This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.mft
File:                     C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.mft (raw, json)
Hash identifier:          FLSW9144/CLHqJ5wTIAf/g0MMueT1+dhXz1uUVsfQf0=
Subject key identifier:   59:02:E5:07:C1:C5:A5:6B:EB:BD:79:01:AF:0C:91:57:C0:05:6F:0D
Authority key identifier: C7:61:50:31:D0:A8:E0:2B:F5:8E:FC:7F:23:30:AF:3D:65:95:4E:FC
Certificate issuer:       /CN=c7615031d0a8e02bf58efc7f2330af3d65954efc
Certificate serial:       136B93A405A36A7A49186828F05A40BA5C23C7C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x2FQMdCo4Cv1jvx_IzCvPWWVTvw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.mft
Manifest number:          0316
Signing time:             Fri 05 Dec 2025 18:55:15 +0000
Manifest this update:     Fri 05 Dec 2025 18:50:15 +0000
Manifest next update:     Sun 07 Dec 2025 22:20:15 +0000
Files and hashes:         1: AS213525.asa (hash: seEk90bRp86U4w9lX1c0usnGxJgino5umQZtHO6fll4=)
                          2: C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.crl (hash: Fed826pAP+hULNojJRSAHsqZjqAFfQx/KAvofJ2vdbA=)
                          3: AS214498.asa (hash: 8ffGLuery14Nq5mT6PDQYWHsPt7OmIpAlm+G/THSwyg=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x2FQMdCo4Cv1jvx_IzCvPWWVTvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:6b:93:a4:05:a3:6a:7a:49:18:68:28:f0:5a:40:ba:5c:23:c7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7615031d0a8e02bf58efc7f2330af3d65954efc
        Validity
            Not Before: Dec  5 18:50:15 2025 GMT
            Not After : Dec  7 22:20:15 2025 GMT
        Subject: CN=5902E507C1C5A56BEBBD7901AF0C9157C0056F0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:40:41:1d:11:a7:7a:aa:ff:1a:17:cc:50:58:
                    8a:d3:a5:bb:df:2b:01:d4:cc:8c:c0:82:0a:91:8c:
                    7e:85:73:6f:90:09:7b:9e:70:a5:ae:d9:53:67:00:
                    e3:21:34:af:cb:ec:58:c4:59:f8:c3:74:61:9a:e1:
                    57:97:c1:81:fa:0f:66:87:53:e7:b5:eb:b9:c4:af:
                    ab:7d:6e:1f:55:05:c5:21:29:a2:48:bf:0f:7b:21:
                    ce:23:a5:ed:6e:5c:9c:e4:7e:c3:7c:6d:60:1d:99:
                    91:54:a1:94:43:8e:43:ec:4f:d1:4f:d7:54:1e:66:
                    0b:34:ac:b2:63:e0:d8:57:4a:5b:e0:07:7d:1c:d0:
                    cb:17:60:ba:02:89:1b:e2:5b:6d:6c:9a:25:b8:54:
                    b6:1f:e5:c1:e9:1c:bd:85:28:13:b4:24:d2:27:de:
                    3f:7f:0a:30:39:86:47:24:9d:71:97:18:95:c6:86:
                    ba:3a:23:b5:9c:00:4d:27:6a:c1:2d:21:04:6f:33:
                    61:98:92:b9:87:53:a3:2e:f1:dd:75:66:f6:b5:73:
                    f7:d1:9e:9a:10:ec:60:1d:7e:3d:24:19:08:f7:ad:
                    b9:3a:5b:4b:4a:01:96:95:91:ff:55:6d:78:2f:d0:
                    23:57:8b:bd:a4:88:54:54:e2:5e:b7:c6:f2:45:5a:
                    10:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:02:E5:07:C1:C5:A5:6B:EB:BD:79:01:AF:0C:91:57:C0:05:6F:0D
            X509v3 Authority Key Identifier:
                keyid:C7:61:50:31:D0:A8:E0:2B:F5:8E:FC:7F:23:30:AF:3D:65:95:4E:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2FQMdCo4Cv1jvx_IzCvPWWVTvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:3a:e4:53:c0:b9:65:2d:ad:d7:17:72:8e:96:f5:15:71:bc:
         e8:fc:db:3f:be:e0:db:ee:21:3e:7d:2f:f9:a4:8f:56:88:00:
         c5:91:72:1b:b4:8e:20:50:b2:ea:bc:eb:68:67:00:3b:2a:99:
         0b:4b:f2:b5:4d:1c:30:e4:3b:21:8b:4c:e1:7d:dd:da:ed:ba:
         d0:03:86:9d:29:23:b4:d1:9d:eb:6e:d7:b1:a1:93:60:7e:8f:
         bf:66:8f:72:02:20:f5:d1:de:11:ae:7c:c5:40:96:03:d0:7d:
         5c:73:57:5e:23:d5:75:fb:67:d2:8c:31:e7:15:7f:c6:81:59:
         a1:48:80:ac:97:25:47:6b:4e:cf:4d:b6:ea:57:de:60:c7:28:
         33:4b:69:5b:6e:9e:78:c8:19:2e:38:f9:8a:60:87:35:a3:3f:
         fc:72:c8:ff:47:0e:db:bf:b7:84:d3:04:be:87:18:1a:a5:32:
         58:25:79:6d:ed:57:f8:af:9d:93:29:01:89:c1:21:f6:66:48:
         bd:66:45:16:e1:fd:95:55:62:1c:85:e4:d9:3f:8f:45:ac:c8:
         cc:52:fd:46:1d:f4:77:04:7f:10:4e:02:62:69:96:5d:39:d1:
         28:59:26:a0:47:53:37:e7:bd:d9:ba:45:19:a6:19:ad:bb:e8:
         2a:7e:61:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 05:06:46 2025 by rpki-client