This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft
File:                     35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft (raw, json)
Hash identifier:          TKS5KJdmvz9Alw31dzYZRHQb7jJYmym/lKwtDBG4gSM=
Subject key identifier:   94:54:99:F1:55:B6:95:4E:16:C0:5A:6D:10:28:C3:D3:27:2A:FC:44
Authority key identifier: 35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52
Certificate issuer:       /CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852
Certificate serial:       26CB6689F0D77CB430C59C0B0C026C34B1CFE1A8
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft
Manifest number:          0180
Signing time:             Fri 05 Dec 2025 23:25:00 +0000
Manifest this update:     Fri 05 Dec 2025 23:20:00 +0000
Manifest next update:     Sun 07 Dec 2025 00:35:00 +0000
Files and hashes:         1: 326131343a373538313a323730303a3a2f34302d3438203d3e20323039313039.roa (hash: MFKFuWCDL66Zxs5f3hEeRn+2JW7mEBoWjT7f6AJBOhM=)
                          2: 326131343a373538313a323230303a3a2f34302d3430203d3e20343031333836.roa (hash: xASXurrkB21YmULJQ68AjQqXl8iRC/GmjrwM45TRghc=)
                          3: 326131343a373538313a326630313a3a2f34382d3438203d3e20343031333836.roa (hash: SLj141CGncsBb5vfud/Xh4MbUscTfgukNtFTpVVNYzk=)
                          4: 326131343a373538313a323530303a3a2f34302d3430203d3e203134343437.roa (hash: 2DfIdT8hQ452p9tTWwGSgv6G5KrCdvIla2RYi0wqius=)
                          5: 326131343a373538313a323630303a3a2f34302d3438203d3e20323039313039.roa (hash: Ah/styCnPIoGFWiO0PQ2rB66bvMdDv2NyL9mrkcrCj4=)
                          6: 326131343a373538313a323130303a3a2f34302d3430203d3e20343031333836.roa (hash: T25tbrYVZpBemZDjqgpA9HPrUcZHUwwg3LOVGpsmSZ8=)
                          7: 326131343a373538313a323030303a3a2f34302d3438203d3e20323135333634.roa (hash: iPZr810Wf3G2BF1Yx0TXVCnIMBYWmzqlqsIx/XIB/Cc=)
                          8: 326131343a373538313a323330303a3a2f34302d3430203d3e20343031333836.roa (hash: 0cCFPlcOjS3xWnb1dJLZXDYv3McRJuNCq2FLbccHCeQ=)
                          9: 326131343a373538313a323030303a3a2f34302d3438203d3e20323136333234.roa (hash: bje5aLLUqgAL8DyPjKPS1MwDhANSqShDo64yB6sarZo=)
                          10: 326131343a373538313a323030303a3a2f34302d3438203d3e20333936303530.roa (hash: yUvus43IfO0AT/ck5bMQHbMTgP3EN2v06hq4szCBm40=)
                          11: 326131343a373538313a323830303a3a2f34302d3438203d3e20323039313039.roa (hash: U1r4ZvjM4KXIBEm7hpH6+0Qd/LSsHMlknATpB6yDZ90=)
                          12: 326131343a373538313a323930303a3a2f34302d3438203d3e20323039313039.roa (hash: ENamU9VlpUh2S5yKvYrAp12SwLl/9Jv38ffU+yHH5Iw=)
                          13: 326131343a373538313a326630303a3a2f34382d3438203d3e20343031333836.roa (hash: PQEJzzZkaWaRihPz0qFSxn/fBL9FvQBY7Es5NvynDQM=)
                          14: 35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl (hash: DG0CNBZwO5E4TIBwwo7h8ufWN80d96qgIbZREazWVOk=)
                          15: 326131343a373538313a323030303a3a2f34302d3438203d3e20323039313039.roa (hash: lRerEWAZYVnj4WeC0lksu5JXgu5ks2mpqCgBEDRR0Q0=)
                          16: 326131343a373538313a323030303a3a2f34302d3438203d3e20343031333836.roa (hash: pi4F6jgMqqwUP1FTiOnfocpEw1DljOaDr1vx1pIBms8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 23:45:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:cb:66:89:f0:d7:7c:b4:30:c5:9c:0b:0c:02:6c:34:b1:cf:e1:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35B52EF20A5730A6261D6D1916C6B747FF3C2852
        Validity
            Not Before: Dec  5 23:20:00 2025 GMT
            Not After : Dec  7 00:35:00 2025 GMT
        Subject: CN=945499F155B6954E16C05A6D1028C3D3272AFC44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c3:93:3d:87:f6:21:dc:4a:f1:3d:49:f0:95:
                    e0:e0:ed:ee:52:26:eb:1e:84:8f:77:60:03:b9:a9:
                    cf:b8:29:0c:65:c8:0a:44:81:74:de:ad:4a:6f:7f:
                    cd:0b:0b:8e:dc:07:b6:46:4d:1b:29:9e:c2:9b:ca:
                    1d:5a:83:27:8e:00:b5:cc:de:86:69:18:67:2d:4d:
                    d4:e7:5c:57:eb:e0:db:cd:10:23:da:47:db:c1:3a:
                    26:af:3f:c6:09:b4:6c:44:d6:19:a3:9f:57:49:55:
                    6e:68:1f:e8:96:85:d8:88:7e:6a:00:b5:9d:b3:5d:
                    79:9e:2b:96:e2:65:85:fe:17:a3:d7:84:2f:f7:56:
                    3e:a3:ef:92:4a:1f:25:40:a5:93:66:bc:5e:7b:9f:
                    24:dc:d0:7a:48:06:4a:fc:7b:e2:76:aa:de:ae:ce:
                    31:e0:4f:57:57:1e:62:b1:3b:6d:b7:24:ff:69:cb:
                    82:e6:49:cb:f1:bf:eb:1b:08:cc:90:96:a2:44:ac:
                    e1:64:21:fc:ec:90:9a:db:01:fd:e0:f1:4e:b9:0c:
                    4f:bc:cd:af:09:67:d8:ef:4f:f8:6b:d6:35:80:3c:
                    c6:25:30:2a:3e:b1:aa:e6:08:41:1b:d0:75:63:b8:
                    d0:bf:93:03:23:dd:17:f9:26:ee:db:df:46:3e:6c:
                    a4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:54:99:F1:55:B6:95:4E:16:C0:5A:6D:10:28:C3:D3:27:2A:FC:44
            X509v3 Authority Key Identifier:
                keyid:35:B5:2E:F2:0A:57:30:A6:26:1D:6D:19:16:C6:B7:47:FF:3C:28:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fadebb9d-33cc-429b-aa35-10634a8b1dd4/0/35B52EF20A5730A6261D6D1916C6B747FF3C2852.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:05:6b:26:6d:c5:9f:8e:16:3d:e7:27:49:e5:3c:22:a1:22:
         7b:b1:be:e4:fd:e4:cd:1d:67:ab:15:2b:57:84:bb:2e:b8:6c:
         05:74:ed:23:f7:f1:55:63:3e:1a:80:83:25:8f:3b:8c:24:11:
         55:fc:2d:52:f1:51:dc:8a:9e:d3:a9:33:24:08:c6:4b:bb:bc:
         d7:f0:29:0a:90:ea:18:a7:db:2c:e2:c3:ae:39:1f:01:68:06:
         b8:5c:a3:7f:e9:5c:06:eb:35:cd:be:ff:b9:9c:4b:9c:fc:21:
         c0:13:7c:9e:a6:2b:51:ff:0d:6a:b7:e3:32:25:cd:13:b9:53:
         1d:a7:30:5e:dd:5e:6f:e8:a4:b7:f3:78:41:a5:71:c7:2c:e6:
         0f:ca:47:e0:72:33:d4:52:05:35:fa:30:17:60:8a:8f:ac:6b:
         f6:1b:2c:8b:a0:74:f2:fe:e2:73:d7:a9:35:14:54:1b:c9:2d:
         fb:30:61:12:23:92:62:54:95:92:b7:b2:23:ec:93:18:be:ce:
         a5:74:7b:6e:c2:b9:9e:60:2c:7a:5d:06:42:e5:dc:84:75:fd:
         a2:53:cb:ae:94:cc:07:62:52:2f:81:14:1f:4f:2c:f8:f3:e0:
         02:5a:be:02:d2:3c:cb:d3:cb:3c:76:1f:51:8f:e8:ec:a7:e1:
         b5:91:46:43
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUJstmifDXfLQwxZwLDAJsNLHP4agwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzVCNTJFRjIwQTU3MzBBNjI2MUQ2RDE5MTZDNkI3NDdG
RjNDMjg1MjAeFw0yNTEyMDUyMzIwMDBaFw0yNTEyMDcwMDM1MDBaMDMxMTAvBgNV
BAMTKDk0NTQ5OUYxNTVCNjk1NEUxNkMwNUE2RDEwMjhDM0QzMjcyQUZDNDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYw5M9h/Yh3ErxPUnwleDg7e5S
JusehI93YAO5qc+4KQxlyApEgXTerUpvf80LC47cB7ZGTRspnsKbyh1agyeOALXM
3oZpGGctTdTnXFfr4NvNECPaR9vBOiavP8YJtGxE1hmjn1dJVW5oH+iWhdiIfmoA
tZ2zXXmeK5biZYX+F6PXhC/3Vj6j75JKHyVApZNmvF57nyTc0HpIBkr8e+J2qt6u
zjHgT1dXHmKxO223JP9py4LmScvxv+sbCMyQlqJErOFkIfzskJrbAf3g8U65DE+8
za8JZ9jvT/hr1jWAPMYlMCo+sarmCEEb0HVjuNC/kwMj3Rf5Ju7b30Y+bKRXAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUlFSZ8VW2lU4WwFptECjD0ycq/EQwHwYDVR0j
BBgwFoAUNbUu8gpXMKYmHW0ZFsa3R/88KFIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmFkZWJiOWQtMzNjYy00MjliLWFhMzUtMTA2MzRhOGIx
ZGQ0LzAvMzVCNTJFRjIwQTU3MzBBNjI2MUQ2RDE5MTZDNkI3NDdGRjNDMjg1Mi5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zNUI1MkVGMjBBNTczMEE2MjYxRDZEMTkx
NkM2Qjc0N0ZGM0MyODUyLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L2ZhZGViYjlkLTMzY2MtNDI5Yi1hYTM1LTEwNjM0YThiMWRkNC8wLzM1QjUyRUYy
MEE1NzMwQTYyNjFENkQxOTE2QzZCNzQ3RkYzQzI4NTIubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBpBWsm
bcWfjhY95ydJ5TwioSJ7sb7k/eTNHWerFStXhLsuuGwFdO0j9/FVYz4agIMljzuM
JBFV/C1S8VHcip7TqTMkCMZLu7zX8CkKkOoYp9ss4sOuOR8BaAa4XKN/6VwG6zXN
vv+5nEuc/CHAE3yepitR/w1qt+MyJc0TuVMdpzBe3V5v6KS383hBpXHHLOYPykfg
cjPUUgU1+jAXYIqPrGv2GyyLoHTy/uJz16k1FFQbyS37MGESI5JiVJWSt7Ij7JMY
vs6ldHtuwrmeYCx6XQZC5dyEdf2iU8uulMwHYlIvgRQfTyz48+ACWr4C0jzL08s8
dh9Rj+jsp+G1kUZD
-----END CERTIFICATE-----
Generated at Sat Dec 6 14:09:17 2025 by rpki-client