This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
File:                     92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft (raw, json)
Hash identifier:          KVcfR2As1mfSnBgUDDaYshalHLrN9ukBZXOzmezDg34=
Subject key identifier:   C0:8F:DF:E8:42:90:4C:CA:24:D3:21:2F:03:F8:D1:B4:35:68:53:06
Authority key identifier: 92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94
Certificate issuer:       /CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
Certificate serial:       1B9FE4E8DD49A1DE459AC50518AD1FF101863467
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
Manifest number:          013F
Signing time:             Sat 06 Dec 2025 06:06:17 +0000
Manifest this update:     Sat 06 Dec 2025 06:01:17 +0000
Manifest next update:     Sun 07 Dec 2025 06:10:17 +0000
Files and hashes:         1: 92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl (hash: PMvXw3CtExDjBktbMZmoJOIYK30wMXBIipAGzS12Zw8=)
                          2: 34352e3135362e35322e302f32322d3232203d3e2039303039.roa (hash: eK18gsMy8+wzgYZmaz7TkcO08JcfPTkHAWlv0aJXuz0=)
                          3: 39352e3231342e3137332e302f32342d3234203d3e20323035383836.roa (hash: hlOWlwYDh27EwXxqncP4qruI2Plo8gnGCk/gZpUDCgY=)
                          4: 39352e3231342e3138302e302f32342d3234203d3e20323033373538.roa (hash: yeHT2siMw+46e40lrxlb+yyyQe2+Rk/4CH0GwC6laEg=)
                          5: 3138352e3131352e3230372e302f32342d3234203d3e20323132333336.roa (hash: yFl38PxDDUPllDewnZ7MEFH9Z5qJaOTL0zY/pvxRoUY=)
                          6: 39352e3231342e3138322e302f32342d3234203d3e20323131343135.roa (hash: 7RDjli52ea3Y5rIxOBi7CoAOYzObgN76cF1oNhGaH/0=)
                          7: 39352e3231342e3138312e302f32342d3234203d3e20323132323338.roa (hash: P3AXSCPo5qCcqJ/tF9UnDRiSqmNKJoNVWYccPe9dv1w=)
                          8: 39352e3231342e3138332e302f32342d3234203d3e20323039313831.roa (hash: lTsB3YA1lHFbSl1Cmaufvak87ZyxIaRmoFdP+J/wwxc=)
                          9: 34352e3135362e35322e302f32322d3234203d3e2039303039.roa (hash: Bs9P6MukVIk3Mqg2bASja42eYp9YV11upUqwTKj8Pqc=)
                          10: 34352e3133392e3139392e302f32342d3234203d3e20323134343636.roa (hash: JaeJstE2poR1Rlm8a7RHcBFfHeeu7vNkxKzYr0p4Jc8=)
                          11: 39352e3231342e3137332e302f32342d3234203d3e203235313938.roa (hash: ZBwA38W5ihOuNN99BklpNu84rXSZQZCwBh8vdc50O64=)
                          12: 34352e3133392e3139382e302f32342d3234203d3e20323134343636.roa (hash: 9KX5zC7UuI47N7heL//vNyLO3x7YEi1CucEhFX8SUR0=)
                          13: 39352e3231342e3138322e302f32342d3234203d3e20323132333834.roa (hash: ahvCpQCYKDC5UmCWINUE1+9+R3CEuxDs9xpt+/mHGMc=)
                          14: 39352e3231342e3138322e302f32342d3234203d3e20323132363039.roa (hash: AjgG1gM1OxMVlGFutJS1mpX2Qd4qqtcRZt6UVKIG+j4=)
                          15: 34352e3135362e35322e302f32342d3234203d3e2039303039.roa (hash: TVTxbW5Hn/uwBDAOJAxsysgEid6g/rYwKpFkj0KhHLI=)
                          16: 39352e3231342e3137342e302f32342d3234203d3e20323134343636.roa (hash: EnyfxlxrEZoOAQu439Mhaj0MSgN4o3Cr584mhVLUCgw=)
                          17: 39352e3231342e3137322e302f32342d3234203d3e20313937343737.roa (hash: y8hcJrulcRceTx871qhtDNBcbMxDEQZoJON7Dc+UpGA=)
                          18: 39352e3231342e3137352e302f32342d3234203d3e20313335333931.roa (hash: dZLABnxKpTxFiKmt1/yK20i3zGqpWgZ6NnQoPD/883U=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:9f:e4:e8:dd:49:a1:de:45:9a:c5:05:18:ad:1f:f1:01:86:34:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
        Validity
            Not Before: Dec  6 06:01:17 2025 GMT
            Not After : Dec  7 06:10:17 2025 GMT
        Subject: CN=C08FDFE842904CCA24D3212F03F8D1B435685306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e8:0f:4a:14:7e:ca:4d:71:24:2d:95:6e:8b:
                    f2:e5:0b:70:e5:87:a2:be:99:69:aa:9f:e2:c6:5f:
                    bf:2e:5f:06:f4:83:d5:92:83:f5:e3:3c:ef:ec:8c:
                    25:1c:51:f4:65:df:74:13:c7:c8:6c:5c:f6:a7:03:
                    96:a1:93:a3:5f:ff:70:25:69:0d:36:ed:5c:4a:b7:
                    76:95:4d:e4:31:17:c8:6f:a7:ac:45:eb:f3:4c:c5:
                    50:72:8b:62:ab:bc:c0:50:01:87:09:a0:a4:73:bb:
                    fb:15:c3:5f:65:ba:b6:25:1a:8c:b1:80:10:ec:d9:
                    68:dc:9b:2b:9c:e2:bd:c3:66:72:b7:7d:1a:d5:c6:
                    aa:dd:5b:eb:ca:c5:49:c8:93:0d:80:e7:d2:1a:75:
                    da:31:a8:06:f0:16:98:be:7c:8f:b4:c4:4d:26:22:
                    e5:6f:3a:fd:17:6a:34:60:2c:c4:58:3a:29:bc:3c:
                    d9:a5:61:f0:83:46:35:be:5b:63:ed:92:5d:06:e0:
                    90:58:59:e7:e8:53:ac:79:bf:74:8e:59:98:7f:9d:
                    ff:09:fc:47:3f:82:fc:34:35:5b:2c:ab:36:eb:ed:
                    46:8a:ae:b2:8e:b9:7b:55:20:a8:72:23:7a:9c:0e:
                    c5:19:a3:fe:2d:17:8a:db:1c:7e:74:2a:87:df:ff:
                    e5:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:8F:DF:E8:42:90:4C:CA:24:D3:21:2F:03:F8:D1:B4:35:68:53:06
            X509v3 Authority Key Identifier:
                keyid:92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:6d:9f:5d:2d:60:17:64:4a:88:29:5d:37:70:c4:85:0e:e7:
         ef:bf:3f:48:26:b5:41:44:88:98:95:9e:a9:07:25:e6:75:cd:
         71:dd:f9:14:1d:a0:33:0c:d6:7f:78:4c:29:4e:db:aa:93:33:
         dc:dc:28:43:60:3b:d9:5e:4f:ad:fb:c0:67:60:9a:80:b0:b1:
         93:e6:e0:0e:84:77:f6:3c:00:3b:18:fc:c0:25:41:0a:75:1c:
         1f:b7:ad:14:bb:2f:a5:70:25:0a:c2:40:3d:d5:8d:ed:ba:2d:
         c5:88:51:3d:f4:da:87:29:41:d8:89:c7:14:c5:d3:9c:c8:ce:
         c0:41:df:74:35:6c:4c:f8:6f:19:24:b8:17:29:71:7d:88:90:
         de:4c:72:86:0c:12:0c:be:5f:92:cd:de:28:4f:5e:fd:41:10:
         ac:5e:73:68:b5:f4:7e:40:9b:b0:45:0b:7d:d8:d3:0d:89:0b:
         42:34:4e:79:00:a4:0a:f4:0e:3b:bf:0e:4d:a4:1c:2e:a1:1e:
         bb:bc:7e:ec:22:44:a7:fe:7e:83:c3:28:4f:97:81:c5:4d:fe:
         56:c7:7a:a9:a2:b9:e7:65:24:bd:67:5d:89:82:58:22:bf:96:
         0c:b4:4d:64:e6:03:3d:4a:cb:91:09:ec:bf:2c:24:3d:2f:c0:
         e7:3c:8d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:29:17 2025 by rpki-client