This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File:                     6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier:          8DpnfFlr/5356EV8B/u/HdKyFZtkAbBYf0W/o0Mj4qw=
Subject key identifier:   6D:77:03:14:50:F3:26:83:F3:0D:54:EA:A0:69:90:EF:4D:6A:60:4A
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer:       /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial:       23BC47BBF432369A6E4E6E70EEF2F29208E40D3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number:          0321
Signing time:             Wed 10 Dec 2025 02:18:36 +0000
Manifest this update:     Wed 10 Dec 2025 02:13:36 +0000
Manifest next update:     Thu 11 Dec 2025 05:50:36 +0000
Files and hashes:         1: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: MKVd/lYeIgoZFYFwpsrpKd7+rxsNsFrvFl+HL1Hn+dQ=)
                          2: AS216107.asa (hash: SZjGVwi1GjAkhFm3nT5ayCum6XandBtWxpLVDU2nJp8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Dec 2025 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:bc:47:bb:f4:32:36:9a:6e:4e:6e:70:ee:f2:f2:92:08:e4:0d:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
        Validity
            Not Before: Dec 10 02:13:36 2025 GMT
            Not After : Dec 11 05:50:36 2025 GMT
        Subject: CN=6D77031450F32683F30D54EAA06990EF4D6A604A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bb:01:87:0f:9d:59:c2:ac:3f:01:cd:a0:86:
                    73:e7:a0:2d:e3:51:d3:32:81:9a:7b:ab:de:31:be:
                    18:88:e5:b9:d1:09:d9:bd:9e:66:7a:64:13:4b:8f:
                    cd:35:66:5a:57:15:79:13:05:aa:08:42:f5:43:a9:
                    ba:75:de:0b:11:a3:45:eb:3f:04:e5:3c:61:26:8d:
                    d4:b2:56:3f:e9:65:d5:3c:67:98:1c:36:4e:26:46:
                    97:c5:39:14:7f:dd:c9:96:6f:bf:4b:3e:1c:b1:6b:
                    68:00:be:1f:11:e2:26:7d:68:10:83:d0:90:08:4e:
                    c7:93:38:2f:07:34:bb:e4:8f:cb:63:79:3a:86:e8:
                    95:1f:41:95:a6:cc:e8:8a:d6:41:c1:a2:d4:06:cd:
                    2f:c6:2f:3d:c1:48:cb:d7:ff:09:26:2d:c0:ba:91:
                    c9:29:76:32:66:20:5a:da:c1:b2:10:b8:4b:06:ee:
                    2e:18:bf:64:ec:48:48:a6:44:94:56:7b:0a:85:69:
                    16:65:e2:4f:35:4f:99:44:c3:0b:00:74:3f:a9:08:
                    f0:87:76:f6:39:7d:bc:93:ae:4b:2d:6b:69:4a:05:
                    f1:d2:16:91:c3:e0:6c:0f:25:3e:28:4d:be:98:69:
                    3c:f6:8b:9c:f0:22:fa:3b:a3:c8:a8:ae:2b:33:c4:
                    76:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:77:03:14:50:F3:26:83:F3:0D:54:EA:A0:69:90:EF:4D:6A:60:4A
            X509v3 Authority Key Identifier:
                keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:eb:58:a5:b3:42:9d:16:d4:1f:56:f6:cb:2e:46:1e:b6:7b:
         bd:83:c3:58:68:e1:55:34:fb:7b:3d:33:69:69:72:0f:ab:e9:
         7e:ae:b0:67:b4:c3:ec:55:8c:a4:a3:fe:7d:04:a9:ba:4d:29:
         2f:76:47:f1:7a:78:00:16:db:6d:27:f3:9e:d8:15:2d:c3:60:
         6a:70:4c:d6:07:42:e3:41:fc:59:95:19:01:e2:c4:c3:9b:e9:
         15:31:2d:17:be:0b:bb:22:49:b1:5f:b7:e6:d0:ef:7a:42:dd:
         46:b2:f1:e2:08:31:f2:67:f0:1c:c2:26:7f:97:28:d2:8b:2b:
         7f:7f:59:e3:b4:e8:73:bf:38:e4:43:bc:7d:19:0a:4d:57:4c:
         69:79:36:71:5d:d3:f8:c3:16:76:98:75:eb:51:79:c3:a9:fb:
         5b:f5:7f:52:bd:8f:5a:05:10:c1:49:4b:ed:f1:1e:38:dd:d1:
         33:27:22:cb:1f:96:87:ea:37:95:28:55:65:bd:db:a4:48:ea:
         6f:81:67:89:b2:65:fc:81:c3:aa:25:73:ba:ce:6b:2a:0e:3d:
         fc:06:cc:3b:b3:98:50:ab:7e:df:85:78:c3:b3:dd:83:23:68:
         3a:90:4a:55:14:84:97:c4:17:a9:7d:cd:fb:8e:9d:f7:da:ac:
         ee:24:32:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 04:22:49 2025 by rpki-client