This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File:                     6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier:          EtHieilddPhrLfusSg4ghYbO/0dpN9Vwlq7fi2HhTYE=
Subject key identifier:   37:8E:90:D6:7B:9B:38:26:49:50:E2:3A:AA:3B:36:A1:AA:DA:B9:F7
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer:       /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial:       2125EF2F09A6A5619ED9D753665E3E8CA0CEE3B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number:          0314
Signing time:             Sun 30 Nov 2025 09:38:32 +0000
Manifest this update:     Sun 30 Nov 2025 09:33:32 +0000
Manifest next update:     Mon 01 Dec 2025 12:52:32 +0000
Files and hashes:         1: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: ghfg7phQTCB8i7odfmP/gdQB6sT5CK04lSfr2GIjCtU=)
                          2: AS216107.asa (hash: SZjGVwi1GjAkhFm3nT5ayCum6XandBtWxpLVDU2nJp8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 01 Dec 2025 11:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:25:ef:2f:09:a6:a5:61:9e:d9:d7:53:66:5e:3e:8c:a0:ce:e3:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
        Validity
            Not Before: Nov 30 09:33:32 2025 GMT
            Not After : Dec  1 12:52:32 2025 GMT
        Subject: CN=378E90D67B9B38264950E23AAA3B36A1AADAB9F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:04:2f:25:09:6c:13:f3:93:30:73:5a:79:99:
                    f8:9f:f1:dd:99:f2:bf:9c:58:31:a1:d7:c8:4a:33:
                    61:c4:78:af:6a:ad:5e:08:fa:79:db:0c:68:5c:00:
                    20:55:ca:f7:7d:ac:e7:a0:4a:08:27:bd:98:78:87:
                    e1:1e:72:ad:3c:bf:6b:ff:94:89:6a:40:0f:1e:6a:
                    11:b4:6f:8f:9a:a6:6d:25:8d:6f:93:05:ca:ea:f6:
                    a7:48:88:ae:07:84:7b:93:c7:99:cb:d4:eb:14:2d:
                    73:ca:25:84:0f:af:6f:0f:5c:97:be:ed:0c:60:7a:
                    68:a5:ad:ba:35:dc:c4:95:cd:55:c3:33:29:12:40:
                    28:9c:15:c0:3f:ac:6d:dc:eb:80:42:d0:d3:1a:06:
                    25:f4:51:f6:8a:ae:05:1d:60:6f:75:cf:65:6f:bf:
                    f1:80:31:84:2f:44:35:37:e3:e8:72:bf:44:39:ec:
                    8a:81:68:21:3b:7a:ce:d1:42:93:8e:22:6f:9b:3f:
                    43:14:fd:e9:73:32:0f:33:c4:67:24:b7:ec:56:2f:
                    71:ee:1c:00:ce:d5:69:71:d3:f6:99:ba:69:c4:a2:
                    c5:be:ec:6a:77:d6:97:69:28:d8:5e:a2:9b:b0:9a:
                    8f:f2:1e:e4:84:62:74:65:b8:94:24:01:09:25:13:
                    96:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:8E:90:D6:7B:9B:38:26:49:50:E2:3A:AA:3B:36:A1:AA:DA:B9:F7
            X509v3 Authority Key Identifier:
                keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:e5:df:5e:bc:ab:41:3d:01:79:c1:b7:38:c4:eb:98:d7:83:
         70:d4:9f:0f:00:dc:77:84:5c:48:71:2e:26:19:95:c1:aa:aa:
         ed:c6:d7:17:ed:bf:26:ee:0d:13:dd:50:3c:50:a7:b2:ce:29:
         d0:be:ed:aa:b8:a5:8e:0b:16:e4:47:ff:13:ea:6b:33:62:fd:
         91:6d:7a:b8:29:48:32:6d:a4:a8:96:e3:72:42:05:ce:46:41:
         b4:72:5a:88:9d:53:78:51:90:c6:7b:69:05:c1:28:06:31:78:
         27:a6:7a:30:0f:17:54:59:4e:ab:e7:65:b0:d2:7c:b3:50:0f:
         86:18:a9:61:d8:b2:d2:14:76:e4:d4:07:0e:45:89:2e:e3:86:
         24:fa:b5:d2:5f:28:29:97:c6:2d:94:04:7c:e4:87:b7:e3:b0:
         70:4e:1b:6e:61:1c:36:9c:11:4a:81:8e:3d:42:fb:5e:29:cc:
         86:10:df:5a:eb:e0:61:0c:2c:c1:14:0a:7a:31:47:ee:05:09:
         49:8b:92:a2:6d:56:d3:1e:0a:f9:ab:b7:e3:fe:0c:59:fa:3a:
         5d:4f:40:31:64:84:23:03:99:b6:21:78:ed:15:02:44:fc:7b:
         f5:b1:c3:d5:b2:f7:f7:26:44:73:13:8a:8c:dd:ab:d5:12:04:
         34:3c:0c:a8
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUISXvLwmmpWGe2ddTZl4+jKDO47AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNmU3NzBiNzE0ZjY2ZjBmMmQ0NDY0MDI5ZGZjZDg2NWJi
N2VlNzZjZDAeFw0yNTExMzAwOTMzMzJaFw0yNTEyMDExMjUyMzJaMDMxMTAvBgNV
BAMTKDM3OEU5MEQ2N0I5QjM4MjY0OTUwRTIzQUFBM0IzNkExQUFEQUI5RjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLBC8lCWwT85Mwc1p5mfif8d2Z
8r+cWDGh18hKM2HEeK9qrV4I+nnbDGhcACBVyvd9rOegSggnvZh4h+Eecq08v2v/
lIlqQA8eahG0b4+apm0ljW+TBcrq9qdIiK4HhHuTx5nL1OsULXPKJYQPr28PXJe+
7Qxgemilrbo13MSVzVXDMykSQCicFcA/rG3c64BC0NMaBiX0UfaKrgUdYG91z2Vv
v/GAMYQvRDU34+hyv0Q57IqBaCE7es7RQpOOIm+bP0MU/elzMg8zxGckt+xWL3Hu
HADO1Wlx0/aZumnEosW+7Gp31pdpKNheopuwmo/yHuSEYnRluJQkAQklE5bhAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUN46Q1nubOCZJUOI6qjs2oaraufcwHwYDVR0j
BBgwFoAUbncLcU9m8PLURkAp382GW7fuds0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjhjZDYyMjQtYTNiMC00NjhlLWFhMzctODJjYTZhM2U5
MjQzLzAvNkU3NzBCNzE0RjY2RjBGMkQ0NDY0MDI5REZDRDg2NUJCN0VFNzZDRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JuY0xjVTltOFBMVVJrQXAzODJHVzdm
dWRzMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yOGNkNjIyNC1h
M2IwLTQ2OGUtYWEzNy04MmNhNmEzZTkyNDMvMC82RTc3MEI3MTRGNjZGMEYyRDQ0
NjQwMjlERkNEODY1QkI3RUU3NkNELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuuXfXryrQT0BecG3OMTr
mNeDcNSfDwDcd4RcSHEuJhmVwaqq7cbXF+2/Ju4NE91QPFCnss4p0L7tqriljgsW
5Ef/E+prM2L9kW16uClIMm2kqJbjckIFzkZBtHJaiJ1TeFGQxntpBcEoBjF4J6Z6
MA8XVFlOq+dlsNJ8s1APhhipYdiy0hR25NQHDkWJLuOGJPq10l8oKZfGLZQEfOSH
t+OwcE4bbmEcNpwRSoGOPUL7XinMhhDfWuvgYQwswRQKejFH7gUJSYuSom1W0x4K
+au34/4MWfo6XU9AMWSEIwOZtiF47RUCRPx79bHD1bL39yZEcxOKjN2r1RIENDwM
qA==
-----END CERTIFICATE-----
Generated at Sun Nov 30 18:01:53 2025 by rpki-client