:77:ac:6a:b4:
         ff:8d:a6:2d:2b:40:47:23:32:80:39:33:3f:23:cb:8e:25:8c:
         f4:ec:46:5f:3e:62:99:b5:e7:1e:7a:1c:bc:d2:ca:32:76:1e:
         52:8d:19:d1:60:4a:02:c8:7c:f5:ab:d9:4a:7a:c1:c5:e9:9b:
         c6:64:00:49:86:20:6c:4a:19:55:86:1a:c7:f3:2b:5f:f8:f6:
         bd:0d:f1:d7:73:8e:c9:80:8b:b1:32:3f:b6:b1:19:d3:d8:08:
         2d:2b:c8:df:bc:7a:20:11:2b:60:af:98:e4:0c:00:2b:0c:16:
         ba:61:f9:32:56:4a:5e:8f:82:3e:7d:fe:ac:c0:ef:86:17:d6:
         4d:9f:71:5a:a6:4b:e5:c8:06:c6:ea:23:10:4a:c2:26:81:c4:
         bf:e9:8a:aa
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUZiPzvjHVXsqmCPInPsGqnkTtgCAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN2YyMTZmNDlhM2I5YTg0YTBlODVlODBhMmM0Mjg3NGYw
OWVhMzk4NTAeFw0yNTEyMDYxNzI3NDBaFw0yNTEyMDcxODA5NDBaMDMxMTAvBgNV
BAMTKDIwOUI2MUJCNEU4MEQ0RjczQTczMzY5QjNGRDk5RDE5REEzREM4NkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6reocTxrGLP2pwTnHrBByQPzR
NRrQY56c9XG3VB5cAPDi63riQG266CDJKqi/KYvt6m41RcI/hndqLvK4mzUgKERi
t7j1wspO5UeBh2tL31CgahjxE0pkFHam045QC2EzNPpynXZ/mc3lLpjXlU0hb3P6
ePR7LRZ2O3oAzKHr0usI2bpfsZfpX66xxmNNQUSLV0Q0rYdr/wXwb+fj4CR8OZW5
XA0N6kBjRrSXLGkf1kWfU91Sy5ssI5HoDy7Rnh8hDPQX4//9+hOv1UrB9hF988lM
i8eW+Fjk6A+gx+g4G61i2dsdqbjt3PVYmZjuSl57gYDEyWDGq9CL2O7Iuxn3AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUIJthu06A1Pc6czabP9mdGdo9yGswHwYDVR0j
BBgwFoAUfyFvSaO5qEoOhegKLEKHTwnqOYUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMmRmYjMwY2EtZTFjMi00OTIxLWIwNTQtZDRhZjA5MTY1
YWYxLzAvN0YyMTZGNDlBM0I5QTg0QTBFODVFODBBMkM0Mjg3NEYwOUVBMzk4NS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Z5RnZTYU81cUVvT2hlZ0tMRUtIVHdu
cU9ZVS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yZGZiMzBjYS1l
MWMyLTQ5MjEtYjA1NC1kNGFmMDkxNjVhZjEvMC83RjIxNkY0OUEzQjlBODRBMEU4
NUU4MEEyQzQyODc0RjA5RUEzOTg1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAByMP2ALfE1Q0ir6b8L7a
kEwS9lFJgrk05sK29sw5ry6ID5QgHyRUUkXhvGD+cm9OB2LoPuCwbZjBu+RcxnCX
VFF8N8e/nttj6f2SBhfjvuMIXy6VjdUH4u5Dwho2b05XpE29Jq8GSbx3rGq0/42m
LStARyMygDkzPyPLjiWM9OxGXz5imbXnHnocvNLKMnYeUo0Z0WBKAsh89avZSnrB
xembxmQASYYgbEoZVYYax/MrX/j2vQ3x13OOyYCLsTI/trEZ09gILSvI37x6IBEr
YK+Y5AwAKwwWumH5MlZKXo+CPn3+rMDvhhfWTZ9xWqZL5cgGxuojEErCJoHEv+mK
qg==
-----END CERTIFICATE-----