This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File:                     6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier:          YIhXcVB56sZxTrOgH6v8ro+7tfDsAnCRtjeyIhhxfzU=
Subject key identifier:   F7:54:94:9C:4A:E4:58:FE:78:D8:45:AF:F1:CC:64:4A:37:91:4D:71
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer:       /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial:       62EEDB8B20AF4DB47EB6E727077FBC6521C34CDA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number:          0329
Signing time:             Tue 16 Dec 2025 05:48:37 +0000
Manifest this update:     Tue 16 Dec 2025 05:43:37 +0000
Manifest next update:     Wed 17 Dec 2025 06:43:37 +0000
Files and hashes:         1: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: TbZ+/4zRGDMqd8RXB9S/G+kphqzF29wDQfRAOWK2j+0=)
                          2: AS216107.asa (hash: SZjGVwi1GjAkhFm3nT5ayCum6XandBtWxpLVDU2nJp8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 06:43:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:ee:db:8b:20:af:4d:b4:7e:b6:e7:27:07:7f:bc:65:21:c3:4c:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
        Validity
            Not Before: Dec 16 05:43:37 2025 GMT
            Not After : Dec 17 06:43:37 2025 GMT
        Subject: CN=F754949C4AE458FE78D845AFF1CC644A37914D71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:83:6e:e8:4e:ec:2a:54:24:ac:61:80:9a:0d:
                    37:c2:b6:9c:ef:eb:05:6e:69:62:4a:8c:05:71:6b:
                    f5:34:68:86:bf:0e:c2:10:f9:e9:ed:37:d6:13:cc:
                    c4:40:88:17:51:90:9d:6c:85:16:74:c5:db:99:c9:
                    c0:53:23:71:9e:a3:e8:ba:d0:9f:a3:55:6c:43:19:
                    ae:5a:09:32:c8:67:ef:ea:d2:58:c4:fd:38:6c:1f:
                    57:14:53:78:b4:f8:c8:66:3c:75:d5:91:8d:1e:6c:
                    8e:08:a4:98:21:db:5f:98:8b:b2:f6:59:64:68:9b:
                    72:ac:b2:f9:00:e1:82:31:30:e8:21:cc:7e:4c:f7:
                    8c:9a:97:1b:5b:a8:62:51:5d:0b:54:d1:1c:fa:cf:
                    a3:56:29:14:6f:30:8d:00:b8:0a:f7:ee:22:f2:88:
                    1e:e9:3c:44:a8:1f:8d:7d:24:f1:f9:f5:0d:6b:e3:
                    81:a7:bd:07:d2:63:28:8a:a0:81:23:b8:f2:3e:99:
                    9b:f3:01:c0:24:95:47:2a:ab:a5:5d:d4:dc:84:be:
                    c7:5e:0d:b1:e3:48:73:04:68:54:7c:3f:e3:03:d0:
                    23:d0:c9:ad:ef:cb:93:9d:6b:12:1c:e6:41:82:93:
                    8e:a8:a8:5d:45:76:21:71:10:d7:81:95:9f:29:aa:
                    b5:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:54:94:9C:4A:E4:58:FE:78:D8:45:AF:F1:CC:64:4A:37:91:4D:71
            X509v3 Authority Key Identifier:
                keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:2d:14:25:38:3f:0a:64:0e:bb:72:a7:78:1b:dc:6b:18:e4:
         17:30:50:a8:d1:22:18:df:dd:1a:0d:7d:c2:4d:93:7a:54:56:
         1c:94:18:0e:2b:3e:fd:f2:ac:e9:9f:af:6d:f7:ca:77:9f:bc:
         12:1f:bc:12:85:cb:51:be:a9:7d:1b:42:68:83:1d:cf:25:d3:
         fb:79:23:56:a4:2c:ba:10:b5:c8:d1:e3:75:54:5c:28:21:97:
         81:d7:ed:bc:15:b6:82:f6:0e:00:40:f3:50:e1:9c:73:7e:70:
         f9:6b:13:0c:28:90:1f:00:da:20:ad:39:ee:72:07:ca:e1:2d:
         97:15:a0:33:ab:89:7c:0b:e1:cb:6e:76:5e:d7:ca:a3:c9:7d:
         b5:0e:29:1d:24:30:56:42:91:05:70:7a:28:fb:c7:70:d3:6e:
         88:e1:48:81:87:99:e3:94:2b:7d:fe:30:46:4a:83:97:cf:c7:
         6f:1c:aa:da:0c:9f:3a:d1:78:86:39:3c:93:83:6f:0d:73:6e:
         c4:01:c5:81:0d:64:1e:cf:cc:5a:c4:07:f8:ec:39:c4:30:d8:
         19:eb:d2:d3:cc:70:51:44:62:0e:87:03:00:0c:82:95:08:af:
         4f:96:98:1e:bd:a1:63:a7:77:25:6f:ce:b3:37:8c:19:24:ed:
         6c:15:e5:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 14:26:57 2025 by rpki-client