This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft
File:                     25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft (raw, json)
Hash identifier:          9ChGgf4nmXSB8YqU35mPkIioleccC2hCT6RU322vHnk=
Subject key identifier:   37:D8:FC:A5:EC:37:AD:6A:9E:4D:33:CC:10:1F:22:4D:6E:5C:90:8B
Authority key identifier: 25:C7:3D:FC:86:8C:3F:62:CB:7F:F9:71:AF:47:76:71:CA:F3:80:AA
Certificate issuer:       /CN=25c73dfc868c3f62cb7ff971af477671caf380aa
Certificate serial:       15D0C23AA4AD03E8C5200AA1C4C7FA8801C2958E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jcc9_IaMP2LLf_lxr0d2ccrzgKo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft
Manifest number:          04F6
Signing time:             Mon 02 Feb 2026 00:02:22 +0000
Manifest this update:     Sun 01 Feb 2026 23:57:22 +0000
Manifest next update:     Tue 03 Feb 2026 00:37:22 +0000
Files and hashes:         1: AS205603.asa (hash: hilS75f+xThcKc+nN214Mi4BwyvAFPo1c2Y0cUS3H24=)
                          2: 25C73DFC868C3F62CB7FF971AF477671CAF380AA.crl (hash: HdusqAAvSHGCO389qYb+nXrkJrTUstpuGyC9TXA+uMM=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jcc9_IaMP2LLf_lxr0d2ccrzgKo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 21:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:d0:c2:3a:a4:ad:03:e8:c5:20:0a:a1:c4:c7:fa:88:01:c2:95:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25c73dfc868c3f62cb7ff971af477671caf380aa
        Validity
            Not Before: Feb  1 23:57:22 2026 GMT
            Not After : Feb  3 00:37:22 2026 GMT
        Subject: CN=37D8FCA5EC37AD6A9E4D33CC101F224D6E5C908B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:45:39:65:a2:7f:39:bf:ce:9b:f1:96:75:57:
                    6f:59:7a:0c:d1:8c:0e:cb:e1:fc:fc:5e:ed:1f:67:
                    0b:81:27:16:13:97:28:42:6b:81:cd:be:5f:13:ed:
                    d8:de:32:73:b0:8b:66:d3:8d:25:89:89:3e:aa:54:
                    0a:d0:be:3a:c8:86:33:f5:88:10:82:9c:d6:cd:83:
                    65:df:34:3b:74:dd:b0:91:46:a8:cc:9f:e3:b8:88:
                    ce:72:d5:51:90:09:6f:bc:d8:dc:a8:b4:c2:3c:3b:
                    07:b3:86:1e:db:47:ad:5f:67:95:8a:5e:62:67:9e:
                    d5:12:3d:6f:78:21:4b:7e:4a:e8:84:c2:35:ba:b2:
                    25:14:4c:b0:d3:6e:71:fa:e5:48:ce:49:b2:98:00:
                    b1:bc:90:f4:55:ee:c0:6c:b3:23:7a:d6:8f:b8:80:
                    89:ec:51:65:54:5a:f4:55:6c:a1:2a:53:64:1e:0e:
                    6c:57:6d:3d:3d:be:1e:a1:61:8c:05:30:58:a3:6b:
                    94:2d:04:bc:68:64:1e:bc:60:1f:bf:cd:30:3e:40:
                    df:46:96:9b:31:a5:8f:87:7f:2f:b8:af:53:87:69:
                    7c:4a:35:8e:4a:30:62:bd:a7:6b:18:11:0c:72:ec:
                    43:89:12:fe:fd:94:65:7f:73:33:ef:51:aa:f9:df:
                    10:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:D8:FC:A5:EC:37:AD:6A:9E:4D:33:CC:10:1F:22:4D:6E:5C:90:8B
            X509v3 Authority Key Identifier:
                keyid:25:C7:3D:FC:86:8C:3F:62:CB:7F:F9:71:AF:47:76:71:CA:F3:80:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jcc9_IaMP2LLf_lxr0d2ccrzgKo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dec36210-f6cf-4c4f-a155-78a8eb5bf0bf/0/25C73DFC868C3F62CB7FF971AF477671CAF380AA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:c4:98:d0:a2:d4:08:ba:86:dc:e8:9d:c4:95:ab:2f:26:4e:
         ef:f8:3e:50:a0:61:11:d9:34:b1:ea:69:52:89:d3:5b:0d:e8:
         b9:cc:ff:c4:04:dc:05:d0:c9:2f:b3:b0:8a:af:af:f8:7a:53:
         7c:cd:3b:3b:a3:22:c0:a9:e2:46:53:80:c0:ea:71:63:a6:19:
         48:51:e5:67:ad:53:d4:80:91:92:0e:d2:e3:56:92:c0:8d:54:
         ab:8b:7c:64:3f:b5:ca:d6:3f:3e:e4:25:d6:8b:9c:70:f7:75:
         fe:7f:bb:94:55:1a:ca:38:f2:1e:70:52:0e:24:33:d7:67:a1:
         ac:e8:b8:9c:98:08:08:6e:8b:05:31:6c:01:b5:1c:ee:b9:88:
         a1:24:16:13:b3:f4:ba:97:33:98:f7:97:db:55:ea:65:32:d5:
         d0:69:28:71:e9:75:2c:00:7f:c2:94:59:26:59:b7:7e:2f:8d:
         03:df:a7:9e:1d:62:b0:f9:18:66:fe:fb:f4:67:d4:60:12:94:
         7f:a1:3d:91:5b:27:14:29:bc:d4:01:c2:a1:93:2b:8e:47:50:
         44:75:42:a7:51:a0:23:b6:70:d5:40:af:4c:82:e7:c9:44:e9:
         b4:f2:28:6e:69:f2:35:ea:ad:74:4b:6a:6e:49:a5:c4:6f:06:
         10:40:31:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 08:14:30 2026 by rpki-client