This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft
File:                     830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft (raw, json)
Hash identifier:          bsUjKr4fqd9s0Yyrk8M2zEsMQc8Lm3SbWjickvT+v3A=
Subject key identifier:   4B:5E:E8:54:C2:7B:94:68:BF:A2:AF:A4:17:06:06:1A:D6:B5:EC:58
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Certificate issuer:       /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial:       2A53C74D61707B51FC6D82369DDAFE18D7C66993
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft
Manifest number:          04CF
Signing time:             Sat 06 Dec 2025 03:56:17 +0000
Manifest this update:     Sat 06 Dec 2025 03:51:17 +0000
Manifest next update:     Sun 07 Dec 2025 05:19:17 +0000
Files and hashes:         1: 34352e3134352e3234322e302f32342d3234203d3e203631333137.roa (hash: pTg06oxajXpI71ZXI8g/lx5GH1NCIopoua34IGLJlFw=)
                          2: 34352e39332e3138342e302f32342d3234203d3e20323135333438.roa (hash: WuhjfEGxgnUblhWiSTciY5olX30b9mmfrhJBU4OPYFY=)
                          3: 34352e3134302e33392e302f32342d3234203d3e20323132333834.roa (hash: L7EHGwvWSSXWjiN+ge5rSBcePeV6DFnXvflhKIMhGIM=)
                          4: 3138352e3235302e34322e302f32332d3233203d3e203338313935.roa (hash: N+mjQzTN9eKn05wWYxGO3ym5VpigEEyuw5Wil2CeqM0=)
                          5: 34352e38392e3134382e302f32342d3234203d3e20383334.roa (hash: ki/pcyuH2oQnNxGewu9O7dVDAycqc8JTHvcXH18lbXw=)
                          6: 830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl (hash: U+HxsN+JofJZEVq+yTHVJvn8OHlCNNdubeB6aXf5ViI=)
                          7: 34352e3134302e33382e302f32342d3234203d3e203330363434.roa (hash: pgys4dKx+35Hg2BzEkcta2TxxholJ1T4995uIhT8Aeg=)
                          8: 3138352e3235302e34302e302f32342d3234203d3e2035303635.roa (hash: vADHpi7lqq2FTz+I44BCLsWOTCezg1eq9mEd669wIuU=)
                          9: 34352e3133322e3231372e302f32342d3234203d3e20333935333734.roa (hash: 3xSg64X6b/VGeaW1sbUHbRQvvDa5xSkfsAgZrM/ksog=)
                          10: 34352e3133322e3231382e302f32342d3234203d3e20383334.roa (hash: pbWgbf3Z9k/Vp5McQhjO5BRe+dobiN8M8hutoOHnDIA=)
                          11: 34352e3132382e31322e302f32342d3234203d3e20313336353537.roa (hash: Og0W7TwDKg18gSOzRskc5OEF19lsnNis615D+7M7BhY=)
                          12: 34352e3134352e3234332e302f32342d3234203d3e20313337323335.roa (hash: Vyj6lQsSFmsAqcK6RGLYVMn7iV5vJhAX4GBUoB1+oMo=)
                          13: 34352e3132382e31332e302f32342d3234203d3e20313939393235.roa (hash: s2TQDlDgm+LKEqHBlB2hd8f187DM1tFrRFf93seXSWo=)
                          14: 34352e3134352e3234312e302f32342d3234203d3e20383334.roa (hash: pPd1T7/n7wSEex84D0bbPA7sw5pSmXLYFj3f9wYPbC0=)
                          15: 34352e39332e3138352e302f32342d3234203d3e2039303039.roa (hash: YsgVKvqjDSfl5cY3VgnMOM/cSxhu5cHJw+NQE7V5wtA=)
                          16: 34352e38392e3135302e302f32332d3234203d3e20313532313739.roa (hash: hd+a1khpY29A3GDYfNLzWao9yX3aCS4vUId7ZnXPCC4=)
                          17: 34352e38392e3135302e302f32332d3234203d3e20323130353432.roa (hash: Ymdbnf0H8VIDp2h5OwlBLkLPkpG++nC20m+3X7rdp/E=)
                          18: 34352e3134302e33362e302f32342d3234203d3e203136323736.roa (hash: bbdkgz3gQGx4brckdYck4FKHluP707hNf2aov4e5c2A=)
                          19: 34352e3132382e31322e302f32332d3234203d3e20383334.roa (hash: eLJWCWbxEQgDeE1wotxgC/UVUKhDY5SIchlsKqSoar0=)
                          20: 3138352e3235302e34312e302f32342d3234203d3e20383334.roa (hash: TMPX219AVqeVt8TCx3hdL3+PdjuG6qjdSrAINRTXrt8=)
                          21: 34352e38392e3134392e302f32342d3234203d3e20323131333538.roa (hash: 7hEY4PvjevEdogEK3IQfi0ZGG7MoYwNsCNzlxYL+LCw=)
                          22: 34352e3134352e3234302e302f32342d3234203d3e20323639303730.roa (hash: ZZTeFnnkmIFoyKByZKAoXkqiW3x9U8bfEnkF0EICwb0=)
                          23: 34352e38392e3135302e302f32332d3234203d3e20313338393937.roa (hash: smn3sboQyoA3CPmf3JjoxNaRPhD1ofeV3o7i3x5m8hU=)
                          24: 326130653a666363303a3a2f32392d3239203d3e20323031393633.roa (hash: 8+yPsa43TFpd5bryniVq+R/mS0l3RvJVwdUmjJuuDIk=)
                          25: 34352e39332e3138362e302f32332d3234203d3e2033333230.roa (hash: QsFkBfitbwvpDW+gZ0ARVvjc1k4LIU/KZWDeJAgWITQ=)
                          26: 34352e3134302e33372e302f32342d3234203d3e20323638363234.roa (hash: FqBzJG7QyS5rhAL6kP0DnaUbBW+1O9qvi1K+fqN47FU=)
                          27: 34352e3132382e31342e302f32332d3233203d3e20323734373836.roa (hash: V6mtJWR732G/FJGWxHZiLboD66+fB4OqjGMzuHg8F6s=)
                          28: 34352e3133322e3231362e302f32342d3234203d3e203232343237.roa (hash: tUuPnhV53bW4URPIQtmcdJ9t+c19vj++YF4z51T+ooE=)
                          29: 34352e3133322e3231392e302f32342d3234203d3e203536393133.roa (hash: LgxsptwYXiKaAUBWPl2FzHApl9GRPHPCKLBon5Z4Y1I=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:53:c7:4d:61:70:7b:51:fc:6d:82:36:9d:da:fe:18:d7:c6:69:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
        Validity
            Not Before: Dec  6 03:51:17 2025 GMT
            Not After : Dec  7 05:19:17 2025 GMT
        Subject: CN=4B5EE854C27B9468BFA2AFA41706061AD6B5EC58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c3:89:fb:4c:d9:2f:ac:2b:94:39:d0:9d:f1:
                    09:cc:35:31:e7:65:23:69:b6:6e:4f:4c:18:87:5f:
                    3a:b9:b4:e0:be:c2:19:58:5a:52:49:26:16:2f:6c:
                    61:de:27:83:44:55:70:1f:f1:b1:79:bd:00:0a:9c:
                    c4:4c:60:8b:e4:18:74:93:ba:ba:8f:bf:a1:b2:b4:
                    ef:6c:47:04:be:e2:5b:62:7f:48:31:86:dd:d1:ae:
                    48:35:4b:a9:e3:30:4a:8b:e5:d7:5d:89:5a:1f:56:
                    f3:1d:58:dc:26:ca:5c:3c:0b:c1:d2:3a:45:c7:83:
                    ef:5c:29:74:0c:7a:62:e8:44:55:9f:9d:f6:ea:c7:
                    81:ac:74:6e:b6:e4:95:f8:7c:a9:31:b9:c3:24:f3:
                    85:fd:4a:af:c3:ce:10:77:0f:3a:85:8a:c1:8e:24:
                    c4:a5:8e:26:15:85:aa:c7:39:70:7b:a1:be:0f:b9:
                    b1:e1:14:0a:b7:3a:43:d0:81:2a:e9:81:e1:39:8c:
                    a7:78:a8:7b:a8:de:24:5d:38:c0:61:e2:d7:c1:a9:
                    a3:f5:6b:e2:57:16:18:2d:b4:82:27:93:3a:52:d8:
                    31:c2:c5:1a:51:4b:62:13:b5:2e:b0:e6:d5:5a:a8:
                    6c:a8:48:56:27:5c:01:3f:6e:48:b8:ca:28:2a:25:
                    a5:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:5E:E8:54:C2:7B:94:68:BF:A2:AF:A4:17:06:06:1A:D6:B5:EC:58
            X509v3 Authority Key Identifier:
                keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:e6:2a:14:6a:0f:52:e6:8a:c8:86:e3:4d:63:e4:b9:df:7d:
         87:ae:c8:9c:b5:7f:a4:4b:bd:d1:e4:9a:f0:e1:68:18:d3:01:
         c7:d8:62:7c:1e:74:c8:8f:04:d0:2c:f9:ca:03:9f:8a:e4:43:
         d4:7a:38:02:5a:e3:9b:9f:77:f4:be:3d:53:4d:94:28:b5:aa:
         e4:3c:f3:10:7e:a7:c8:2e:0d:0e:18:35:e3:93:4a:96:a0:d9:
         ad:ab:bf:88:06:63:7b:54:86:3c:e3:08:c6:9b:69:54:d0:9f:
         18:0a:98:a0:f0:f1:46:9b:95:b1:22:2c:6b:ac:90:a7:67:d1:
         48:f4:5e:ff:46:e7:62:41:cf:2c:c7:ba:d6:df:c5:db:24:33:
         6c:33:b1:eb:cc:6d:9a:bb:f3:5b:eb:32:19:0c:79:fa:7a:45:
         e1:6a:30:77:5e:69:94:88:3b:e8:b4:f9:52:e6:64:24:3c:78:
         f7:12:4b:74:ab:8e:37:80:84:07:47:16:7c:60:68:a0:4f:6a:
         61:73:30:c2:23:b3:09:b2:94:86:1f:df:d2:b5:12:ac:c4:05:
         a4:be:0f:a1:60:53:65:c4:f7:ed:fa:01:38:ec:f2:fd:57:9e:
         7e:ed:9a:92:f4:ec:ca:90:a7:cb:f9:99:c5:6c:f6:7f:f5:d9:
         47:91:54:55
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUKlPHTWFwe1H8bYI2ndr+GNfGaZMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODMwZTA2NDE5ZmM0NmEyODAyZjZmMDNiNzEzNjhhYzdi
YWFmNjRjZTAeFw0yNTEyMDYwMzUxMTdaFw0yNTEyMDcwNTE5MTdaMDMxMTAvBgNV
BAMTKDRCNUVFODU0QzI3Qjk0NjhCRkEyQUZBNDE3MDYwNjFBRDZCNUVDNTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7w4n7TNkvrCuUOdCd8QnMNTHn
ZSNptm5PTBiHXzq5tOC+whlYWlJJJhYvbGHeJ4NEVXAf8bF5vQAKnMRMYIvkGHST
urqPv6GytO9sRwS+4ltif0gxht3Rrkg1S6njMEqL5dddiVofVvMdWNwmylw8C8HS
OkXHg+9cKXQMemLoRFWfnfbqx4GsdG625JX4fKkxucMk84X9Sq/DzhB3DzqFisGO
JMSljiYVharHOXB7ob4PubHhFAq3OkPQgSrpgeE5jKd4qHuo3iRdOMBh4tfBqaP1
a+JXFhgttIInkzpS2DHCxRpRS2ITtS6w5tVaqGyoSFYnXAE/bki4yigqJaVXAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUS17oVMJ7lGi/oq+kFwYGGta17FgwHwYDVR0j
BBgwFoAUgw4GQZ/EaigC9vA7cTaKx7qvZM4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOGUwZDZhNGQtYmE2Ny00OTc5LThkMTItMGVkNDc0OGZj
ODZlLzAvODMwRTA2NDE5RkM0NkEyODAyRjZGMDNCNzEzNjhBQzdCQUFGNjRDRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2d3NEdRWl9FYWlnQzl2QTdjVGFLeDdx
dlpNNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ZTBkNmE0ZC1i
YTY3LTQ5NzktOGQxMi0wZWQ0NzQ4ZmM4NmUvMC84MzBFMDY0MTlGQzQ2QTI4MDJG
NkYwM0I3MTM2OEFDN0JBQUY2NENFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPeYqFGoPUuaKyIbjTWPk
ud99h67InLV/pEu90eSa8OFoGNMBx9hifB50yI8E0Cz5ygOfiuRD1Ho4Alrjm593
9L49U02UKLWq5DzzEH6nyC4NDhg145NKlqDZrau/iAZje1SGPOMIxptpVNCfGAqY
oPDxRpuVsSIsa6yQp2fRSPRe/0bnYkHPLMe61t/F2yQzbDOx68xtmrvzW+syGQx5
+npF4Wowd15plIg76LT5UuZkJDx49xJLdKuON4CEB0cWfGBooE9qYXMwwiOzCbKU
hh/f0rUSrMQFpL4PoWBTZcT37foBOOzy/Veefu2akvTsypCny/mZxWz2f/XZR5FU
VQ==
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:43:00 2025 by rpki-client