This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft
File:                     E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft (raw, json)
Hash identifier:          bQcBCSx+TqHD5vH0+gGb7uduR/eBPXxodrVdVlDJbBM=
Subject key identifier:   DC:6A:4E:C8:CC:F3:E0:C0:F4:E5:6F:FF:ED:12:B3:24:E9:4F:77:AE
Authority key identifier: E2:C9:29:5C:C1:C3:18:76:C8:55:4E:8B:60:DC:57:3C:FE:A7:CB:26
Certificate issuer:       /CN=e2c9295cc1c31876c8554e8b60dc573cfea7cb26
Certificate serial:       362C11322676A182B1478B906DA4B87F19F75FE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4skpXMHDGHbIVU6LYNxXPP6nyyY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft
Manifest number:          027F
Signing time:             Sat 20 Dec 2025 07:05:16 +0000
Manifest this update:     Sat 20 Dec 2025 07:00:16 +0000
Manifest next update:     Mon 22 Dec 2025 07:53:16 +0000
Files and hashes:         1: AS215368.asa (hash: WPjfLrYhLr3BbA/Kt1sBzS/Meq/kNQBVQgd3rtboPnI=)
                          2: E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.crl (hash: SNzGMtBcnH71AQEPkYh3EFs3ct5Lp8Fv2VF1pF/q0fk=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4skpXMHDGHbIVU6LYNxXPP6nyyY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 15:46:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:2c:11:32:26:76:a1:82:b1:47:8b:90:6d:a4:b8:7f:19:f7:5f:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2c9295cc1c31876c8554e8b60dc573cfea7cb26
        Validity
            Not Before: Dec 20 07:00:16 2025 GMT
            Not After : Dec 22 07:53:16 2025 GMT
        Subject: CN=DC6A4EC8CCF3E0C0F4E56FFFED12B324E94F77AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9c:01:17:3b:23:f0:54:bd:38:b5:7d:dc:82:
                    a4:da:0f:eb:cf:5c:25:44:aa:7f:8e:02:db:31:51:
                    71:97:1f:ff:6b:81:4d:d2:df:e5:92:c6:2a:15:f2:
                    e4:27:72:07:6a:19:5e:e4:f6:a5:f4:97:16:41:84:
                    23:5f:08:20:86:8f:2c:be:d3:3b:1f:2f:8b:b9:a3:
                    a4:80:1d:62:de:05:7e:a2:72:be:c3:2b:42:01:f5:
                    28:9d:b2:a2:ea:71:3d:dc:7c:11:74:cf:5f:3b:4d:
                    68:cb:f8:bd:67:44:11:e4:58:59:57:50:c4:0c:ae:
                    2e:30:63:cd:ea:19:1a:5a:3f:8c:d1:c6:13:e2:08:
                    77:22:ae:4a:2d:3b:ac:81:18:82:92:f9:78:0c:be:
                    4b:0c:fe:88:76:ae:c9:ec:ac:fa:c5:47:66:b0:e0:
                    81:a8:94:4a:72:89:c7:91:76:54:fe:67:fa:af:4f:
                    ee:a2:97:4c:69:34:b9:b1:e4:bb:e3:0f:a5:6f:b3:
                    13:d8:71:05:b6:37:b3:9c:03:04:b8:7a:9c:14:5c:
                    8e:fe:cd:7b:90:c5:90:c6:f7:a0:b4:8c:83:37:1a:
                    2a:00:ec:d0:f6:9d:ac:a9:5d:78:7a:ca:15:c1:6e:
                    c6:87:4f:e7:7f:c4:26:47:7c:a3:61:5a:4d:94:d6:
                    a7:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:6A:4E:C8:CC:F3:E0:C0:F4:E5:6F:FF:ED:12:B3:24:E9:4F:77:AE
            X509v3 Authority Key Identifier:
                keyid:E2:C9:29:5C:C1:C3:18:76:C8:55:4E:8B:60:DC:57:3C:FE:A7:CB:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4skpXMHDGHbIVU6LYNxXPP6nyyY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:ab:3d:7a:d1:64:8d:d4:32:91:ab:c9:cd:2c:5c:f7:69:88:
         06:c9:49:84:bb:5d:45:e8:04:f8:cb:cb:8c:c2:09:db:4d:14:
         39:d8:82:4e:0b:97:f6:43:7c:3f:e0:05:90:c2:49:3d:be:af:
         f7:2e:af:6d:42:8d:de:f2:75:2d:7f:60:a8:75:fe:2e:a6:06:
         cd:95:a4:99:f1:8a:c7:f3:fc:d2:a9:47:aa:39:ca:d9:55:6b:
         f4:a9:66:f6:13:21:af:ed:30:1b:0d:9a:fc:27:ad:6f:98:9a:
         27:e7:e2:d0:ce:5a:7e:3e:da:59:cf:ad:03:d1:4f:6f:08:98:
         e6:a9:06:39:dc:3a:df:72:fe:fa:60:b9:89:e3:a0:3d:f2:b5:
         74:65:7a:bd:6a:9a:1f:b0:dd:c3:ab:f3:2e:c9:31:49:cf:b7:
         3f:f9:07:f4:81:f8:9c:75:92:b6:a3:53:0a:e7:c7:35:17:f8:
         60:1a:36:42:9a:67:72:a5:98:cd:48:63:ee:ca:9f:3e:ca:e4:
         fe:6f:d3:c2:70:34:f6:dc:73:72:47:70:78:38:d9:b8:8d:eb:
         18:dd:f8:78:48:e6:6f:6b:d8:cc:4e:64:0f:8b:63:71:f7:bf:
         1f:98:a9:59:72:34:08:53:2a:51:d1:c3:a0:19:67:06:34:57:
         f6:ac:16:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 20:53:22 2025 by rpki-client