This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.mft
File:                     C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.mft (raw, json)
Hash identifier:          4flcweWGUrL+oqKMl2Fua8v0k+iQq2u2GTIj5Ketw4c=
Subject key identifier:   07:0F:51:5D:36:CC:D6:57:12:3B:53:F1:91:43:65:72:FB:B6:51:2C
Authority key identifier: C7:61:50:31:D0:A8:E0:2B:F5:8E:FC:7F:23:30:AF:3D:65:95:4E:FC
Certificate issuer:       /CN=c7615031d0a8e02bf58efc7f2330af3d65954efc
Certificate serial:       480F283E2EB76C2653FA874A460A46CEF47FB5B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x2FQMdCo4Cv1jvx_IzCvPWWVTvw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.mft
Manifest number:          032F
Signing time:             Thu 18 Dec 2025 04:40:16 +0000
Manifest this update:     Thu 18 Dec 2025 04:35:16 +0000
Manifest next update:     Sat 20 Dec 2025 05:07:16 +0000
Files and hashes:         1: AS213525.asa (hash: Fq0YNh+tWWvo+GdVGRIwjFZdtE0RP8wN2+bPbK7JSk8=)
                          2: C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.crl (hash: kE2X+qHQHE7QW06VtI7icohqaymy2a3QsZsXvofgB2k=)
                          3: AS214498.asa (hash: MXybwtu+5M9CBNDZHODBSDxfP4tk/0gnYAktlZuo6sk=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x2FQMdCo4Cv1jvx_IzCvPWWVTvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 13:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:0f:28:3e:2e:b7:6c:26:53:fa:87:4a:46:0a:46:ce:f4:7f:b5:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7615031d0a8e02bf58efc7f2330af3d65954efc
        Validity
            Not Before: Dec 18 04:35:16 2025 GMT
            Not After : Dec 20 05:07:16 2025 GMT
        Subject: CN=070F515D36CCD657123B53F191436572FBB6512C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:27:e4:d2:31:42:1e:3d:1d:75:28:ff:9b:28:
                    67:cc:9b:f8:e6:f3:33:aa:f2:69:f1:4a:f1:5e:6c:
                    f1:d7:ff:69:9b:20:59:d9:bc:1e:b5:95:a9:a8:fc:
                    e4:49:a8:d4:78:3a:13:7f:9b:c6:d8:85:51:85:3c:
                    2a:1e:ca:86:4c:25:45:9c:eb:7c:ba:7f:75:0e:e0:
                    da:ec:37:21:c6:d8:66:0c:08:a3:af:b3:dc:c9:4c:
                    82:ef:34:ce:54:42:1b:dd:54:c3:31:56:57:6c:54:
                    cc:28:0a:5b:0f:02:af:2f:47:c6:96:fe:54:96:68:
                    4a:46:90:0e:37:47:da:22:d2:74:2e:b2:f7:be:d8:
                    10:f2:aa:d0:3f:4a:9d:be:6b:5e:df:16:bf:78:4c:
                    29:08:fc:c0:5b:02:bd:82:77:a1:d4:48:a9:87:fa:
                    f3:68:00:f5:19:78:25:90:cb:8d:32:a7:95:c1:78:
                    cc:75:cf:0e:23:5d:aa:7c:c0:c3:b5:ab:a1:16:9e:
                    48:b4:04:5f:05:79:6f:4a:76:8c:4d:67:29:cf:ed:
                    87:d8:40:21:76:87:74:d5:31:29:36:1d:c1:11:84:
                    05:90:aa:da:01:2c:ae:b2:98:41:61:8b:87:8e:22:
                    ea:68:1d:f1:9a:26:eb:0b:b4:02:6b:e4:81:50:55:
                    c2:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:0F:51:5D:36:CC:D6:57:12:3B:53:F1:91:43:65:72:FB:B6:51:2C
            X509v3 Authority Key Identifier:
                keyid:C7:61:50:31:D0:A8:E0:2B:F5:8E:FC:7F:23:30:AF:3D:65:95:4E:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2FQMdCo4Cv1jvx_IzCvPWWVTvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:bf:dd:5b:e6:5d:c6:bc:71:f7:87:1f:2a:ea:c6:7a:eb:44:
         65:29:d6:0d:77:c8:75:26:7d:1b:28:e1:45:9f:86:39:f3:aa:
         dd:0d:1c:43:b0:34:b3:18:91:56:9e:d7:cb:43:fd:f2:a3:ba:
         9d:99:de:92:05:cc:66:46:97:0a:5e:d3:01:1d:f9:65:ca:d1:
         70:c1:bb:1f:dd:46:fa:d0:74:d6:2c:86:9c:3a:a3:5e:d1:74:
         cb:08:64:84:95:72:52:13:b1:20:2c:03:be:a6:4c:75:5f:17:
         31:e5:cd:87:74:ee:58:ff:97:76:0e:24:9f:ff:c5:79:bf:ae:
         01:5c:ac:46:72:9f:3c:d3:3a:e7:88:05:24:1a:4b:bf:12:ee:
         dc:0a:82:ce:83:01:9b:45:8e:07:f9:9a:ae:b2:c7:ae:3e:20:
         47:1e:e1:10:35:36:a6:6c:55:18:e5:4d:c4:88:3b:aa:d3:b7:
         ed:b7:34:4c:95:4b:c4:f3:42:c6:28:ec:db:71:09:26:36:7f:
         2c:15:db:90:29:c9:b8:f5:5f:0a:a3:64:b5:5d:a4:80:1d:80:
         c9:f1:5c:6c:11:d8:48:4b:2c:47:e5:ab:c5:2f:51:30:23:f7:
         c8:4a:34:e2:78:bc:e5:1b:a6:03:3c:ea:92:e8:b3:99:f9:74:
         55:99:66:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 21:45:34 2025 by rpki-client