This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/3/7B08E26EA9F3D825ECCD64E5FDC355C852A7AF54.mft
File:                     7B08E26EA9F3D825ECCD64E5FDC355C852A7AF54.mft (raw, json)
Hash identifier:          ztQa1NHpNmSVpJLaHE6HZf4K0MwzgDQBSL38Nibo16Y=
Subject key identifier:   1A:BE:A6:1E:28:D5:85:C6:8F:4E:EF:EB:6F:3A:24:C1:B6:FB:67:AA
Authority key identifier: 7B:08:E2:6E:A9:F3:D8:25:EC:CD:64:E5:FD:C3:55:C8:52:A7:AF:54
Certificate issuer:       /CN=7b08e26ea9f3d825eccd64e5fdc355c852a7af54
Certificate serial:       787C4321A705BAD8CED0EBF2B34101FD99C7B99B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ewjibqnz2CXszWTl_cNVyFKnr1Q.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/3/7B08E26EA9F3D825ECCD64E5FDC355C852A7AF54.mft
Manifest number:          02A6
Signing time:             Sat 27 Dec 2025 03:33:59 +0000
Manifest this update:     Sat 27 Dec 2025 03:28:59 +0000
Manifest next update:     Sun 28 Dec 2025 05:20:59 +0000
Files and hashes:         1: 7B08E26EA9F3D825ECCD64E5FDC355C852A7AF54.crl (hash: d937/F2X2G9DacS6T2AtEg7xXJE5BaOZnElUr2juwHU=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/3/7B08E26EA9F3D825ECCD64E5FDC355C852A7AF54.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/3/7B08E26EA9F3D825ECCD64E5FDC355C852A7AF54.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ewjibqnz2CXszWTl_cNVyFKnr1Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Dec 2025 05:20:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:7c:43:21:a7:05:ba:d8:ce:d0:eb:f2:b3:41:01:fd:99:c7:b9:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b08e26ea9f3d825eccd64e5fdc355c852a7af54
        Validity
            Not Before: Dec 27 03:28:59 2025 GMT
            Not After : Dec 28 05:20:59 2025 GMT
        Subject: CN=1ABEA61E28D585C68F4EEFEB6F3A24C1B6FB67AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:92:f4:b8:6a:64:63:49:50:7e:ea:fe:0b:51:
                    fb:56:1f:b6:31:92:2b:8c:00:63:65:ba:f8:6b:a6:
                    d1:8a:fa:be:b2:96:f6:27:0e:f1:9f:b6:13:fa:09:
                    01:dc:20:9d:c6:6e:2f:93:c8:2b:ec:07:40:4e:b1:
                    81:9a:52:67:39:01:a4:79:a5:79:de:11:ea:ef:b9:
                    f4:00:b4:4c:b8:fb:12:c7:e3:34:52:4e:57:96:2a:
                    b9:22:e8:5a:3c:8a:9b:12:eb:08:dd:b0:9a:cd:86:
                    0f:17:1f:ea:eb:50:8e:73:ff:f5:ea:77:8c:61:1d:
                    cb:86:21:4f:e8:cf:f8:61:f1:56:c1:a1:d8:15:58:
                    e1:ab:aa:4f:d6:2d:67:4a:94:cf:b4:ac:77:55:90:
                    14:9b:91:10:42:cb:d6:9b:36:b4:dc:fa:b6:71:85:
                    96:38:c3:1b:de:c4:3f:2a:a7:41:86:bc:89:02:44:
                    ca:64:35:be:0d:a8:41:65:a8:c2:31:c6:63:08:55:
                    55:d3:0a:16:91:78:2c:0a:09:02:a0:38:e7:30:2e:
                    e0:28:1f:0a:88:15:5a:06:08:67:56:6a:01:4a:87:
                    cf:cd:e6:cf:e3:96:a1:97:d5:af:b9:78:ea:6c:f6:
                    ca:ed:b4:f3:8d:bd:d7:2e:7a:42:bd:46:a2:3c:48:
                    5e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:BE:A6:1E:28:D5:85:C6:8F:4E:EF:EB:6F:3A:24:C1:B6:FB:67:AA
            X509v3 Authority Key Identifier:
                keyid:7B:08:E2:6E:A9:F3:D8:25:EC:CD:64:E5:FD:C3:55:C8:52:A7:AF:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/3/7B08E26EA9F3D825ECCD64E5FDC355C852A7AF54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewjibqnz2CXszWTl_cNVyFKnr1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/3/7B08E26EA9F3D825ECCD64E5FDC355C852A7AF54.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:15:f3:11:50:54:28:08:1a:0c:5a:b1:7f:0f:42:d3:99:4a:
         e8:3e:de:75:3c:be:31:ec:6b:2a:1e:3d:41:51:76:db:fc:a5:
         75:27:58:30:b0:42:c8:81:87:8e:23:88:c3:db:45:96:64:e8:
         ae:01:19:70:d1:de:5b:86:91:41:71:e2:89:43:82:6c:25:75:
         95:4b:c1:31:87:2f:b9:2e:d1:a3:42:d3:9f:99:09:03:cd:3d:
         b3:d8:09:02:89:10:21:32:f3:89:90:42:0c:3f:f5:9b:db:87:
         45:bb:19:e5:45:db:f5:87:48:49:9a:2b:eb:b6:ab:23:5d:f9:
         80:a2:70:4e:9d:f2:4b:53:36:bb:97:95:e3:33:da:a2:24:b5:
         f9:9c:04:cd:e3:f6:e3:bb:f0:73:67:31:63:1e:0e:da:5a:a7:
         38:92:db:bf:a6:86:33:b6:e9:df:7d:c5:51:86:9b:a3:af:dc:
         7d:44:8f:84:02:7e:af:e9:66:f1:d4:be:a9:3b:19:1d:58:15:
         5d:07:91:2d:4f:0e:76:32:5c:e5:aa:d0:b0:38:25:26:ed:f8:
         35:10:70:f6:de:9f:7d:f5:d1:f0:15:df:ef:00:7e:9b:3b:53:
         8f:69:35:60:5e:bb:53:37:aa:ce:e0:c8:ff:c3:0d:7e:3d:a9:
         ed:ec:54:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 17:46:20 2025 by rpki-client