This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/0/5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.mft
File:                     5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.mft (raw, json)
Hash identifier:          pLZ5a/ZEcmC4oF1BP6JHD9UtBKJBWFxnLDFVulopYNk=
Subject key identifier:   C5:63:34:56:8F:53:A3:0B:44:CF:80:82:A7:12:4C:17:B4:CA:50:51
Authority key identifier: 5E:DB:D6:E7:9C:68:9C:56:A8:4F:A4:6C:D7:C9:FA:31:51:DF:E0:BB
Certificate issuer:       /CN=5edbd6e79c689c56a84fa46cd7c9fa3151dfe0bb
Certificate serial:       4CE04B3D4A3F8C4C6EC6F905D3A1B40E26DE409C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XtvW55xonFaoT6Rs18n6MVHf4Ls.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/0/5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.mft
Manifest number:          021C
Signing time:             Mon 15 Dec 2025 13:49:54 +0000
Manifest this update:     Mon 15 Dec 2025 13:44:54 +0000
Manifest next update:     Tue 16 Dec 2025 17:45:54 +0000
Files and hashes:         1: 5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.crl (hash: Tv+uxeBrduE47u3YyWLckKLYZwGVDUiIWSBIfAlwi0k=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/0/5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/0/5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XtvW55xonFaoT6Rs18n6MVHf4Ls.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Dec 2025 14:30:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:e0:4b:3d:4a:3f:8c:4c:6e:c6:f9:05:d3:a1:b4:0e:26:de:40:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5edbd6e79c689c56a84fa46cd7c9fa3151dfe0bb
        Validity
            Not Before: Dec 15 13:44:54 2025 GMT
            Not After : Dec 16 17:45:54 2025 GMT
        Subject: CN=C56334568F53A30B44CF8082A7124C17B4CA5051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:57:36:f2:c5:97:51:ad:1a:0d:c6:e7:4f:4b:
                    8b:80:cb:5c:11:db:20:91:54:bd:4b:79:83:34:b7:
                    17:2b:29:f2:68:56:a0:f0:2f:6a:d4:b1:62:b1:e0:
                    92:dc:e0:5e:fc:6f:cd:88:a0:7d:fa:57:35:28:ee:
                    58:9f:c8:04:30:5f:81:f0:78:56:cd:96:d9:86:b1:
                    2d:0d:2e:cd:12:d3:53:9c:74:68:0a:45:86:13:c9:
                    87:4a:28:2f:88:d1:33:96:af:1a:f3:9d:2f:df:8c:
                    6e:e1:92:15:3c:99:df:eb:9f:d9:37:c0:b4:97:d6:
                    c2:6b:12:97:7e:72:a4:b0:91:7e:b4:f8:82:6a:96:
                    60:f6:fa:d2:b8:22:39:54:fb:a7:3f:c6:0f:02:3e:
                    82:53:58:85:f2:3a:31:1a:fd:10:9c:9d:2e:f9:84:
                    b8:f5:70:a2:b6:49:59:12:b0:2f:4a:de:94:8d:0f:
                    9f:9a:7b:b6:9a:51:ec:7b:ac:b6:c3:67:50:5a:1f:
                    f7:12:00:30:24:8d:81:4b:c7:a0:58:b4:8f:27:8e:
                    e4:ca:2c:da:f9:02:92:04:73:2e:f8:6b:60:04:6c:
                    f0:13:e2:e5:02:d2:8d:60:c8:1f:ee:c6:50:fa:4d:
                    c8:a0:50:7a:2f:f4:53:30:4f:03:05:9c:8b:4b:3a:
                    fe:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:63:34:56:8F:53:A3:0B:44:CF:80:82:A7:12:4C:17:B4:CA:50:51
            X509v3 Authority Key Identifier:
                keyid:5E:DB:D6:E7:9C:68:9C:56:A8:4F:A4:6C:D7:C9:FA:31:51:DF:E0:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/0/5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XtvW55xonFaoT6Rs18n6MVHf4Ls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/0/5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:09:df:44:d4:ab:71:dc:aa:96:d8:28:02:69:ec:e3:33:cc:
         fb:01:4b:0a:94:d1:0f:c0:8f:ac:14:e3:e7:64:0f:75:32:f2:
         d4:f6:26:3f:04:d2:87:71:a7:88:c7:07:df:ef:9a:99:35:da:
         3f:49:e6:f7:82:69:eb:96:99:4a:05:88:47:6e:94:ab:37:dd:
         2a:91:2e:c5:f8:f6:bb:d5:96:82:20:d8:ef:19:d1:64:93:5a:
         2b:e9:a9:88:fb:1c:ea:9c:a6:d1:5f:8e:df:ba:93:2c:c8:1e:
         9a:e8:8c:af:79:11:9a:9b:5a:2d:99:e2:0c:9b:23:7c:13:da:
         fa:67:d7:61:f6:00:f5:80:56:53:d2:49:99:d9:06:f6:29:bc:
         0e:45:b3:3b:70:c1:f5:8f:ef:ef:6a:7a:15:a1:04:32:ca:8f:
         30:78:02:95:d4:9f:3f:76:de:2c:04:bb:a0:cb:2d:2b:2f:eb:
         ed:d4:ca:f1:c3:67:ad:a3:d4:1b:79:f1:24:f8:2b:4a:20:68:
         ff:2a:b0:85:43:61:92:7a:85:a1:ff:79:7c:5a:4a:3b:3e:0a:
         28:59:d2:a1:e1:9c:38:39:02:2c:72:8e:b5:f0:c3:29:53:ea:
         68:95:fa:eb:d2:1d:02:43:35:1b:d7:c2:b5:a0:01:93:d0:74:
         72:eb:f1:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 16:53:04 2025 by rpki-client