This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.mft
File:                     87A4C84D4366DBB15A9090A55AA2DCEBA8723945.mft (raw, json)
Hash identifier:          Dhnrh6HZHFaiolyMBETQEzR4iEicY0We5XyTDDuIQvQ=
Subject key identifier:   1A:B4:11:52:AC:34:88:70:46:D9:A1:EE:FC:F2:53:53:5E:29:00:FC
Authority key identifier: 87:A4:C8:4D:43:66:DB:B1:5A:90:90:A5:5A:A2:DC:EB:A8:72:39:45
Certificate issuer:       /CN=87A4C84D4366DBB15A9090A55AA2DCEBA8723945
Certificate serial:       6F870E097A06BEB2F9382BC2B069484577606EAD
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.mft
Manifest number:          0136
Signing time:             Sat 06 Dec 2025 22:29:17 +0000
Manifest this update:     Sat 06 Dec 2025 22:24:17 +0000
Manifest next update:     Sun 07 Dec 2025 23:03:17 +0000
Files and hashes:         1: 326131343a373538313a393930343a3a2f34382d3438203d3e20323134333434.roa (hash: Kr++/O1eWk2rhooTEwkNaOpIKHaAHhcWSp5UY9Du6eM=)
                          2: 326131343a373538313a393966333a3a2f34382d3438203d3e20323134333434.roa (hash: CfKfKnWr6AMoLiLfBVlrhneodY9KAu+Y1wDjsvoRWPk=)
                          3: 326131343a373538313a393930323a3a2f34382d3438203d3e20323134333434.roa (hash: 3uRQGY7O+ZvtbHNtgC5MF4VJ4PR1W0vGtZuXeGQdfrI=)
                          4: 326131343a373538313a393930333a3a2f34382d3438203d3e20323134333434.roa (hash: /zrjZ0ZqEzRDQ5mOWK+S06L45z9UxNhwijRkpqGoHX0=)
                          5: 326131343a373538303a666634353a3a2f34382d3438203d3e20323134333434.roa (hash: 5PYc1rYfh5soL/5eOkdLi7LFwnLpj6iEncugTNMnU6k=)
                          6: 326131343a373538303a666634303a3a2f34382d3438203d3e20323134333434.roa (hash: dPCGiKkWz0E9rMprVOstBFLQuVK9OG6CBSKX+fk7UXw=)
                          7: 326131343a373538303a666634313a3a2f34382d3438203d3e20323134333434.roa (hash: pdCqfiQKAk5mpE38Sur9HB4NVG9NXvRtOzzMMORY0Ss=)
                          8: 326131343a373538313a393965653a3a2f34382d3438203d3e20323134333434.roa (hash: 3oBSnEnPYocyloNNfV7eH1ZnHXiKOV8dASwMij3b8+0=)
                          9: 326131343a373538313a393930353a3a2f34382d3438203d3e20323134333434.roa (hash: 0tk68iktR4A+Tmx1ow+QCPfURRQdgNg7+hqUgrcV4SU=)
                          10: 326131343a373538313a393966313a3a2f34382d3438203d3e20323134333434.roa (hash: eBRv+uDGLUqSp7a6GG/a9BPTN3/sPy8oPhg1ivi/5ik=)
                          11: 326131343a373538313a393939393a3a2f34382d3438203d3e20323134333434.roa (hash: gWNOGizaCWeT+eChfA6O1CcYgC4CppF3JVd8ZgY0qsY=)
                          12: 326131343a373538303a666634333a3a2f34382d3438203d3e20323134333434.roa (hash: apRB5OfhlgNP9CjlOyLXHwJtDJcG7Ul2o20dXFYOVFQ=)
                          13: 326131343a373538313a393966353a3a2f34382d3438203d3e20323134333434.roa (hash: WwRRTirG7edW5+geax/8pXpN1dZiLKdB/tgwh/uOeTM=)
                          14: 326131343a373538303a666634343a3a2f34382d3438203d3e20323134333434.roa (hash: wAwmvjP2Xs/JgKfPKl1DdsDpWK9Z2qkOeMDP05em2JQ=)
                          15: 326131343a373538313a393938383a3a2f34382d3438203d3e20323134333434.roa (hash: oAguRb9pXNzPWjYX85q2YG/BjiE6PLmXVHXI0ai6PhQ=)
                          16: 87A4C84D4366DBB15A9090A55AA2DCEBA8723945.crl (hash: t6XkNHI2DL/qPqicw56JCsbrawt5UMN5yrjb0Zhn/5g=)
                          17: 326131343a373538313a393930313a3a2f34382d3438203d3e20323134333434.roa (hash: i94AFUzw6e810fYgj7x6pZ8Yx8k5H6Glrkwkeys08UU=)
                          18: 326131343a373538313a393966323a3a2f34382d3438203d3e20323134333434.roa (hash: GgRgpO0cir6J2JIvLpFaBWDg0/fcSkJg//f6BlSBDCY=)
                          19: 326131343a373538303a666634363a3a2f34382d3438203d3e20323134333434.roa (hash: INfgk/A/FB6y22LomhkCbMfma8QUd57K4w9Tk5H86CM=)
                          20: 326131343a373538303a666634323a3a2f34382d3438203d3e20323134333434.roa (hash: 9k9VorkprwzOj4hWnDvwpKS020LK9HlBFwzRrzgLjKw=)
                          21: 326131343a373538313a393966343a3a2f34382d3438203d3e20323134333434.roa (hash: aT8cghtaGkqPEEByCDT3I1TbWDM5+v3iYF7i8PWrF94=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:12:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:87:0e:09:7a:06:be:b2:f9:38:2b:c2:b0:69:48:45:77:60:6e:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87A4C84D4366DBB15A9090A55AA2DCEBA8723945
        Validity
            Not Before: Dec  6 22:24:17 2025 GMT
            Not After : Dec  7 23:03:17 2025 GMT
        Subject: CN=1AB41152AC34887046D9A1EEFCF253535E2900FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b7:95:4d:ed:36:34:7c:17:1b:e4:5e:23:69:
                    da:fc:e7:03:ba:f6:72:a4:ce:8f:f2:3b:2f:15:8e:
                    00:3a:c9:93:67:cd:8f:90:73:96:23:8c:28:21:63:
                    ef:88:f7:2f:ca:55:22:fb:33:5e:69:37:8b:bd:a6:
                    95:55:ab:7a:fd:35:dc:5f:6e:ff:38:23:87:64:6b:
                    3c:a9:a0:02:23:89:b3:45:89:44:d6:48:20:45:eb:
                    8e:18:47:e4:f7:90:e5:56:3c:9e:2b:a6:e7:24:8c:
                    e0:55:d5:d0:fa:54:64:20:2d:6c:9a:c9:2a:cb:aa:
                    6f:da:f4:53:b9:59:b3:6f:11:1c:75:ab:3e:45:85:
                    13:0e:63:97:73:eb:ad:bc:b5:ae:a3:d4:7e:ae:e1:
                    1a:50:15:fb:75:46:c3:45:67:32:35:68:fa:f1:43:
                    d6:54:41:2e:48:e3:83:29:92:bb:54:57:25:f1:90:
                    5a:b8:70:e7:dc:c4:2d:47:ef:01:6b:e6:fa:2d:38:
                    79:84:25:82:9c:d5:73:15:2f:a5:77:78:e5:0d:cb:
                    8c:70:20:3f:14:28:44:b1:3f:fb:6b:75:6a:b5:6a:
                    7a:ea:96:20:a1:b8:d8:07:fc:fd:29:49:51:7d:33:
                    ed:a6:6b:26:46:ca:d3:dd:68:df:ee:f4:50:64:1d:
                    02:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:B4:11:52:AC:34:88:70:46:D9:A1:EE:FC:F2:53:53:5E:29:00:FC
            X509v3 Authority Key Identifier:
                keyid:87:A4:C8:4D:43:66:DB:B1:5A:90:90:A5:5A:A2:DC:EB:A8:72:39:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a5d4c00b-d105-4906-b981-1d0343e301da/1/87A4C84D4366DBB15A9090A55AA2DCEBA8723945.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:93:0a:d1:94:97:f9:f0:a2:c2:8e:54:f5:e1:f9:79:6e:0d:
         87:97:48:9b:bd:66:f3:92:c7:71:c8:45:89:a3:b4:90:96:37:
         96:ed:4b:c5:e9:b1:67:68:60:ee:d3:c1:f1:89:d1:3e:8e:73:
         82:c5:e0:f2:39:e2:25:c3:04:f5:a8:cd:b1:4d:ee:a4:20:d5:
         bd:02:41:c3:32:17:84:1f:b5:4b:72:85:e3:86:77:04:81:b8:
         a3:6a:2c:69:2b:b5:76:5e:54:c2:10:c5:56:ab:9c:15:6f:88:
         53:16:77:30:4d:1b:45:27:23:26:92:85:f1:ac:22:9b:12:af:
         62:d7:1a:8f:d7:59:43:d6:8a:21:e6:b3:d6:e8:56:8e:9a:c7:
         83:0e:6f:f6:8e:7b:53:87:e4:bd:63:24:1a:f0:88:f9:75:14:
         c1:4e:54:51:23:c7:d7:8e:9e:da:8e:ae:26:31:5a:c7:5b:4c:
         e6:25:d1:76:e3:4e:fb:ea:92:11:f7:fe:1b:5f:51:ad:4d:26:
         a5:a9:0d:f5:e9:78:97:8b:a6:a8:9d:c1:d8:64:4f:e2:f6:d1:
         b2:d8:11:a8:c4:a9:c7:de:8a:7e:35:e4:8b:de:2a:0b:7e:60:
         78:cd:43:3d:27:03:75:18:f5:c7:b0:0d:bd:4c:2c:91:63:5f:
         7b:71:32:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:29:37 2025 by rpki-client