This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft
File:                     E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft (raw, json)
Hash identifier:          IhQjDxqvswnjWbtjDJx1Vil500Exwe19IU7yJDATMus=
Subject key identifier:   AF:5B:4B:F1:D8:D1:39:C4:B0:D2:89:8E:1D:74:D0:ED:AC:0D:92:E4
Authority key identifier: E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
Certificate issuer:       /CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Certificate serial:       0746E5DD77582A1F3298918D02BDE59058452603
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft
Manifest number:          0127
Signing time:             Fri 05 Dec 2025 23:16:17 +0000
Manifest this update:     Fri 05 Dec 2025 23:11:17 +0000
Manifest next update:     Sun 07 Dec 2025 00:15:17 +0000
Files and hashes:         1: 39312e3233322e39392e302f32342d3234203d3e20313937353337.roa (hash: G+mgzv7tRhUfmSaRumVwyhbJ8nNvEA0s859L61Ejv18=)
                          2: 34352e3134392e3135332e302f32342d3234203d3e20323635393139.roa (hash: kgIiY2hKU4E4tRDz3OnYpx84hUJKrY7sZF8oMbsebok=)
                          3: 3138352e3136322e3137362e302f32342d3234203d3e203537303433.roa (hash: SVrpMsQaq2+Of1pyWLABKDNguVH/um78jdJjsg2PZXk=)
                          4: 3138382e39342e3139312e302f32342d3234203d3e203537303433.roa (hash: 8styg8XghivByqecwh8GqtE8kKwAeHdMu50Ggf4sImQ=)
                          5: 3139342e39392e3135362e302f32342d3234203d3e203232343237.roa (hash: rIB6LZlyDY4ccd8aiBOUspQRAkgz2Qkx5QliZapGW3w=)
                          6: 34352e3134392e3135322e302f32342d3234203d3e203235313630.roa (hash: F5qAcWfgptgKaaDsmY0iSSOR+nBZv9RYAI/0kq8SYl8=)
                          7: E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl (hash: cEWTtKSGghX227oyJC4EbSRMbeuR+hEPMbdOKsBq6Bs=)
                          8: 3138352e3132332e3135382e302f32342d3234203d3e203239383032.roa (hash: TLiGnJOFD2b+z4uS2pKNa+Gc2aYGJ4ZFIaexiybn7wo=)
                          9: 3138352e33332e32362e302f32342d3234203d3e20323132363039.roa (hash: +Uou40uKN3P8LL5yuWZGR768rlaEfbKR2VYxApN71AA=)
                          10: 3139332e31372e39352e302f32342d3234203d3e2039333034.roa (hash: 9Guine2JQ0PR4yaj3jvnIIIaTUv4lkdQwALSGSbr1I8=)
                          11: 3138352e3136322e3137372e302f32342d3234203d3e203634323637.roa (hash: /1m1oguvqlFAZeE/pimTTtaJVN2H8its6YXMEA9yyH0=)
                          12: 3138352e3132332e3135362e302f32342d3234203d3e203632343235.roa (hash: XgczxlBPAi1Rz8PovSXKvWm1J5yj8ZdNr+t5/opwRPc=)
                          13: 39312e3233312e3132362e302f32342d3234203d3e2035363530.roa (hash: it6kdqtvQIR1fmnyxGg95/2ozlg9ybLYZncNwT8sS4M=)
                          14: 34352e3134392e3135342e302f32342d3234203d3e20323132343737.roa (hash: ElvQJHHMZyjhqFtZ4eXubU55AwJuUHlB5VPhchi0zEY=)
                          15: 3138352e3132332e3135372e302f32342d3234203d3e203533333536.roa (hash: lHbHKjkzEHNG8HMgZvfO2b7EsuiOvBYyEIHvvUxLyMU=)
                          16: 3138352e3132332e3135392e302f32342d3234203d3e20333936333536.roa (hash: 8ymSE6/IZ4mS3/jdg4jdCuqPIOO7MFcCnM1/lcLJutM=)
                          17: 34352e3134392e3135322e302f32342d3234203d3e20323134313433.roa (hash: ZqsnAbwfQsSLAO15y/hQmlAKLget/IE+XAeE4Nr5/8I=)
                          18: 38392e3135302e34392e302f32342d3234203d3e2030.roa (hash: 7Ig6g0VJeEa8ieyP+TOsHpA7clMBoFU562cFNoIoSMM=)
                          19: 3138382e39342e3139312e302f32342d3234203d3e203236333833.roa (hash: KVgKufhzMCzuYPXRdj1v2nCOHhTInMxlTivgHzFkAcY=)
                          20: 3138352e3136322e3137392e302f32342d3234203d3e203132383734.roa (hash: Oev3T5PHjGnxWqjgwbUH88tHYEWPx4hW7vlkYnxUh4c=)
                          21: 3138352e3132332e3135362e302f32342d3234203d3e20323133323832.roa (hash: HI1VX16qX1LTsAjuvQN0eR8x1ZQ2WlG9l18ZWZhTnXQ=)
                          22: 3138352e3136322e3137382e302f32342d3234203d3e2032393134.roa (hash: s1bbd6LyvYQrZ11FtU3Xa/oNq7QSAV2j6DcxJrrwcV0=)
                          23: 3138352e3233342e3130302e302f32342d3234203d3e203335363631.roa (hash: 7IoW8V7sYCxYnK3GpV+L+iywqaWF/MSER2M0Aaj+ktk=)
                          24: 34352e3134392e3135332e302f32342d3234203d3e203133333335.roa (hash: oW4WynaArlYMwXoVGq9L68dOfSrJj8wnnWqrszCEjBM=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 00:15:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:46:e5:dd:77:58:2a:1f:32:98:91:8d:02:bd:e5:90:58:45:26:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
        Validity
            Not Before: Dec  5 23:11:17 2025 GMT
            Not After : Dec  7 00:15:17 2025 GMT
        Subject: CN=AF5B4BF1D8D139C4B0D2898E1D74D0EDAC0D92E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:5d:38:98:87:92:29:b4:eb:12:b8:38:18:eb:
                    c8:70:8d:d8:47:09:9a:bb:2b:eb:b2:29:cf:ca:8c:
                    93:3a:59:b1:dc:08:54:47:7d:4f:75:03:b5:ab:c0:
                    08:41:f5:0b:ec:c7:45:72:84:95:3f:b7:f7:d1:fa:
                    bb:21:0a:53:b6:0b:51:00:92:e9:3e:6e:45:e7:22:
                    15:91:b3:8e:d5:db:0c:b3:af:83:11:db:4e:01:39:
                    36:a8:43:fb:04:bf:6e:78:40:d1:e5:ce:00:64:c7:
                    0c:a3:cf:29:03:e2:bb:5a:96:6f:5a:ce:b2:ce:6f:
                    7d:96:7c:6e:19:79:fa:75:b4:a7:e3:39:9c:6d:92:
                    56:53:0a:cf:87:4a:cc:27:33:38:aa:3b:2a:f4:79:
                    2a:42:c8:2b:6d:34:dc:bc:90:8b:29:03:c9:7c:ee:
                    f2:cc:d8:51:81:a1:09:d9:93:07:7e:72:fd:be:49:
                    c5:ba:96:12:96:94:10:75:58:c4:f9:56:23:91:fd:
                    cb:f0:f9:e4:14:23:5a:9b:40:fb:4b:b1:ec:5a:e5:
                    60:ad:06:08:fc:7d:47:f7:a9:4e:9f:5b:4c:25:f6:
                    fd:5f:ef:7c:30:f6:a4:2e:32:8a:d1:6c:6a:8e:8d:
                    14:aa:8b:3c:2d:19:0d:34:88:3c:4e:e6:47:4e:d5:
                    58:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:5B:4B:F1:D8:D1:39:C4:B0:D2:89:8E:1D:74:D0:ED:AC:0D:92:E4
            X509v3 Authority Key Identifier:
                keyid:E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:93:56:bd:9f:ab:75:0d:b3:4d:5f:ed:e2:42:ce:cd:b2:e7:
         fa:75:9a:fc:9c:cc:26:d8:d1:4d:4a:cc:28:8a:8e:34:51:7b:
         7c:4c:6c:a7:32:3b:c2:86:54:24:38:08:b0:d6:6b:38:25:1b:
         18:cd:7f:ab:f8:eb:fc:be:f8:62:68:17:4d:d7:45:42:dc:a0:
         3c:52:00:62:02:1d:fb:d5:c2:10:30:30:a5:16:7e:07:d4:01:
         26:3a:fd:88:7a:da:e5:ee:81:9f:cd:bc:01:ba:35:bc:01:b9:
         1b:7a:e4:cc:12:c3:03:7d:3d:fd:e0:05:40:50:f6:e9:b5:0a:
         fc:3c:f3:1b:1a:c0:d8:d8:d8:ca:40:25:3b:9c:80:04:0e:13:
         b5:1b:e0:b7:c8:53:f5:f9:e7:ff:ea:23:c9:72:8c:78:05:6b:
         7a:c2:6a:e6:52:9f:27:48:54:a1:a6:6c:ef:bc:59:db:2a:ab:
         ac:50:4b:89:e4:f6:51:8c:dd:ec:76:4d:61:98:0e:97:3c:3d:
         3a:6d:7b:2f:9f:5d:e0:a5:bf:cf:e2:44:a6:09:7e:7e:4a:99:
         53:2d:0a:4a:13:d8:37:2d:0e:14:0a:ee:3f:b7:ef:32:8e:3f:
         95:0d:74:06:12:c4:4b:c6:56:0f:78:27:68:d1:ed:0b:dd:0f:
         3c:e9:db:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:22:19 2025 by rpki-client