This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/0/8C5B75AEE1ED7E37D44BFA69536FBDF20E6D3785.mft
File:                     8C5B75AEE1ED7E37D44BFA69536FBDF20E6D3785.mft (raw, json)
Hash identifier:          QmgBqC/VHq2ffRLNo12SOtVgki0VsYNVp+PgIBUpNJg=
Subject key identifier:   69:92:74:1A:77:16:3E:21:21:94:BE:19:6D:BC:41:C7:22:E3:1F:96
Authority key identifier: 8C:5B:75:AE:E1:ED:7E:37:D4:4B:FA:69:53:6F:BD:F2:0E:6D:37:85
Certificate issuer:       /CN=8c5b75aee1ed7e37d44bfa69536fbdf20e6d3785
Certificate serial:       4FAA23F7AE60CBDC4A867A9C5EDE93E0D07E192D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jFt1ruHtfjfUS_ppU2-98g5tN4U.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/0/8C5B75AEE1ED7E37D44BFA69536FBDF20E6D3785.mft
Manifest number:          0D
Signing time:             Fri 05 Dec 2025 23:49:33 +0000
Manifest this update:     Fri 05 Dec 2025 23:44:33 +0000
Manifest next update:     Sun 07 Dec 2025 00:17:33 +0000
Files and hashes:         1: 8C5B75AEE1ED7E37D44BFA69536FBDF20E6D3785.crl (hash: w4rHV6WQyPUmcmiLQjXBLFLVUplc1urCYrR+7jm8ZXY=)
                          2: AS206604.asa (hash: zpxAtBgjiRFEGbUqrc4N3vetnbfhkNMO9p+EhtBGacA=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/0/8C5B75AEE1ED7E37D44BFA69536FBDF20E6D3785.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/0/8C5B75AEE1ED7E37D44BFA69536FBDF20E6D3785.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jFt1ruHtfjfUS_ppU2-98g5tN4U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 00:17:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:aa:23:f7:ae:60:cb:dc:4a:86:7a:9c:5e:de:93:e0:d0:7e:19:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c5b75aee1ed7e37d44bfa69536fbdf20e6d3785
        Validity
            Not Before: Dec  5 23:44:33 2025 GMT
            Not After : Dec  7 00:17:33 2025 GMT
        Subject: CN=6992741A77163E212194BE196DBC41C722E31F96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:f2:5a:5c:b0:9b:be:b1:59:7f:53:e1:4d:1f:
                    93:37:94:cb:7b:26:f6:e0:1e:fd:0f:73:f5:a3:c0:
                    8d:67:6b:64:9f:20:c7:70:25:e9:82:18:57:6a:25:
                    5b:75:38:38:ba:9a:fa:63:40:3c:47:dc:c8:30:ef:
                    9c:3f:d0:42:2e:56:24:2b:df:91:7b:ec:b2:bb:90:
                    00:7d:48:86:56:79:a0:a4:d8:26:87:90:7e:f0:09:
                    ce:df:5e:cd:ab:eb:c4:7c:34:96:99:2f:dc:a0:38:
                    6b:ff:8b:ca:2c:94:1f:65:49:9e:32:95:e0:a1:a4:
                    ac:2c:61:84:56:82:4d:a0:b8:f2:2a:4b:af:dc:88:
                    85:54:3d:4a:2e:a5:b0:a1:9a:78:de:c9:3c:9c:ba:
                    0d:d5:22:e5:7c:54:fe:70:e7:c7:e6:51:0c:37:1a:
                    c7:4d:03:ba:fc:56:18:76:0e:5e:95:6d:e1:c4:ad:
                    1c:67:48:7f:6e:54:59:a0:f6:aa:57:25:61:48:2d:
                    2a:4f:ce:ff:ee:e1:f1:d5:ec:3c:fb:d0:09:15:a4:
                    d5:d2:8b:97:78:08:22:0d:d0:da:b1:07:9e:33:4b:
                    8c:e9:21:dd:27:0e:6f:29:7d:59:7d:43:9b:5a:e6:
                    04:ac:03:d7:0f:b4:be:cd:13:18:34:f6:ab:c3:99:
                    2c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:92:74:1A:77:16:3E:21:21:94:BE:19:6D:BC:41:C7:22:E3:1F:96
            X509v3 Authority Key Identifier:
                keyid:8C:5B:75:AE:E1:ED:7E:37:D4:4B:FA:69:53:6F:BD:F2:0E:6D:37:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/0/8C5B75AEE1ED7E37D44BFA69536FBDF20E6D3785.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jFt1ruHtfjfUS_ppU2-98g5tN4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b90e6860-3721-48c4-a3fe-11b1f2c0df5f/0/8C5B75AEE1ED7E37D44BFA69536FBDF20E6D3785.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:3b:7c:ef:d8:c9:1b:fb:f4:b0:cf:ea:ab:e7:17:b4:ae:f5:
         1d:61:af:f7:30:63:e0:7a:41:f7:65:0d:53:39:70:b7:38:9b:
         c4:6e:ac:8f:e0:98:ce:af:7c:19:bc:6c:7b:fb:ec:33:d9:87:
         d5:24:21:30:ac:5f:91:4c:f9:b7:68:be:f1:9c:b0:cd:b8:b5:
         27:ce:c4:45:af:f9:36:45:d9:ec:71:06:fd:b9:4a:50:25:31:
         82:23:bf:db:5f:4c:e1:22:d9:08:71:9f:f6:5b:0b:7d:c8:00:
         2a:ee:4a:97:84:53:51:59:e2:f5:51:9e:8b:7e:3b:bd:e4:21:
         fe:79:b7:41:f8:52:79:09:3b:c0:ea:34:cd:27:88:c8:97:6d:
         69:03:32:ca:de:cc:20:af:d7:b0:2c:98:fa:0e:97:0f:ae:e1:
         17:96:1a:81:eb:a6:e5:e7:20:38:75:e7:a0:8f:19:9e:df:33:
         81:09:2e:ba:46:cc:ff:9d:fb:ed:c8:0e:fc:29:fc:a2:9d:4a:
         c9:18:88:0b:93:16:0d:59:d6:1c:62:bf:19:98:76:4c:4c:cb:
         01:e5:60:09:4c:c5:18:d2:b9:1c:43:89:06:99:8c:bb:48:79:
         b2:a3:67:fe:7e:df:ce:58:2f:7b:b5:e6:27:8e:f3:3e:7a:e4:
         48:20:b7:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 06:38:09 2025 by rpki-client