This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft
File:                     E205EBF065FC4929F1802662AE62D7F9762600E6.mft (raw, json)
Hash identifier:          jTu1jMxt4sUlXR6avJuQ9bO28EWOsVCdtJaZsn3U5e0=
Subject key identifier:   E6:0B:0D:74:55:0E:03:B5:26:41:C4:9E:F4:DC:B6:F1:91:E3:E6:17
Authority key identifier: E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6
Certificate issuer:       /CN=e205ebf065fc4929f1802662ae62d7f9762600e6
Certificate serial:       79E8C7F23BA98B62BD7A291CB052C49A7769ADEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft
Manifest number:          0199
Signing time:             Thu 18 Dec 2025 17:07:32 +0000
Manifest this update:     Thu 18 Dec 2025 17:02:32 +0000
Manifest next update:     Fri 19 Dec 2025 20:01:32 +0000
Files and hashes:         1: 326130663a356663303a6665653a3a2f34382d3438203d3e20323035303336.roa (hash: sgKb1dwb+yOP2QySpduAJeLZbiJJdLEfbfVpO0+8Lgg=)
                          2: 326130663a356663303a666565643a3a2f34382d3438203d3e20323035303336.roa (hash: Qj8pflv8KszWoeUIqOpeKQUtZrsbyJDTmnxefpUjjlo=)
                          3: 326130663a356663303a623030623a3a2f34382d3438203d3e20323035303336.roa (hash: dtubQqytFEqkt8TqTYJ+KlZgpXqOEEfNHG9KMyAKroE=)
                          4: 326130663a356663303a646561663a3a2f34382d3438203d3e20323035303336.roa (hash: nBnCDOBWFR9glmAsUSRrLmDkLZa6Zi7bYUkIoT7Lpvs=)
                          5: 326130663a356663303a6265643a3a2f34382d3438203d3e20323035303336.roa (hash: Vn0tNJq84yvhpEx3djvegd0qElXvUXIj3d10CpoBDS8=)
                          6: 326130663a356663303a636166653a3a2f34382d3438203d3e20323035303336.roa (hash: SIzDkF7YYsoaU9vFR/am7daSl1S+0BBZdMp9c5ogCY8=)
                          7: 326130663a356663303a633064653a3a2f34382d3438203d3e20323035303336.roa (hash: vwuw8BagjBJB+QjPivE2w5i9soU6pwd3DUm4jYukQKs=)
                          8: 326130663a356663303a6461643a3a2f34382d3438203d3e20323035303336.roa (hash: FjMn5kgc0Y1vdPNQCAd4cKVxUcNaP4msdjwOhjOI4iE=)
                          9: 326130663a356663303a646561643a3a2f34382d3438203d3e20323035303336.roa (hash: Z7YS72AkRUhmGE/8eVCwX/QArQ7kzj3DMVCvF8nhupE=)
                          10: 326130663a356663303a626162613a3a2f34382d3438203d3e20323035303336.roa (hash: kdDGBWrURu4f0ClnA4SfgsI29M2UtK1sJ9ldbUvOvNc=)
                          11: 39312e3230392e35302e302f32342d3234203d3e20323039333732.roa (hash: UjFw0WQQLm//XoiWgykA8VWz+amzh0YCKaelwGihPq4=)
                          12: 326130663a356663303a626162653a3a2f34382d3438203d3e20323035303336.roa (hash: BEzvo1oTT3h/yITGofAX+DfQt9t+mraGyg3xFdVKM2I=)
                          13: 326130663a356663303a6163653a3a2f34382d3438203d3e20323035303336.roa (hash: s62/iVKVlW2KdVyTR+Xnv457Z0j5+aZNRyV7RtkAKNQ=)
                          14: 326130663a356663303a6465623a3a2f34382d3438203d3e20323035303336.roa (hash: HGgyYO79YRPv5eTIvRCSkvT+uzFYIDLIXRArnhiRVzA=)
                          15: 39312e3230392e34382e302f32342d3234203d3e2034363337.roa (hash: 4+D5jdmTDYB1GvCAU0z5GBGlSPW7Q/zpduO0wdWv8pU=)
                          16: 326130663a356663303a6164643a3a2f34382d3438203d3e20323035303336.roa (hash: N543k0DcGiJuxubeGma9GZg+VhMwbPVS9ShNVwfZl30=)
                          17: E205EBF065FC4929F1802662AE62D7F9762600E6.crl (hash: 3cyFlyfEdw9GIzqB4kSkGm6Y7FWmkDdeuD9BsQE1LrA=)
                          18: 326130663a356663303a6261643a3a2f34382d3438203d3e20323035303336.roa (hash: tvkflaFeVW3sd8cXnqPd3goXjSItIqLYbambS6E6g9M=)
                          19: 326130663a356663303a663030643a3a2f34382d3438203d3e20323035303336.roa (hash: Xgs2aXZ2twwalLnMnwHKHrLdiNgmex+4PLid272RcXc=)
                          20: 326130663a356663303a646565643a3a2f34382d3438203d3e20323035303336.roa (hash: 6WyHSY5Xp60q1IE95V4h6lwOICpnxsevWtnXKH+E1RA=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 20:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:e8:c7:f2:3b:a9:8b:62:bd:7a:29:1c:b0:52:c4:9a:77:69:ad:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e205ebf065fc4929f1802662ae62d7f9762600e6
        Validity
            Not Before: Dec 18 17:02:32 2025 GMT
            Not After : Dec 19 20:01:32 2025 GMT
        Subject: CN=E60B0D74550E03B52641C49EF4DCB6F191E3E617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:68:b3:16:76:ed:d0:52:1d:2d:5d:6e:13:80:
                    1a:17:0e:76:d3:15:af:19:92:3c:50:b9:e1:8b:22:
                    94:ff:9e:6b:b3:dc:cf:2b:c9:87:6f:f6:05:c2:af:
                    97:0e:e7:be:a4:1e:de:1d:80:02:de:ce:76:c5:cf:
                    54:44:99:db:ad:95:5a:64:04:3a:26:f1:78:4d:24:
                    39:36:54:c8:89:55:65:d6:dd:b6:51:7a:a3:e5:28:
                    ce:ef:ca:2d:40:91:ae:4b:b6:0d:ea:9b:43:95:cd:
                    77:84:c7:eb:f2:fd:cb:f8:49:6f:09:50:d6:46:44:
                    49:78:2d:e9:4d:52:8e:ad:e2:ca:86:40:b1:d9:e7:
                    8b:19:c1:68:d5:fe:8d:7b:08:7f:4c:d7:c6:d8:3d:
                    eb:81:1c:a4:98:7f:83:5c:85:d4:88:e2:83:a5:ce:
                    f8:b8:ab:50:a6:a3:28:78:69:81:60:ae:00:4a:da:
                    f3:c8:98:1d:1a:1f:f4:86:8b:42:16:eb:5f:c5:24:
                    a3:43:fb:de:a9:67:ca:94:3a:08:62:4c:3b:b6:72:
                    f3:72:72:d4:c3:9a:d3:32:d9:83:02:a7:cd:8f:f4:
                    b6:60:d3:84:81:e9:64:bd:62:23:27:67:13:f3:42:
                    0f:8b:6a:61:ba:98:80:e0:fe:ad:59:16:10:f4:e4:
                    57:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:0B:0D:74:55:0E:03:B5:26:41:C4:9E:F4:DC:B6:F1:91:E3:E6:17
            X509v3 Authority Key Identifier:
                keyid:E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:49:21:70:f5:60:b6:ec:f4:59:3a:ad:5e:7b:54:1c:9a:cb:
         95:25:ec:f3:e5:12:cc:1a:15:5a:7f:58:c1:52:9e:e8:fe:f3:
         db:ae:a9:90:00:cf:1d:84:2c:11:d3:63:29:7a:91:cb:fb:04:
         7e:5e:57:bd:0e:39:b2:cd:3a:f4:9d:58:24:45:1a:86:bc:94:
         31:59:30:4d:df:32:c3:49:b7:31:02:6a:91:8a:6b:01:4d:0f:
         ce:ed:ac:90:53:58:7b:b9:04:19:80:5c:1b:65:78:39:99:cd:
         88:61:eb:72:58:24:95:36:70:97:3f:01:a2:9d:4b:92:59:23:
         c7:0c:39:98:62:72:9c:e3:0e:e1:b1:dd:58:98:7b:15:54:61:
         05:d7:84:cd:a6:75:59:0a:d7:54:57:de:87:71:b4:40:2c:f2:
         0f:d6:5f:19:e5:85:53:9b:02:19:0b:c3:a0:7b:78:01:82:86:
         2d:62:85:7a:a5:cd:04:b9:b9:74:5e:04:c2:a0:ff:4d:09:47:
         d1:9e:38:af:55:18:8b:67:ce:71:7e:08:cb:47:77:66:51:b8:
         8e:9c:9a:20:1b:c8:b5:60:77:eb:89:11:ba:c1:13:2d:22:c9:
         d2:b4:93:fb:18:00:ce:12:ff:36:86:18:f4:92:0d:14:1e:d6:
         cd:19:10:2b
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUeejH8jupi2K9eikcsFLEmndpreowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZTIwNWViZjA2NWZjNDkyOWYxODAyNjYyYWU2MmQ3Zjk3
NjI2MDBlNjAeFw0yNTEyMTgxNzAyMzJaFw0yNTEyMTkyMDAxMzJaMDMxMTAvBgNV
BAMTKEU2MEIwRDc0NTUwRTAzQjUyNjQxQzQ5RUY0RENCNkYxOTFFM0U2MTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjaLMWdu3QUh0tXW4TgBoXDnbT
Fa8ZkjxQueGLIpT/nmuz3M8ryYdv9gXCr5cO576kHt4dgALeznbFz1REmdutlVpk
BDom8XhNJDk2VMiJVWXW3bZReqPlKM7vyi1Aka5Ltg3qm0OVzXeEx+vy/cv4SW8J
UNZGREl4LelNUo6t4sqGQLHZ54sZwWjV/o17CH9M18bYPeuBHKSYf4NchdSI4oOl
zvi4q1Cmoyh4aYFgrgBK2vPImB0aH/SGi0IW61/FJKND+96pZ8qUOghiTDu2cvNy
ctTDmtMy2YMCp82P9LZg04SB6WS9YiMnZxPzQg+LamG6mIDg/q1ZFhD05FfZAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU5gsNdFUOA7UmQcSe9Ny28ZHj5hcwHwYDVR0j
BBgwFoAU4gXr8GX8SSnxgCZirmLX+XYmAOYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYmYwYmUzZTEtODU0ZS00NjYyLTkyZTgtMDI4OTUwZmY1
N2ZlLzAvRTIwNUVCRjA2NUZDNDkyOUYxODAyNjYyQUU2MkQ3Rjk3NjI2MDBFNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRnWHI4R1g4U1NueGdDWmlybUxYLVhZ
bUFPWS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZjBiZTNlMS04
NTRlLTQ2NjItOTJlOC0wMjg5NTBmZjU3ZmUvMC9FMjA1RUJGMDY1RkM0OTI5RjE4
MDI2NjJBRTYyRDdGOTc2MjYwMEU2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALkkhcPVgtuz0WTqtXntU
HJrLlSXs8+USzBoVWn9YwVKe6P7z266pkADPHYQsEdNjKXqRy/sEfl5XvQ45ss06
9J1YJEUahryUMVkwTd8yw0m3MQJqkYprAU0Pzu2skFNYe7kEGYBcG2V4OZnNiGHr
clgklTZwlz8Bop1Lklkjxww5mGJynOMO4bHdWJh7FVRhBdeEzaZ1WQrXVFfeh3G0
QCzyD9ZfGeWFU5sCGQvDoHt4AYKGLWKFeqXNBLm5dF4EwqD/TQlH0Z44r1UYi2fO
cX4Iy0d3ZlG4jpyaIBvItWB364kRusETLSLJ0rST+xgAzhL/NoYY9JINFB7WzRkQ
Kw==
-----END CERTIFICATE-----
Generated at Fri Dec 19 13:35:36 2025 by rpki-client