This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File:                     6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier:          uxyIn0oK4kCKhwcuw1KDK+2ZgBNCvECyRcthzVOBwpQ=
Subject key identifier:   27:7A:38:70:45:E3:60:03:C1:B0:D3:16:2C:3F:FC:82:9F:8F:23:8B
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer:       /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial:       293BB41EC0607D025E063B9EC11CD9B5A0B6B4E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number:          033D
Signing time:             Wed 31 Dec 2025 05:03:37 +0000
Manifest this update:     Wed 31 Dec 2025 04:58:37 +0000
Manifest next update:     Thu 01 Jan 2026 08:40:37 +0000
Files and hashes:         1: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: DWZj15cevYM0YnbFP0zgMe2NQC7rovmNzXsFg9fA11k=)
                          2: AS216107.asa (hash: SZjGVwi1GjAkhFm3nT5ayCum6XandBtWxpLVDU2nJp8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 Jan 2026 08:40:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:3b:b4:1e:c0:60:7d:02:5e:06:3b:9e:c1:1c:d9:b5:a0:b6:b4:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
        Validity
            Not Before: Dec 31 04:58:37 2025 GMT
            Not After : Jan  1 08:40:37 2026 GMT
        Subject: CN=277A387045E36003C1B0D3162C3FFC829F8F238B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fa:53:66:6c:e7:56:c7:d5:fb:7f:13:8f:56:
                    b2:23:8d:4d:3e:55:d4:9e:f5:f8:59:aa:8a:a3:b8:
                    7e:08:68:38:65:a9:6b:42:a0:c7:7a:02:1a:ef:00:
                    a1:dc:20:d1:c1:48:5b:25:5c:09:c2:02:48:a1:ef:
                    9d:9d:af:67:f3:38:c6:95:f6:02:c9:a1:00:47:c9:
                    9b:9f:a1:6e:f2:b1:d2:41:f1:10:78:53:0d:a8:09:
                    c8:c4:44:72:6f:e4:f6:53:9f:7c:e6:21:4b:e2:20:
                    0e:18:8f:60:dd:91:c7:24:7f:30:bc:79:71:5a:2b:
                    d2:49:c8:d7:76:58:bb:98:6b:d0:59:9f:f7:b8:1d:
                    d5:61:2a:96:4f:d6:71:a7:2f:25:92:98:08:32:80:
                    07:83:2c:0c:7e:15:ed:d3:e0:04:70:99:a9:4f:e3:
                    e9:15:41:7e:36:2d:d5:8a:b0:0c:fd:ab:8a:14:31:
                    7f:cf:17:a1:8e:39:c2:2c:61:39:5f:53:7c:92:a7:
                    93:59:03:86:2c:79:0b:8e:4f:fa:20:2e:bb:59:03:
                    45:91:11:f0:6a:9f:d5:86:17:df:64:f9:fc:4d:fa:
                    4c:70:ae:88:02:d4:b9:d4:bc:7d:55:84:15:83:22:
                    ab:0b:9e:f6:af:f3:24:98:e6:79:08:cc:1b:0c:ae:
                    b2:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:7A:38:70:45:E3:60:03:C1:B0:D3:16:2C:3F:FC:82:9F:8F:23:8B
            X509v3 Authority Key Identifier:
                keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:94:20:25:2e:22:23:f0:1f:c8:62:b9:46:05:48:f3:a9:ec:
         b6:90:08:90:68:d5:6f:a4:83:36:67:0f:78:60:6d:93:f6:5c:
         be:a4:3b:20:21:0d:e9:8f:22:f3:80:dc:b2:40:2c:93:da:da:
         fe:47:b1:2b:1a:83:fd:bb:07:5a:6e:87:0c:0f:eb:92:9e:e3:
         06:4d:0e:f9:77:46:9b:7e:7b:b5:59:d0:0f:b5:a1:50:b4:ae:
         0e:9e:f2:c5:13:fd:1d:ba:d6:03:74:05:1d:11:57:0e:e0:67:
         25:d8:b2:59:46:11:93:d0:ad:27:ec:44:13:64:68:b5:25:db:
         ea:b1:e9:bc:d2:b2:32:6b:29:af:5b:da:a2:de:78:30:61:81:
         06:9e:be:e6:76:7d:ba:be:bb:c4:7b:5e:3e:06:d3:2c:02:61:
         28:a4:f8:4e:f1:87:70:8b:db:64:31:5b:87:a3:7c:7c:63:35:
         0b:dd:ce:3c:51:99:d1:38:35:5d:2d:3a:5f:01:a3:cb:7b:f9:
         a1:3c:c4:b7:af:56:8a:e3:34:18:d2:49:84:48:e7:0a:11:4d:
         fc:76:d0:65:ff:37:5e:0c:ec:93:22:d0:53:ae:ab:9b:4d:e2:
         3b:9c:ae:ce:1f:a0:49:31:ae:52:c0:4a:80:ea:6a:f4:da:cc:
         5d:78:f0:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 12:47:01 2025 by rpki-client