This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.mft
File:                     317EDB3410058E086217C50FB97009DDE70A6F1A.mft (raw, json)
Hash identifier:          o1NnqjxqF20wedxqREpeP3oWCyyfwguB4I4+etnPyAU=
Subject key identifier:   E3:54:83:2F:5A:78:5D:98:7C:46:C2:9F:E5:B7:7C:BA:1B:5C:FD:CC
Authority key identifier: 31:7E:DB:34:10:05:8E:08:62:17:C5:0F:B9:70:09:DD:E7:0A:6F:1A
Certificate issuer:       /CN=317edb3410058e086217c50fb97009dde70a6f1a
Certificate serial:       4D0BEB879FC5E17A30D707831D0C4B6C8D1DE2B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MX7bNBAFjghiF8UPuXAJ3ecKbxo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.mft
Manifest number:          2D
Signing time:             Mon 15 Dec 2025 20:39:35 +0000
Manifest this update:     Mon 15 Dec 2025 20:34:35 +0000
Manifest next update:     Wed 17 Dec 2025 00:20:35 +0000
Files and hashes:         1: AS207682.asa (hash: yNMgsZTlVBgZuwAny+gfftheJcltZQ2eLBjscmcmhhI=)
                          2: 317EDB3410058E086217C50FB97009DDE70A6F1A.crl (hash: 4yd8ALUdLv3AMVtwDX00EdOJVQ0Ib8k6l4IZhncWi8I=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MX7bNBAFjghiF8UPuXAJ3ecKbxo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 00:20:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:0b:eb:87:9f:c5:e1:7a:30:d7:07:83:1d:0c:4b:6c:8d:1d:e2:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=317edb3410058e086217c50fb97009dde70a6f1a
        Validity
            Not Before: Dec 15 20:34:35 2025 GMT
            Not After : Dec 17 00:20:35 2025 GMT
        Subject: CN=E354832F5A785D987C46C29FE5B77CBA1B5CFDCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3a:cd:45:39:a2:e8:1d:9e:20:5a:23:0b:c5:
                    b1:d3:a4:63:33:77:4e:c8:ad:40:2b:76:af:d8:91:
                    d1:bf:a9:cc:4e:22:df:fe:75:9c:ba:04:6e:ff:4a:
                    8b:9b:3a:73:ad:32:f2:c1:94:6b:3c:cf:f8:85:dd:
                    9d:18:7a:9e:b4:c5:7f:dc:6e:53:db:af:91:4e:5b:
                    a2:62:65:fc:56:c4:0c:1a:a9:19:80:47:44:2d:f8:
                    1a:21:8d:cd:47:58:ea:50:d7:aa:f6:f9:46:b6:94:
                    ba:8b:13:14:30:62:48:d5:2f:3c:49:d7:15:1a:e9:
                    f7:ae:98:f8:f7:b3:a9:63:60:6c:d8:c1:89:b2:9a:
                    31:dd:b5:d7:c9:1a:20:ce:8d:a7:90:d0:9d:14:bd:
                    05:c9:a3:85:7e:77:78:54:a5:5b:ef:4f:bb:03:3c:
                    cb:5d:7c:3f:cb:9f:1b:cb:66:c9:0b:3a:8c:47:25:
                    39:46:31:3c:c6:ed:67:24:08:b4:89:de:41:e7:94:
                    b3:5e:5b:36:5b:b9:59:6b:71:38:e1:44:41:f0:c9:
                    54:79:0c:82:90:4e:5d:70:b5:e2:a4:f1:07:08:90:
                    4e:bd:3c:81:e1:73:88:1d:18:fe:1e:f8:42:ad:f6:
                    7c:a8:a2:78:fe:10:92:8a:d5:3c:ac:cd:11:5f:fd:
                    ae:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:54:83:2F:5A:78:5D:98:7C:46:C2:9F:E5:B7:7C:BA:1B:5C:FD:CC
            X509v3 Authority Key Identifier:
                keyid:31:7E:DB:34:10:05:8E:08:62:17:C5:0F:B9:70:09:DD:E7:0A:6F:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MX7bNBAFjghiF8UPuXAJ3ecKbxo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:ed:03:7c:02:0c:d5:aa:23:f8:cb:4f:f1:fd:6c:85:8c:34:
         d2:5f:55:ca:b6:48:06:7a:8f:4c:99:48:9c:dc:f3:0e:5c:08:
         c9:e6:b7:8e:ca:1f:22:df:08:5b:a3:ec:d9:33:be:90:fd:5a:
         2d:e6:0e:3d:f3:00:79:70:d4:48:4f:47:f7:df:27:e5:2b:57:
         be:f3:71:4a:cb:f5:1e:a3:e4:46:5f:61:2e:f4:1d:04:76:d9:
         98:d0:2f:05:2e:69:7e:52:3a:ab:47:8b:3b:43:7c:b9:c2:e0:
         b9:c9:7d:08:6f:62:49:31:e7:64:1f:4c:61:03:10:7a:8e:e1:
         6e:94:fa:3b:6b:fb:cd:78:9e:55:d4:1b:07:e3:f0:d2:05:8e:
         57:ad:78:e6:fb:e6:0d:fb:85:b0:58:5c:e5:eb:d7:e3:58:c6:
         0a:cc:69:e3:a3:f0:62:2f:db:b3:9e:ff:d8:73:5a:b2:99:82:
         b3:8f:00:1e:c0:f8:b1:47:36:01:13:ca:1c:e6:bb:84:b2:42:
         c4:d1:6f:69:e0:0a:61:9c:a2:a3:ac:1d:e0:92:82:62:45:61:
         fd:f0:ec:bf:f0:3e:a7:05:20:ec:cb:e8:e6:bb:2f:7a:3a:e5:
         ea:58:66:70:91:b3:8c:b9:06:7b:aa:ab:56:b6:39:1d:6b:a8:
         18:03:61:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 12:40:16 2025 by rpki-client