This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File:                     6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier:          n0Ig/FtFf3yscrczckDifrE2nw74xQO5Kkkwb/cFjwQ=
Subject key identifier:   C6:18:D3:24:50:47:A3:AD:A7:1F:FE:17:AA:49:D9:5C:35:D0:44:5A
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer:       /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial:       1FB7D7388ABE12C2D46EB631D6CDE2FF77E1EF33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number:          0306
Signing time:             Thu 20 Nov 2025 00:03:31 +0000
Manifest this update:     Wed 19 Nov 2025 23:58:31 +0000
Manifest next update:     Fri 21 Nov 2025 01:31:31 +0000
Files and hashes:         1: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: qTVblxVOswImF0DLzsMBRYGGLZ9kn+aqoKndXjNFJ8E=)
                          2: AS216107.asa (hash: SZjGVwi1GjAkhFm3nT5ayCum6XandBtWxpLVDU2nJp8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Nov 2025 01:31:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:b7:d7:38:8a:be:12:c2:d4:6e:b6:31:d6:cd:e2:ff:77:e1:ef:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
        Validity
            Not Before: Nov 19 23:58:31 2025 GMT
            Not After : Nov 21 01:31:31 2025 GMT
        Subject: CN=C618D3245047A3ADA71FFE17AA49D95C35D0445A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:11:fb:2b:7f:fc:de:fc:75:1a:09:d8:2f:d9:
                    1a:4d:64:68:a3:11:90:35:d7:43:02:5d:bd:d8:4e:
                    22:c6:83:45:bc:6d:89:8c:c2:2a:f9:fb:32:73:ba:
                    d1:c9:6e:70:cd:c4:d9:de:39:7f:31:16:5e:e7:e2:
                    54:6f:66:fd:82:68:5a:03:b4:39:b3:68:79:dc:82:
                    d5:8c:c9:59:96:aa:e7:91:b4:50:02:a6:fe:04:f5:
                    bb:67:0c:bc:a9:83:ad:eb:59:7b:36:c3:dd:c2:9f:
                    c6:86:fd:3b:98:7a:64:c3:c8:a3:e5:be:94:21:44:
                    3a:dc:5c:3b:f5:dc:26:7d:b3:8b:66:42:1d:cc:69:
                    0e:11:b2:98:94:fe:59:9c:7b:ed:13:09:43:7a:82:
                    3c:ff:4f:44:24:4e:33:4d:45:af:a0:e1:22:d1:54:
                    9d:90:c3:fa:c3:96:54:43:42:b3:99:2c:9b:df:ad:
                    6c:c6:99:c9:93:49:72:5a:40:bd:75:41:df:45:fd:
                    ad:b6:86:6a:bb:65:9f:45:f1:c1:90:4f:a1:05:08:
                    96:2f:51:cd:f9:4f:44:e1:d5:9c:6d:8e:59:36:ee:
                    70:31:6b:e6:31:ec:54:a8:06:e0:74:bb:7b:69:74:
                    ea:12:74:be:d6:8d:48:4e:c2:57:f0:34:cd:17:03:
                    2d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:18:D3:24:50:47:A3:AD:A7:1F:FE:17:AA:49:D9:5C:35:D0:44:5A
            X509v3 Authority Key Identifier:
                keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:09:8e:bf:e7:d8:54:5d:24:2c:a2:57:2e:fa:28:43:11:c9:
         9e:16:20:d5:bf:7c:3e:98:1e:90:74:34:34:13:32:9e:79:e8:
         02:ea:48:a7:14:f3:9e:fb:31:53:32:fe:db:52:82:82:db:dd:
         90:2d:80:f4:2d:e2:f5:c9:ea:bb:58:95:ad:7c:8c:86:77:c3:
         a7:e7:95:c9:02:f7:5c:3e:71:a3:61:d4:ce:b9:6a:0b:85:85:
         32:49:09:c9:70:bb:04:71:64:e1:e6:2f:68:93:2a:66:ab:67:
         59:fd:03:3d:94:06:c1:e8:76:a2:cb:32:64:35:78:ca:10:52:
         d8:18:c5:89:14:50:38:82:f3:d1:82:26:84:8b:8d:ef:4d:28:
         29:32:2d:c7:04:7a:2e:dc:85:43:08:92:cb:ce:b9:37:be:18:
         8e:9d:26:63:3f:90:2c:23:e7:bf:9a:fa:f7:eb:1e:a2:6a:05:
         2c:d7:0a:ff:d6:90:9a:2d:53:e1:f4:94:2f:40:a4:bc:06:86:
         82:9c:9b:f8:59:3c:13:b5:16:f4:90:89:ed:01:ba:0a:71:1a:
         35:00:2b:d0:b4:df:0b:36:3e:3c:20:73:a0:c6:11:2c:61:c4:
         bc:b6:31:6a:5c:2b:68:f6:53:71:88:46:82:fa:e7:b1:a2:85:
         51:31:61:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 20 14:53:21 2025 by rpki-client