This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.mft
File:                     A715A7C4243DFD5608AC7C5962055125B94D1763.mft (raw, json)
Hash identifier:          3+AgIJ4ojhyDTOh/MhPgi7JW9yZzKtg17fQpKmf9ZIs=
Subject key identifier:   82:29:96:BC:4D:71:21:F9:0C:6B:62:67:13:C9:99:3B:3D:EC:0B:4B
Authority key identifier: A7:15:A7:C4:24:3D:FD:56:08:AC:7C:59:62:05:51:25:B9:4D:17:63
Certificate issuer:       /CN=a715a7c4243dfd5608ac7c5962055125b94d1763
Certificate serial:       10587BDB72E101FEC551846347136D9FACC6A6D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pxWnxCQ9_VYIrHxZYgVRJblNF2M.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.mft
Manifest number:          0614
Signing time:             Sat 06 Dec 2025 05:16:39 +0000
Manifest this update:     Sat 06 Dec 2025 05:11:39 +0000
Manifest next update:     Sun 07 Dec 2025 05:28:39 +0000
Files and hashes:         1: 698CBB9E641A60FE66E1B58C92ACD281637ED767.cer (hash: tNwFc0wxK30edc2dJgBKjPLV9///2mnITAEpNIZ0d8k=)
                          2: A715A7C4243DFD5608AC7C5962055125B94D1763.crl (hash: eTqhbFyDAC0pBFQfCJoCeP0UL6+WzxwiRpyfuBFhMLY=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pxWnxCQ9_VYIrHxZYgVRJblNF2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:58:7b:db:72:e1:01:fe:c5:51:84:63:47:13:6d:9f:ac:c6:a6:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a715a7c4243dfd5608ac7c5962055125b94d1763
        Validity
            Not Before: Dec  6 05:11:39 2025 GMT
            Not After : Dec  7 05:28:39 2025 GMT
        Subject: CN=822996BC4D7121F90C6B626713C9993B3DEC0B4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:25:cb:ae:0f:aa:32:3d:04:f7:69:12:de:ef:
                    f2:90:08:b3:29:a9:3b:1b:9f:1d:3b:a4:6c:08:e5:
                    23:1c:3c:8e:e9:0c:2f:c3:54:f2:3c:31:a7:ed:f2:
                    8a:e5:f3:ba:8f:0c:02:47:e7:e1:96:38:0f:75:57:
                    de:ae:70:2c:df:dc:aa:f4:0c:90:e5:d3:70:4d:fa:
                    a6:c9:65:18:c2:94:26:33:79:db:56:b1:77:50:c4:
                    85:f2:cf:0a:b7:ea:56:f8:c5:42:c4:2a:c2:56:5f:
                    1f:75:9f:75:95:d2:94:b5:e4:d0:84:f0:9e:72:f1:
                    ba:30:2d:e3:7f:5e:bf:ea:d1:44:cc:ba:ba:30:fe:
                    35:0f:26:a1:31:a1:98:62:0f:c1:10:07:8b:10:f0:
                    22:56:83:b8:5a:88:92:91:67:5b:77:48:eb:00:6e:
                    c1:db:25:73:e9:37:53:3d:3c:ed:08:15:2f:9e:a1:
                    c4:02:02:51:e9:35:74:5e:ac:b8:6e:97:9e:42:cf:
                    4d:ab:01:5c:1d:89:6d:90:86:8a:82:22:1f:24:e6:
                    46:86:60:2d:f7:56:c4:ee:3d:71:6c:d9:97:45:f1:
                    18:13:44:49:ac:e7:7e:52:01:3b:01:54:82:03:30:
                    95:44:85:3c:fa:1b:5c:e5:32:cf:cd:90:86:cc:8f:
                    52:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:29:96:BC:4D:71:21:F9:0C:6B:62:67:13:C9:99:3B:3D:EC:0B:4B
            X509v3 Authority Key Identifier:
                keyid:A7:15:A7:C4:24:3D:FD:56:08:AC:7C:59:62:05:51:25:B9:4D:17:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxWnxCQ9_VYIrHxZYgVRJblNF2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:f9:11:e6:b0:69:ff:b7:d1:bc:cd:05:7a:26:ef:e7:ef:ed:
         d4:f9:a8:b8:77:01:40:82:b9:b3:c3:35:f5:34:7b:ba:a4:c7:
         e8:97:b7:82:85:14:9d:a3:80:4a:a3:f2:08:ca:37:7f:dd:1c:
         d5:98:ec:ca:bd:be:ad:79:97:11:72:28:1f:4f:5e:3b:71:74:
         60:26:4d:2f:3a:65:60:ec:e0:5e:47:a8:76:a7:17:50:f2:3a:
         d4:c9:ab:94:6e:81:00:8d:21:e7:17:63:e3:17:65:13:a7:c4:
         3c:9f:60:a8:74:dd:b1:f0:34:10:df:79:53:a1:40:cb:b7:7f:
         04:e3:74:23:f7:01:12:15:a3:b3:96:b6:77:9f:4b:e3:bf:68:
         a7:fb:0c:6f:f9:6a:40:95:a6:a6:62:75:49:0e:60:41:45:d8:
         bf:96:24:ac:72:5d:ac:20:72:53:d4:aa:75:e1:4b:83:7d:6c:
         c1:b3:58:00:c8:19:c5:4c:b3:3d:f2:b4:91:e6:d4:fc:45:bf:
         39:d4:e1:61:92:09:a0:85:87:7a:53:14:46:56:cb:38:78:ee:
         5a:2b:8d:d5:8e:32:1a:6b:78:81:1b:af:55:44:61:1d:d1:31:
         d4:4b:f4:96:35:19:ce:da:47:59:74:36:7b:e6:3b:b9:59:c6:
         7b:cf:2f:62
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUEFh723LhAf7FUYRjRxNtn6zGptIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTcxNWE3YzQyNDNkZmQ1NjA4YWM3YzU5NjIwNTUxMjVi
OTRkMTc2MzAeFw0yNTEyMDYwNTExMzlaFw0yNTEyMDcwNTI4MzlaMDMxMTAvBgNV
BAMTKDgyMjk5NkJDNEQ3MTIxRjkwQzZCNjI2NzEzQzk5OTNCM0RFQzBCNEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2JcuuD6oyPQT3aRLe7/KQCLMp
qTsbnx07pGwI5SMcPI7pDC/DVPI8Maft8orl87qPDAJH5+GWOA91V96ucCzf3Kr0
DJDl03BN+qbJZRjClCYzedtWsXdQxIXyzwq36lb4xULEKsJWXx91n3WV0pS15NCE
8J5y8bowLeN/Xr/q0UTMurow/jUPJqExoZhiD8EQB4sQ8CJWg7haiJKRZ1t3SOsA
bsHbJXPpN1M9PO0IFS+eocQCAlHpNXRerLhul55Cz02rAVwdiW2QhoqCIh8k5kaG
YC33VsTuPXFs2ZdF8RgTREms535SATsBVIIDMJVEhTz6G1zlMs/NkIbMj1JnAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUgimWvE1xIfkMa2JnE8mZOz3sC0swHwYDVR0j
BBgwFoAUpxWnxCQ9/VYIrHxZYgVRJblNF2MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWJmOGU5NzctNzI3OC00NmNmLWFiZDEtOTljZDFmZDJi
ZTRlLzEvQTcxNUE3QzQyNDNERkQ1NjA4QUM3QzU5NjIwNTUxMjVCOTREMTc2My5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3B4V254Q1E5X1ZZSXJIeFpZZ1ZSSmJs
TkYyTS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYmY4ZTk3Ny03
Mjc4LTQ2Y2YtYWJkMS05OWNkMWZkMmJlNGUvMS9BNzE1QTdDNDI0M0RGRDU2MDhB
QzdDNTk2MjA1NTEyNUI5NEQxNzYzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPPkR5rBp/7fRvM0Feibv
5+/t1PmouHcBQIK5s8M19TR7uqTH6Je3goUUnaOASqPyCMo3f90c1Zjsyr2+rXmX
EXIoH09eO3F0YCZNLzplYOzgXkeodqcXUPI61MmrlG6BAI0h5xdj4xdlE6fEPJ9g
qHTdsfA0EN95U6FAy7d/BON0I/cBEhWjs5a2d59L479op/sMb/lqQJWmpmJ1SQ5g
QUXYv5YkrHJdrCByU9SqdeFLg31swbNYAMgZxUyzPfK0kebU/EW/OdThYZIJoIWH
elMURlbLOHjuWiuN1Y4yGmt4gRuvVURhHdEx1Ev0ljUZztpHWXQ2e+Y7uVnGe88v
Yg==
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:15:07 2025 by rpki-client