This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.mft
File:                     547BC28C92A229A5AC78C0DE287D89CE37726409.mft (raw, json)
Hash identifier:          0dxezBcCHbcGXBUJ5yCsMiDyUn1Uj/VauYVpV65rqLY=
Subject key identifier:   02:D8:FD:1A:8D:0A:7D:47:54:7F:94:6B:E9:F4:E6:B8:B0:DD:29:10
Authority key identifier: 54:7B:C2:8C:92:A2:29:A5:AC:78:C0:DE:28:7D:89:CE:37:72:64:09
Certificate issuer:       /CN=547bc28c92a229a5ac78c0de287d89ce37726409
Certificate serial:       69C5B1E8D125C7AF2EB564E79177A54CF25392BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VHvCjJKiKaWseMDeKH2JzjdyZAk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.mft
Manifest number:          0283
Signing time:             Fri 05 Dec 2025 21:30:33 +0000
Manifest this update:     Fri 05 Dec 2025 21:25:33 +0000
Manifest next update:     Sat 06 Dec 2025 23:00:33 +0000
Files and hashes:         1: 323030313a3637383a6362303a3a2f34382d3438203d3e203630343331.roa (hash: utwrqG/1k6qyhjzxqxfsIfDkj33KE0HmwhjLx5CU12Y=)
                          2: AS204931.asa (hash: zM51UdB/A/IZqHl1wn4NbUbXZwQrun9iugvDxBnKfTA=)
                          3: AS60431.asa (hash: W8B2btvY8654NatOoBPRRMV+PSLMlHitlzk3n1vMklQ=)
                          4: 547BC28C92A229A5AC78C0DE287D89CE37726409.crl (hash: ng/lmKf5XFCle67G+J20XukQ7nGdMiiQhRNuygab15Y=)
                          5: 323030313a3637383a6362303a3a2f34382d3438203d3e20323034393331.roa (hash: dHqMpXO8Fn1QmdwMgzIUNohViMqf6+wcagP7yILYRFI=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VHvCjJKiKaWseMDeKH2JzjdyZAk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 20:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:c5:b1:e8:d1:25:c7:af:2e:b5:64:e7:91:77:a5:4c:f2:53:92:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=547bc28c92a229a5ac78c0de287d89ce37726409
        Validity
            Not Before: Dec  5 21:25:33 2025 GMT
            Not After : Dec  6 23:00:33 2025 GMT
        Subject: CN=02D8FD1A8D0A7D47547F946BE9F4E6B8B0DD2910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:50:df:71:05:b4:4f:21:36:b6:fe:47:17:3f:
                    ea:44:18:be:46:55:0d:9e:a5:75:d2:70:2d:44:1d:
                    2f:5e:a9:1c:8e:9f:77:ae:7b:45:ab:94:4b:9f:97:
                    4d:57:7a:12:a3:e2:aa:43:50:3a:4a:5a:0a:f6:a9:
                    cd:b7:93:8e:9b:72:5d:ca:72:be:ed:0d:23:f9:36:
                    7b:28:b8:ed:cd:e3:49:b2:3f:fb:d0:89:60:cb:26:
                    94:7c:6a:86:d9:a5:31:1a:07:fb:dc:13:39:06:a9:
                    85:76:c6:9f:31:f0:31:11:b1:82:b8:07:35:7d:75:
                    d9:99:0b:72:aa:77:eb:c3:f5:90:cd:1c:9f:7a:2c:
                    0e:87:49:d7:6a:64:07:b4:6e:19:56:32:51:d5:a1:
                    d9:da:e6:1d:a8:b6:a3:0c:0c:09:d3:eb:d6:1d:8b:
                    7e:de:0f:e0:9d:a2:f6:1e:73:ca:31:c3:60:10:0c:
                    c9:ba:21:f4:31:58:c9:5c:7b:41:77:f4:e7:86:d6:
                    00:ea:5a:d5:9e:1d:fa:9c:2d:98:5a:fa:f0:eb:f5:
                    96:ee:af:a9:c5:e7:66:55:ff:fe:38:40:88:b4:00:
                    66:4f:c5:ca:fb:94:c4:f1:66:f1:af:99:1e:73:01:
                    ab:7d:e9:1d:c3:20:9d:42:39:81:90:e5:56:52:23:
                    e7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:D8:FD:1A:8D:0A:7D:47:54:7F:94:6B:E9:F4:E6:B8:B0:DD:29:10
            X509v3 Authority Key Identifier:
                keyid:54:7B:C2:8C:92:A2:29:A5:AC:78:C0:DE:28:7D:89:CE:37:72:64:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHvCjJKiKaWseMDeKH2JzjdyZAk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:2a:54:cd:59:10:f9:4b:19:6a:10:08:2d:19:63:5c:fc:da:
         60:e2:1c:a9:71:f3:e7:10:23:f5:b7:37:b2:89:53:bd:6b:74:
         e7:98:4d:09:53:4e:ae:dc:8f:30:b4:95:d8:65:9f:26:ba:17:
         9a:e0:4b:e2:6e:db:a0:48:bd:fa:8e:95:6c:9b:cd:41:98:b3:
         f6:aa:b5:67:7b:68:35:4d:e3:79:65:69:86:60:5d:ce:c5:78:
         79:38:46:a0:38:bf:14:38:dc:df:1d:d8:82:b8:f5:a1:27:df:
         c4:f2:4a:43:90:8c:9b:d3:4f:cb:9f:c2:15:9b:8f:4d:69:4e:
         d6:d0:20:cb:71:7f:fd:28:c9:b3:aa:81:3c:7d:0d:41:cf:db:
         68:d7:a6:e0:88:4a:86:b8:d9:5e:6f:99:02:a1:27:2d:60:8d:
         18:76:4e:9b:06:04:2c:fa:2d:23:a2:6d:23:84:ad:ba:20:57:
         1b:9e:a0:91:16:fb:f8:c7:6d:05:20:2e:7c:f5:76:ce:2f:1c:
         79:67:a3:59:15:f5:9c:c8:f7:4b:bc:2a:c1:8d:39:9c:9e:aa:
         88:41:8c:64:1f:d5:18:99:df:f5:2b:a5:08:00:c4:fa:7e:d0:
         29:db:6c:ad:28:d1:2f:33:22:ba:df:85:f4:b2:b8:3e:86:bc:
         f9:0f:da:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 05:05:37 2025 by rpki-client