This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.mft
File:                     702B79B445330AC21D237308277A4472598CE771.mft (raw, json)
Hash identifier:          nVb0s9rLHYBephAwHkGkWkkZvNT4xpOtdCeR1y1E8Xo=
Subject key identifier:   96:3D:25:0A:85:4D:E9:2C:C7:EC:FC:49:92:1F:20:ED:E6:2A:BC:A5
Authority key identifier: 70:2B:79:B4:45:33:0A:C2:1D:23:73:08:27:7A:44:72:59:8C:E7:71
Certificate issuer:       /CN=702B79B445330AC21D237308277A4472598CE771
Certificate serial:       5BFDBBF4970F0B9C008CB5B135C4C0D0EA6C8696
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.mft
Manifest number:          96
Signing time:             Sat 06 Dec 2025 03:06:17 +0000
Manifest this update:     Sat 06 Dec 2025 03:01:17 +0000
Manifest next update:     Sun 07 Dec 2025 06:02:17 +0000
Files and hashes:         1: 326131343a373538303a666666613a3a2f34382d3438203d3e20323134393535.roa (hash: h/rRMvyqafFU+yTlCYjO1aoLzPvMYTq8Atefyqn1aw8=)
                          2: 326131343a373538333a663730633a3a2f34382d3438203d3e20323134393535.roa (hash: MCTGvJAm8U3NtPMr0TfqstCKnf65Svz4B5aqt1Vg4GE=)
                          3: 326131343a373538333a663736343a3a2f34382d3438203d3e20323134393535.roa (hash: zM36/OphB/KbTgVAZhJZfKncuog5pc9Z90qFovwCspo=)
                          4: 326131343a373538333a663730363a3a2f34382d3438203d3e20323134393535.roa (hash: HF0IXoiIoV1vsEb3Y7UE6hceXgn4rnvPt86H7Wi7oFU=)
                          5: 702B79B445330AC21D237308277A4472598CE771.crl (hash: tlBLHIqDsgBk5959kLKyHyeQE23pjUGyToFEMyslfPM=)
                          6: 326131343a373538333a663730613a3a2f34382d3438203d3e20323134393535.roa (hash: KrncfgwV2JNmUMMX9XTAiUcGcVNG82mQHu5/P0lF/YQ=)
                          7: 326131343a373538333a663734343a3a2f34382d3438203d3e20323134393535.roa (hash: 2S+JbymcjIynwfVZAKfR00rXladCcxDgshwKEZR1YsA=)
                          8: 326131343a373538333a663730313a3a2f34382d3438203d3e20323134393535.roa (hash: RzicPZXer6PLdeFy+vOsancgSNcjrm95+RPOXY7LoDc=)
                          9: 326131343a373538333a663730323a3a2f34382d3438203d3e20323134393535.roa (hash: j1h3rUtpYcXTQ9tg2+zKR1MIHOPPCpnwfhKyK3a6mSc=)
                          10: 326131343a373538333a663730393a3a2f34382d3438203d3e20323134393535.roa (hash: ody+MZu+p9r7722qUv+nib+WdzL08bt7JIhdIl0nBOM=)
                          11: 326131343a373538333a663730623a3a2f34382d3438203d3e20323134393535.roa (hash: kLF1pGobCPtSBqVgUGHgu1by1e7kkegKpHMRpd10cN0=)
                          12: 326131343a373538333a663730343a3a2f34382d3438203d3e20323134393535.roa (hash: GR7y7aRgVAUP5lUmI8IZDhrv8mAyuuXgZxhshW1ruYs=)
                          13: 326131343a373538333a663730383a3a2f34382d3438203d3e20323134393535.roa (hash: s15NOBRzlJhT8Ilr0QxZxBoPvIfuNlcjTL4p1JyK0Rg=)
                          14: 326131343a373538333a663734333a3a2f34382d3438203d3e20323134393535.roa (hash: F//u8b8URxPoSW5tKZ7gI7LWdU+B7yQQrxeBR/nXITQ=)
                          15: 326131343a373538333a663730333a3a2f34382d3438203d3e20323134393535.roa (hash: 9+boFqIS6keyE5RNh9z/i3/Vy3fO+EE8pDJc8uN4NyQ=)
                          16: 326131343a373538333a663730353a3a2f34382d3438203d3e20323134393535.roa (hash: v1ff3/5opCg79B8vnRLLf35N5RlDFleXR6jWqIzcy+A=)
                          17: 326131343a373538333a663730373a3a2f34382d3438203d3e20323134393535.roa (hash: KKLY1zCTXfmGMrjDFuT7b/5dqeecgqHT0wX+vU1j/NU=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 23:45:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:fd:bb:f4:97:0f:0b:9c:00:8c:b5:b1:35:c4:c0:d0:ea:6c:86:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=702B79B445330AC21D237308277A4472598CE771
        Validity
            Not Before: Dec  6 03:01:17 2025 GMT
            Not After : Dec  7 06:02:17 2025 GMT
        Subject: CN=963D250A854DE92CC7ECFC49921F20EDE62ABCA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:31:37:30:ac:69:cd:ef:0f:a8:95:38:ac:8b:
                    be:98:89:52:86:78:36:91:5d:0f:91:85:97:7d:37:
                    0f:e5:39:d2:9f:a7:70:b3:3d:1d:e2:a6:8e:dd:91:
                    15:d6:79:8a:52:05:25:f8:58:09:73:2e:71:58:69:
                    b1:a9:c6:f3:1a:af:2d:87:28:2d:15:b5:74:27:9f:
                    26:70:5c:12:fd:09:f1:fe:dc:cb:67:35:85:22:92:
                    4e:8d:0c:36:05:cb:21:0e:40:b1:9a:be:53:a3:75:
                    98:84:2e:97:f7:0f:63:21:4a:3b:ed:60:9a:dc:a2:
                    ff:f7:28:e2:6d:93:58:4e:4b:0a:ea:6e:6e:61:11:
                    68:4d:60:b0:b7:24:43:19:84:78:89:d5:ad:78:4e:
                    ef:99:d4:d7:f8:be:c0:9f:90:2f:65:6d:aa:a3:ca:
                    07:63:5a:12:b1:05:b1:84:2f:96:2e:64:40:6c:6d:
                    02:1f:f5:3e:83:cc:a8:81:18:90:bc:40:57:07:94:
                    29:38:2b:71:20:b6:a3:19:d0:be:5f:59:8b:c0:4f:
                    d2:20:88:26:01:02:56:b9:21:58:f6:a0:27:18:33:
                    4c:a9:7b:92:6e:e8:5d:77:46:e2:34:bb:45:86:1c:
                    6d:70:f5:2d:9d:13:40:8c:3b:ee:ec:72:fa:2e:41:
                    22:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:3D:25:0A:85:4D:E9:2C:C7:EC:FC:49:92:1F:20:ED:E6:2A:BC:A5
            X509v3 Authority Key Identifier:
                keyid:70:2B:79:B4:45:33:0A:C2:1D:23:73:08:27:7A:44:72:59:8C:E7:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:a7:96:e1:a7:64:ca:2f:3b:71:d5:69:17:39:9d:f1:95:f5:
         3a:9b:ff:1c:df:45:7f:85:42:31:98:6c:da:f3:85:ce:d4:21:
         5b:a0:c1:c8:e0:24:6a:86:f9:56:2a:f6:a8:7f:b2:87:e3:fe:
         0e:5b:b8:01:c2:f0:e7:0c:36:af:99:64:7e:fd:77:e1:4a:73:
         5b:8a:4d:1a:03:08:2b:ee:39:f7:1c:0d:ee:c8:75:8d:b0:cf:
         f6:7c:5d:df:5c:e1:33:8e:e4:44:dd:f4:04:cc:f5:5d:c1:58:
         16:b9:d8:d0:73:3b:54:03:51:63:fd:26:2f:c8:26:1f:27:f6:
         78:52:7e:7d:8b:a9:6a:9a:9c:76:c3:50:b0:44:ca:b1:1c:16:
         5c:48:d1:1e:d3:ea:2c:04:bc:18:0a:7d:81:a0:78:a9:04:f4:
         ab:fe:4d:3c:18:f7:a9:6d:cb:f3:88:78:2a:bb:20:d7:e1:62:
         94:d0:47:2a:0b:52:17:ec:9e:52:c8:8c:43:ea:a9:12:3a:22:
         ad:74:17:c8:4c:2c:a2:60:17:1e:86:f3:80:6d:ac:a7:5a:66:
         ef:27:5a:17:96:e1:ee:1f:41:4d:51:77:c8:90:d9:92:db:0e:
         fe:bb:8d:e3:c4:7f:c7:ee:4a:fe:09:fc:ea:ae:30:a2:f8:aa:
         2d:9f:01:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:28:49 2025 by rpki-client