This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e97c29c1-31bd-4e09-81eb-7a199b3112a7/0/6EEC3F02205A4D34B05BB848E8B62B2FF5E50058.mft
File:                     6EEC3F02205A4D34B05BB848E8B62B2FF5E50058.mft (raw, json)
Hash identifier:          EtFgRZvGq52qG36yECtnANmu++ysn+U7boKr+pnv9/8=
Subject key identifier:   6A:E3:5D:B7:66:23:2F:74:B9:56:EE:03:09:C8:DC:67:E9:56:9F:5C
Authority key identifier: 6E:EC:3F:02:20:5A:4D:34:B0:5B:B8:48:E8:B6:2B:2F:F5:E5:00:58
Certificate issuer:       /CN=6eec3f02205a4d34b05bb848e8b62b2ff5e50058
Certificate serial:       55D3A44E2574E2C513EE9E9BADED54C9E4589BA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/buw_AiBaTTSwW7hI6LYrL_XlAFg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e97c29c1-31bd-4e09-81eb-7a199b3112a7/0/6EEC3F02205A4D34B05BB848E8B62B2FF5E50058.mft
Manifest number:          AE
Signing time:             Wed 10 Dec 2025 06:15:50 +0000
Manifest this update:     Wed 10 Dec 2025 06:10:50 +0000
Manifest next update:     Thu 11 Dec 2025 08:32:50 +0000
Files and hashes:         1: 323030313a3637383a3132303a3a2f34382d3438203d3e20323130343430.roa (hash: 3JOlOMWoYZ7ee5pmLfyLbybRVsig7FZpDzlml2RzXwE=)
                          2: 323030313a3637383a3132303a3a2f34382d3438203d3e20313534313535.roa (hash: 2Pi+0q4VWTcoAfcU1UOMRsINdXEduhCnC5i8NWJQ6O4=)
                          3: 6EEC3F02205A4D34B05BB848E8B62B2FF5E50058.crl (hash: 0S32BHo020A7j4fq2NkrTEyogI5ynOiOG3lVnQdW/LQ=)
                          4: 323030313a3637383a3132303a3a2f34382d3438203d3e20323133363035.roa (hash: XRyQMpoBe8x6EMniDPh04vxDxr/1vEp6eUzfE5psDfU=)
                          5: 323030313a3637383a313064303a3a2f34382d3438203d3e20323133363035.roa (hash: VHJui6zHwYgY2cN/lqKSQFLIt+m6q3pNicalrlY8cPY=)
                          6: AS210440.asa (hash: U0KqaJ1vp70aFXRJ8qqtIuTRp20P0U6l688smRqt29k=)
                          7: AS203031.asa (hash: nWrsExEcyP73tl74c5+qCA9xzQDek8r8Gvy+OWZRM6I=)
                          8: 323030313a3637383a3132303a3a2f34382d3438203d3e20313534313835.roa (hash: Rp2MKH6z0khzif342xCEUgF0/GeB2TkTxF1hVuECg7U=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/e97c29c1-31bd-4e09-81eb-7a199b3112a7/0/6EEC3F02205A4D34B05BB848E8B62B2FF5E50058.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/e97c29c1-31bd-4e09-81eb-7a199b3112a7/0/6EEC3F02205A4D34B05BB848E8B62B2FF5E50058.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/buw_AiBaTTSwW7hI6LYrL_XlAFg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Dec 2025 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:d3:a4:4e:25:74:e2:c5:13:ee:9e:9b:ad:ed:54:c9:e4:58:9b:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eec3f02205a4d34b05bb848e8b62b2ff5e50058
        Validity
            Not Before: Dec 10 06:10:50 2025 GMT
            Not After : Dec 11 08:32:50 2025 GMT
        Subject: CN=6AE35DB766232F74B956EE0309C8DC67E9569F5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fd:52:4e:5e:c3:ed:cf:bd:e6:a8:bc:1f:84:
                    6e:04:cf:0a:e9:9d:75:f6:b3:a2:40:6f:db:80:87:
                    91:ae:bc:6c:55:3d:f8:50:8a:c2:d9:e3:af:db:cf:
                    19:53:c5:2a:28:11:49:38:e6:5d:c4:56:d8:45:c6:
                    fd:81:52:0e:b0:f7:21:e4:3a:9c:d9:db:79:0a:e5:
                    07:2e:ab:09:ed:3b:26:f3:7e:02:40:22:52:00:54:
                    15:44:c8:ae:45:da:22:b4:35:1a:14:1b:d8:97:5e:
                    70:4e:6a:3d:5f:51:92:64:84:da:d0:2f:00:68:95:
                    f0:e1:2e:68:bc:c3:67:d7:31:56:ee:b5:18:1a:69:
                    21:06:06:01:09:a7:74:0d:c4:85:e3:f5:ba:79:b7:
                    da:39:bf:f7:50:05:a0:df:3d:ef:ee:28:df:dd:5b:
                    fb:a9:46:ae:2e:22:02:45:26:7a:dd:34:73:02:af:
                    59:1c:e3:15:0a:09:e3:c9:e9:be:10:95:28:29:73:
                    11:6f:a1:fc:8a:97:30:a1:c8:3d:0a:7c:a5:82:e0:
                    cb:2f:3c:68:18:90:7f:d7:91:57:3b:b6:fd:47:a0:
                    1a:8c:7a:b6:a3:38:26:68:f4:1a:9c:e6:af:ed:f2:
                    55:c2:8b:b1:d3:e8:e6:77:2e:09:72:7d:78:ef:77:
                    2f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:E3:5D:B7:66:23:2F:74:B9:56:EE:03:09:C8:DC:67:E9:56:9F:5C
            X509v3 Authority Key Identifier:
                keyid:6E:EC:3F:02:20:5A:4D:34:B0:5B:B8:48:E8:B6:2B:2F:F5:E5:00:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e97c29c1-31bd-4e09-81eb-7a199b3112a7/0/6EEC3F02205A4D34B05BB848E8B62B2FF5E50058.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/buw_AiBaTTSwW7hI6LYrL_XlAFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e97c29c1-31bd-4e09-81eb-7a199b3112a7/0/6EEC3F02205A4D34B05BB848E8B62B2FF5E50058.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:e3:25:65:4f:8b:e2:24:ec:6d:46:5e:d1:be:1d:4c:14:4d:
         5a:28:ee:a3:55:3c:17:09:6b:2c:41:82:fa:8a:9c:1a:2e:c5:
         b7:cc:ef:3c:58:0f:70:19:2f:eb:19:a2:f3:85:b3:0c:1d:f4:
         d9:67:3a:8a:31:cf:b2:d2:97:9a:61:10:8e:78:2b:90:ba:72:
         7e:93:4a:fe:c1:71:ba:65:7f:48:7e:b2:2c:6d:ef:5e:0e:5f:
         e3:c6:55:07:bd:22:9e:46:68:e1:96:25:ca:d6:4f:9c:de:3f:
         e3:0c:49:d3:b5:25:20:ab:d6:5b:83:cf:2e:d0:a9:c0:e6:50:
         a0:fd:54:e7:d0:9b:ab:c6:66:95:37:c4:94:99:28:7d:64:6f:
         ed:10:30:7e:55:a8:a6:2f:75:c3:e5:5c:ca:e9:09:93:47:b8:
         5b:24:56:ec:e3:56:00:35:5c:25:99:7b:66:3f:10:9a:10:12:
         48:62:48:f3:85:72:fa:08:f2:ea:60:da:fa:6a:60:7a:88:34:
         4e:16:2d:b3:a7:bd:77:c1:af:09:1c:f6:cd:97:a2:98:bb:fd:
         1e:33:8a:82:be:0d:ff:8c:33:fc:cf:df:1e:e8:45:78:8e:07:
         cd:e0:9d:c1:14:52:d9:6e:b5:35:72:60:8a:ac:39:f3:a2:bc:
         26:1c:56:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 10:36:17 2025 by rpki-client