This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft
File:                     EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft (raw, json)
Hash identifier:          LZp76wMwVtrzojrXdn/0EjxIfFP85SxSr5lDeEM7pWE=
Subject key identifier:   DD:61:B2:D2:59:74:42:26:5D:D9:7C:61:05:6C:2C:3F:A7:FB:CC:7F
Authority key identifier: ED:B9:F3:E6:D8:E4:B5:7C:49:30:1A:A6:21:EF:1F:90:38:9E:05:7A
Certificate issuer:       /CN=edb9f3e6d8e4b57c49301aa621ef1f90389e057a
Certificate serial:       01EF0787B36B18418A35CA0566277E91CB11076C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7bnz5tjktXxJMBqmIe8fkDieBXo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft
Manifest number:          0444
Signing time:             Sat 06 Dec 2025 04:01:17 +0000
Manifest this update:     Sat 06 Dec 2025 03:56:17 +0000
Manifest next update:     Sun 07 Dec 2025 06:20:17 +0000
Files and hashes:         1: EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.crl (hash: NMEHVG3cdqaKZh4MbJJS831sN1/yy+X6MHEHisqwAnQ=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7bnz5tjktXxJMBqmIe8fkDieBXo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 06:20:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:ef:07:87:b3:6b:18:41:8a:35:ca:05:66:27:7e:91:cb:11:07:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edb9f3e6d8e4b57c49301aa621ef1f90389e057a
        Validity
            Not Before: Dec  6 03:56:17 2025 GMT
            Not After : Dec  7 06:20:17 2025 GMT
        Subject: CN=DD61B2D2597442265DD97C61056C2C3FA7FBCC7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:66:1c:df:ec:6e:bb:c5:30:16:bf:9a:e1:07:
                    78:50:a5:67:d6:cd:ec:d5:06:8e:0d:49:20:2b:db:
                    9d:95:30:50:34:f7:f1:68:90:49:a3:e4:ee:d4:bd:
                    3b:2e:39:74:69:0c:06:71:c2:bb:1b:5d:3d:90:80:
                    f5:59:ca:f7:b1:1e:28:fa:7a:6f:f6:91:09:72:6b:
                    6a:87:0d:87:c0:09:15:3e:d2:63:de:bb:26:40:e2:
                    5a:d7:3f:7f:e0:7a:4b:0c:50:47:22:f0:ce:43:e1:
                    68:96:5f:e6:bf:24:5f:2d:80:78:6b:9e:e8:36:28:
                    50:f6:b1:e6:d7:0a:8f:22:84:7f:2d:af:df:49:f7:
                    45:2d:b7:0d:86:ef:79:d0:73:df:c3:25:46:c2:d0:
                    7c:05:c1:06:ae:58:55:f2:8c:c7:96:7a:60:2b:21:
                    bb:8d:ae:86:6a:25:b6:fe:be:7d:bd:4e:08:eb:72:
                    70:3e:d3:17:3a:3a:9e:dc:b4:cf:76:c9:e4:6c:b6:
                    85:88:e5:cd:af:ea:78:6e:fe:58:24:56:b0:21:57:
                    46:11:5e:56:6d:83:99:f4:3b:b1:d6:3d:fa:56:a4:
                    a1:90:9a:e1:06:21:f3:b3:70:15:dc:70:2a:c8:35:
                    10:17:03:7a:a8:4c:52:3f:aa:82:ac:a4:06:6d:ec:
                    96:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:61:B2:D2:59:74:42:26:5D:D9:7C:61:05:6C:2C:3F:A7:FB:CC:7F
            X509v3 Authority Key Identifier:
                keyid:ED:B9:F3:E6:D8:E4:B5:7C:49:30:1A:A6:21:EF:1F:90:38:9E:05:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bnz5tjktXxJMBqmIe8fkDieBXo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:17:ba:1d:23:d2:bb:ad:3b:dd:9e:57:28:e7:5f:57:45:28:
         1a:8e:26:96:57:cb:66:73:29:43:2f:36:ff:c3:ee:1a:c9:98:
         4e:97:0e:60:cd:e1:fd:4f:83:64:97:6f:56:06:e1:20:27:f3:
         c5:b7:55:fd:c6:52:da:ed:ec:74:cb:c5:11:2d:84:f9:84:6b:
         38:2d:d9:48:a2:5d:fa:07:8b:1a:e6:ea:ca:be:5f:fc:0e:1b:
         38:10:b0:3f:c3:ab:58:ff:7d:a3:50:61:8d:69:b4:48:01:dd:
         41:01:4a:81:17:c4:6c:5b:78:19:f1:99:68:4b:eb:0a:d0:f8:
         da:71:21:81:98:91:74:ac:a7:0e:46:ef:ab:17:81:d7:28:87:
         33:36:ae:44:42:d4:ae:d1:3d:38:96:7b:69:65:70:b6:b5:7e:
         36:5f:05:ba:ff:a4:08:2a:53:d4:eb:d1:43:04:bc:b3:7a:a5:
         d1:05:19:68:18:ad:ec:9b:4b:32:0e:8e:84:7e:4d:3a:51:f1:
         2d:9a:d5:02:1b:b6:f5:2c:40:07:72:32:6b:70:6d:f7:d3:2b:
         b0:47:54:47:a1:04:14:b0:51:2c:be:ea:36:0c:36:c0:a6:ba:
         d4:7b:9f:2b:48:73:bb:22:26:45:d1:62:56:43:c0:0b:88:2f:
         6f:ac:d4:cd
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUAe8Hh7NrGEGKNcoFZid+kcsRB2wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZWRiOWYzZTZkOGU0YjU3YzQ5MzAxYWE2MjFlZjFmOTAz
ODllMDU3YTAeFw0yNTEyMDYwMzU2MTdaFw0yNTEyMDcwNjIwMTdaMDMxMTAvBgNV
BAMTKERENjFCMkQyNTk3NDQyMjY1REQ5N0M2MTA1NkMyQzNGQTdGQkNDN0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmZhzf7G67xTAWv5rhB3hQpWfW
zezVBo4NSSAr252VMFA09/FokEmj5O7UvTsuOXRpDAZxwrsbXT2QgPVZyvexHij6
em/2kQlya2qHDYfACRU+0mPeuyZA4lrXP3/geksMUEci8M5D4WiWX+a/JF8tgHhr
nug2KFD2sebXCo8ihH8tr99J90Uttw2G73nQc9/DJUbC0HwFwQauWFXyjMeWemAr
IbuNroZqJbb+vn29TgjrcnA+0xc6Op7ctM92yeRstoWI5c2v6nhu/lgkVrAhV0YR
XlZtg5n0O7HWPfpWpKGQmuEGIfOzcBXccCrINRAXA3qoTFI/qoKspAZt7JajAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU3WGy0ll0QiZd2XxhBWwsP6f7zH8wHwYDVR0j
BBgwFoAU7bnz5tjktXxJMBqmIe8fkDieBXowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmNmYTRhMmMtZTE0NS00MTRkLWE2MmYtMDlhM2Y5YjU3
NWZkLzAvRURCOUYzRTZEOEU0QjU3QzQ5MzAxQUE2MjFFRjFGOTAzODlFMDU3QS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdibno1dGprdFh4Sk1CcW1JZThma0Rp
ZUJYby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82Y2ZhNGEyYy1l
MTQ1LTQxNGQtYTYyZi0wOWEzZjliNTc1ZmQvMC9FREI5RjNFNkQ4RTRCNTdDNDkz
MDFBQTYyMUVGMUY5MDM4OUUwNTdBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmRe6HSPSu6073Z5XKOdf
V0UoGo4mllfLZnMpQy82/8PuGsmYTpcOYM3h/U+DZJdvVgbhICfzxbdV/cZS2u3s
dMvFES2E+YRrOC3ZSKJd+geLGubqyr5f/A4bOBCwP8OrWP99o1BhjWm0SAHdQQFK
gRfEbFt4GfGZaEvrCtD42nEhgZiRdKynDkbvqxeB1yiHMzauRELUrtE9OJZ7aWVw
trV+Nl8Fuv+kCCpT1OvRQwS8s3ql0QUZaBit7JtLMg6OhH5NOlHxLZrVAhu29SxA
B3Iya3Bt99MrsEdUR6EEFLBRLL7qNgw2wKa61HufK0hzuyImRdFiVkPAC4gvb6zU
zQ==
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:43:59 2025 by rpki-client