This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft
File:                     C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft (raw, json)
Hash identifier:          VYYoSlkKf7KrX2N618Oq8GT2RuifFJKbwledaNtXgI0=
Subject key identifier:   9C:0B:36:16:16:FD:99:80:57:6C:FB:9F:7E:6C:10:B0:C5:E5:6A:3B
Authority key identifier: C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF
Certificate issuer:       /CN=c79d02c618861ad45baf78ce39023cbcb494a7bf
Certificate serial:       79719F96D943269F9525D205D53FB26985215F2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft
Manifest number:          0589
Signing time:             Tue 09 Dec 2025 17:36:37 +0000
Manifest this update:     Tue 09 Dec 2025 17:31:37 +0000
Manifest next update:     Wed 10 Dec 2025 18:00:37 +0000
Files and hashes:         1: C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl (hash: 69Z8q7evbGPoCJ6TTuc94SFVJRD5y2bZS4dXCDKZ5bo=)
                          2: 3231372e3139382e3138372e302f32342d3234203d3e20323132363039.roa (hash: DHsuIdClDCk2AbtF+6NodfNI3JEU6gbRKvoUSbt4bMQ=)
                          3: 3139332e3234362e352e302f32342d3234203d3e20313939343135.roa (hash: lvghBplCcmXtQEEJ3nC5HmHIcxgk88drnBMjhNzmX2g=)
                          4: 3139332e3234362e3130332e302f32342d3234203d3e20323136313338.roa (hash: fdALPGopwtGvbJEhx+/96pp78JBOCpIXPSPl4+ufmoE=)
                          5: 3139332e3234362e3130322e302f32342d3234203d3e203630373831.roa (hash: 9YIjshhRHJCTBV0dIP18GlVU8/qr9siO7bVSgJFYoAw=)
                          6: 3231372e3139382e3138372e302f32342d3234203d3e20323131343430.roa (hash: 1b5s7twDP9sp8gcJ29rXGkFdvEaLedS6c1Dcd8xTFyM=)
                          7: 3231372e3139382e3138372e302f32342d3234203d3e20323131343135.roa (hash: I5EY6cn+MqUeM13Ic2acCtvjkzpr7UgV9E8MpknrsP0=)
                          8: 3139332e3234362e342e302f32342d3234203d3e20313335343032.roa (hash: x5G3aikxww4wLRaoWnz2KkIIppe2I2SZAi3PiElvQpI=)
                          9: 3139332e3234362e3130332e302f32342d3234203d3e20323032373336.roa (hash: 25OCay2OV/7fsFzlQCaWuZFV/8gtz5r77rm0KuzYhQc=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Dec 2025 18:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:71:9f:96:d9:43:26:9f:95:25:d2:05:d5:3f:b2:69:85:21:5f:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c79d02c618861ad45baf78ce39023cbcb494a7bf
        Validity
            Not Before: Dec  9 17:31:37 2025 GMT
            Not After : Dec 10 18:00:37 2025 GMT
        Subject: CN=9C0B361616FD9980576CFB9F7E6C10B0C5E56A3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e2:9e:29:30:2e:78:b5:ca:35:0e:7a:86:33:
                    b1:cf:77:b9:7c:75:1a:f1:58:2b:c7:fc:d1:23:15:
                    a6:0b:48:49:fb:c4:63:da:e4:90:a2:a7:39:05:0d:
                    2c:bb:a7:80:6e:2e:00:97:0d:05:80:3c:83:38:aa:
                    20:d4:42:3d:f7:43:7a:be:b3:76:04:16:03:00:97:
                    62:ff:ac:4e:4f:a9:98:2e:aa:68:59:ed:43:0d:5b:
                    75:2c:f9:84:9b:58:83:db:6d:c1:67:34:00:80:66:
                    86:ee:ea:cd:4a:ec:68:99:38:78:e5:64:af:ee:f5:
                    1b:d0:59:39:46:03:2f:30:8f:f3:40:1b:45:a9:eb:
                    94:96:5a:5f:86:ce:37:bc:86:bb:0d:7b:8f:1a:ac:
                    83:46:69:a5:62:df:47:98:77:e6:21:36:91:d4:5c:
                    4b:25:90:71:3e:fc:27:04:e0:fc:35:85:a8:17:8a:
                    89:a3:a9:48:90:ea:76:d7:54:e8:51:e7:6c:48:8a:
                    3a:68:c5:ad:31:68:94:12:76:5c:86:f6:0c:f4:a9:
                    38:27:81:22:4a:ab:3a:fe:4f:e4:33:3f:e7:b9:01:
                    aa:d1:34:43:04:5b:f1:eb:b6:70:f4:c0:cb:e8:d4:
                    80:24:d6:2f:ff:2e:5a:4c:00:92:43:6f:52:17:c6:
                    0b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:0B:36:16:16:FD:99:80:57:6C:FB:9F:7E:6C:10:B0:C5:E5:6A:3B
            X509v3 Authority Key Identifier:
                keyid:C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:b2:18:4c:ad:a5:f7:90:74:43:dc:0a:d4:d2:f2:99:0b:88:
         4b:7f:e2:49:b5:44:c4:cd:3e:05:a7:0a:89:ed:a6:f9:cc:2a:
         a0:3c:dc:eb:53:cb:46:01:aa:e0:3f:a6:85:ff:53:6f:83:03:
         48:25:03:f3:0f:9a:97:c2:48:76:e8:2a:b3:96:d0:35:fa:1f:
         47:e6:91:a2:7f:bb:fe:af:6f:35:26:08:ac:76:94:31:b7:07:
         02:8f:5c:54:b9:dc:e6:e8:ef:a7:c5:60:87:57:0d:86:f4:02:
         f5:74:ff:74:e5:fe:10:37:4b:3c:1e:ac:80:52:36:57:7b:84:
         c0:40:7b:16:0d:d0:81:69:38:83:1f:5e:f1:65:40:bf:e1:34:
         9c:6e:96:fb:63:a7:77:86:87:34:bf:d7:a0:c5:83:d8:4f:0b:
         69:fe:7b:f9:32:c6:ca:fa:ba:f9:a8:ee:ee:57:26:4e:58:84:
         df:7f:48:40:e6:c7:de:f8:d1:dc:01:09:19:47:b2:3b:43:06:
         71:16:eb:95:ee:00:65:27:83:77:08:1f:33:3c:b4:34:08:3d:
         66:2d:f7:b9:53:4f:2f:f1:ed:02:5c:c4:4d:e3:ee:0f:40:3a:
         0e:5f:9b:91:4a:ec:e9:a4:9f:6f:80:e8:a7:69:1d:35:b0:72:
         00:4e:d3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 02:32:14 2025 by rpki-client