This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft
File:                     637FD1BA3FED44454D6D7030247709D28DB3491A.mft (raw, json)
Hash identifier:          3RQ/03pz4BHWmeN/41zwtCpI/ZPYe0iGTxxIh7qAJ4I=
Subject key identifier:   EF:FA:ED:67:65:29:E5:C6:C9:59:B9:97:6B:A4:D6:F5:C1:57:B8:48
Authority key identifier: 63:7F:D1:BA:3F:ED:44:45:4D:6D:70:30:24:77:09:D2:8D:B3:49:1A
Certificate issuer:       /CN=637fd1ba3fed44454d6d7030247709d28db3491a
Certificate serial:       3583B5FB8C7BD49793D661E5FC1F2592E0AD8F01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft
Manifest number:          0415
Signing time:             Tue 16 Dec 2025 01:27:17 +0000
Manifest this update:     Tue 16 Dec 2025 01:22:17 +0000
Manifest next update:     Wed 17 Dec 2025 03:24:17 +0000
Files and hashes:         1: 637FD1BA3FED44454D6D7030247709D28DB3491A.crl (hash: 2F1HuwLDxSI0hHxdQpE7F0KdpOfyCAx4w37lKQFn+s4=)
                          2: 3133392e32382e32342e302f32342d3234203d3e20323131343430.roa (hash: eR+xyo+zY+fM9l50cFs0swlGeIX2NljYGKvE5SQX83U=)
                          3: 3133392e32382e32342e302f32342d3234203d3e20323132363039.roa (hash: Zbml066pXi3G2h7cDhaY/zBOXtPP1DXZek0hCHsXFhc=)
                          4: 3133392e32382e32352e302f32342d3234203d3e20323030303137.roa (hash: KTt7IBC5OKuP6muE0/6zCxuIwEkqcnypdMUhBFAyx18=)
                          5: 3133392e32382e32372e302f32342d3234203d3e20323036313530.roa (hash: spk6NtqPTGXoBo4XJMsULHBo1PCje3tyvN9b3jHB/pA=)
                          6: 3133392e32382e32352e302f32342d3234203d3e20323131343135.roa (hash: kj5wXeF4AQFWN9fpmE1MKtBmtMRLs1TA1rGuGr1+5eA=)
                          7: 3133392e32382e32362e302f32342d3234203d3e20313337343039.roa (hash: 4dsufrRZZT3ng/M0mUxRioQsmJP0ZwUerMNQTCdj11A=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 03:24:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:83:b5:fb:8c:7b:d4:97:93:d6:61:e5:fc:1f:25:92:e0:ad:8f:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=637fd1ba3fed44454d6d7030247709d28db3491a
        Validity
            Not Before: Dec 16 01:22:17 2025 GMT
            Not After : Dec 17 03:24:17 2025 GMT
        Subject: CN=EFFAED676529E5C6C959B9976BA4D6F5C157B848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a6:8f:fa:fc:a6:96:04:0e:e7:99:88:97:a0:
                    6d:e9:26:06:af:8c:33:bd:0f:6d:83:10:99:82:de:
                    b2:40:f0:14:09:59:28:12:7a:8f:8b:53:b7:f0:bf:
                    03:42:b8:2b:16:c9:8b:20:ff:fc:bc:7c:e1:7c:b7:
                    39:62:eb:20:1e:f9:b3:81:26:d7:c2:bb:ba:8e:bd:
                    3a:7c:03:2b:78:ab:02:9d:dd:7f:7e:1f:d3:0e:c9:
                    d6:10:9f:d5:b2:4d:82:dd:9e:6a:63:18:07:83:3c:
                    3f:82:4c:ff:0d:d7:69:79:55:81:c5:cf:4f:8c:89:
                    1b:8d:46:9b:66:39:72:8b:a5:21:66:2e:d1:d7:5a:
                    45:53:09:98:45:99:d3:f1:d5:11:7b:bc:0a:1c:2b:
                    00:88:6a:29:63:8e:40:38:d6:45:4a:be:32:61:61:
                    4c:c7:f0:6e:1c:6d:52:b3:7e:f1:ec:db:61:79:1a:
                    f3:6e:3b:39:27:55:66:85:fb:ea:ce:2a:28:e3:08:
                    48:4e:f7:85:b2:09:35:1b:db:ac:2f:40:28:88:0b:
                    54:66:70:c5:aa:7a:f5:15:c2:8c:fe:c8:a5:51:8b:
                    77:52:b2:24:dd:0b:25:7b:c3:a5:3c:94:d9:dd:43:
                    17:7e:19:ac:71:fe:77:17:8b:ad:53:cc:97:2f:e1:
                    b5:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:FA:ED:67:65:29:E5:C6:C9:59:B9:97:6B:A4:D6:F5:C1:57:B8:48
            X509v3 Authority Key Identifier:
                keyid:63:7F:D1:BA:3F:ED:44:45:4D:6D:70:30:24:77:09:D2:8D:B3:49:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:c0:9d:6b:0a:d5:93:fd:51:c4:30:c8:18:62:9f:48:32:2e:
         7f:7c:7f:56:e4:e4:11:d1:d6:a9:91:a7:55:76:b2:3c:8e:24:
         df:91:bd:08:68:52:f6:4a:e2:9a:8e:e9:9a:06:e3:91:50:0e:
         c1:f1:19:38:a2:4c:c5:bf:cc:26:2c:7e:3f:b2:3d:d5:ba:a0:
         d0:98:58:7a:36:3e:08:9d:fb:b3:46:22:90:bb:e0:be:7b:36:
         52:99:c1:61:fe:a3:53:6c:24:0e:9a:93:a5:d0:c2:5d:bd:94:
         32:f4:ac:e7:d5:81:67:29:1f:b7:cd:e8:3d:88:ed:96:7a:e9:
         fd:4d:9a:35:f9:f9:22:d0:3c:32:40:7c:97:3f:7f:18:ce:83:
         e5:67:b1:d0:11:04:f8:56:32:d0:64:d9:d0:1d:9f:f9:ff:98:
         ab:18:de:f5:f8:c5:32:0c:3e:f8:b5:80:9e:6e:55:fc:44:f1:
         31:ec:9b:46:71:2a:8b:91:e4:54:51:78:83:b8:56:ef:26:20:
         43:bd:57:03:0a:d5:fb:cd:21:8f:d6:b0:c1:b9:3f:d0:bc:ef:
         f4:e5:47:82:cb:8b:7f:32:8f:a5:b8:cf:e5:b5:5a:dc:c7:c4:
         87:a7:0b:ba:04:a0:5d:5e:3c:43:e4:eb:2e:77:84:3f:d1:da:
         7e:05:5b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 13:03:56 2025 by rpki-client