This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File:                     6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier:          5tHah41zvynnzYhlF/GQcOi41Dm60H8deIePI/UzXm4=
Subject key identifier:   B2:38:60:A1:81:FD:CC:7A:8A:4D:92:B3:3D:68:1E:F2:99:49:35:A7
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer:       /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial:       1B4431BBA364FC44FDE82CBFB391D16824B9CFFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number:          0339
Signing time:             Sun 28 Dec 2025 05:28:37 +0000
Manifest this update:     Sun 28 Dec 2025 05:23:37 +0000
Manifest next update:     Mon 29 Dec 2025 06:09:37 +0000
Files and hashes:         1: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: e4847UeTPxe9nEMvWQkJkA2wZR5U7g9RkX/NnpWGkpo=)
                          2: AS216107.asa (hash: SZjGVwi1GjAkhFm3nT5ayCum6XandBtWxpLVDU2nJp8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Dec 2025 03:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:44:31:bb:a3:64:fc:44:fd:e8:2c:bf:b3:91:d1:68:24:b9:cf:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
        Validity
            Not Before: Dec 28 05:23:37 2025 GMT
            Not After : Dec 29 06:09:37 2025 GMT
        Subject: CN=B23860A181FDCC7A8A4D92B33D681EF2994935A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:06:56:b7:80:50:78:e3:7f:ef:50:52:07:b8:
                    c3:36:8a:99:f0:6a:b9:5c:a8:46:20:ba:08:9d:69:
                    a8:ca:87:26:d8:d0:dc:d8:a6:0e:94:3b:26:bf:f4:
                    89:83:45:68:66:9e:3c:c7:4b:9b:cb:58:44:b7:c3:
                    e3:a7:5b:e2:c6:41:90:2b:41:81:61:6a:15:c4:8b:
                    84:a2:6b:f1:e7:4c:5d:36:38:70:c4:51:cc:9d:59:
                    d7:ea:df:ed:ca:04:72:4b:f5:0b:4d:4b:14:10:5f:
                    fd:29:d0:09:ed:52:39:c5:d5:a5:ef:f3:63:fe:6e:
                    13:88:5b:1b:f8:f4:d1:c6:98:39:62:e6:40:f3:a3:
                    e5:b7:f5:41:53:bc:14:0d:b9:97:29:cd:b1:c2:cd:
                    1e:e2:8d:c5:6b:a4:3a:12:82:89:8a:a1:16:b9:da:
                    5b:2b:5b:b4:66:47:ba:52:9e:f8:4f:fc:a7:00:76:
                    af:42:0f:d0:54:3b:75:bd:99:0c:c7:be:82:6b:22:
                    8d:c1:12:a0:54:81:4d:0f:70:07:41:87:31:3e:36:
                    95:7e:3c:e4:58:de:53:89:75:5e:e9:97:1d:e2:3a:
                    4e:20:eb:a1:9b:1d:b7:fb:2e:97:95:d1:49:23:5e:
                    bf:88:25:aa:67:ce:00:39:23:1a:12:41:ea:e6:9f:
                    85:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:38:60:A1:81:FD:CC:7A:8A:4D:92:B3:3D:68:1E:F2:99:49:35:A7
            X509v3 Authority Key Identifier:
                keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:35:ae:aa:b5:f3:f3:67:69:7b:75:08:66:bf:a8:fc:ac:28:
         05:72:7b:9e:c4:c0:be:a2:53:ed:ba:45:65:a0:ed:94:ac:b7:
         3a:40:48:fc:ee:03:3d:e2:d3:ad:f5:47:e5:ff:04:b1:39:7b:
         62:1c:61:bc:ca:d8:72:27:8a:fe:0f:c0:68:c8:f1:88:80:29:
         ad:88:d8:ff:3e:6a:f9:7b:1f:78:08:2a:a1:6a:76:c2:9a:28:
         af:97:25:09:fb:c2:d8:06:70:3d:91:77:4f:de:99:b4:7b:7e:
         08:35:fd:26:f7:78:8f:de:6d:7d:32:2f:e2:b3:6c:52:0c:5e:
         7a:00:b7:46:ef:20:5b:44:9e:df:3c:88:ab:59:ba:6f:e8:5f:
         40:ae:80:7d:1e:88:91:10:f6:46:e7:61:3d:d5:ae:d4:d2:4d:
         f9:79:b1:4e:d9:f5:8e:f1:df:54:f8:2d:10:07:b4:d2:36:12:
         f8:89:0c:be:34:43:9a:52:4a:0f:e7:93:03:ec:ca:aa:95:7a:
         89:07:71:45:c5:1a:9d:5f:69:53:2e:dd:cc:c2:1d:17:72:9b:
         2b:77:b6:5c:19:0c:8f:2d:7f:45:bc:d8:81:2a:00:b4:b8:e1:
         db:51:3f:e1:97:2c:c1:20:c0:66:f2:25:c6:bc:1c:26:68:a6:
         b7:77:88:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 11:54:08 2025 by rpki-client