This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e97c29c1-31bd-4e09-81eb-7a199b3112a7/0/6EEC3F02205A4D34B05BB848E8B62B2FF5E50058.mft
File:                     6EEC3F02205A4D34B05BB848E8B62B2FF5E50058.mft (raw, json)
Hash identifier:          oLvVFGrnSM63XkvpXl8zwZPC12AqEMxyCsGzlNesVcU=
Subject key identifier:   28:54:AC:F6:60:FE:0B:1F:1B:25:E4:FF:F3:25:48:3A:6B:8D:AA:CE
Authority key identifier: 6E:EC:3F:02:20:5A:4D:34:B0:5B:B8:48:E8:B6:2B:2F:F5:E5:00:58
Certificate issuer:       /CN=6eec3f02205a4d34b05bb848e8b62b2ff5e50058
Certificate serial:       6AE0B16BAB607DB908AAAEF26C670B4652CE58EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/buw_AiBaTTSwW7hI6LYrL_XlAFg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e97c29c1-31bd-4e09-81eb-7a199b3112a7/0/6EEC3F02205A4D34B05BB848E8B62B2FF5E50058.mft
Manifest number:          A9
Signing time:             Sat 06 Dec 2025 16:18:49 +0000
Manifest this update:     Sat 06 Dec 2025 16:13:49 +0000
Manifest next update:     Sun 07 Dec 2025 18:47:49 +0000
Files and hashes:         1: 323030313a3637383a3132303a3a2f34382d3438203d3e20323133363035.roa (hash: XRyQMpoBe8x6EMniDPh04vxDxr/1vEp6eUzfE5psDfU=)
                          2: AS210440.asa (hash: U0KqaJ1vp70aFXRJ8qqtIuTRp20P0U6l688smRqt29k=)
                          3: 323030313a3637383a3132303a3a2f34382d3438203d3e20313534313835.roa (hash: Rp2MKH6z0khzif342xCEUgF0/GeB2TkTxF1hVuECg7U=)
                          4: 6EEC3F02205A4D34B05BB848E8B62B2FF5E50058.crl (hash: ghvXwor6tdhgENIUqj2eCRp/kZFBpOZyoUL64pCy1nA=)
                          5: 323030313a3637383a3132303a3a2f34382d3438203d3e20323130343430.roa (hash: 3JOlOMWoYZ7ee5pmLfyLbybRVsig7FZpDzlml2RzXwE=)
                          6: 323030313a3637383a3132303a3a2f34382d3438203d3e20313534313535.roa (hash: 2Pi+0q4VWTcoAfcU1UOMRsINdXEduhCnC5i8NWJQ6O4=)
                          7: 323030313a3637383a313064303a3a2f34382d3438203d3e20323133363035.roa (hash: VHJui6zHwYgY2cN/lqKSQFLIt+m6q3pNicalrlY8cPY=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/e97c29c1-31bd-4e09-81eb-7a199b3112a7/0/6EEC3F02205A4D34B05BB848E8B62B2FF5E50058.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/e97c29c1-31bd-4e09-81eb-7a199b3112a7/0/6EEC3F02205A4D34B05BB848E8B62B2FF5E50058.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/buw_AiBaTTSwW7hI6LYrL_XlAFg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:e0:b1:6b:ab:60:7d:b9:08:aa:ae:f2:6c:67:0b:46:52:ce:58:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eec3f02205a4d34b05bb848e8b62b2ff5e50058
        Validity
            Not Before: Dec  6 16:13:49 2025 GMT
            Not After : Dec  7 18:47:49 2025 GMT
        Subject: CN=2854ACF660FE0B1F1B25E4FFF325483A6B8DAACE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:39:9e:8d:ac:79:54:76:24:fb:ab:15:26:f5:
                    49:f1:82:43:97:d6:71:98:5f:e7:91:df:d0:89:cf:
                    60:fa:67:0b:7a:13:18:f8:46:50:4d:3a:02:52:9f:
                    d2:cd:ed:cd:98:9a:c7:e0:df:43:34:c4:06:22:b5:
                    b6:63:23:91:6d:de:20:c5:dd:19:12:17:de:36:99:
                    16:06:fb:63:b4:ab:72:b1:5d:0e:1d:02:38:6b:b2:
                    5b:4a:ee:9e:51:4b:55:4a:ea:f4:3d:c2:8a:1e:c7:
                    51:74:03:04:7e:ad:46:8b:50:d9:83:d8:06:76:53:
                    2b:aa:05:dc:81:ec:44:1a:98:0a:82:0d:42:1a:f8:
                    44:a1:ba:28:ee:31:39:60:11:e6:30:91:8b:dc:67:
                    33:25:2d:c0:86:26:e4:ad:68:d5:fd:3e:d5:8a:ca:
                    d9:b1:a0:19:3c:85:aa:3c:ac:42:b2:a2:fc:1c:d2:
                    66:d3:e4:fc:bc:5c:61:e8:e0:9a:5e:d7:44:c7:b8:
                    a8:cf:6c:04:61:60:76:a0:94:11:b7:b1:4d:8d:28:
                    ae:17:e7:48:2c:fd:cc:f9:e6:4a:68:f6:b1:b9:2d:
                    7a:3a:0c:dd:38:44:75:2f:86:69:62:9b:cc:24:2e:
                    29:80:64:81:24:d2:e0:d0:71:4f:b3:5a:79:96:2f:
                    bd:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:54:AC:F6:60:FE:0B:1F:1B:25:E4:FF:F3:25:48:3A:6B:8D:AA:CE
            X509v3 Authority Key Identifier:
                keyid:6E:EC:3F:02:20:5A:4D:34:B0:5B:B8:48:E8:B6:2B:2F:F5:E5:00:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e97c29c1-31bd-4e09-81eb-7a199b3112a7/0/6EEC3F02205A4D34B05BB848E8B62B2FF5E50058.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/buw_AiBaTTSwW7hI6LYrL_XlAFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e97c29c1-31bd-4e09-81eb-7a199b3112a7/0/6EEC3F02205A4D34B05BB848E8B62B2FF5E50058.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:60:ac:b9:8a:bb:43:d1:d3:4f:76:4c:b3:25:90:65:05:89:
         3f:ce:8e:84:67:7f:63:e5:c3:cc:6b:b8:35:4a:9a:28:b4:73:
         c6:e4:39:a7:70:99:01:ce:4d:95:7d:05:20:24:96:54:21:31:
         82:18:5a:e3:52:c8:88:61:9b:c0:56:dd:23:b5:56:20:b4:5d:
         34:24:2e:69:24:ce:41:7a:71:ee:31:f1:4d:a2:3b:c5:45:57:
         e1:c8:22:5c:0d:8c:65:5f:cc:44:c3:d6:44:7c:6d:ce:e7:ad:
         86:c3:55:8a:50:39:30:dc:ae:f4:42:b9:ea:f6:7f:68:00:e1:
         50:d7:40:7d:37:1a:ae:44:05:fb:4c:3a:1f:6e:41:5b:fc:03:
         a8:85:c7:23:4b:1c:af:56:44:0c:e8:9c:4a:6f:a6:eb:56:fe:
         72:59:c9:57:c8:f4:f8:4d:0e:56:82:ad:df:f5:fe:e4:0a:58:
         9a:21:19:8f:df:08:dd:b7:67:09:4c:65:58:29:b3:99:35:74:
         1b:13:3d:a2:71:89:43:92:27:5d:21:f7:bb:72:96:7f:44:73:
         18:80:d6:40:7e:1b:bf:09:c7:27:82:75:21:be:7f:14:e1:4f:
         e2:20:51:e0:2d:0a:32:c5:1c:49:2b:75:83:c9:cf:10:47:76:
         92:cb:5e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:19:39 2025 by rpki-client