This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
File:                     4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json)
Hash identifier:          T9m/viRWgEXGPtM7jmsdTDVg4oni0/SxdwjRBib9d8c=
Subject key identifier:   C7:25:28:23:11:EF:B0:7F:80:DC:2C:80:23:3A:E7:AC:0D:42:CE:1E
Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Certificate issuer:       /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Certificate serial:       1B941F50F42A22CAC38C62C9C42284D7ECBC9E0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
Manifest number:          03F3
Signing time:             Sat 22 Nov 2025 15:57:01 +0000
Manifest this update:     Sat 22 Nov 2025 15:52:01 +0000
Manifest next update:     Sun 23 Nov 2025 19:24:01 +0000
Files and hashes:         1: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: xU9ySVWtI+rNLEBom2ypHOnFvA37UXo9vb5+ihROS+0=)
                          2: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=)
                          3: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=)
                          4: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=)
                          5: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: FMr6NQn2E9Bb20nuhrn072KXh7yXRuoKR2xlN3ELfZI=)
                          6: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=)
                          7: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=)
                          8: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Nov 2025 19:24:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:94:1f:50:f4:2a:22:ca:c3:8c:62:c9:c4:22:84:d7:ec:bc:9e:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
        Validity
            Not Before: Nov 22 15:52:01 2025 GMT
            Not After : Nov 23 19:24:01 2025 GMT
        Subject: CN=C725282311EFB07F80DC2C80233AE7AC0D42CE1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:bb:45:b6:ad:40:ab:60:0f:d9:47:36:34:b0:
                    43:55:8f:12:7d:cb:71:47:f6:01:15:03:3a:3b:84:
                    a4:ed:2e:a0:b5:6e:31:c0:88:b3:0a:f0:93:c3:43:
                    7b:10:96:3e:e2:52:10:b3:e2:6b:6a:68:58:37:c3:
                    77:ac:35:4b:64:23:33:62:a6:01:82:f2:29:47:11:
                    a8:1c:5f:59:50:53:d9:eb:ff:c3:9b:2e:56:17:3b:
                    38:ba:bf:9f:4a:43:0f:99:ea:b3:99:bb:f3:e2:6b:
                    32:b4:d2:ed:35:8b:78:9b:18:75:68:23:56:42:b3:
                    25:98:bc:74:a7:f8:c7:20:c4:7e:00:4e:64:1d:9f:
                    07:48:05:17:b4:8e:8d:bf:43:55:65:2c:e5:01:4b:
                    37:05:98:0e:44:de:c6:c0:f2:14:12:fa:3c:9b:a8:
                    51:24:e8:af:01:5b:e6:71:1d:cd:08:8c:db:f2:1f:
                    7d:09:09:af:49:70:91:f8:8c:44:f6:12:8a:24:08:
                    c6:83:5d:04:0d:5a:fd:71:ae:4a:ff:1b:7d:19:7a:
                    ba:0e:33:60:23:58:28:6e:f8:59:8c:00:ae:ec:94:
                    09:aa:ba:09:61:a0:6f:26:51:bb:fe:9a:4c:21:60:
                    bb:cf:0f:b4:1e:b6:03:1f:90:07:4e:7e:53:47:5e:
                    fe:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:25:28:23:11:EF:B0:7F:80:DC:2C:80:23:3A:E7:AC:0D:42:CE:1E
            X509v3 Authority Key Identifier:
                keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:32:55:10:fb:8a:89:11:bc:88:3b:85:25:52:42:97:1b:09:
         0a:0b:d6:f4:07:93:dc:5c:eb:98:7f:06:b1:23:3a:c1:1e:a5:
         0a:cb:b3:69:0f:7f:38:31:78:07:b9:d0:e8:4d:77:b9:4d:4c:
         fb:2a:13:f4:ee:e7:c1:ab:c9:12:11:13:8e:66:aa:9c:71:43:
         9f:4d:ef:79:ec:3a:e8:d4:ec:a9:71:98:57:a4:65:2f:1d:2a:
         33:f2:be:35:55:3f:36:b3:35:2d:29:24:15:fb:08:df:63:58:
         e1:9f:07:f4:ff:e0:6f:80:50:86:45:ee:92:d8:bc:c9:ea:55:
         38:4e:88:b9:6b:f8:9f:03:b1:7f:59:59:16:5f:fe:a3:70:a2:
         37:50:08:88:ef:e0:50:ae:c7:07:37:60:5c:f5:ff:79:f1:1d:
         7b:e0:02:7e:41:ed:2b:d8:9e:35:06:ef:36:c6:d9:01:e0:a8:
         b8:f2:44:0e:3a:fa:64:ec:b5:a4:68:f0:df:4b:0c:44:de:08:
         54:ff:91:16:c6:75:02:c0:e7:8a:b2:ad:1e:c2:48:29:6d:a1:
         69:b8:3b:bb:d3:06:65:75:8a:1a:2e:b7:36:e6:44:71:36:34:
         2e:15:84:80:8e:dd:ed:cf:1f:36:0b:db:64:fa:b5:f0:67:3e:
         0f:cf:89:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 23 02:35:07 2025 by rpki-client