This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft
File:                     1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft (raw, json)
Hash identifier:          azhNGtAU+vfyI7RE6EitmBhArcW18vYT5IEeImxyDlA=
Subject key identifier:   F8:A8:D4:D3:E1:1B:69:C6:37:7D:37:23:37:11:5A:2A:C9:90:BC:7B
Authority key identifier: 1D:BD:1D:47:FD:8E:45:74:C8:42:17:43:C9:CC:5F:0E:F8:3E:0E:71
Certificate issuer:       /CN=1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71
Certificate serial:       1ED0B0202A43BC0828DDFBF1752B9833E7BCF732
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft
Manifest number:          034D
Signing time:             Thu 18 Dec 2025 19:51:39 +0000
Manifest this update:     Thu 18 Dec 2025 19:46:39 +0000
Manifest next update:     Fri 19 Dec 2025 21:06:39 +0000
Files and hashes:         1: 326131343a316563373a663030303a3a2f34302d3430203d3e20323038343533.roa (hash: kUd+OV7q9DAowS2L3/fdq/oS4HUMTFtScny+gWU7CG0=)
                          2: 1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl (hash: vORkR+PvZS+vXOy8I5spaGDr5e+J7bkgryhEpS8NRdM=)
                          3: 326131343a316563373a663030663a3a2f34382d3438203d3e20323038343533.roa (hash: ZBQrTYQq6EzEXXQqVVLmnECxmx5vDStz1fI8gjrWa9o=)
                          4: 326131343a316563373a663030643a3a2f34382d3438203d3e20323136313133.roa (hash: RA+L2a9rUnQEkE0h3dE9SdgUVHKokLJZl3eEmnwupDU=)
                          5: 326131343a316563373a663030653a3a2f34382d3438203d3e203336383332.roa (hash: NchO6Xk6Xarz93hp9H8fOtN5l3Sk4YKm9dDl0QiIwEY=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 21:06:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:d0:b0:20:2a:43:bc:08:28:dd:fb:f1:75:2b:98:33:e7:bc:f7:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71
        Validity
            Not Before: Dec 18 19:46:39 2025 GMT
            Not After : Dec 19 21:06:39 2025 GMT
        Subject: CN=F8A8D4D3E11B69C6377D372337115A2AC990BC7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:4e:d0:4d:d5:7a:c1:97:cc:40:7a:7a:24:08:
                    5c:57:cb:c6:24:13:20:c5:6d:71:64:da:8d:cd:3d:
                    a2:ff:4e:f5:4b:42:42:c8:1d:a4:8e:27:2b:69:b4:
                    fd:a5:ca:ce:b9:d4:64:48:6a:a0:97:dd:48:ca:e6:
                    1c:5d:97:de:31:fb:b3:43:9a:1f:f8:b6:92:45:fe:
                    66:6c:86:39:a7:74:e1:d6:31:e4:df:77:2d:d3:c7:
                    88:a2:06:ae:fd:6f:40:20:6e:cc:2d:46:30:3e:73:
                    57:55:67:d6:64:ad:71:54:39:8f:74:c7:0e:19:50:
                    de:e4:0e:d5:01:a2:25:99:3a:34:e7:3b:4b:2b:5c:
                    73:62:26:2a:99:76:18:fd:8a:b5:85:e0:7a:9a:8a:
                    24:2d:04:36:0d:cb:ee:8f:81:8a:63:56:79:6a:ee:
                    e3:e5:30:48:1f:31:c6:ce:fd:5e:06:73:62:60:77:
                    28:d9:2d:b5:db:5c:b3:a0:bc:d1:99:d0:91:83:b8:
                    4a:6a:bd:37:b1:73:cc:55:f7:2e:b7:f2:26:69:37:
                    b1:bd:da:e8:5c:c7:69:78:f6:43:99:4e:00:6c:69:
                    d1:29:30:31:ef:75:00:cd:c9:a7:dc:12:54:01:4f:
                    95:86:97:ad:fe:00:10:18:74:83:eb:54:07:40:4c:
                    54:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:A8:D4:D3:E1:1B:69:C6:37:7D:37:23:37:11:5A:2A:C9:90:BC:7B
            X509v3 Authority Key Identifier:
                keyid:1D:BD:1D:47:FD:8E:45:74:C8:42:17:43:C9:CC:5F:0E:F8:3E:0E:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:ad:3f:29:81:7a:0d:de:6e:b2:bc:9d:5e:ee:9d:34:a4:17:
         cf:32:2d:7c:5b:b4:fc:8e:b4:10:92:ca:ee:00:0b:23:b4:98:
         6f:56:83:82:ab:47:3c:03:ad:5f:a9:06:95:7a:2c:48:b7:4e:
         d8:2d:b5:f4:9e:8e:c0:e1:bb:51:dc:3a:f2:c9:b2:ea:89:b0:
         c9:94:96:59:81:59:03:28:c1:69:0c:b1:d6:19:79:39:ea:f7:
         8a:dc:b0:41:39:df:c8:87:9b:ca:98:cf:34:a5:5c:f2:96:e7:
         9b:31:83:0f:63:30:11:8c:db:eb:f0:ad:97:e5:f5:1f:c4:3e:
         61:5a:b9:76:b7:f4:94:8e:d6:5a:7e:a5:81:90:3c:f7:48:d8:
         25:43:01:fb:43:b4:a0:98:c1:9f:96:29:4f:aa:72:3f:18:dc:
         e5:9b:cb:e4:3f:a9:7a:16:c8:e1:c0:95:5e:f5:0d:fa:5d:96:
         3a:1d:74:3d:03:e3:85:4c:c9:a6:aa:2b:0c:a0:d9:b9:26:25:
         20:f6:81:fc:80:6f:bd:82:d9:5a:52:6d:a4:19:67:3e:31:45:
         5b:33:98:94:6b:95:3d:6b:ab:c0:98:11:33:6e:ba:8d:28:b2:
         c5:55:db:de:3d:c2:49:bf:eb:fb:19:32:d7:52:90:d3:ea:ff:
         2c:d6:f2:a2
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUHtCwICpDvAgo3fvxdSuYM+e89zIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMURCRDFENDdGRDhFNDU3NEM4NDIxNzQzQzlDQzVGMEVG
ODNFMEU3MTAeFw0yNTEyMTgxOTQ2MzlaFw0yNTEyMTkyMTA2MzlaMDMxMTAvBgNV
BAMTKEY4QThENEQzRTExQjY5QzYzNzdEMzcyMzM3MTE1QTJBQzk5MEJDN0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnTtBN1XrBl8xAenokCFxXy8Yk
EyDFbXFk2o3NPaL/TvVLQkLIHaSOJytptP2lys651GRIaqCX3UjK5hxdl94x+7ND
mh/4tpJF/mZshjmndOHWMeTfdy3Tx4iiBq79b0AgbswtRjA+c1dVZ9ZkrXFUOY90
xw4ZUN7kDtUBoiWZOjTnO0srXHNiJiqZdhj9irWF4HqaiiQtBDYNy+6PgYpjVnlq
7uPlMEgfMcbO/V4Gc2JgdyjZLbXbXLOgvNGZ0JGDuEpqvTexc8xV9y638iZpN7G9
2uhcx2l49kOZTgBsadEpMDHvdQDNyafcElQBT5WGl63+ABAYdIPrVAdATFR/AgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQU+KjU0+EbacY3fTcjNxFaKsmQvHswHwYDVR0j
BBgwFoAUHb0dR/2ORXTIQhdDycxfDvg+DnEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE0NzZkNjItOWNmYS00ODcxLWEyZDktZmFkZjU3ODFj
MTFiLzIvMURCRDFENDdGRDhFNDU3NEM4NDIxNzQzQzlDQzVGMEVGODNFMEU3MS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05OGE0LTRj
N2UtYTBlMS04MDU3YTRmMDg2YzkvMC8xREJEMUQ0N0ZEOEU0NTc0Qzg0MjE3NDND
OUNDNUYwRUY4M0UwRTcxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzcxNDc2ZDYyLTljZmEtNDg3MS1hMmQ5LWZhZGY1NzgxYzExYi8yLzFEQkQxRDQ3
RkQ4RTQ1NzRDODQyMTc0M0M5Q0M1RjBFRjgzRTBFNzEubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQABrT8p
gXoN3m6yvJ1e7p00pBfPMi18W7T8jrQQksruAAsjtJhvVoOCq0c8A61fqQaVeixI
t07YLbX0no7A4btR3DryybLqibDJlJZZgVkDKMFpDLHWGXk56veK3LBBOd/Ih5vK
mM80pVzyluebMYMPYzARjNvr8K2X5fUfxD5hWrl2t/SUjtZafqWBkDz3SNglQwH7
Q7SgmMGflilPqnI/GNzlm8vkP6l6FsjhwJVe9Q36XZY6HXQ9A+OFTMmmqisMoNm5
JiUg9oH8gG+9gtlaUm2kGWc+MUVbM5iUa5U9a6vAmBEzbrqNKLLFVdvePcJJv+v7
GTLXUpDT6v8s1vKi
-----END CERTIFICATE-----