This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File:                     6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier:          6X6b3vno/RimfWolfs4yH1TgqY8aRg8Y1jflp50/fRc=
Subject key identifier:   94:BB:0B:7D:9E:86:76:46:C1:D9:66:3B:71:21:4F:BE:37:77:FE:FD
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer:       /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial:       4ABB8C0E918749F478C3CC3F0EAC01F8C73EF736
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number:          0326
Signing time:             Sat 13 Dec 2025 23:18:36 +0000
Manifest this update:     Sat 13 Dec 2025 23:13:36 +0000
Manifest next update:     Mon 15 Dec 2025 01:36:36 +0000
Files and hashes:         1: AS216107.asa (hash: SZjGVwi1GjAkhFm3nT5ayCum6XandBtWxpLVDU2nJp8=)
                          2: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: imPEpNLPjKaxWL2VY8Kamj+IXvSKOvhxUEAIWZW8RVQ=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Dec 2025 17:47:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:bb:8c:0e:91:87:49:f4:78:c3:cc:3f:0e:ac:01:f8:c7:3e:f7:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
        Validity
            Not Before: Dec 13 23:13:36 2025 GMT
            Not After : Dec 15 01:36:36 2025 GMT
        Subject: CN=94BB0B7D9E867646C1D9663B71214FBE3777FEFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:23:dc:ca:33:fd:79:8c:46:2c:9f:92:f1:a7:
                    58:0b:0c:db:47:e5:ce:23:9e:60:fc:e0:5b:8d:ac:
                    6c:3b:c9:65:50:da:fb:cc:85:73:8b:d7:8b:63:54:
                    4f:ac:46:cb:0b:55:f5:a9:26:51:66:62:00:41:4d:
                    6e:65:c6:72:04:72:63:80:3b:58:64:6f:39:fa:24:
                    3b:a0:ca:86:5d:96:ca:19:38:13:3b:b9:47:35:5e:
                    75:57:5f:da:74:a0:8e:be:11:df:07:8a:83:b9:26:
                    a1:82:de:f5:cc:57:63:51:20:8c:4e:13:d0:da:79:
                    47:3a:93:57:7d:f1:92:e2:21:ce:e9:d6:9f:b4:64:
                    ff:da:5c:52:30:7b:59:a7:7f:00:eb:ab:ff:9b:59:
                    9d:e8:61:31:18:bd:9f:b5:f5:0f:38:a8:58:7b:21:
                    34:8b:a1:bd:af:bd:5c:8a:2a:48:98:fa:35:b2:d1:
                    6f:38:c2:c3:91:7c:20:ee:30:30:cc:ce:80:41:0f:
                    e0:fd:c0:6c:34:57:ab:d7:ba:5c:ac:8b:39:1a:47:
                    1b:3e:81:21:2d:01:02:d7:0f:73:27:81:cc:5c:fd:
                    66:43:75:14:cb:a4:16:fd:f8:77:15:34:29:a2:c0:
                    cc:45:cf:52:2f:98:fe:dc:ca:5e:65:b5:b5:e7:12:
                    b2:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:BB:0B:7D:9E:86:76:46:C1:D9:66:3B:71:21:4F:BE:37:77:FE:FD
            X509v3 Authority Key Identifier:
                keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:56:f8:a2:0c:59:d4:e1:53:09:1a:a4:46:24:f2:3f:9e:d3:
         82:8a:69:22:98:84:5c:a4:f4:45:f2:2e:c8:48:34:ce:61:6b:
         00:e1:80:da:ac:e1:da:c2:30:94:bf:d7:95:6a:c4:eb:c7:43:
         09:d5:81:57:8b:f7:00:e9:27:57:35:33:7e:ac:cb:ee:a7:88:
         43:fb:b3:e2:7f:81:e4:a5:d7:84:1c:5b:5b:ad:f9:0c:d6:1e:
         c2:b8:24:22:5a:93:0a:8a:e3:a8:21:a4:96:98:a6:90:90:a0:
         68:78:3b:e8:94:98:7d:3c:fb:0b:e8:2b:86:42:e6:85:0e:21:
         1e:30:c2:fb:0d:a9:c4:20:f9:a7:6d:00:56:15:08:55:dc:42:
         f5:4d:f9:33:22:13:42:80:0e:4f:0d:eb:c8:a3:57:35:7a:b8:
         04:45:31:95:25:0f:35:1a:c4:60:67:21:e2:45:b2:f3:be:4d:
         cd:c1:a9:13:62:b5:06:13:65:89:5a:c1:6e:44:8c:29:ab:b8:
         85:dc:03:6b:07:4c:57:03:d9:d7:e7:8c:d7:15:e6:24:d7:2f:
         d3:70:a3:f5:1f:84:be:96:46:d3:45:5e:70:b3:fc:e9:11:f9:
         4d:b1:bd:3e:86:56:5c:48:8a:ca:6f:d8:85:e6:7f:a5:20:18:
         06:d4:71:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 02:43:30 2025 by rpki-client