This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft
File:                     8F4CE7722F99075D94738B7E61070401269EB3D6.mft (raw, json)
Hash identifier:          jqZmLsvCaGc38paZ/3m1j21gLMkp97SHdx9Mkic0PEk=
Subject key identifier:   EE:12:C8:28:2D:94:69:94:CC:1F:59:5F:11:28:16:88:2B:0D:17:AC
Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
Certificate issuer:       /CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Certificate serial:       6D34DF0C7F3E18E12AF86B58B96F3CE9747A51EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft
Manifest number:          05AF
Signing time:             Fri 05 Dec 2025 20:01:16 +0000
Manifest this update:     Fri 05 Dec 2025 19:56:16 +0000
Manifest next update:     Sat 06 Dec 2025 22:28:16 +0000
Files and hashes:         1: 8F4CE7722F99075D94738B7E61070401269EB3D6.crl (hash: LRfD6m5YGsFN1+GE/B2Z8p5nMFqjH9j/6bJXO/cgPHE=)
                          2: 36322e3139322e3137352e302f32342d3234203d3e203332313637.roa (hash: /WAm5dy4jlcwivOnkIFnMuEvBCc6QOLwRlkX4YTGCBc=)
                          3: 37372e38332e3235342e302f32342d3234203d3e203432383331.roa (hash: B5BKp3Kt7IC0lBSFIyTVJVOYl/EnjscrkC95vEdRQdg=)
                          4: 3138352e3138312e302e302f32342d3234203d3e2035303635.roa (hash: jKhLBm90tx+Wj64bfhAOaNtyd2IRsOIjohul50fMfmI=)
                          5: 3139332e3136332e3132372e302f32342d3234203d3e20313439393438.roa (hash: 1dKp6xe+eLRTQoCYGUtbaGkzNAIMlS65VuQGc12R6RA=)
                          6: 37372e38332e3235322e302f32342d3234203d3e20323734383237.roa (hash: 1TkU9CuZNSKSA6n8CCEVJKfR3/eejFvKDG72x42fajA=)
                          7: 38352e3230392e31382e302f32342d3234203d3e20323132343136.roa (hash: J4P/0pJKXXswWDL/U/aSyTpYbnb7RCTWwOsChVTVKX0=)
                          8: 3138352e3138312e332e302f32342d3234203d3e20323030303137.roa (hash: yu4VS8d4SOotNR90wp+Yzh042rOQsTRk/ltNPBkKiBs=)
                          9: 37372e38332e3235352e302f32342d3234203d3e20333937333733.roa (hash: 1mKwdC2ZIiOIr7Rnoef/+fSq7c6umW7Rd7kmaMzPSt8=)
                          10: 36322e3139322e3137332e302f32342d3234203d3e2038313030.roa (hash: VR4JLJ2ZU8eUzCRER2JzBOvrizo3+I5iCEURL4jUDUs=)
                          11: 38352e3230392e31392e302f32342d3234203d3e203131383738.roa (hash: Nx4wSG2k5MsgvkZE/SkqlmuALnm8blh30hh9Mbxj2MU=)
                          12: 37372e38332e3235332e302f32342d3234203d3e20333938333835.roa (hash: oAOTNgxw6bYQVCzHD93BNrqwf7e2+dYeRkUxzvhfYNE=)
                          13: 36322e3139322e3137322e302f32342d3234203d3e20323632323837.roa (hash: 2GimDrI+u19G9USJIxEoIwe+FIkjWzBTs+tdLgZWAyE=)
                          14: 3138352e3138312e322e302f32342d3234203d3e20323132363639.roa (hash: AO/2wQxFVW1dCHNtgSdMO8qdA9TP6KJffP27Y2ywVzk=)
                          15: 36322e3139322e3137332e302f32342d3234203d3e203235363933.roa (hash: 7LxiUpW29bCJDw6ndbnVxwTHPen7XCpx03brWPSWNVo=)
                          16: 38352e3230392e31372e302f32342d3234203d3e2038313030.roa (hash: QDSk8x00L35RICmReakqpkA/56+KGgKX4susJmbToXY=)
                          17: 38352e3230392e31362e302f32342d3234203d3e20343030303339.roa (hash: p6Bk0gZf8IBhPL6y8ZeFGMDiI7CTICtCBqH+ui8UNPk=)
                          18: 36322e3139322e3137342e302f32342d3234203d3e20313939303538.roa (hash: 7SPDhEMWd1gl2XtQJzxrngcOVdYu9T7eD0t4enh6w+8=)
                          19: 3138352e3138312e312e302f32342d3234203d3e203232313638.roa (hash: j6aiC8hmqjNX8bvUvtzfL/WZD+CbfD2TNLTq4Vkaxb8=)
                          20: 3231322e3130322e3131342e302f32342d3234203d3e20323132363039.roa (hash: k4QPq18KIVcE3YfXs1geEObswKolsmORhNCPU0jWep8=)
                          21: 38352e3230392e31372e302f32342d3234203d3e203235363933.roa (hash: sfBR34BQfUnBG/Dfs9RgO4NWV6dIYQiGWUQLFQnMRUU=)
                          22: 37372e38332e3235322e302f32342d3234203d3e203533313037.roa (hash: 3Dh0+QL4Ca7K3/8ZGEgIxNy6qmtIRAGaEkPcZns1GuY=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 22:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:34:df:0c:7f:3e:18:e1:2a:f8:6b:58:b9:6f:3c:e9:74:7a:51:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6
        Validity
            Not Before: Dec  5 19:56:16 2025 GMT
            Not After : Dec  6 22:28:16 2025 GMT
        Subject: CN=EE12C8282D946994CC1F595F112816882B0D17AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b9:12:7e:03:55:3b:f7:ef:f4:81:b1:5c:1b:
                    f2:a2:ce:05:b6:5c:a4:fa:d7:5c:8d:53:78:3d:cb:
                    66:1e:24:3a:5e:c6:fe:16:d9:ff:e2:02:a8:6e:b1:
                    4e:26:9b:a6:b0:e2:8d:f1:b6:82:7e:53:af:b5:14:
                    8b:81:c2:19:68:7d:a9:c6:54:ad:82:92:cd:a2:0c:
                    71:ec:57:ac:ae:13:bd:2d:85:83:a4:bb:54:ba:87:
                    03:ee:f0:1b:aa:7f:d4:e0:7e:d5:91:0b:1b:48:be:
                    d8:27:fa:51:44:6a:c4:8a:02:80:70:23:a5:cf:a1:
                    a1:26:b4:4f:36:ab:df:f6:b1:0b:4f:66:24:87:0d:
                    30:8d:0a:8d:37:c3:8f:da:b9:e3:d3:6c:15:dd:1e:
                    cb:ad:ff:34:32:64:dd:58:48:64:07:69:2a:b8:67:
                    48:29:2b:ca:91:0b:40:55:6f:e4:49:09:26:d4:90:
                    70:1b:6c:1a:c3:41:e5:38:e9:ae:28:14:e9:b0:4e:
                    03:fb:88:f3:ea:ae:99:01:32:e4:81:4f:35:6a:eb:
                    2e:dd:10:43:6f:0c:3f:6a:23:7d:71:a7:59:5d:29:
                    3c:cf:a6:b3:d8:ad:87:fc:45:e1:15:56:99:bc:55:
                    41:a3:cd:9b:eb:00:d5:79:b2:84:84:29:9b:0a:1f:
                    d4:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:12:C8:28:2D:94:69:94:CC:1F:59:5F:11:28:16:88:2B:0D:17:AC
            X509v3 Authority Key Identifier:
                keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:0f:b2:03:f2:4a:5c:6b:76:d0:1c:10:96:39:c9:12:5e:3e:
         61:d5:4a:07:f7:b2:a9:35:71:4f:c8:2c:2a:63:ed:fc:17:a1:
         46:96:6f:f9:ee:16:82:4e:69:10:a6:0f:1f:b0:a4:89:d1:b2:
         00:ce:29:74:65:7a:59:f9:12:86:39:c9:bd:f9:de:57:6e:28:
         56:5b:72:93:8d:3f:e4:98:e2:31:94:2b:4d:cd:fc:4b:26:ec:
         4d:b0:77:51:fb:dc:79:c6:df:bf:a8:47:2b:a4:fc:a1:27:4d:
         c7:51:cf:81:c8:cd:e9:5e:a9:92:81:e9:4b:f5:a3:8b:6a:90:
         bb:da:27:84:3d:f6:dc:94:50:81:f5:f3:10:e9:e2:cb:c5:28:
         d3:14:38:4a:a4:ae:5d:b7:2b:d5:dd:c6:70:2e:e8:8d:bd:69:
         03:ec:91:6d:c1:6b:1d:fb:24:3b:de:62:76:e0:7b:b2:75:35:
         2f:c5:17:59:9d:7c:24:0d:ff:69:3f:8f:8a:d0:49:89:41:7b:
         dd:c2:15:ee:56:d7:7b:b9:22:2e:9e:cc:d5:ea:e3:4c:4d:07:
         a6:5d:a0:d3:62:99:32:43:52:30:69:9a:b6:39:c0:84:4c:9b:
         4b:12:88:9f:87:68:d6:74:a0:3d:50:2c:f1:27:fc:8a:41:c3:
         87:2e:49:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:13:56 2025 by rpki-client