This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft
File:                     38A93C81ECD308E6A7632717045B3D35150120F8.mft (raw, json)
Hash identifier:          ZNRzMEn9D+yWXvfWYBLszuDttRYCIjj+RWAWxFTOaVk=
Subject key identifier:   5A:BA:0F:56:D0:98:7A:A9:73:19:7A:BC:95:4E:A1:AF:0E:96:98:CA
Authority key identifier: 38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8
Certificate issuer:       /CN=38a93c81ecd308e6a7632717045b3d35150120f8
Certificate serial:       22F79715969F135038F03DCE4B3ACFAA71782559
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft
Manifest number:          01F6
Signing time:             Sat 06 Dec 2025 03:36:17 +0000
Manifest this update:     Sat 06 Dec 2025 03:31:17 +0000
Manifest next update:     Sun 07 Dec 2025 06:36:17 +0000
Files and hashes:         1: 34362e3138322e31382e302f32332d3234203d3e203433383437.roa (hash: DgeeTdS1cV2ARBxXa3eeMqv+51T6WTIRd1T4HPr/8JQ=)
                          2: 33312e3138352e3130362e302f32342d3234203d3e20333935333734.roa (hash: tjhKwoa/z/ms3eL96lf+MyeXfH8SFjq92hWldF9BNCA=)
                          3: 34362e3138322e31362e302f32332d3234203d3e203433383437.roa (hash: F7W4Y0kopCNp9aANYttCzP7MEuweGRC/BEFBXL6atVg=)
                          4: 33312e3138352e3130372e302f32342d3234203d3e20323134323038.roa (hash: iqiKl6+YIrHEBq6ZgXjEwpHNvYPhUvsfMc60LM1HGfk=)
                          5: 33312e3138352e3130342e302f32342d3234203d3e203433383437.roa (hash: ooBmQ0XsExl9P6cs22gk7QC3kfjfWk/6TOw3sS2GKWM=)
                          6: 33312e3138352e3130392e302f32342d3234203d3e2035303635.roa (hash: mN3Qu59H2oC79ZObPpdN6ubuCwdpq+KwMSfQr8+kwt4=)
                          7: 33312e3138352e3131312e302f32342d3234203d3e203433383437.roa (hash: jGy7NRXxpQ8Adk8KlwvLUXW9fgmGYykhrzR6k8tJHIg=)
                          8: 33312e3138352e3130352e302f32342d3234203d3e20343031373736.roa (hash: Wd2EFVccIS+53JZc9dBxMvZJP/AX4kzECnJdx5FY1Nk=)
                          9: 34362e3138322e32302e302f32342d3234203d3e203433383437.roa (hash: Zxw7HANZ4fSS/h6IwZB62HG+NMCfSONfC+RPVG/FTSE=)
                          10: 34362e3138322e32332e302f32342d3234203d3e203433383437.roa (hash: bxI8j0Q43fNYwFfEpnx3zZA+WfxxHOFpyLP15cwiRJc=)
                          11: 3138352e35382e3135372e302f32342d3234203d3e20383333.roa (hash: tzOQO8vLFzcY60oR2+1zeQgoBpJx0WPId4HsH1i4ZPg=)
                          12: 34362e3138322e32312e302f32342d3234203d3e203433383437.roa (hash: /UuXq/SkWF47gXFnW/T4vEllXZulBrt5hUqt6XmiJns=)
                          13: 326130323a323937303a3a2f32392d3438203d3e203433383437.roa (hash: Kp3fSAxGQhZt59WSUhuk3xyV289hXnpQJ6XN2ox7Plw=)
                          14: 34362e3138322e32322e302f32342d3234203d3e203432383331.roa (hash: 01LOWf7MxhRX+2Op4rDN5W7ucn6FteIUTuCGEpIiXqg=)
                          15: 33312e3138352e3131302e302f32342d3234203d3e203433383437.roa (hash: YFUHOvZUTuDXo1v/ldHHqjI9VjtTCBbJBPcqOziNAKY=)
                          16: 3138352e35382e3135362e302f32342d3234203d3e20333935373933.roa (hash: 2aiAtkkpFlb5J4UKg3KwRnaG7ituhGEa6s/dcTUAgJQ=)
                          17: 3138352e35382e3135382e302f32342d3234203d3e203239303636.roa (hash: V5B4QzWLoE4oAz8O3q7zQJ3sjBQn40pU580oRG+qryA=)
                          18: 3138352e35382e3135392e302f32342d3234203d3e203633313530.roa (hash: DOt+xOMDogaXujbawrGL0U15zCSEQeK/RAeOdZ56ezk=)
                          19: 33312e3138352e3130352e302f32342d3234203d3e203235313938.roa (hash: kyh+2zEsw4AdBrsVJKPPyxUgwYv7z5eoBZj4rdm+U0I=)
                          20: 33312e3138352e3130382e302f32342d3234203d3e203133333335.roa (hash: jK9tTJ3HWkDECaNJJZCeSwWGUPLGyK3Y5TeyBPZZ8ds=)
                          21: 38A93C81ECD308E6A7632717045B3D35150120F8.crl (hash: 87xoU2nuislCp0NQb5D1UlXPx+voq9yXgGXJnlfxNr8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 06:36:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:f7:97:15:96:9f:13:50:38:f0:3d:ce:4b:3a:cf:aa:71:78:25:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38a93c81ecd308e6a7632717045b3d35150120f8
        Validity
            Not Before: Dec  6 03:31:17 2025 GMT
            Not After : Dec  7 06:36:17 2025 GMT
        Subject: CN=5ABA0F56D0987AA973197ABC954EA1AF0E9698CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:54:25:ff:17:56:89:35:00:2a:44:89:e2:5f:
                    23:c4:70:ea:4b:b6:d7:48:ae:77:a7:f5:5e:d5:e1:
                    d2:bc:18:b0:01:46:71:1a:1f:86:1e:a6:73:f7:d7:
                    6f:6b:a5:b7:5e:6c:43:23:0a:d5:19:1d:1e:3b:e7:
                    d6:7a:ec:77:4f:68:d1:5b:9d:03:71:1d:4b:49:d3:
                    d0:9e:ab:28:1b:75:6a:93:8f:12:3f:78:f2:86:2f:
                    11:62:d5:58:85:c2:b1:f3:50:32:b3:3c:50:2c:27:
                    0b:9e:e7:26:f2:04:85:83:cc:76:64:b2:7c:55:16:
                    0e:e6:c3:0d:b2:13:df:66:a7:6b:c2:8a:40:1a:17:
                    b6:e6:8b:5f:9f:86:9e:28:f9:39:8f:66:29:bc:37:
                    c0:57:ca:88:ec:00:5e:b0:3b:ed:27:47:fa:6f:ba:
                    4a:77:67:7b:87:8b:66:76:de:4f:78:cc:83:0d:2b:
                    73:50:f8:09:e7:0c:02:9e:09:3f:d1:31:c5:c6:49:
                    22:f3:1e:fd:a1:73:79:8b:94:f8:be:b0:37:cf:21:
                    c2:b9:27:aa:94:5a:24:bf:a3:af:8f:99:71:87:2a:
                    9f:08:b9:6c:25:7e:20:e0:64:26:7c:62:bc:c6:12:
                    4e:2d:c7:47:a5:05:f6:98:79:c7:f6:fa:75:92:d3:
                    58:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:BA:0F:56:D0:98:7A:A9:73:19:7A:BC:95:4E:A1:AF:0E:96:98:CA
            X509v3 Authority Key Identifier:
                keyid:38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:6d:be:c9:5a:e3:00:38:8e:38:7e:24:50:70:2a:90:b4:6e:
         4e:d3:8f:09:79:e4:1c:1d:99:51:9a:3e:bc:85:fb:81:e2:1b:
         0a:76:5a:8d:d6:a6:7a:4d:eb:2e:19:f9:48:f5:19:8a:8f:f6:
         b6:a5:c5:5d:ff:8b:c7:a7:5d:2b:39:a1:ed:e1:ce:9c:5a:52:
         31:bd:6f:48:14:f7:7c:73:89:ef:c2:4f:3f:d0:4f:c9:81:ed:
         04:bc:dc:e4:29:d8:c8:63:d3:32:d0:e8:0a:52:ce:60:cc:f7:
         6c:1f:dd:46:39:b7:dc:bd:20:b7:7d:e2:dd:19:3b:73:af:73:
         5b:2f:a8:48:a6:69:d7:e3:48:bb:e6:f2:25:b4:50:2d:2e:e9:
         68:94:26:1e:cc:ab:88:62:47:de:30:43:2f:08:79:d9:63:02:
         3f:46:40:e9:44:90:f0:d6:74:db:3c:c0:13:91:1c:94:c3:4e:
         bc:64:5d:30:69:59:6c:ec:56:f9:8d:9f:d2:1e:d8:03:b1:c4:
         ed:9d:e5:30:04:e9:32:75:b6:c5:d4:47:56:2a:c1:10:d5:b0:
         41:64:8a:a6:d0:66:ed:1a:46:96:27:e6:0a:92:c5:6a:c6:5a:
         7c:5f:94:69:44:4e:f8:f4:56:94:43:90:c8:8d:17:47:ee:35:
         02:3b:cf:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:56:48 2025 by rpki-client