This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2c26763e-addf-43fd-bf2e-7c7e38923e7c/1/2323941ABAEE10C9D2C4AEBDCFB8C751FC3B6D79.mft
File:                     2323941ABAEE10C9D2C4AEBDCFB8C751FC3B6D79.mft (raw, json)
Hash identifier:          ymhUX26mSGqceQOO0Y/w7jxiyc9ia4IYK3Q9/EueV7Y=
Subject key identifier:   EC:7D:42:FC:7A:12:A8:09:94:06:D9:FB:CA:20:06:53:DD:7C:5D:79
Authority key identifier: 23:23:94:1A:BA:EE:10:C9:D2:C4:AE:BD:CF:B8:C7:51:FC:3B:6D:79
Certificate issuer:       /CN=2323941abaee10c9d2c4aebdcfb8c751fc3b6d79
Certificate serial:       7E0D0D1AF27B449E35EEF1379ECF73FD54451C59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IyOUGrruEMnSxK69z7jHUfw7bXk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2c26763e-addf-43fd-bf2e-7c7e38923e7c/1/2323941ABAEE10C9D2C4AEBDCFB8C751FC3B6D79.mft
Manifest number:          6C
Signing time:             Fri 05 Dec 2025 23:15:46 +0000
Manifest this update:     Fri 05 Dec 2025 23:10:46 +0000
Manifest next update:     Sun 07 Dec 2025 00:27:46 +0000
Files and hashes:         1: 2323941ABAEE10C9D2C4AEBDCFB8C751FC3B6D79.crl (hash: trtKkuCUdGynT8+qA5Pk1fKkjiakBLTiJY/Dr/FaiCw=)
                          2: AS210352.asa (hash: YT5ZgSv24U4BmqLDfiHvZuDufou3TYm4JhntphJrTTM=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2c26763e-addf-43fd-bf2e-7c7e38923e7c/1/2323941ABAEE10C9D2C4AEBDCFB8C751FC3B6D79.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2c26763e-addf-43fd-bf2e-7c7e38923e7c/1/2323941ABAEE10C9D2C4AEBDCFB8C751FC3B6D79.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IyOUGrruEMnSxK69z7jHUfw7bXk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 00:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:0d:0d:1a:f2:7b:44:9e:35:ee:f1:37:9e:cf:73:fd:54:45:1c:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2323941abaee10c9d2c4aebdcfb8c751fc3b6d79
        Validity
            Not Before: Dec  5 23:10:46 2025 GMT
            Not After : Dec  7 00:27:46 2025 GMT
        Subject: CN=EC7D42FC7A12A8099406D9FBCA200653DD7C5D79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b1:c2:c1:8f:7b:ca:4e:00:ba:a5:8d:f4:9a:
                    89:c7:17:a7:c3:ea:ab:86:47:72:0b:a3:fd:74:c3:
                    2f:7a:94:16:04:2b:55:20:72:8f:cd:3b:c8:17:a4:
                    3a:de:81:d4:d2:08:3a:1c:a4:57:93:31:48:d5:cc:
                    88:48:39:83:2a:94:72:f5:b3:b1:16:96:91:a5:ca:
                    85:dc:0e:b0:b6:4e:2b:2c:24:59:31:25:52:c1:97:
                    31:3e:e8:2a:dc:e9:db:d5:fc:a6:ee:b1:98:e7:d6:
                    63:b7:e2:51:82:83:8c:13:55:e4:81:02:fe:be:14:
                    f2:69:3b:d4:10:7b:5d:5f:45:48:4f:e2:d7:a2:8c:
                    0a:c7:14:f9:89:65:16:33:8a:e5:f8:0a:40:7c:48:
                    59:48:4d:e3:de:24:c7:83:b9:db:48:64:57:9e:ee:
                    c9:89:2f:2e:d5:0a:83:81:4d:bd:6f:71:2e:43:6b:
                    45:3a:2e:41:86:b9:e9:9c:0d:f9:71:93:6d:3f:12:
                    84:17:54:e1:94:21:06:2e:4b:42:ce:bb:dc:69:9d:
                    63:b4:18:e4:a8:68:a3:83:3a:34:8e:35:7e:e2:86:
                    6a:2d:c3:88:6d:04:d5:bf:e1:60:6e:e1:82:d6:27:
                    0b:09:fa:5c:7f:f3:95:0e:b0:6c:4a:cf:90:cf:bc:
                    fc:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:7D:42:FC:7A:12:A8:09:94:06:D9:FB:CA:20:06:53:DD:7C:5D:79
            X509v3 Authority Key Identifier:
                keyid:23:23:94:1A:BA:EE:10:C9:D2:C4:AE:BD:CF:B8:C7:51:FC:3B:6D:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2c26763e-addf-43fd-bf2e-7c7e38923e7c/1/2323941ABAEE10C9D2C4AEBDCFB8C751FC3B6D79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IyOUGrruEMnSxK69z7jHUfw7bXk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2c26763e-addf-43fd-bf2e-7c7e38923e7c/1/2323941ABAEE10C9D2C4AEBDCFB8C751FC3B6D79.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:2e:d0:d1:c9:f8:f0:46:d9:74:11:5b:2e:bf:e9:c3:f0:fd:
         4a:8f:23:a9:ed:be:4f:7a:33:ce:8d:80:65:76:38:f2:7e:cf:
         3d:e3:5e:99:47:30:4e:1f:d0:a1:da:ee:bb:de:91:80:d1:09:
         06:9e:72:e8:25:50:2e:8d:54:19:e6:33:09:74:6e:cd:61:82:
         3c:f2:38:da:2d:ed:60:37:8e:74:13:9f:bd:3f:6f:0b:68:a2:
         a9:e7:72:2b:26:2a:96:a7:b8:ba:74:53:ee:08:e4:d2:10:90:
         5d:b0:b9:6f:38:cd:07:45:7f:d4:ec:ae:6b:d5:29:3c:be:57:
         c4:6b:b4:48:00:df:9f:31:25:29:66:48:fa:71:42:1c:8b:3c:
         1d:ac:36:25:59:e1:fc:b5:77:86:c6:01:61:3a:55:d5:49:89:
         c2:71:23:ed:2b:97:fa:1c:4b:45:dd:c5:61:d9:9b:40:43:9c:
         64:89:5d:d0:66:d3:17:8c:d6:c8:9b:d1:dc:56:03:8b:48:aa:
         ec:6a:a5:00:86:46:08:30:de:e7:a4:ff:8e:9e:75:ad:ad:78:
         56:a0:1e:2d:89:b6:46:1f:16:69:25:63:a2:07:cc:34:87:18:
         03:eb:c6:26:ec:77:f9:ef:48:eb:65:a3:99:25:44:b4:2c:c3:
         eb:ee:aa:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:01:29 2025 by rpki-client