This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft
File:                     1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft (raw, json)
Hash identifier:          M1WcG3wOCD99SdP0dHOb522dimH82f4nBTKdG9p2EV4=
Subject key identifier:   49:AF:FB:59:C8:23:06:71:28:D8:31:A0:A8:D7:4D:F9:15:53:C9:95
Authority key identifier: 1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB
Certificate issuer:       /CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB
Certificate serial:       7930976A4AC6A4CE9D9AFEB0EAD8BB8E4D70912A
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft
Manifest number:          02DA
Signing time:             Sun 07 Dec 2025 17:56:56 +0000
Manifest this update:     Sun 07 Dec 2025 17:51:56 +0000
Manifest next update:     Mon 08 Dec 2025 21:33:56 +0000
Files and hashes:         1: 326131343a373538313a643230303a3a2f34302d3430203d3e203533363637.roa (hash: KPVNDBydB4lEOCddQAWiNda/rm6IVb4G2i+sUeOhrYg=)
                          2: 1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl (hash: O28/b7tR5QK8LfvryUXpwyzIc4XuLlZXzIbEocfXIoQ=)
                          3: 326131343a373538313a643330303a3a2f34302d3430203d3e2037353435.roa (hash: 9phDdz/jhh9vxdEc5WXHXIl+cdnJzAyh/6SdvyVejiI=)
                          4: 326131343a373538313a643230303a3a2f34302d3438203d3e203633343733.roa (hash: OTYsTfrglFs/JKFj7RJtAXdrMe1OUcjbc3WSXqeD0dk=)
                          5: 326131343a373538313a643130303a3a2f34302d3430203d3e203533363637.roa (hash: M0+yHEN3VX8K+aVDmpusml/7Hx8dbBnadNDMaFbGOzQ=)
                          6: 326131343a373538313a643030303a3a2f34312d3431203d3e203337393838.roa (hash: DvQHKT6M+fkiG6o9KW4wBm0yNbqCXWjg78L/cu4BiJ0=)
                          7: 326131343a373538313a643038303a3a2f34312d3431203d3e203337393838.roa (hash: BL4+PYIdcLs3fiOkkamkg94lgyO9kcRHp6ACoQUQ5y8=)
                          8: 326131343a373538313a643030303a3a2f34302d3430203d3e203337393838.roa (hash: R4oy1L8+rEt1QdmoGVV7PiYt423B/xK5i6kPhc7W9aI=)
                          9: 326131343a373538313a643130303a3a2f34302d3438203d3e203533363637.roa (hash: e+p8+Sw9X8S3Ty3gF9pg+LdvDbV5qMXAYBBthQD4LPE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Dec 2025 21:33:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:30:97:6a:4a:c6:a4:ce:9d:9a:fe:b0:ea:d8:bb:8e:4d:70:91:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB
        Validity
            Not Before: Dec  7 17:51:56 2025 GMT
            Not After : Dec  8 21:33:56 2025 GMT
        Subject: CN=49AFFB59C823067128D831A0A8D74DF91553C995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2a:43:13:37:c8:59:6a:b7:93:04:a4:b6:76:
                    d8:f1:3a:8d:7b:c9:06:7c:8a:80:32:f0:b3:41:4c:
                    95:4b:9b:9a:e8:25:5a:75:58:bf:8f:9c:f8:cb:81:
                    8e:09:90:ab:8d:db:64:ae:32:5a:7d:d3:5b:c6:73:
                    f8:a3:dc:6a:7b:65:c1:34:cb:a3:fa:64:ad:18:dc:
                    d0:d8:67:78:00:72:61:89:d2:a5:9a:85:09:3f:92:
                    b6:a8:17:9d:c8:73:3a:38:f6:7a:f4:3a:57:c9:a3:
                    2e:80:d0:47:36:8a:39:cb:89:64:c1:e1:86:d3:a9:
                    6f:6c:3a:d7:73:79:10:cf:32:31:36:35:a5:fb:1c:
                    5c:64:15:01:db:1b:a1:ab:05:7a:82:0a:02:6c:a6:
                    08:8e:45:0f:c2:7d:08:3c:dd:3d:84:cf:f2:bc:08:
                    c4:86:4a:d5:53:dd:83:2e:3a:b6:b5:d7:40:be:0d:
                    ef:16:a6:89:01:76:d5:07:85:a6:3c:14:a2:59:9c:
                    c9:69:cc:35:9f:9f:67:01:fd:20:bd:68:19:6b:3f:
                    55:6f:86:84:1b:9c:61:c8:6e:57:8e:24:db:48:e7:
                    2d:37:f4:73:51:cf:c3:13:dc:52:38:6b:32:d5:35:
                    e4:ea:36:cf:91:0b:6a:27:e4:c6:28:71:09:71:1a:
                    06:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:AF:FB:59:C8:23:06:71:28:D8:31:A0:A8:D7:4D:F9:15:53:C9:95
            X509v3 Authority Key Identifier:
                keyid:1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:b8:d9:ad:cd:eb:67:f4:f8:e3:4d:6d:b4:2c:0f:c5:8e:c9:
         53:97:df:be:9f:0f:49:27:3b:a3:5b:d8:d8:2a:d4:6c:89:d0:
         16:6b:d3:60:87:1c:94:43:33:79:6d:c6:44:aa:3a:4a:77:27:
         f3:9d:07:91:89:35:08:f2:66:bd:0f:33:b6:16:98:77:2a:48:
         b7:a0:9d:31:9c:75:04:93:30:8a:37:2b:2f:48:a9:81:3b:cd:
         b8:fe:02:83:bd:b4:bd:65:cc:c2:af:db:e9:34:3c:f3:77:b1:
         9a:9c:fa:70:37:c2:d1:e3:6a:3e:1e:61:2e:9f:5e:4a:19:3b:
         75:1b:2d:88:11:64:d9:dd:43:71:78:81:1e:b9:86:83:ea:40:
         30:95:0c:04:8c:3a:b4:e0:d3:f1:9d:96:59:36:59:f5:2c:0e:
         19:4e:fa:be:3a:0c:65:ac:33:99:d8:2f:5a:46:d7:bd:fb:f2:
         af:76:54:7e:97:50:be:e3:13:58:39:76:c0:96:43:5c:4e:98:
         92:b0:f9:a9:9a:85:95:25:a8:2d:da:e3:b8:c7:2e:ad:44:67:
         2b:7e:bd:0a:2f:fe:d1:18:26:5f:05:89:47:ce:ac:ab:70:cc:
         9a:fa:e5:46:33:f9:1b:ff:b0:37:c4:66:34:8f:5c:d3:fa:a0:
         c1:e4:dc:aa
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUeTCXakrGpM6dmv6w6ti7jk1wkSowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUY0QzgyODI3NkE5OTY2ODY1QUIyQjU5NTMzRDFDQjFC
RUM4OTBCQjAeFw0yNTEyMDcxNzUxNTZaFw0yNTEyMDgyMTMzNTZaMDMxMTAvBgNV
BAMTKDQ5QUZGQjU5QzgyMzA2NzEyOEQ4MzFBMEE4RDc0REY5MTU1M0M5OTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdKkMTN8hZareTBKS2dtjxOo17
yQZ8ioAy8LNBTJVLm5roJVp1WL+PnPjLgY4JkKuN22SuMlp901vGc/ij3Gp7ZcE0
y6P6ZK0Y3NDYZ3gAcmGJ0qWahQk/kraoF53Iczo49nr0OlfJoy6A0Ec2ijnLiWTB
4YbTqW9sOtdzeRDPMjE2NaX7HFxkFQHbG6GrBXqCCgJspgiORQ/CfQg83T2Ez/K8
CMSGStVT3YMuOra110C+De8WpokBdtUHhaY8FKJZnMlpzDWfn2cB/SC9aBlrP1Vv
hoQbnGHIbleOJNtI5y039HNRz8MT3FI4azLVNeTqNs+RC2on5MYocQlxGgbnAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUSa/7WcgjBnEo2DGgqNdN+RVTyZUwHwYDVR0j
BBgwFoAUH0yCgnaplmhlqytZUz0csb7IkLswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYjU5YzEwNmMtNTNiNC00ZTkyLTlmYmEtZDYwODI3YjVi
ZGI4LzAvMUY0QzgyODI3NkE5OTY2ODY1QUIyQjU5NTMzRDFDQjFCRUM4OTBCQi5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8xRjRDODI4Mjc2QTk5NjY4NjVBQjJCNTk1
MzNEMUNCMUJFQzg5MEJCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L2I1OWMxMDZjLTUzYjQtNGU5Mi05ZmJhLWQ2MDgyN2I1YmRiOC8wLzFGNEM4Mjgy
NzZBOTk2Njg2NUFCMkI1OTUzM0QxQ0IxQkVDODkwQkIubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBduNmt
zetn9PjjTW20LA/FjslTl9++nw9JJzujW9jYKtRsidAWa9NghxyUQzN5bcZEqjpK
dyfznQeRiTUI8ma9DzO2Fph3Kki3oJ0xnHUEkzCKNysvSKmBO824/gKDvbS9ZczC
r9vpNDzzd7GanPpwN8LR42o+HmEun15KGTt1Gy2IEWTZ3UNxeIEeuYaD6kAwlQwE
jDq04NPxnZZZNln1LA4ZTvq+OgxlrDOZ2C9aRte9+/KvdlR+l1C+4xNYOXbAlkNc
TpiSsPmpmoWVJagt2uO4xy6tRGcrfr0KL/7RGCZfBYlHzqyrcMya+uVGM/kb/7A3
xGY0j1zT+qDB5Nyq
-----END CERTIFICATE-----
Generated at Mon Dec 8 09:23:10 2025 by rpki-client