This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft
File:                     608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft (raw, json)
Hash identifier:          o8Zr0rfe1XNHi+Ns4flLd6SDilM1MpvmW0ILVpPqPE4=
Subject key identifier:   B1:FA:8F:02:89:98:6F:1D:AA:A4:7B:DB:21:60:17:71:BB:36:03:D0
Authority key identifier: 60:8C:48:B9:A6:40:C1:4C:61:AA:D4:39:AB:1F:C4:4F:A2:A4:14:EA
Certificate issuer:       /CN=608c48b9a640c14c61aad439ab1fc44fa2a414ea
Certificate serial:       5CFBCBB4F15D59E68D2486B599831522F42955A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YIxIuaZAwUxhqtQ5qx_ET6KkFOo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft
Manifest number:          EE
Signing time:             Sat 06 Dec 2025 04:14:26 +0000
Manifest this update:     Sat 06 Dec 2025 04:09:26 +0000
Manifest next update:     Sun 07 Dec 2025 07:33:26 +0000
Files and hashes:         1: AS215375.asa (hash: LpUFum+e3/JZSud1FMmC87+zcGX6+jjYOpf3QCDbjko=)
                          2: 608C48B9A640C14C61AAD439AB1FC44FA2A414EA.crl (hash: XGe7ex0qHcjzg8V6Cql70XPS28lJbXgdCCrCwhRANEg=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YIxIuaZAwUxhqtQ5qx_ET6KkFOo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:fb:cb:b4:f1:5d:59:e6:8d:24:86:b5:99:83:15:22:f4:29:55:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=608c48b9a640c14c61aad439ab1fc44fa2a414ea
        Validity
            Not Before: Dec  6 04:09:26 2025 GMT
            Not After : Dec  7 07:33:26 2025 GMT
        Subject: CN=B1FA8F0289986F1DAAA47BDB21601771BB3603D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:49:fc:5f:c3:91:0e:ff:c6:68:ba:93:95:fc:
                    08:63:d2:89:9e:19:14:27:81:ad:4a:f3:81:fe:65:
                    ac:ed:07:60:34:c2:4a:08:85:8a:b5:4f:9e:5f:ed:
                    09:f5:1d:1f:6c:f2:20:d7:fc:43:49:a2:d4:3a:a6:
                    9a:7a:9e:61:0e:b5:dd:a1:fd:f4:27:f3:0d:3e:9f:
                    62:cc:22:86:0f:11:77:ba:4b:d3:fd:b1:e5:a4:78:
                    7c:50:d2:74:63:af:f4:af:82:af:17:dc:4f:44:66:
                    8a:c0:cf:3e:c6:1c:a0:03:69:90:ab:bb:58:d3:94:
                    bf:25:30:87:cb:40:41:4f:01:4e:a3:d4:5e:e4:66:
                    21:40:8b:1f:30:c5:d3:e2:02:2e:f8:59:ee:84:9e:
                    55:2b:1a:76:6a:ab:c6:7f:46:54:c1:77:9f:fd:9c:
                    04:24:b1:f8:20:fb:cc:9c:a0:c1:10:c5:20:9e:48:
                    bb:6c:ba:ca:0e:f5:45:20:dc:cf:94:10:57:14:d9:
                    e9:d8:80:82:4e:5d:42:10:48:32:50:d6:fc:0d:81:
                    00:70:36:05:ac:f2:45:13:ed:3b:ca:4d:eb:92:a6:
                    a4:ac:2c:69:d9:87:22:8d:2d:70:99:3b:f4:b1:0a:
                    33:33:4e:44:ec:7b:39:1c:32:0b:a0:87:40:9e:3d:
                    a5:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:FA:8F:02:89:98:6F:1D:AA:A4:7B:DB:21:60:17:71:BB:36:03:D0
            X509v3 Authority Key Identifier:
                keyid:60:8C:48:B9:A6:40:C1:4C:61:AA:D4:39:AB:1F:C4:4F:A2:A4:14:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIxIuaZAwUxhqtQ5qx_ET6KkFOo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:0f:df:92:6d:d9:c8:30:68:ea:b9:6a:33:cc:fe:75:f3:7d:
         67:92:5a:85:e7:0d:97:98:b1:21:23:f7:ef:80:c5:b6:3b:d8:
         3c:f9:f4:45:ba:06:f5:70:f3:15:42:ba:5a:06:27:98:b3:1e:
         7b:59:3d:5f:02:4c:31:e5:ca:70:b5:e0:d1:24:66:d6:89:0a:
         bf:6f:db:f8:30:40:a0:a8:84:54:81:17:54:ea:15:94:ef:99:
         b7:a5:06:ef:c9:00:fe:37:d2:15:b9:d1:7c:8e:c1:22:cd:b5:
         87:1e:c4:47:ed:f4:58:47:1e:9d:22:c5:f8:83:66:db:f4:2e:
         70:bc:a9:68:18:eb:47:8d:54:e0:e1:f2:b9:f7:d2:cc:ad:1e:
         c7:86:78:72:26:35:b7:2a:54:62:fb:7d:f3:bd:fa:f2:ca:f7:
         62:70:5a:f9:38:e6:66:04:8d:02:91:a9:a7:bb:a8:8e:50:5d:
         25:70:13:cb:3b:b3:2c:05:f9:3a:e4:46:50:71:bc:7b:e6:52:
         96:b6:c9:06:75:4e:a8:49:f5:e1:75:e6:5c:c6:06:7c:ef:79:
         e1:75:00:00:f8:3a:83:55:c6:2a:48:35:51:a2:f7:0f:f0:97:
         59:9d:c2:63:0a:0f:38:b5:a4:ea:3a:1d:3b:01:73:6a:ef:77:
         09:f4:51:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:24:16 2025 by rpki-client