This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/0/1A715D4CFA1F15075FC610EDBB0905220D66929D.mft
File:                     1A715D4CFA1F15075FC610EDBB0905220D66929D.mft (raw, json)
Hash identifier:          tmTx5Rm+M7zOaJH96bcBsKGvzsn2cSd16uH1/liA7Kc=
Subject key identifier:   5C:1C:65:CA:21:39:BC:3F:BE:F8:71:E9:DE:BC:83:1F:42:39:9D:79
Authority key identifier: 1A:71:5D:4C:FA:1F:15:07:5F:C6:10:ED:BB:09:05:22:0D:66:92:9D
Certificate issuer:       /CN=1a715d4cfa1f15075fc610edbb0905220d66929d
Certificate serial:       0B0F7AFC6A42E6E224F791B62F50BFAD460583E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GnFdTPofFQdfxhDtuwkFIg1mkp0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/0/1A715D4CFA1F15075FC610EDBB0905220D66929D.mft
Manifest number:          8C
Signing time:             Fri 05 Dec 2025 22:56:23 +0000
Manifest this update:     Fri 05 Dec 2025 22:51:23 +0000
Manifest next update:     Sun 07 Dec 2025 00:35:23 +0000
Files and hashes:         1: 1A715D4CFA1F15075FC610EDBB0905220D66929D.crl (hash: CNPsW41h5zd6PWtcI5ZS32+n7Hbf5HqnV6qgnHznv5s=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/0/1A715D4CFA1F15075FC610EDBB0905220D66929D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/0/1A715D4CFA1F15075FC610EDBB0905220D66929D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GnFdTPofFQdfxhDtuwkFIg1mkp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 00:35:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:0f:7a:fc:6a:42:e6:e2:24:f7:91:b6:2f:50:bf:ad:46:05:83:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a715d4cfa1f15075fc610edbb0905220d66929d
        Validity
            Not Before: Dec  5 22:51:23 2025 GMT
            Not After : Dec  7 00:35:23 2025 GMT
        Subject: CN=5C1C65CA2139BC3FBEF871E9DEBC831F42399D79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b3:a3:a9:8f:23:95:12:91:88:c9:36:6c:20:
                    8e:87:3e:04:15:4e:7e:c2:c7:41:c2:a7:a1:11:30:
                    5d:df:8e:87:4b:1e:0f:c1:e7:6a:65:e2:03:d7:09:
                    9b:9d:d5:db:fc:a8:ee:a5:7d:08:2c:ab:ae:50:a7:
                    14:4f:08:aa:9f:2d:a5:29:70:08:12:f4:e5:a8:b5:
                    38:06:34:75:33:f8:b1:63:bd:5c:67:5e:98:15:80:
                    28:29:20:89:40:b6:1e:2c:8f:5d:ca:85:36:11:56:
                    86:6b:89:76:88:cb:81:83:b6:70:d3:82:72:85:41:
                    74:f9:c9:01:8a:95:b1:a1:d8:1d:e0:9f:85:b1:90:
                    a7:cc:82:dc:c0:b2:8e:7b:45:e9:09:81:fd:4a:8a:
                    f0:95:49:71:25:ff:23:cc:c5:c2:40:bd:55:32:72:
                    aa:40:5b:e5:a6:f8:3c:7c:68:b7:25:d0:bb:83:95:
                    76:a6:cc:66:65:07:be:af:4b:e0:4b:f7:84:59:a9:
                    5d:c1:e2:03:eb:2e:4a:c5:6e:2d:cc:e9:93:7e:d6:
                    9f:3f:61:4c:58:de:45:bb:e1:b7:f1:c5:c3:41:7c:
                    48:2b:ad:7c:b6:a2:e7:0d:b8:3f:b7:7c:89:bb:b0:
                    ba:87:81:5f:b6:55:ee:c8:c6:65:8c:ed:a6:a1:18:
                    af:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:1C:65:CA:21:39:BC:3F:BE:F8:71:E9:DE:BC:83:1F:42:39:9D:79
            X509v3 Authority Key Identifier:
                keyid:1A:71:5D:4C:FA:1F:15:07:5F:C6:10:ED:BB:09:05:22:0D:66:92:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/0/1A715D4CFA1F15075FC610EDBB0905220D66929D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnFdTPofFQdfxhDtuwkFIg1mkp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/0/1A715D4CFA1F15075FC610EDBB0905220D66929D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:fc:5a:75:d0:17:31:0e:71:62:93:c3:e5:f2:b0:db:f5:bc:
         b6:44:23:d0:fa:b6:ec:28:a6:3c:fc:b9:05:ce:93:50:20:19:
         8f:c6:2c:8e:fe:0c:44:cd:c4:ba:0b:31:6d:32:66:0a:9e:67:
         0f:3f:99:ae:ec:2d:b2:97:5d:e4:be:fa:a6:1b:b9:c2:ba:1b:
         3e:22:9a:00:ea:5e:6c:cc:9a:51:bf:a4:b2:7b:fd:fd:06:be:
         f8:42:89:38:b2:84:9f:39:8c:f5:6b:ca:e0:41:84:4d:8a:b0:
         68:69:7c:4f:2e:39:04:05:c4:f8:47:4a:02:e2:35:fa:f5:de:
         f8:15:55:5b:f5:38:aa:dd:08:7f:4a:7a:d3:71:f0:af:24:f4:
         ab:95:5a:92:17:2c:3d:be:25:a5:e7:ce:e7:41:b0:cc:29:f3:
         5d:40:70:43:82:10:cf:af:57:3f:60:b9:ca:06:65:81:88:b1:
         84:11:97:2f:55:78:99:85:98:27:ba:43:13:8a:b7:5d:bd:b0:
         c6:79:7c:d3:5c:6c:ea:23:68:5b:58:28:3e:12:ba:b5:4d:46:
         7b:8f:02:70:e1:84:bb:43:27:d2:3b:07:70:e9:3b:c8:01:bb:
         de:d9:af:32:12:fc:d9:f9:e5:f1:c3:38:cd:75:a3:d6:59:d7:
         10:65:fa:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:26:28 2025 by rpki-client