This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.mft
File:                     C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.mft (raw, json)
Hash identifier:          ZTielqgJK7KW++MCBeK1mROsJV2b1U81GpPUpx0PZKs=
Subject key identifier:   83:16:10:10:BA:28:30:EA:2E:8F:DE:73:DE:B3:15:50:28:FE:DA:E9
Authority key identifier: C7:61:50:31:D0:A8:E0:2B:F5:8E:FC:7F:23:30:AF:3D:65:95:4E:FC
Certificate issuer:       /CN=c7615031d0a8e02bf58efc7f2330af3d65954efc
Certificate serial:       4DC2ABC72709592D371D83B031C049F0612227F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x2FQMdCo4Cv1jvx_IzCvPWWVTvw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.mft
Manifest number:          0331
Signing time:             Sat 20 Dec 2025 09:00:16 +0000
Manifest this update:     Sat 20 Dec 2025 08:55:16 +0000
Manifest next update:     Mon 22 Dec 2025 11:45:16 +0000
Files and hashes:         1: AS214498.asa (hash: MXybwtu+5M9CBNDZHODBSDxfP4tk/0gnYAktlZuo6sk=)
                          2: C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.crl (hash: unZA+zu6p6Ymu8N0xR/k424jHkBoB/ACh+nVFHS2YDc=)
                          3: AS213525.asa (hash: Fq0YNh+tWWvo+GdVGRIwjFZdtE0RP8wN2+bPbK7JSk8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x2FQMdCo4Cv1jvx_IzCvPWWVTvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 15:46:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:c2:ab:c7:27:09:59:2d:37:1d:83:b0:31:c0:49:f0:61:22:27:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7615031d0a8e02bf58efc7f2330af3d65954efc
        Validity
            Not Before: Dec 20 08:55:16 2025 GMT
            Not After : Dec 22 11:45:16 2025 GMT
        Subject: CN=83161010BA2830EA2E8FDE73DEB3155028FEDAE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:01:33:d7:61:63:15:9a:42:de:f0:d0:d2:89:
                    fc:45:b7:20:96:bf:85:17:72:8f:ab:ff:56:e3:3e:
                    7c:b4:5b:d5:e0:ed:4a:40:4a:e7:f4:c4:2e:33:53:
                    b6:12:63:c7:47:99:91:b0:62:53:52:3b:ce:d7:46:
                    81:ab:9a:1b:ec:85:25:88:bb:ee:dd:64:56:69:0a:
                    be:56:5b:f2:78:83:dd:56:9e:be:55:60:0f:1c:3f:
                    a6:92:b8:b1:cf:4d:1f:08:bb:02:a3:f3:f1:00:37:
                    30:9f:d4:7a:12:0c:5b:2d:6a:c5:08:ab:2f:97:8c:
                    0d:1a:0a:8b:15:b0:75:e1:d5:fd:fd:a6:fb:07:d4:
                    9b:51:9d:7f:37:fe:e4:71:9c:32:0c:e9:e7:26:9b:
                    f5:13:f4:f5:64:bc:36:92:cc:4d:a5:ae:f1:db:b8:
                    98:98:2f:d1:7a:9d:3f:89:de:c0:ed:2b:76:c5:11:
                    f4:18:53:b1:0e:3a:cf:96:0e:d4:28:2b:08:6a:6b:
                    8b:3a:e4:f7:f6:db:27:a8:aa:13:57:bb:60:5d:a0:
                    7e:25:01:65:41:53:f0:64:22:07:cc:17:fe:c5:e0:
                    59:00:aa:4f:ea:05:fb:ae:24:42:9d:02:5a:4c:57:
                    52:d2:ed:7e:18:a6:3a:13:a3:88:52:67:5e:f8:4d:
                    f1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:16:10:10:BA:28:30:EA:2E:8F:DE:73:DE:B3:15:50:28:FE:DA:E9
            X509v3 Authority Key Identifier:
                keyid:C7:61:50:31:D0:A8:E0:2B:F5:8E:FC:7F:23:30:AF:3D:65:95:4E:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2FQMdCo4Cv1jvx_IzCvPWWVTvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:45:43:38:60:23:b4:b8:85:80:6e:f7:9e:2e:c4:79:4c:03:
         39:5f:b5:66:3f:46:31:5c:74:45:9c:75:d2:1d:b7:c4:91:92:
         52:df:e8:14:54:aa:ad:6d:0a:57:5c:27:17:54:d8:72:66:a5:
         e9:34:34:23:6d:38:6d:48:4a:9c:94:80:3f:26:4f:ce:bf:7f:
         e8:e4:17:8c:83:a9:84:7a:19:75:39:c8:16:e5:6a:60:dd:cf:
         cf:7e:de:6a:81:fa:8b:a7:70:60:c9:19:39:1b:05:da:e0:a9:
         f6:9a:2d:ec:f9:a5:f0:48:eb:ed:6f:25:3c:4f:58:a7:96:1d:
         90:88:1a:e2:aa:cf:48:67:c4:5a:78:96:3d:05:58:63:03:b4:
         5a:10:20:6d:35:44:76:1f:47:16:ed:a5:0a:4f:29:e6:9b:75:
         55:3e:ed:e6:92:2c:88:ec:e1:75:93:9d:75:85:3a:30:10:dd:
         15:0c:64:87:7b:54:db:89:c1:c4:57:7b:a4:1f:56:ec:d6:8b:
         a4:65:a6:05:58:49:f8:71:36:fc:bd:db:03:e0:a4:fb:85:ec:
         47:a0:16:03:2b:3f:40:a2:d5:2f:00:c1:8c:30:64:08:89:4a:
         29:2b:62:ba:08:8a:22:f5:d4:54:6d:db:11:ce:62:42:4c:16:
         5e:9b:f6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 22:43:38 2025 by rpki-client