This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
File:                     DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft (raw, json)
Hash identifier:          bszD5bUDm2CKDtjsjUniQeIob9AVZlr1tom51L3gVZM=
Subject key identifier:   02:87:1A:F3:4F:A1:B8:F5:86:05:DF:0F:25:58:C4:B0:F1:1A:AC:3E
Authority key identifier: DA:B7:E2:0B:EA:5C:CB:84:F8:26:C6:4D:A1:75:7D:1D:F5:B6:FF:62
Certificate issuer:       /CN=dab7e20bea5ccb84f826c64da1757d1df5b6ff62
Certificate serial:       5BE062B24B4EB27DA1C7359550A343D7C8C285D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
Manifest number:          0279
Signing time:             Fri 05 Dec 2025 14:04:32 +0000
Manifest this update:     Fri 05 Dec 2025 13:59:32 +0000
Manifest next update:     Sat 06 Dec 2025 15:16:32 +0000
Files and hashes:         1: DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl (hash: qSFJ40/dBKp/8Lvh1CAkQ1mmlPrIYaV4NXvyL9N8iK4=)
                          2: AS215085.asa (hash: sCI+W8+X4W620uBxNueenYbQpWLmlL4f7e78KHbgIKI=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 15:16:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:e0:62:b2:4b:4e:b2:7d:a1:c7:35:95:50:a3:43:d7:c8:c2:85:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dab7e20bea5ccb84f826c64da1757d1df5b6ff62
        Validity
            Not Before: Dec  5 13:59:32 2025 GMT
            Not After : Dec  6 15:16:32 2025 GMT
        Subject: CN=02871AF34FA1B8F58605DF0F2558C4B0F11AAC3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ac:83:c9:e9:c4:07:2c:35:a6:a1:29:34:4b:
                    2e:e5:01:b6:c8:1f:48:16:35:4c:19:01:f5:46:80:
                    e6:1f:54:71:e5:1f:dd:a9:ec:68:08:ad:d6:c4:e1:
                    45:80:a7:19:10:85:7e:7a:bf:22:3b:c6:bd:e2:bf:
                    af:7a:50:19:61:54:22:f8:1f:ed:44:3d:12:03:d0:
                    75:5a:cb:17:3f:f6:ff:64:b9:21:7a:34:71:a7:d6:
                    6a:c4:47:15:1e:a3:79:b7:a3:ba:37:ad:57:00:75:
                    51:b9:c4:29:5d:e6:7f:11:6a:f8:7f:13:c9:71:4a:
                    62:51:86:ff:0e:97:18:33:53:e2:21:5e:8b:e2:ad:
                    a1:c0:98:db:e9:81:da:8c:92:4f:76:70:00:b9:8d:
                    1f:25:6c:77:d3:ab:bd:4a:d0:c6:9f:92:e3:07:88:
                    58:ff:99:a1:64:01:ec:0d:e4:79:2c:ef:fc:ed:de:
                    00:cc:d9:2a:26:ae:43:14:98:dd:3e:f2:d0:bd:27:
                    b2:9c:e2:af:eb:65:ac:8f:99:cc:e7:cb:48:b3:88:
                    24:e1:fd:f1:79:6a:a9:c2:c7:09:d7:2b:90:0a:b2:
                    27:65:3d:52:64:3b:0a:93:e2:57:0e:e9:71:b8:e1:
                    27:69:b2:24:8c:cb:92:7b:10:49:b3:66:28:7e:43:
                    46:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:87:1A:F3:4F:A1:B8:F5:86:05:DF:0F:25:58:C4:B0:F1:1A:AC:3E
            X509v3 Authority Key Identifier:
                keyid:DA:B7:E2:0B:EA:5C:CB:84:F8:26:C6:4D:A1:75:7D:1D:F5:B6:FF:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:88:51:0d:66:ee:36:c6:ad:a5:9e:a8:cd:0b:10:80:9c:29:
         83:56:d9:4e:29:30:70:f7:6c:20:dc:3b:c2:c5:fd:2d:bd:40:
         9b:b5:aa:fe:f7:7a:51:83:20:2f:eb:4c:97:30:db:a7:5a:fb:
         f6:a7:48:56:30:1d:d0:80:dd:23:83:58:78:65:ad:fd:ae:37:
         f1:b7:02:f9:b9:5e:7c:ee:84:4f:ee:f1:7c:16:00:83:c7:a4:
         c9:14:ca:1c:ff:b5:02:11:b0:25:e4:2d:ea:32:ba:a5:53:d3:
         ee:a5:1d:2a:c5:ac:93:71:55:2b:4f:f5:fe:18:d0:b7:b4:0d:
         77:e5:b3:3a:37:de:ec:ad:ac:52:a5:f2:24:24:fb:40:c2:b5:
         ab:83:e1:4e:66:63:1f:8d:08:f4:94:b8:c5:0d:8d:5b:55:61:
         77:00:1f:cf:f3:2b:0b:4c:94:8a:36:3a:95:eb:b0:23:e4:23:
         ef:c7:39:20:e4:26:6b:fd:f3:54:27:d3:31:43:53:9e:3d:a9:
         bd:53:6d:50:61:c3:dd:68:57:17:5f:c4:59:a2:54:86:7f:0b:
         97:81:c9:40:54:ec:44:7e:d7:4a:01:80:45:11:a0:dc:a0:98:
         1e:9c:db:bb:54:bb:d2:4d:8f:f8:85:18:87:c7:0f:59:5e:ae:
         a6:7a:63:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 04:58:43 2025 by rpki-client