This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft
File:                     06DB699D191D4B0289910C88E99CF94A671142F5.mft (raw, json)
Hash identifier:          FRQWQZp97E8pT9tYoTCnTqgJYChL+99qezdwUA8QTxo=
Subject key identifier:   BF:E3:24:D2:9E:55:B5:3F:3A:98:3A:A1:CA:5F:A9:BF:AB:FC:29:73
Authority key identifier: 06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5
Certificate issuer:       /CN=06DB699D191D4B0289910C88E99CF94A671142F5
Certificate serial:       70EBD9951E19F877DB4E2B77F45148B7CB9254ED
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft
Manifest number:          D8
Signing time:             Fri 05 Dec 2025 11:34:32 +0000
Manifest this update:     Fri 05 Dec 2025 11:29:32 +0000
Manifest next update:     Sat 06 Dec 2025 13:19:32 +0000
Files and hashes:         1: 06DB699D191D4B0289910C88E99CF94A671142F5.crl (hash: aYQUGf/8nHxQwpbjWTScECzuu8c6tC4qKFfpidwH3nQ=)
                          2: 326130363a396634313a313030303a3a2f34342d3438203d3e20323035383338.roa (hash: AZY42IY279tP8q55kCb+OP1wLi+9ejrODI15M2jhRhg=)
                          3: 326130363a396634313a613930303a3a2f34382d3438203d3e20323037363832.roa (hash: UqjWSUv2XiZdDsdQ0uOndREGc/szQ2JnxQlbZ2ADckI=)
                          4: 5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer (hash: vr0IDnvMrQlAIKTPbmc9XgADtBREMeozkPpGVjOFGr4=)
                          5: 326130363a396634313a613930313a3a2f34382d3438203d3e20323035383338.roa (hash: TZFInP0XSpkR7gzjfw2R3ov4SaV+J0Kzbqc0lAbOzbM=)
                          6: 38332e3134322e33312e302f32342d3234203d3e20323135303835.roa (hash: K8xHXu8PBNylpSXaMswB01W3KM9JQNKdf8F+yOiMZUQ=)
                          7: 326130363a396634313a3a2f33322d3332203d3e20323135303835.roa (hash: oQiFmCDOiC8wMUPyhseeYgHp6yjZLGbjApAcNJ0LBoc=)
                          8: 326130363a396634313a363936393a3a2f34382d3438203d3e20323132323432.roa (hash: oZMKPe8zIqKXDWE+ceP6ZovC366mkj//dk5ag6RqSYo=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 13:19:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:eb:d9:95:1e:19:f8:77:db:4e:2b:77:f4:51:48:b7:cb:92:54:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06DB699D191D4B0289910C88E99CF94A671142F5
        Validity
            Not Before: Dec  5 11:29:32 2025 GMT
            Not After : Dec  6 13:19:32 2025 GMT
        Subject: CN=BFE324D29E55B53F3A983AA1CA5FA9BFABFC2973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:fa:59:03:c9:e6:d4:72:8c:53:a5:29:c5:8b:
                    ef:5e:17:05:84:c4:48:b8:47:af:a3:60:4e:0e:e5:
                    7e:94:76:7c:82:01:9e:73:cc:6e:de:fb:d0:7e:51:
                    73:ea:5e:68:9f:2d:fc:cd:99:1e:65:ba:df:41:05:
                    50:da:e3:37:7e:ec:49:e6:3a:48:fa:ad:6e:ef:28:
                    dc:1d:d4:79:c2:d7:f8:88:d0:57:59:1b:da:14:cb:
                    bf:20:69:4a:7b:47:fc:ba:4c:19:f0:ca:29:52:a7:
                    da:ec:14:66:44:69:75:f4:a7:79:c1:48:8a:dc:0b:
                    18:f7:97:47:b8:c6:9e:df:91:3f:6b:31:c6:60:b7:
                    6f:f7:57:d4:0d:d7:e5:68:6b:dc:f5:d2:27:87:96:
                    82:ba:fc:94:12:02:78:4a:3c:35:7c:75:2c:bd:b8:
                    97:de:dc:48:a6:66:e5:d5:8c:c7:36:09:ee:88:e5:
                    5f:a8:71:f1:a1:e5:a3:b6:59:b7:75:90:20:6e:38:
                    e6:84:11:46:b6:44:19:e9:84:e2:17:4a:f6:8f:d6:
                    59:63:6b:82:8a:ab:26:9c:fb:2e:1e:4b:fa:e6:d0:
                    95:13:44:7d:9e:c3:de:0a:b5:80:29:d1:5d:21:67:
                    83:8b:15:28:0d:c3:35:7b:d6:3e:03:4f:c2:ca:89:
                    c0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:E3:24:D2:9E:55:B5:3F:3A:98:3A:A1:CA:5F:A9:BF:AB:FC:29:73
            X509v3 Authority Key Identifier:
                keyid:06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:e9:11:9b:5e:f7:99:7c:de:c0:09:be:5b:29:f8:70:be:fb:
         67:fd:81:21:f9:8b:d7:5d:1f:d1:c7:35:8d:84:93:89:f2:63:
         79:f6:17:31:9f:ad:21:9a:b1:03:75:ba:32:49:6f:f8:8c:c9:
         c2:36:ce:c9:46:f3:48:9c:1e:71:15:35:6d:12:17:cd:c1:3d:
         48:16:9b:60:60:a4:a3:f2:12:7a:38:0a:55:ed:8a:01:7e:c0:
         ae:37:9c:78:61:7d:f6:a4:78:49:61:49:ac:40:79:21:77:cb:
         d4:88:2b:84:a0:57:74:4f:b0:2a:a2:e5:1f:0c:25:4d:ac:1d:
         f1:b0:54:3e:d0:00:7f:c0:58:0a:53:f7:0a:95:1b:75:f2:06:
         1c:ba:f5:9d:4e:f7:22:e4:15:0a:43:34:e5:e1:0e:fd:81:0b:
         e4:41:0f:c8:c9:31:1c:f0:d7:38:88:c3:ca:4c:9a:c1:f3:fa:
         b1:40:bd:05:e0:e8:70:9d:3c:3c:63:e6:0c:2b:dd:8e:a8:cb:
         bc:32:ea:78:cc:5a:ff:e3:db:68:2d:f6:10:3d:e7:bb:33:b0:
         7e:8a:cb:5d:b8:09:2f:23:3d:ea:b5:0f:11:91:36:7e:76:cf:
         6b:3b:10:c8:49:c5:e9:fc:67:20:a3:2e:1a:7e:60:ee:49:87:
         83:1f:53:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 06:58:47 2025 by rpki-client