This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft
File:                     E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft (raw, json)
Hash identifier:          4z2R3V7WgbIHDyVuF0jkgvEph1sXDE6fbeeccD41GDY=
Subject key identifier:   CB:A2:C6:7C:79:28:EA:FC:69:4B:39:D1:B0:D2:62:CC:E9:27:8E:09
Authority key identifier: E2:C9:29:5C:C1:C3:18:76:C8:55:4E:8B:60:DC:57:3C:FE:A7:CB:26
Certificate issuer:       /CN=e2c9295cc1c31876c8554e8b60dc573cfea7cb26
Certificate serial:       29EB8EB2AA36BE82F4C59584F9585B0F53EC06D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4skpXMHDGHbIVU6LYNxXPP6nyyY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft
Manifest number:          027E
Signing time:             Fri 19 Dec 2025 06:00:16 +0000
Manifest this update:     Fri 19 Dec 2025 05:55:16 +0000
Manifest next update:     Sun 21 Dec 2025 07:02:16 +0000
Files and hashes:         1: AS215368.asa (hash: WPjfLrYhLr3BbA/Kt1sBzS/Meq/kNQBVQgd3rtboPnI=)
                          2: E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.crl (hash: RNK789i40i9DwsknwWFnSsdCHSRukyf8ThnzIes+aSU=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4skpXMHDGHbIVU6LYNxXPP6nyyY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:eb:8e:b2:aa:36:be:82:f4:c5:95:84:f9:58:5b:0f:53:ec:06:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2c9295cc1c31876c8554e8b60dc573cfea7cb26
        Validity
            Not Before: Dec 19 05:55:16 2025 GMT
            Not After : Dec 21 07:02:16 2025 GMT
        Subject: CN=CBA2C67C7928EAFC694B39D1B0D262CCE9278E09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:04:dc:a5:34:29:e0:69:b6:1e:f1:31:17:17:
                    5a:a8:9e:1a:ae:a6:a8:39:fc:df:12:ea:8e:5f:d7:
                    6b:62:42:a1:2d:17:61:ae:54:d6:27:96:25:64:89:
                    f5:17:c3:96:f0:f8:d7:39:8e:aa:a2:ed:7f:9f:38:
                    30:67:37:0e:1a:43:ef:a1:b9:ba:53:9f:19:d1:19:
                    96:f1:a5:f0:df:17:a5:cb:43:a6:98:ee:93:a8:d6:
                    d1:5b:ee:12:95:4f:50:23:24:21:1d:71:eb:c5:0c:
                    53:16:fc:f1:ad:0f:bd:94:94:6b:b8:f0:37:61:80:
                    ac:8b:cf:d9:b5:c7:14:fa:f4:4c:c9:4c:e3:8d:17:
                    56:e5:02:36:47:a1:6d:70:aa:5c:ca:96:0e:5f:0e:
                    be:65:02:c6:23:04:36:08:1c:fc:9a:50:2c:e5:e8:
                    55:bb:28:37:d0:38:de:c6:90:7c:5e:18:60:56:44:
                    96:65:92:18:16:39:66:b5:0b:49:f0:8b:0e:d5:4d:
                    7f:93:5c:e1:4f:67:b7:0d:e7:f6:12:77:23:03:a4:
                    6b:a7:f6:82:03:d9:66:75:aa:64:e5:7b:c1:ea:37:
                    a6:f6:ef:ea:b8:e8:44:ac:b9:01:1f:df:aa:1b:9c:
                    0b:03:84:cd:8b:bc:72:2b:f5:20:35:e1:25:fd:ff:
                    85:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:A2:C6:7C:79:28:EA:FC:69:4B:39:D1:B0:D2:62:CC:E9:27:8E:09
            X509v3 Authority Key Identifier:
                keyid:E2:C9:29:5C:C1:C3:18:76:C8:55:4E:8B:60:DC:57:3C:FE:A7:CB:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4skpXMHDGHbIVU6LYNxXPP6nyyY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:08:96:f7:e0:c8:a4:0f:15:36:14:e3:69:13:ef:40:79:ab:
         4c:56:93:61:ed:ae:3d:3b:a6:9d:ae:1f:14:73:9e:c9:e2:ce:
         70:0b:b6:07:e8:c7:2c:de:c0:65:66:55:01:76:51:01:73:dd:
         0a:16:54:75:39:11:a9:f9:83:fd:14:1d:cc:9f:54:21:9d:ba:
         cc:0a:83:a2:f0:d9:8a:f2:85:4b:a6:d5:98:ee:4b:ac:a0:bf:
         8e:18:c0:65:2f:a8:e8:2e:5a:56:0c:84:39:c9:bb:da:95:c6:
         1d:3e:1e:9d:6e:a3:6a:c7:13:96:b0:ed:06:d7:fe:bd:b2:ef:
         ba:84:2f:01:65:25:82:c6:e2:0d:9d:4c:de:0c:0b:ed:7d:4f:
         6e:f3:ba:53:b1:50:d2:e9:f5:07:26:6b:78:70:3a:f2:b6:de:
         9e:7d:52:4f:50:83:26:a9:89:d6:06:f3:15:60:73:a8:6f:63:
         7c:aa:78:19:c5:91:30:47:11:80:8e:de:1d:50:f0:a7:95:b7:
         bb:90:d1:ab:46:a4:1d:8a:6e:a7:41:21:cf:19:41:28:c5:d5:
         2c:34:63:2b:3e:42:fb:df:c4:12:88:77:43:6c:d8:6a:4c:96:
         03:7e:91:6d:17:3a:df:be:84:22:c1:68:23:b9:27:a0:04:40:
         4d:82:3f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 07:38:00 2025 by rpki-client