This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft
File:                     7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft (raw, json)
Hash identifier:          MN+cofJgxX5flHve4U84RcmHUeE+uYcg+SrbGoFo338=
Subject key identifier:   B2:5C:2F:DB:4A:D0:AC:10:A4:2F:37:E6:18:C3:22:C7:78:B6:8A:1C
Authority key identifier: 7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10
Certificate issuer:       /CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810
Certificate serial:       1B713365E9222E7B2B92C392B37FB334431FD2EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft
Manifest number:          01A8
Signing time:             Fri 05 Dec 2025 15:26:16 +0000
Manifest this update:     Fri 05 Dec 2025 15:21:16 +0000
Manifest next update:     Sat 06 Dec 2025 18:20:16 +0000
Files and hashes:         1: 7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl (hash: 6unmt2V0SkNplMV7VubRg+JkQpK3zSRyqnuJIRyG1os=)
                          2: 3134312e39382e34332e302f32342d3234203d3e20383334.roa (hash: CEATl23EYBX+yz/bQgn1uVhhdG2D/AdhO5cExmk73Pg=)
                          3: 3134312e39382e34322e302f32342d3234203d3e203432383331.roa (hash: 6ZVZSqjoq8egcUsUMz7rnJfuPRuV1YHJP8qC/sHWbVE=)
                          4: 3134312e39382e34312e302f32342d3234203d3e203330303538.roa (hash: 4au55wB65f+exj00ZmF8CDavdM91WWgRwv7GAFTVWFE=)
                          5: 3134312e39382e34302e302f32342d3234203d3e203633313939.roa (hash: Zp7zdISkoaFNC+G0c29tuY8wRbhKWUC3ZCVWXR1t2Jo=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 18:20:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:71:33:65:e9:22:2e:7b:2b:92:c3:92:b3:7f:b3:34:43:1f:d2:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810
        Validity
            Not Before: Dec  5 15:21:16 2025 GMT
            Not After : Dec  6 18:20:16 2025 GMT
        Subject: CN=B25C2FDB4AD0AC10A42F37E618C322C778B68A1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:53:f8:82:23:e5:34:2b:77:a4:44:42:3a:4b:
                    85:fb:7e:9b:72:d3:5e:1f:f8:10:64:14:7d:6c:e4:
                    d5:56:34:0f:33:98:c4:d1:60:a3:25:5c:2d:93:7f:
                    8b:2f:64:d4:eb:01:f9:7e:fd:a0:e7:67:79:81:a4:
                    53:5f:d2:33:f1:d6:23:ec:83:7d:3f:a8:11:7e:40:
                    0e:3a:c4:20:58:ce:88:6a:c2:e5:8f:e0:87:7f:8c:
                    12:a0:a8:e7:ab:d6:61:bf:1b:be:60:51:c4:c8:0c:
                    31:4a:d8:4e:24:71:73:8b:99:0b:a3:c1:60:15:c4:
                    37:2a:8c:a2:df:58:eb:15:ce:8b:36:98:fc:17:f0:
                    33:d9:5b:a6:20:a3:35:3e:43:57:41:74:fe:e9:32:
                    4d:b4:ff:1d:31:65:8d:12:76:ba:98:cc:9d:ea:26:
                    74:1b:50:2b:d7:09:ae:c2:99:9a:99:d7:7c:92:31:
                    36:49:82:19:a0:d2:d7:df:e9:93:34:28:f3:f0:e4:
                    9d:12:c3:da:ea:8a:a4:e7:c7:6e:b1:d5:e0:d2:21:
                    dd:2f:80:af:09:be:65:34:e0:61:17:02:f7:86:18:
                    bd:a6:2f:10:bf:c6:aa:82:39:9c:3e:e6:c9:54:eb:
                    8f:18:f2:3e:d9:d0:2f:a7:8d:2c:c0:f3:59:ef:99:
                    3d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:5C:2F:DB:4A:D0:AC:10:A4:2F:37:E6:18:C3:22:C7:78:B6:8A:1C
            X509v3 Authority Key Identifier:
                keyid:7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:cc:7c:c9:b2:5c:13:66:e8:2a:e6:c3:06:0a:3d:da:ff:12:
         eb:79:57:73:e9:9a:ba:e7:9f:c2:9e:d4:50:03:eb:8a:b5:ed:
         4f:92:7e:31:06:97:2e:a6:15:d9:96:b8:f8:89:10:f4:b3:ea:
         60:ac:c7:cd:9f:a3:cc:85:d2:69:8c:dd:fb:06:98:7b:8f:0f:
         30:6f:2f:1d:3b:d3:3e:19:8b:8f:1c:5b:86:d3:2b:92:5a:7f:
         09:81:eb:45:01:84:2a:ab:9c:3b:59:02:ca:5e:9b:b4:47:88:
         e3:6d:9a:2c:74:95:ec:37:9c:3d:2d:fd:36:6c:37:c2:29:49:
         e4:f9:9f:2b:ae:4c:3d:de:85:82:78:d0:ab:3f:7c:2f:55:cd:
         89:2b:4e:b0:9d:20:21:bc:5d:85:84:af:8f:99:5d:bc:8e:9d:
         7a:8e:1a:13:c1:37:e6:67:aa:46:c2:e1:bc:c8:c4:54:c8:48:
         72:92:ce:a6:8f:80:27:cd:9a:70:8f:14:43:35:d0:8a:39:db:
         9a:65:7e:80:53:5f:13:a3:6d:08:f5:db:77:b9:e7:b2:45:38:
         96:8b:37:57:27:7c:d6:ff:8e:e6:02:43:41:a0:89:1b:a3:8e:
         b9:04:43:63:17:33:aa:c5:9e:0e:a7:1e:7b:7a:d5:1e:5d:83:
         b5:5b:74:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 07:10:40 2025 by rpki-client