This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File:                     6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier:          uA2kUcb0Mb/Wt6cqtMsbe3+K3ZSPATgyb6hKI5Y1I6w=
Subject key identifier:   1C:9C:E3:CE:D8:5A:00:4A:3B:9B:5D:5E:DC:2A:B0:6A:0B:1A:C0:BC
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer:       /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial:       4794FE513639ECADF4FCBD6F848767EBCB090E4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number:          031F
Signing time:             Mon 08 Dec 2025 13:43:36 +0000
Manifest this update:     Mon 08 Dec 2025 13:38:36 +0000
Manifest next update:     Tue 09 Dec 2025 15:58:36 +0000
Files and hashes:         1: AS216107.asa (hash: SZjGVwi1GjAkhFm3nT5ayCum6XandBtWxpLVDU2nJp8=)
                          2: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: jwzQXD5NrTt5cVNSLvt+/x1x9UKXtzTxrlzSAValX9U=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Dec 2025 15:58:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:94:fe:51:36:39:ec:ad:f4:fc:bd:6f:84:87:67:eb:cb:09:0e:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
        Validity
            Not Before: Dec  8 13:38:36 2025 GMT
            Not After : Dec  9 15:58:36 2025 GMT
        Subject: CN=1C9CE3CED85A004A3B9B5D5EDC2AB06A0B1AC0BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7f:4d:e3:fc:c3:7c:32:75:41:9c:a8:6c:13:
                    a3:3d:4a:a0:70:20:36:d5:29:3f:44:89:50:83:16:
                    d3:97:e4:73:c3:d1:74:e1:54:ba:e9:11:d2:09:a0:
                    b0:53:24:de:2b:9a:b3:44:cf:56:1c:42:bc:a0:9b:
                    e1:24:1c:1a:02:13:50:91:a5:87:02:43:d1:ce:f8:
                    bc:dd:89:8b:a3:e9:9b:dc:04:c0:d6:84:df:73:d5:
                    e8:05:07:af:c8:02:55:88:03:41:27:b9:17:3b:ef:
                    e6:e6:ce:73:7d:24:23:87:74:a7:0e:1d:d6:32:8b:
                    bb:bf:56:03:95:b1:46:2b:ca:84:6b:1e:51:2c:e8:
                    e4:e4:34:db:58:b6:d2:60:15:5d:a9:ea:8a:3f:a4:
                    63:2e:57:39:08:51:e8:a7:2b:77:8b:a0:35:b1:0a:
                    94:92:d4:f4:23:30:44:1b:92:90:ab:7b:ac:5d:d5:
                    01:56:f7:cf:45:de:7f:4b:4d:57:91:37:ae:4b:0d:
                    95:70:4a:1b:8e:42:5e:a3:d6:87:38:4d:a0:33:25:
                    13:32:af:21:4b:48:bf:5c:81:c1:a2:ca:3f:3f:cc:
                    bb:94:d7:23:4f:46:9b:fe:99:e6:42:62:f7:52:4a:
                    b0:0d:b3:f2:22:70:5c:c8:44:9d:4a:3f:72:af:c7:
                    2b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:9C:E3:CE:D8:5A:00:4A:3B:9B:5D:5E:DC:2A:B0:6A:0B:1A:C0:BC
            X509v3 Authority Key Identifier:
                keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:92:c0:6b:3f:f1:64:a1:0e:e8:c0:45:2d:1f:62:ca:1a:12:
         b2:68:67:47:c4:62:e3:06:e8:95:9e:12:46:b3:d7:ee:da:35:
         98:e3:ea:84:75:3d:22:ff:76:e5:f7:e2:44:f3:1c:b9:5e:02:
         a3:96:15:f2:ee:f3:3d:e8:8d:c7:ed:52:8a:19:7c:af:63:ef:
         f7:37:4e:5d:32:3c:c6:f3:49:16:08:30:f3:e0:a9:b7:c4:92:
         ac:3c:76:d4:49:29:aa:a0:1f:0f:4b:e2:a0:ce:5c:bf:db:82:
         cb:b3:3c:83:06:f8:2b:c6:e8:63:b1:62:a8:ea:07:ae:e9:e4:
         a9:b7:5d:2d:36:70:50:63:24:a6:f6:a3:40:79:37:02:99:dd:
         c7:b6:eb:3f:20:f1:42:55:36:ab:e2:b7:80:45:99:5d:77:d7:
         2b:d5:ed:f7:2e:80:52:77:2d:07:4c:52:8d:33:18:a7:30:38:
         92:aa:fa:30:55:9f:ab:4a:5a:80:3b:8c:fc:64:ee:2d:6d:2a:
         2b:d3:77:a8:8c:a4:fa:c8:0b:47:5e:72:e0:e8:2d:77:87:23:
         eb:0e:27:09:26:97:e5:55:a8:0e:b8:34:2e:41:72:11:97:bf:
         62:9a:a3:4a:5e:85:05:b3:83:fe:bf:c2:33:f4:99:32:26:e1:
         e6:6e:53:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 03:53:02 2025 by rpki-client