This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File:                     6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier:          OX9niAMyMxjBya8SAyCEYv3sPN9xP2MY3kPYM35tT9o=
Subject key identifier:   A4:E9:C5:7A:A1:E0:F4:17:A2:17:2E:E4:A0:E9:67:07:CF:CD:95:D3
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer:       /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial:       25CB26DAED23DA160A129DC657F3F2D91FCE61D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number:          031D
Signing time:             Sun 07 Dec 2025 01:53:33 +0000
Manifest this update:     Sun 07 Dec 2025 01:48:33 +0000
Manifest next update:     Mon 08 Dec 2025 04:49:33 +0000
Files and hashes:         1: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: XNFf/SoXXpWRcl37RUvS90U5D4cuNo5ktT+qQ+p1EmA=)
                          2: AS216107.asa (hash: SZjGVwi1GjAkhFm3nT5ayCum6XandBtWxpLVDU2nJp8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Dec 2025 04:49:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:cb:26:da:ed:23:da:16:0a:12:9d:c6:57:f3:f2:d9:1f:ce:61:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
        Validity
            Not Before: Dec  7 01:48:33 2025 GMT
            Not After : Dec  8 04:49:33 2025 GMT
        Subject: CN=A4E9C57AA1E0F417A2172EE4A0E96707CFCD95D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2e:cd:6c:57:05:f7:00:17:ff:b4:98:c8:95:
                    67:18:3a:2c:60:26:98:d8:84:b0:2b:eb:fb:88:6c:
                    94:9c:eb:f5:4f:91:55:e6:21:c0:2e:ab:66:f8:ed:
                    a1:17:cf:d5:51:28:a0:3d:74:b3:61:cf:c9:f5:74:
                    05:f8:58:44:f4:6e:95:7b:62:03:7e:59:c7:f2:0e:
                    ab:2b:3e:5e:50:4a:e8:5d:36:62:e6:55:a2:66:ba:
                    5c:77:59:aa:f2:d5:0e:27:74:b6:e6:b9:fb:35:b6:
                    f7:15:f2:83:24:28:30:5b:8c:99:66:ee:7f:5b:ea:
                    e1:45:68:ce:dc:90:0d:46:07:24:de:2d:ea:9b:0e:
                    0c:64:1f:0c:f9:b0:fb:10:97:dd:aa:01:7f:ff:f4:
                    8c:c9:e3:79:23:ba:a7:cf:b3:36:14:57:8b:a7:1b:
                    57:7e:99:1f:7e:24:67:d8:6e:ec:75:dc:90:82:ba:
                    98:55:80:0e:ff:1d:0b:8a:ce:89:63:25:42:83:c0:
                    72:51:94:10:3b:f7:f3:50:c5:f6:9e:70:f3:87:1d:
                    77:f3:f3:d2:4f:f9:ae:25:58:e6:b2:33:9d:14:43:
                    b9:5e:30:13:e9:08:6d:10:a0:7b:49:5f:c5:d4:d9:
                    fc:3f:27:dd:e9:23:e9:22:8d:ca:dd:73:93:0e:5f:
                    23:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:E9:C5:7A:A1:E0:F4:17:A2:17:2E:E4:A0:E9:67:07:CF:CD:95:D3
            X509v3 Authority Key Identifier:
                keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:28:63:f8:b0:e7:a8:8f:74:9b:a7:f1:8d:b9:ad:54:6a:48:
         59:d3:a8:1a:a3:2a:ce:4e:b8:1e:9e:07:d4:99:64:52:f7:7d:
         18:98:5e:01:d5:b6:45:eb:00:2f:1e:f7:ef:80:69:5e:72:4b:
         44:20:e2:aa:15:4f:ac:b4:3e:b6:75:49:de:a2:30:40:b6:fd:
         eb:a1:7a:83:67:e3:e3:4d:bb:d2:68:4d:f4:99:f2:9a:0a:af:
         82:3e:63:6e:59:6e:89:19:72:fd:8a:c0:71:b7:d0:8c:92:70:
         17:96:e7:8a:e3:2d:d2:90:5c:a9:38:39:7d:8d:43:b6:fd:7e:
         1a:73:d2:51:d2:69:1b:b7:eb:86:82:1f:8e:3d:d9:6b:d3:47:
         ef:dd:df:fa:68:b2:aa:6a:11:f9:96:43:d8:a1:12:61:64:55:
         42:db:1a:26:b8:55:41:cb:72:43:e8:d0:cd:28:96:d4:c6:2e:
         2d:0e:b5:a4:bd:32:0e:b5:3a:80:5d:4c:51:3b:3a:5a:05:10:
         10:4f:d0:62:9a:25:ab:ab:84:82:6d:b8:1b:f4:f1:48:4b:68:
         a8:bc:1b:61:2c:f1:b1:82:59:21:8f:62:3b:c4:6e:d5:3c:96:
         dd:02:7a:51:90:27:79:36:29:6b:a6:af:91:8c:b1:f0:a2:aa:
         ab:de:e6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 14:38:00 2025 by rpki-client