This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
File:                     5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft (raw, json)
Hash identifier:          mgBejUOynctUETlfiShnqLeDQKJ5tzD8Iu6c+MALJ9k=
Subject key identifier:   33:37:B5:A0:D1:38:45:A7:6F:4A:EA:54:5C:05:66:8B:B9:3D:3C:B8
Authority key identifier: 5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68
Certificate issuer:       /CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
Certificate serial:       0A7BF855628799997B116C76CB3D3A790A31E6A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
Manifest number:          01CE
Signing time:             Thu 18 Dec 2025 06:09:44 +0000
Manifest this update:     Thu 18 Dec 2025 06:04:44 +0000
Manifest next update:     Fri 19 Dec 2025 06:32:44 +0000
Files and hashes:         1: 326131343a333863303a323a3a2f34382d3438203d3e20333936303634.roa (hash: b3AvMY9Sl1B0jVsJOJivHhqGlksNlQ/JV9muHKrGSGQ=)
                          2: 326131343a333863303a333a3a2f34382d3438203d3e20333936303634.roa (hash: RQOZ0GeuB2hc8N96mezhBhXKeCrh7X17R4TSsdmASyE=)
                          3: 3130332e3134392e3136392e302f32342d3234203d3e203630373831.roa (hash: M972A2zux5bp2vtM/yV/ifXNBlJMRB7g6qDIDzpgNsU=)
                          4: 3130332e3134392e3136382e302f32342d3234203d3e20333936303634.roa (hash: +yFHbjFdcl3OkH9bM82B/wbQvRBlEBGqJ0LTOyulC0Q=)
                          5: 3139342e3131372e36392e302f32342d3234203d3e20323135323438.roa (hash: EqbKHazBpNo/bx4pclFyuqidomfYzdI+MjCRoDSagrM=)
                          6: 326131343a333863303a3130343a3a2f34382d3438203d3e20333936303634.roa (hash: uQC+ycpajw6LG1MwmEH2bQGDaDjqft9mY/Ula5mB0Rs=)
                          7: 5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl (hash: ptQf5DVOFgUSyX4FToV2W+KhqNLpSJcGc4g6HHqM3y4=)
                          8: 326131343a333863303a323a3a2f34382d3438203d3e20323135323438.roa (hash: e6DNGKmUmYh4KhA4h67tF7nM55oym+8oQ84yYdEmy64=)
                          9: 3130332e3134392e3136382e302f32342d3234203d3e20323135323438.roa (hash: RPFyh+9f4VeLKwhSKFsibkww2V1WrimAJUdSq1OTL10=)
                          10: 326131343a333863303a3a2f32392d3239203d3e20333936303634.roa (hash: izH2bRAdoHB65ZOfP1RgM/881EkkTABDPPywFSiQ9f4=)
                          11: AS215248.asa (hash: OBxCaFtmon5RTxGYauxtwJ5Vaj/O+PNWdAKZ74euDqI=)
                          12: 3139342e3131372e36392e302f32342d3234203d3e20333936303634.roa (hash: uPzNQdfiTlC1R9B5J33ZDfQAHE+DMHweR/VNt7ogg2k=)
                          13: 326131343a333863303a313a3a2f34382d3438203d3e20323135323438.roa (hash: hYvWm7RFlZS1l2LX8NsvpkNf0MsxvPiQn7slmgwssck=)
                          14: 326131343a333863303a333a3a2f34382d3438203d3e20323135323438.roa (hash: rQvL6z8yuqUS7v24/Ra9en3S8KmIgkMtv1rcn8o1sfA=)
                          15: 326131343a333863303a3a2f32392d3239203d3e20323135323438.roa (hash: aQBGW4UwEpZw1viUGTiicR7R7bF3eHxKluau3FSxHVQ=)
                          16: 326131343a333863303a313a3a2f34382d3438203d3e20333936303634.roa (hash: hT2vS1KxZCIrrbIeX36lXo5PB7z3bFiXrMszQcpSghE=)
                          17: 326131343a333863303a3130343a3a2f34382d3438203d3e20323135323438.roa (hash: QZeJi0O4ini6QNF1syA5gZ8HehGzsGo0INWd9T4WodA=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 06:32:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:7b:f8:55:62:87:99:99:7b:11:6c:76:cb:3d:3a:79:0a:31:e6:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
        Validity
            Not Before: Dec 18 06:04:44 2025 GMT
            Not After : Dec 19 06:32:44 2025 GMT
        Subject: CN=3337B5A0D13845A76F4AEA545C05668BB93D3CB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7e:e8:43:d7:56:3d:37:7f:ad:29:d2:30:b5:
                    71:08:f9:62:96:34:9a:98:9c:05:f1:c2:de:7c:60:
                    c8:69:06:4a:5c:44:55:53:5a:76:46:b1:3e:8d:85:
                    bb:f0:d9:62:c4:95:a4:0b:5a:1b:70:51:99:d4:76:
                    40:09:da:4e:d3:84:66:06:e8:67:48:7b:b6:6d:ed:
                    01:bb:4e:50:55:be:45:8f:bb:59:d4:28:e6:85:20:
                    50:86:ca:aa:e3:c8:81:8f:d6:b9:a4:b9:aa:95:eb:
                    a2:06:aa:6b:ba:25:db:01:f0:51:d0:a7:d3:dd:93:
                    08:b3:8f:59:46:a0:eb:1a:66:79:fa:f4:2d:a9:35:
                    70:c5:0e:75:77:5b:8c:93:ec:71:27:38:41:07:62:
                    04:8c:44:ee:e7:d7:5a:a0:37:c1:c6:2c:0f:d7:c5:
                    5d:e2:5c:a6:d0:73:64:21:37:ab:25:36:4f:7f:15:
                    b4:46:8e:2f:bb:18:e3:12:67:c3:67:fc:bc:3a:e7:
                    1a:b8:26:d2:11:c0:74:ef:ac:13:1b:b9:fd:3d:c4:
                    b5:37:22:26:4b:5f:e4:ac:af:50:0d:c9:44:8b:0e:
                    fc:64:27:f1:45:90:5d:a3:00:85:74:46:9d:1c:3b:
                    34:e0:9e:88:05:24:22:77:d9:f5:4f:b0:40:5a:9a:
                    86:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:37:B5:A0:D1:38:45:A7:6F:4A:EA:54:5C:05:66:8B:B9:3D:3C:B8
            X509v3 Authority Key Identifier:
                keyid:5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:34:ef:5e:fe:08:b5:58:f6:2c:72:a6:d9:88:68:08:cd:31:
         83:da:dd:7e:e6:28:b2:64:b7:4f:ca:98:11:68:70:d5:55:67:
         5f:10:90:9f:f5:ce:39:44:c5:d9:af:31:d7:6b:f5:03:33:b2:
         b6:ab:60:b9:61:ae:22:cb:f9:00:8a:a6:d1:fe:ff:77:d1:e9:
         fa:23:4b:1e:0b:c7:85:b3:43:fe:81:58:8b:5c:97:50:50:19:
         4d:dc:a5:c2:2c:47:67:b6:e8:cf:80:d4:d0:55:35:d1:34:b7:
         42:41:25:33:0b:45:44:98:06:8b:73:e4:2f:f0:b3:bf:85:2b:
         0c:cd:e0:e0:19:53:54:8e:08:d8:c8:5a:c6:c3:93:fe:e1:cf:
         1d:60:62:f4:ad:36:2c:11:76:f2:02:5b:49:b9:f3:15:76:6e:
         b6:fb:f1:1e:74:66:39:e9:c7:9a:89:ca:04:60:44:c1:ba:cc:
         89:b6:e9:8d:1d:e6:40:ce:74:1b:b3:85:2f:43:65:c6:b7:03:
         73:e3:8b:50:ba:66:47:de:bf:2a:e1:cf:f0:19:4e:96:66:98:
         2f:86:e2:27:5d:73:40:96:b7:fd:37:e9:8e:65:f7:7f:1b:80:
         53:7c:f4:51:b9:bf:08:a6:71:51:e0:8d:17:f9:0d:f9:4b:d6:
         46:97:e6:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 19:06:46 2025 by rpki-client