This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft
File:                     E205EBF065FC4929F1802662AE62D7F9762600E6.mft (raw, json)
Hash identifier:          KGTXvLii7+AzoVGHp9S0hCyh2notWzo6YeerMHMmn+k=
Subject key identifier:   38:60:53:4B:BF:17:BB:4E:70:5F:48:23:68:55:CA:5F:65:F8:F7:1C
Authority key identifier: E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6
Certificate issuer:       /CN=e205ebf065fc4929f1802662ae62d7f9762600e6
Certificate serial:       CECC83A97E368EAC60B783369ACF2E51E7ADCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft
Manifest number:          0187
Signing time:             Fri 05 Dec 2025 17:16:16 +0000
Manifest this update:     Fri 05 Dec 2025 17:11:16 +0000
Manifest next update:     Sat 06 Dec 2025 18:06:16 +0000
Files and hashes:         1: 39312e3230392e34382e302f32342d3234203d3e2034363337.roa (hash: 4+D5jdmTDYB1GvCAU0z5GBGlSPW7Q/zpduO0wdWv8pU=)
                          2: 326130663a356663303a6164643a3a2f34382d3438203d3e20323035303336.roa (hash: N543k0DcGiJuxubeGma9GZg+VhMwbPVS9ShNVwfZl30=)
                          3: 326130663a356663303a633064653a3a2f34382d3438203d3e20323035303336.roa (hash: vwuw8BagjBJB+QjPivE2w5i9soU6pwd3DUm4jYukQKs=)
                          4: 326130663a356663303a663030643a3a2f34382d3438203d3e20323035303336.roa (hash: Xgs2aXZ2twwalLnMnwHKHrLdiNgmex+4PLid272RcXc=)
                          5: E205EBF065FC4929F1802662AE62D7F9762600E6.crl (hash: CgM8QDjUT3alFMVHVp7UaG4dJgSJO1S1wwAjxJE0F3Q=)
                          6: 326130663a356663303a623030623a3a2f34382d3438203d3e20323035303336.roa (hash: dtubQqytFEqkt8TqTYJ+KlZgpXqOEEfNHG9KMyAKroE=)
                          7: 326130663a356663303a646561643a3a2f34382d3438203d3e20323035303336.roa (hash: Z7YS72AkRUhmGE/8eVCwX/QArQ7kzj3DMVCvF8nhupE=)
                          8: 326130663a356663303a6665653a3a2f34382d3438203d3e20323035303336.roa (hash: sgKb1dwb+yOP2QySpduAJeLZbiJJdLEfbfVpO0+8Lgg=)
                          9: 326130663a356663303a6465623a3a2f34382d3438203d3e20323035303336.roa (hash: HGgyYO79YRPv5eTIvRCSkvT+uzFYIDLIXRArnhiRVzA=)
                          10: 39312e3230392e35382e302f32342d3234203d3e203634323637.roa (hash: vVPhAwxMoGbJX95BZTqrmZCi086rlFMNDRhMBQEniYs=)
                          11: 326130663a356663303a666565643a3a2f34382d3438203d3e20323035303336.roa (hash: Qj8pflv8KszWoeUIqOpeKQUtZrsbyJDTmnxefpUjjlo=)
                          12: 326130663a356663303a626162653a3a2f34382d3438203d3e20323035303336.roa (hash: BEzvo1oTT3h/yITGofAX+DfQt9t+mraGyg3xFdVKM2I=)
                          13: 326130663a356663303a636166653a3a2f34382d3438203d3e20323035303336.roa (hash: SIzDkF7YYsoaU9vFR/am7daSl1S+0BBZdMp9c5ogCY8=)
                          14: 326130663a356663303a646561663a3a2f34382d3438203d3e20323035303336.roa (hash: nBnCDOBWFR9glmAsUSRrLmDkLZa6Zi7bYUkIoT7Lpvs=)
                          15: 326130663a356663303a6265643a3a2f34382d3438203d3e20323035303336.roa (hash: Vn0tNJq84yvhpEx3djvegd0qElXvUXIj3d10CpoBDS8=)
                          16: 326130663a356663303a626162613a3a2f34382d3438203d3e20323035303336.roa (hash: kdDGBWrURu4f0ClnA4SfgsI29M2UtK1sJ9ldbUvOvNc=)
                          17: 326130663a356663303a6261643a3a2f34382d3438203d3e20323035303336.roa (hash: tvkflaFeVW3sd8cXnqPd3goXjSItIqLYbambS6E6g9M=)
                          18: 326130663a356663303a646565643a3a2f34382d3438203d3e20323035303336.roa (hash: 6WyHSY5Xp60q1IE95V4h6lwOICpnxsevWtnXKH+E1RA=)
                          19: 326130663a356663303a6461643a3a2f34382d3438203d3e20323035303336.roa (hash: FjMn5kgc0Y1vdPNQCAd4cKVxUcNaP4msdjwOhjOI4iE=)
                          20: 39312e3230392e35302e302f32342d3234203d3e20323039333732.roa (hash: UjFw0WQQLm//XoiWgykA8VWz+amzh0YCKaelwGihPq4=)
                          21: 326130663a356663303a6163653a3a2f34382d3438203d3e20323035303336.roa (hash: s62/iVKVlW2KdVyTR+Xnv457Z0j5+aZNRyV7RtkAKNQ=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 18:06:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            ce:cc:83:a9:7e:36:8e:ac:60:b7:83:36:9a:cf:2e:51:e7:ad:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e205ebf065fc4929f1802662ae62d7f9762600e6
        Validity
            Not Before: Dec  5 17:11:16 2025 GMT
            Not After : Dec  6 18:06:16 2025 GMT
        Subject: CN=3860534BBF17BB4E705F48236855CA5F65F8F71C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ca:ab:ec:19:29:37:46:04:8a:9f:57:25:fe:
                    9b:90:07:8f:a3:fa:37:fa:7d:e9:56:f3:a4:1f:86:
                    16:c5:ef:7d:e1:87:0d:13:44:46:b4:73:0f:e3:a7:
                    96:f8:54:f0:68:4d:e9:0e:db:65:a8:04:02:cc:79:
                    69:2c:e2:50:bb:56:7b:2b:25:d5:41:ef:6a:35:4c:
                    fc:d8:db:f4:4f:72:a7:35:6e:41:5b:1c:7d:2f:ce:
                    4b:50:b0:bf:7a:b2:21:20:f4:23:3d:44:e7:2b:a6:
                    64:f8:b0:b8:98:c0:f1:f5:43:1f:eb:8b:35:e4:ef:
                    eb:89:64:b2:05:5a:3f:29:07:13:87:80:82:06:eb:
                    12:74:89:b3:ce:b0:96:d5:d6:3d:4d:d9:83:58:fb:
                    6c:d9:15:5a:c0:cc:72:04:a5:1a:f1:d1:40:ef:5f:
                    e3:08:07:85:fe:39:1c:14:48:f7:78:ef:9d:79:e3:
                    e5:26:ff:13:9f:67:e5:87:67:c0:98:27:ed:a8:25:
                    7a:24:68:5d:6d:ae:65:85:7f:2c:c2:0d:d3:a4:8f:
                    5d:ec:dd:5d:e0:da:f0:f4:f3:17:e7:00:22:ed:43:
                    27:2e:9a:4c:da:b4:ab:b3:72:ba:cb:b6:82:09:d8:
                    59:60:85:20:9c:e6:af:d3:05:ac:8a:05:70:d4:f6:
                    b5:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:60:53:4B:BF:17:BB:4E:70:5F:48:23:68:55:CA:5F:65:F8:F7:1C
            X509v3 Authority Key Identifier:
                keyid:E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:b7:4c:66:d1:80:6a:93:41:ea:8c:95:fb:06:92:c6:27:7d:
         59:ad:17:54:ab:a6:cd:36:3e:29:c1:cc:55:fe:3c:6f:cf:21:
         c5:7c:36:f6:92:c8:72:82:c9:c7:b2:9e:2b:1f:a0:3f:77:08:
         31:e1:38:ce:28:dd:a0:91:3a:df:bc:66:74:ff:fb:45:1d:b6:
         63:bf:4b:c3:35:94:9b:77:c9:b8:dd:8a:6b:39:0a:02:c2:ab:
         ad:6b:0b:10:a6:af:43:6e:29:10:4c:86:57:8e:b0:75:a6:98:
         fd:fd:1b:07:84:08:12:09:c2:a7:1b:4e:41:bd:3b:4e:b8:b4:
         68:51:85:e3:a2:55:48:09:cd:eb:e1:55:6a:52:65:ea:e3:76:
         de:b0:fa:3c:e9:ee:76:f3:c5:fc:a5:bc:b6:e3:df:18:0d:ce:
         66:1b:7a:6c:62:ef:2f:24:45:65:91:33:65:f1:42:b6:f0:0b:
         fc:b3:6a:73:ce:41:23:71:42:11:91:a2:31:c9:c7:e8:26:96:
         b3:5b:28:02:e0:58:27:3b:34:f9:63:75:be:9d:87:1e:c9:c9:
         55:8a:ef:82:45:27:6d:17:fb:d4:43:97:6f:86:b0:15:31:a9:
         69:13:41:b1:e3:41:3b:fc:04:a7:d1:8d:09:32:46:54:e3:21:
         2a:38:98:28
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUAM7Mg6l+No6sYLeDNprPLlHnrc8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZTIwNWViZjA2NWZjNDkyOWYxODAyNjYyYWU2MmQ3Zjk3
NjI2MDBlNjAeFw0yNTEyMDUxNzExMTZaFw0yNTEyMDYxODA2MTZaMDMxMTAvBgNV
BAMTKDM4NjA1MzRCQkYxN0JCNEU3MDVGNDgyMzY4NTVDQTVGNjVGOEY3MUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmyqvsGSk3RgSKn1cl/puQB4+j
+jf6felW86QfhhbF733hhw0TREa0cw/jp5b4VPBoTekO22WoBALMeWks4lC7Vnsr
JdVB72o1TPzY2/RPcqc1bkFbHH0vzktQsL96siEg9CM9ROcrpmT4sLiYwPH1Qx/r
izXk7+uJZLIFWj8pBxOHgIIG6xJ0ibPOsJbV1j1N2YNY+2zZFVrAzHIEpRrx0UDv
X+MIB4X+ORwUSPd475154+Um/xOfZ+WHZ8CYJ+2oJXokaF1trmWFfyzCDdOkj13s
3V3g2vD08xfnACLtQycumkzatKuzcrrLtoIJ2FlghSCc5q/TBayKBXDU9rW3AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUOGBTS78Xu05wX0gjaFXKX2X49xwwHwYDVR0j
BBgwFoAU4gXr8GX8SSnxgCZirmLX+XYmAOYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYmYwYmUzZTEtODU0ZS00NjYyLTkyZTgtMDI4OTUwZmY1
N2ZlLzAvRTIwNUVCRjA2NUZDNDkyOUYxODAyNjYyQUU2MkQ3Rjk3NjI2MDBFNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRnWHI4R1g4U1NueGdDWmlybUxYLVhZ
bUFPWS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZjBiZTNlMS04
NTRlLTQ2NjItOTJlOC0wMjg5NTBmZjU3ZmUvMC9FMjA1RUJGMDY1RkM0OTI5RjE4
MDI2NjJBRTYyRDdGOTc2MjYwMEU2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADrdMZtGAapNB6oyV+waS
xid9Wa0XVKumzTY+KcHMVf48b88hxXw29pLIcoLJx7KeKx+gP3cIMeE4zijdoJE6
37xmdP/7RR22Y79LwzWUm3fJuN2KazkKAsKrrWsLEKavQ24pEEyGV46wdaaY/f0b
B4QIEgnCpxtOQb07Tri0aFGF46JVSAnN6+FValJl6uN23rD6POnudvPF/KW8tuPf
GA3OZht6bGLvLyRFZZEzZfFCtvAL/LNqc85BI3FCEZGiMcnH6CaWs1soAuBYJzs0
+WN1vp2HHsnJVYrvgkUnbRf71EOXb4awFTGpaRNBseNBO/wEp9GNCTJGVOMhKjiY
KA==
-----END CERTIFICATE-----
Generated at Sat Dec 6 10:24:41 2025 by rpki-client