This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.mft
File:                     87A4C84D4366DBB15A9090A55AA2DCEBA8723945.mft (raw, json)
Hash identifier:          8Uk4BcwxO4cya9mOZcmwRSqXHjnt6ulgdtP0kB3kPtE=
Subject key identifier:   58:DD:D8:07:D6:7B:9E:73:27:19:2C:EB:D1:4B:2D:BC:A8:2C:AC:A5
Authority key identifier: 87:A4:C8:4D:43:66:DB:B1:5A:90:90:A5:5A:A2:DC:EB:A8:72:39:45
Certificate issuer:       /CN=87A4C84D4366DBB15A9090A55AA2DCEBA8723945
Certificate serial:       6D0D9ED8E4950BF0264AD4AEB822ABF80FDFAD16
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.mft
Manifest number:          0135
Signing time:             Sat 06 Dec 2025 05:14:17 +0000
Manifest this update:     Sat 06 Dec 2025 05:09:17 +0000
Manifest next update:     Sun 07 Dec 2025 06:24:17 +0000
Files and hashes:         1: 326131343a373538303a666634353a3a2f34382d3438203d3e20323134333434.roa (hash: 5PYc1rYfh5soL/5eOkdLi7LFwnLpj6iEncugTNMnU6k=)
                          2: 326131343a373538313a393966313a3a2f34382d3438203d3e20323134333434.roa (hash: eBRv+uDGLUqSp7a6GG/a9BPTN3/sPy8oPhg1ivi/5ik=)
                          3: 326131343a373538303a666634303a3a2f34382d3438203d3e20323134333434.roa (hash: dPCGiKkWz0E9rMprVOstBFLQuVK9OG6CBSKX+fk7UXw=)
                          4: 326131343a373538313a393939393a3a2f34382d3438203d3e20323134333434.roa (hash: gWNOGizaCWeT+eChfA6O1CcYgC4CppF3JVd8ZgY0qsY=)
                          5: 326131343a373538303a666634323a3a2f34382d3438203d3e20323134333434.roa (hash: 9k9VorkprwzOj4hWnDvwpKS020LK9HlBFwzRrzgLjKw=)
                          6: 326131343a373538303a666634363a3a2f34382d3438203d3e20323134333434.roa (hash: INfgk/A/FB6y22LomhkCbMfma8QUd57K4w9Tk5H86CM=)
                          7: 326131343a373538303a666634313a3a2f34382d3438203d3e20323134333434.roa (hash: pdCqfiQKAk5mpE38Sur9HB4NVG9NXvRtOzzMMORY0Ss=)
                          8: 326131343a373538313a393966333a3a2f34382d3438203d3e20323134333434.roa (hash: CfKfKnWr6AMoLiLfBVlrhneodY9KAu+Y1wDjsvoRWPk=)
                          9: 326131343a373538313a393938383a3a2f34382d3438203d3e20323134333434.roa (hash: oAguRb9pXNzPWjYX85q2YG/BjiE6PLmXVHXI0ai6PhQ=)
                          10: 326131343a373538313a393966323a3a2f34382d3438203d3e20323134333434.roa (hash: GgRgpO0cir6J2JIvLpFaBWDg0/fcSkJg//f6BlSBDCY=)
                          11: 326131343a373538303a666634343a3a2f34382d3438203d3e20323134333434.roa (hash: wAwmvjP2Xs/JgKfPKl1DdsDpWK9Z2qkOeMDP05em2JQ=)
                          12: 326131343a373538313a393965653a3a2f34382d3438203d3e20323134333434.roa (hash: 3oBSnEnPYocyloNNfV7eH1ZnHXiKOV8dASwMij3b8+0=)
                          13: 87A4C84D4366DBB15A9090A55AA2DCEBA8723945.crl (hash: 1CR1lbLHilspP6bVYDpno2ZcqNdgVi5qTOWgyXDJ7hQ=)
                          14: 326131343a373538313a393930333a3a2f34382d3438203d3e20323134333434.roa (hash: /zrjZ0ZqEzRDQ5mOWK+S06L45z9UxNhwijRkpqGoHX0=)
                          15: 326131343a373538313a393966343a3a2f34382d3438203d3e20323134333434.roa (hash: aT8cghtaGkqPEEByCDT3I1TbWDM5+v3iYF7i8PWrF94=)
                          16: 326131343a373538313a393930323a3a2f34382d3438203d3e20323134333434.roa (hash: 3uRQGY7O+ZvtbHNtgC5MF4VJ4PR1W0vGtZuXeGQdfrI=)
                          17: 326131343a373538303a666634333a3a2f34382d3438203d3e20323134333434.roa (hash: apRB5OfhlgNP9CjlOyLXHwJtDJcG7Ul2o20dXFYOVFQ=)
                          18: 326131343a373538313a393966353a3a2f34382d3438203d3e20323134333434.roa (hash: WwRRTirG7edW5+geax/8pXpN1dZiLKdB/tgwh/uOeTM=)
                          19: 326131343a373538313a393930313a3a2f34382d3438203d3e20323134333434.roa (hash: i94AFUzw6e810fYgj7x6pZ8Yx8k5H6Glrkwkeys08UU=)
                          20: 326131343a373538313a393930343a3a2f34382d3438203d3e20323134333434.roa (hash: Kr++/O1eWk2rhooTEwkNaOpIKHaAHhcWSp5UY9Du6eM=)
                          21: 326131343a373538313a393930353a3a2f34382d3438203d3e20323134333434.roa (hash: 0tk68iktR4A+Tmx1ow+QCPfURRQdgNg7+hqUgrcV4SU=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 06:24:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:0d:9e:d8:e4:95:0b:f0:26:4a:d4:ae:b8:22:ab:f8:0f:df:ad:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87A4C84D4366DBB15A9090A55AA2DCEBA8723945
        Validity
            Not Before: Dec  6 05:09:17 2025 GMT
            Not After : Dec  7 06:24:17 2025 GMT
        Subject: CN=58DDD807D67B9E7327192CEBD14B2DBCA82CACA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a9:63:35:e0:82:eb:80:23:fa:e9:1a:d3:d6:
                    93:f1:d5:64:f8:af:2f:9f:e4:e4:4f:8b:80:92:e7:
                    cf:7c:38:02:be:42:e8:ed:76:0d:db:ae:d5:23:87:
                    e9:a8:53:ec:73:4f:e4:19:df:df:63:07:6d:9f:58:
                    99:fd:7c:8f:1a:c9:a9:c8:af:8b:a3:97:df:2d:f1:
                    ff:f1:40:be:ca:eb:07:4a:1a:d8:81:09:7f:49:0e:
                    04:32:74:3c:b2:78:76:1d:5f:6a:b1:c2:61:16:2a:
                    99:20:8d:e1:93:60:6d:e2:42:24:83:62:53:af:04:
                    06:71:96:92:e7:41:31:fd:8c:5c:ca:5b:7f:cf:14:
                    4c:6b:03:32:b2:e2:a5:57:58:63:5c:82:46:d6:84:
                    5a:68:a9:0d:94:ec:7a:59:50:e3:94:75:10:25:58:
                    05:f9:57:eb:b4:4c:b6:8f:36:90:df:11:a8:f9:b8:
                    ac:e0:75:75:b9:9e:6d:4c:21:fe:e0:6d:b3:01:5f:
                    af:8e:7c:69:cf:34:9e:ff:e4:be:f4:9f:82:c7:ef:
                    fd:48:1f:f1:1c:e4:01:19:0a:66:75:71:e1:42:f4:
                    66:5f:33:a4:00:a0:97:37:58:a5:72:6d:a5:d0:15:
                    c7:75:c9:af:05:62:78:8b:aa:bb:c7:5f:91:4b:b1:
                    7f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:DD:D8:07:D6:7B:9E:73:27:19:2C:EB:D1:4B:2D:BC:A8:2C:AC:A5
            X509v3 Authority Key Identifier:
                keyid:87:A4:C8:4D:43:66:DB:B1:5A:90:90:A5:5A:A2:DC:EB:A8:72:39:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:cc:02:15:0c:5b:87:34:a9:00:d2:ba:40:ed:82:7e:a0:2c:
         a8:cd:ed:ed:a5:77:ba:89:33:fa:74:cb:d0:2c:8e:8d:f5:80:
         9b:11:e0:d1:50:c9:a0:af:7f:80:38:d6:00:98:94:87:1c:6e:
         ca:95:4e:83:0e:18:04:10:17:d9:37:b1:38:8d:e8:46:e3:d5:
         45:3c:72:c5:2e:fe:7e:88:2b:38:06:1f:4e:83:53:13:59:9f:
         a5:e9:41:ee:93:41:46:55:4d:4c:58:96:9a:af:3b:d4:a6:55:
         07:23:c7:d9:e9:d9:e9:15:e2:97:2d:40:d6:50:d7:50:09:6c:
         69:bc:8a:53:49:16:e3:a3:1f:76:97:21:44:2f:ab:b6:02:a2:
         1c:b3:eb:d9:41:c4:da:44:a0:02:b1:6f:6f:e8:3c:02:9a:61:
         cd:ec:4a:49:d8:b2:c6:c0:e5:20:e1:59:67:c5:47:2f:ef:0e:
         65:87:8d:fa:09:52:c2:f5:80:48:f3:ac:5c:ce:c5:db:05:f8:
         0c:ea:a5:80:8e:8f:d1:fa:f2:ec:27:15:4e:30:05:47:8b:49:
         ac:f0:82:3b:b3:f0:a8:4a:07:3b:65:b7:05:6e:ae:07:c3:2b:
         ae:d5:6d:e7:00:00:02:b2:d0:ff:38:d1:c9:34:05:e4:82:ad:
         53:57:8a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:52:43 2025 by rpki-client