This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/5/06561A0A725A9894ACD932A6F4EA0424B76DAB7C.mft
File:                     06561A0A725A9894ACD932A6F4EA0424B76DAB7C.mft (raw, json)
Hash identifier:          fGf5swNpkMqoVkrGONI8ppHCn3M/I/SboR9dIjRH3PY=
Subject key identifier:   BE:B8:AF:45:80:A4:6F:0B:90:F7:CB:72:E3:CE:20:CD:7B:C3:7C:5B
Authority key identifier: 06:56:1A:0A:72:5A:98:94:AC:D9:32:A6:F4:EA:04:24:B7:6D:AB:7C
Certificate issuer:       /CN=06561a0a725a9894acd932a6f4ea0424b76dab7c
Certificate serial:       5B5339C42C143786C196258DEBD6F68AF8E5DD33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BlYaCnJamJSs2TKm9OoEJLdtq3w.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/5/06561A0A725A9894ACD932A6F4EA0424B76DAB7C.mft
Manifest number:          16
Signing time:             Sun 01 Feb 2026 19:53:03 +0000
Manifest this update:     Sun 01 Feb 2026 19:48:03 +0000
Manifest next update:     Mon 02 Feb 2026 21:13:03 +0000
Files and hashes:         1: 06561A0A725A9894ACD932A6F4EA0424B76DAB7C.crl (hash: zWOnLtaeVEYIGx+gV2BVydB50ZVByfASy3Ldux7FkDM=)
                          2: AS202782.asa (hash: BUvQaaL6LDCtZinny59vQWt/MEabU/h3KDaRVhwqAQM=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/5/06561A0A725A9894ACD932A6F4EA0424B76DAB7C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/5/06561A0A725A9894ACD932A6F4EA0424B76DAB7C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BlYaCnJamJSs2TKm9OoEJLdtq3w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 21:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:53:39:c4:2c:14:37:86:c1:96:25:8d:eb:d6:f6:8a:f8:e5:dd:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06561a0a725a9894acd932a6f4ea0424b76dab7c
        Validity
            Not Before: Feb  1 19:48:03 2026 GMT
            Not After : Feb  2 21:13:03 2026 GMT
        Subject: CN=BEB8AF4580A46F0B90F7CB72E3CE20CD7BC37C5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ff:00:24:6d:4a:2b:5b:ec:9e:2f:c3:2c:24:
                    06:ca:3a:0d:da:71:44:2e:d3:f0:87:ef:b9:c0:bb:
                    e2:26:49:36:61:96:51:c2:df:7f:c7:31:b8:b2:52:
                    8c:2e:40:8f:a0:1e:2e:37:12:59:ee:e7:43:af:34:
                    94:ef:69:6a:12:60:ae:71:4e:8a:df:25:16:27:b8:
                    6d:14:e6:e4:cc:57:c0:31:f9:9c:0c:49:1e:97:3d:
                    71:59:10:fd:4d:d8:f8:cb:07:d8:75:1d:c8:72:41:
                    76:a0:62:d0:db:4b:97:8c:d5:32:28:8e:4e:6f:61:
                    1a:9c:1a:25:22:bd:6c:35:c3:15:8a:82:3e:07:f3:
                    b8:21:02:e6:9e:ed:09:3b:da:29:f8:a1:98:89:89:
                    c8:79:cd:74:f4:ef:00:2a:17:e4:aa:a2:65:d8:18:
                    4f:3a:3a:75:bb:e5:4e:1d:da:60:f4:fc:42:57:cd:
                    71:bc:c3:39:c1:a7:71:eb:e5:7b:f0:aa:b8:f4:aa:
                    95:63:63:c6:0f:d3:4d:5b:8e:9f:ae:58:58:e4:d8:
                    9a:7e:32:4d:2f:2d:e0:46:81:32:27:f6:45:d3:93:
                    8f:d4:29:fa:df:42:cd:3b:ea:b7:2f:52:81:09:e0:
                    b6:8b:3f:11:4c:69:6f:37:c9:51:0b:57:f5:fc:35:
                    fe:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:B8:AF:45:80:A4:6F:0B:90:F7:CB:72:E3:CE:20:CD:7B:C3:7C:5B
            X509v3 Authority Key Identifier:
                keyid:06:56:1A:0A:72:5A:98:94:AC:D9:32:A6:F4:EA:04:24:B7:6D:AB:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/5/06561A0A725A9894ACD932A6F4EA0424B76DAB7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BlYaCnJamJSs2TKm9OoEJLdtq3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/5/06561A0A725A9894ACD932A6F4EA0424B76DAB7C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:07:8c:af:92:21:f6:f6:9f:30:18:3f:e9:d3:c4:32:75:3f:
         88:9f:72:4d:4f:24:7e:fe:c6:14:d1:24:fd:68:f2:af:39:1f:
         3c:d3:83:0b:02:fd:dc:87:7d:67:ec:8a:ac:4e:66:01:cd:2a:
         8a:48:3a:27:83:9b:17:be:d5:35:2d:76:e1:e6:38:9e:0b:47:
         72:00:18:61:49:f0:53:8a:a7:7f:b6:7b:eb:45:70:1a:90:12:
         52:6b:16:9b:11:85:d1:2d:05:41:c1:0f:85:81:9e:d4:db:11:
         de:bc:b8:b6:26:49:44:8c:7c:02:07:9e:f5:ff:6e:a4:8b:96:
         5c:a7:2d:8d:70:d1:be:6e:9d:69:29:4f:25:7d:62:3b:81:14:
         b6:ea:65:f6:2f:6e:76:13:89:2d:9f:c7:85:3d:02:a3:de:aa:
         11:80:0b:53:b1:c3:52:0c:97:ac:06:ce:0b:56:9e:c0:d6:1f:
         62:9f:2c:ca:38:58:95:f7:61:22:95:64:b1:7f:c9:f8:c4:4e:
         3b:ef:52:d3:06:c9:dd:a9:37:09:cf:6e:e2:c1:3d:fa:0e:38:
         60:49:07:86:b2:23:e0:ba:00:94:a5:1f:92:cb:1c:75:1f:d6:
         bf:7d:8b:67:9e:ff:d5:d8:73:8e:2a:3a:5a:30:b9:c6:79:3b:
         d5:b5:7f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 08:05:14 2026 by rpki-client