This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/3/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.mft
File:                     FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.mft (raw, json)
Hash identifier:          EkA2aH6SdXtJI6agfmo79Fou0WlXhsFGypGidbXbiz8=
Subject key identifier:   35:56:A7:2D:C2:3A:03:CC:87:1A:1A:57:67:99:44:69:BE:10:BB:90
Authority key identifier: FA:71:0E:21:BC:41:E9:82:7D:52:D6:6D:E9:8E:F8:E9:AC:E9:B1:E8
Certificate issuer:       /CN=FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8
Certificate serial:       0704149F947063B4983F940BEE796DB612A29317
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/3/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.mft
Manifest number:          BD
Signing time:             Sat 06 Dec 2025 08:57:09 +0000
Manifest this update:     Sat 06 Dec 2025 08:52:09 +0000
Manifest next update:     Sun 07 Dec 2025 12:33:09 +0000
Files and hashes:         1: FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.crl (hash: E0gGIC+YRDV31CYk8FmQJW7p9OiQ+4DlCZSVzE65Gds=)
                          2: 326131343a373538343a343830303a3a2f34382d3438203d3e20323131333538.roa (hash: dxI70qoTw8AqT4GSbNKeSr6HFS9kuFZrrwUT/py32Kc=)
                          3: 326131343a373538343a346630303a3a2f34302d3430203d3e20323132353136.roa (hash: CNfVsinVsceZGjOaXQsHUjsBZSefgQTBz85mK3PRJtU=)
                          4: 326131343a373538343a343030303a3a2f33362d3438203d3e2036353137.roa (hash: 9qxxzty+nI98+cY44+m4DwmBg2WIZrsDW0snWoFPb+U=)
                          5: 326131343a373538343a343130303a3a2f34302d3438203d3e20323136333039.roa (hash: J9Fi36nQGqAgueP6UU6iZv8HlrGSaFogPoGVrEhPYYg=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/3/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/3/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 12:33:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:04:14:9f:94:70:63:b4:98:3f:94:0b:ee:79:6d:b6:12:a2:93:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8
        Validity
            Not Before: Dec  6 08:52:09 2025 GMT
            Not After : Dec  7 12:33:09 2025 GMT
        Subject: CN=3556A72DC23A03CC871A1A5767994469BE10BB90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:43:b0:11:dd:63:58:7a:6c:af:ae:5e:ed:39:
                    99:c2:d9:13:9f:d1:28:f2:c2:a5:9b:da:f9:a3:81:
                    12:1e:c1:6c:56:82:a4:39:70:ec:db:19:8b:1e:19:
                    d3:f8:51:3d:d7:05:20:17:96:cd:a0:17:7d:25:ee:
                    6f:1b:44:9b:bf:39:4b:88:4f:95:64:19:ae:11:5f:
                    68:8e:10:fa:36:52:43:b6:21:51:5e:8c:e6:08:9b:
                    aa:08:d2:10:3f:8f:2a:48:51:cb:0b:95:aa:ef:18:
                    75:9b:fa:51:c0:e5:9a:21:41:0b:af:69:55:b2:98:
                    a8:38:0e:30:9f:80:f3:c5:89:a9:9a:c5:67:fe:6a:
                    0c:9c:42:49:ca:d3:ad:de:ac:b0:9e:6e:4f:7d:66:
                    dd:9b:a0:58:b5:41:d8:1d:f4:f7:6f:34:e2:29:6b:
                    e0:85:58:76:63:e2:a1:f5:c7:33:19:a2:69:5e:f7:
                    c2:56:f1:38:d8:55:ef:ca:9d:e0:bc:65:32:78:8c:
                    e3:9e:be:05:41:a0:8e:02:d2:07:59:35:54:9c:ce:
                    e6:ec:1e:8d:fe:47:00:35:ae:c5:02:b6:23:ba:b8:
                    1a:ce:bf:a8:c5:a1:4c:d8:2e:8a:de:cd:c1:cf:b0:
                    43:56:03:7b:b4:62:07:0c:6e:76:b5:59:21:92:34:
                    30:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:56:A7:2D:C2:3A:03:CC:87:1A:1A:57:67:99:44:69:BE:10:BB:90
            X509v3 Authority Key Identifier:
                keyid:FA:71:0E:21:BC:41:E9:82:7D:52:D6:6D:E9:8E:F8:E9:AC:E9:B1:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/3/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/3/FA710E21BC41E9827D52D66DE98EF8E9ACE9B1E8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:fd:44:56:1d:b7:1a:ac:2d:ec:ac:d7:c9:a8:9c:e9:87:32:
         83:12:13:3d:3d:4c:76:f3:9e:2c:80:29:34:f9:17:c6:43:80:
         c2:2f:4f:b0:47:cf:99:3a:f1:71:8c:bc:f1:7f:e9:3f:ff:2a:
         73:a8:90:d0:34:25:f9:06:d0:8c:c5:4c:d1:74:34:be:c0:dc:
         ad:56:12:1b:13:5d:a9:ad:c5:f1:a8:56:ac:52:4b:6f:f7:a3:
         2b:2a:37:46:05:4d:b8:35:30:3f:dc:a7:a8:0b:15:4a:45:0a:
         d3:fd:1e:32:27:d3:3f:c8:14:a4:72:c4:b8:8a:f1:27:1a:00:
         d3:40:9b:b9:dd:38:c9:f1:3e:a2:55:73:a9:59:8a:fc:df:ae:
         b6:ca:63:97:7f:7e:19:04:e9:df:d0:22:ff:d4:da:a7:df:59:
         60:a8:ae:fe:b4:6e:4c:4a:73:db:01:f5:bc:5f:ef:82:d3:73:
         bf:57:2a:21:9f:ca:2e:1f:83:be:fa:1f:78:e6:a6:33:ec:30:
         3a:72:e9:4a:37:38:84:8e:41:b2:02:1e:a2:2f:ec:d3:a4:e0:
         1c:4b:02:c9:5b:73:d4:a8:a5:14:ea:ea:cd:29:ab:6a:54:fa:
         a3:8f:df:4f:b4:10:e5:46:ec:85:46:1d:0b:60:08:8b:a7:6e:
         c2:07:34:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----