This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
File:                     D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft (raw, json)
Hash identifier:          kSZdQRymZIGpTGQfct47C1/pA+KW9OaTZE8EaCgYgdA=
Subject key identifier:   35:04:35:DF:07:D8:F1:CA:2C:0E:D5:05:DD:39:91:C1:C7:C6:62:6F
Authority key identifier: D0:2B:BB:44:0B:9D:D4:40:88:DB:68:4E:E8:2F:A2:A7:DA:06:FC:F6
Certificate issuer:       /CN=d02bbb440b9dd44088db684ee82fa2a7da06fcf6
Certificate serial:       7CD13488361FEE5B82B12971040D47BCD556F8FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
Manifest number:          047B
Signing time:             Mon 09 Feb 2026 09:45:17 +0000
Manifest this update:     Mon 09 Feb 2026 09:40:17 +0000
Manifest next update:     Tue 10 Feb 2026 12:17:17 +0000
Files and hashes:         1: D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl (hash: QER1k80/uHfNCT3f1SAASi4LE9+cbVsnq6LySqEq3oU=)
                          2: AS203843.asa (hash: GVjcEElWVcaHaV2bppgVpXszuN2GI++jaQIYET3p6Tg=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:17:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:d1:34:88:36:1f:ee:5b:82:b1:29:71:04:0d:47:bc:d5:56:f8:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d02bbb440b9dd44088db684ee82fa2a7da06fcf6
        Validity
            Not Before: Feb  9 09:40:17 2026 GMT
            Not After : Feb 10 12:17:17 2026 GMT
        Subject: CN=350435DF07D8F1CA2C0ED505DD3991C1C7C6626F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b1:31:fd:1a:e7:d1:b6:60:9d:d6:c9:1c:fd:
                    4e:b0:f2:52:f8:a1:f9:55:a3:ec:f1:44:d5:46:e2:
                    05:c4:e8:55:41:29:ec:4c:3c:ab:b5:02:8a:74:43:
                    7b:da:d9:06:af:94:c9:b5:31:fd:71:5b:75:26:b8:
                    71:ba:1a:d3:76:41:1d:c2:d2:7f:30:5e:ae:4f:a8:
                    6b:5d:0d:5a:6c:ad:d6:1f:fc:88:a5:f7:3d:5b:d6:
                    47:46:5f:8f:21:6c:02:fe:1f:b4:4e:0b:48:14:7d:
                    4b:1d:99:1a:0e:44:5b:c5:2d:33:c8:05:f8:e9:f4:
                    41:1c:21:08:b1:32:ed:d2:6a:b4:05:f3:81:93:59:
                    af:2d:11:47:cb:e7:b6:d4:d2:d7:73:ee:a5:9a:40:
                    3d:b4:bd:94:46:36:f8:99:9e:e7:9d:c8:bd:46:49:
                    ce:c6:41:f4:ae:7f:b8:74:a8:a3:50:4e:7c:da:95:
                    82:6e:b3:34:bf:dd:b7:ec:ea:34:cb:e6:f5:58:1b:
                    4e:62:cb:a6:b9:0e:59:0d:73:70:b7:5a:20:55:5d:
                    25:4c:9c:24:a6:58:37:c6:6b:4b:3b:bf:cb:8a:e2:
                    54:fe:54:90:11:0e:34:a8:62:30:09:ed:cc:ce:0b:
                    cb:eb:ab:17:3d:60:c1:c3:ce:72:92:10:1a:4b:dd:
                    2d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:04:35:DF:07:D8:F1:CA:2C:0E:D5:05:DD:39:91:C1:C7:C6:62:6F
            X509v3 Authority Key Identifier:
                keyid:D0:2B:BB:44:0B:9D:D4:40:88:DB:68:4E:E8:2F:A2:A7:DA:06:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Cu7RAud1ECI22hO6C-ip9oG_PY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/1/D02BBB440B9DD44088DB684EE82FA2A7DA06FCF6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:a1:6c:0a:9d:5c:e8:8c:37:60:16:65:f7:f9:8f:df:93:db:
         3d:57:d9:7f:87:d1:94:1b:32:88:7d:96:83:7e:6e:b2:c7:29:
         e0:64:5c:c1:8a:e9:5f:20:c4:85:50:85:04:29:c6:17:7b:41:
         44:16:57:9d:72:93:6a:01:18:55:a0:26:35:06:4b:d5:a3:19:
         23:d9:12:89:08:ae:cc:a2:92:48:c5:e8:9f:a2:4d:f3:bb:41:
         ea:55:f2:39:e5:3f:49:8f:46:2d:73:13:19:bf:ec:8b:bc:ea:
         7c:8f:50:95:47:d9:99:bc:f1:d3:b5:08:82:d8:59:03:38:02:
         d4:33:8f:f2:77:b6:ed:cf:1d:35:a7:0a:0e:4d:ad:84:90:2e:
         25:bf:78:86:8f:be:a4:be:b2:95:5e:65:bf:63:f2:7e:12:92:
         15:cd:c0:e1:45:3f:fd:17:92:a4:2f:e6:33:e0:25:52:55:0a:
         b8:31:04:82:8a:83:06:50:1a:64:cb:94:c7:47:58:9b:23:bc:
         6f:95:ff:ab:63:af:e0:f8:e1:ad:63:19:80:cf:fa:fa:ef:06:
         50:59:4a:8e:07:b6:20:67:57:8d:68:82:93:25:bc:a7:7d:a3:
         e7:00:cc:a9:8a:e1:37:d0:94:f6:9b:c9:df:1d:cb:8c:0e:72:
         94:24:cb:77
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUfNE0iDYf7luCsSlxBA1HvNVW+PwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDAyYmJiNDQwYjlkZDQ0MDg4ZGI2ODRlZTgyZmEyYTdk
YTA2ZmNmNjAeFw0yNjAyMDkwOTQwMTdaFw0yNjAyMTAxMjE3MTdaMDMxMTAvBgNV
BAMTKDM1MDQzNURGMDdEOEYxQ0EyQzBFRDUwNUREMzk5MUMxQzdDNjYyNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3sTH9GufRtmCd1skc/U6w8lL4
oflVo+zxRNVG4gXE6FVBKexMPKu1Aop0Q3va2QavlMm1Mf1xW3UmuHG6GtN2QR3C
0n8wXq5PqGtdDVpsrdYf/Iil9z1b1kdGX48hbAL+H7ROC0gUfUsdmRoORFvFLTPI
Bfjp9EEcIQixMu3SarQF84GTWa8tEUfL57bU0tdz7qWaQD20vZRGNviZnuedyL1G
Sc7GQfSuf7h0qKNQTnzalYJuszS/3bfs6jTL5vVYG05iy6a5DlkNc3C3WiBVXSVM
nCSmWDfGa0s7v8uK4lT+VJARDjSoYjAJ7czOC8vrqxc9YMHDznKSEBpL3S1XAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUNQQ13wfY8cosDtUF3TmRwcfGYm8wHwYDVR0j
BBgwFoAU0Cu7RAud1ECI22hO6C+ip9oG/PYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMTNmNjg1NjEtMGE3NC00Y2NhLWJmOGYtMTJmYWFhZmM4
ZWI4LzEvRDAyQkJCNDQwQjlERDQ0MDg4REI2ODRFRTgyRkEyQTdEQTA2RkNGNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBDdTdSQXVkMUVDSTIyaE82Qy1pcDlv
R19QWS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xM2Y2ODU2MS0w
YTc0LTRjY2EtYmY4Zi0xMmZhYWFmYzhlYjgvMS9EMDJCQkI0NDBCOURENDQwODhE
QjY4NEVFODJGQTJBN0RBMDZGQ0Y2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATKFsCp1c6Iw3YBZl9/mP
35PbPVfZf4fRlBsyiH2Wg35usscp4GRcwYrpXyDEhVCFBCnGF3tBRBZXnXKTagEY
VaAmNQZL1aMZI9kSiQiuzKKSSMXon6JN87tB6lXyOeU/SY9GLXMTGb/si7zqfI9Q
lUfZmbzx07UIgthZAzgC1DOP8ne27c8dNacKDk2thJAuJb94ho++pL6ylV5lv2Py
fhKSFc3A4UU//ReSpC/mM+AlUlUKuDEEgoqDBlAaZMuUx0dYmyO8b5X/q2Ov4Pjh
rWMZgM/6+u8GUFlKjge2IGdXjWiCkyW8p32j5wDMqYrhN9CU9pvJ3x3LjA5ylCTL
dw==
-----END CERTIFICATE-----
Generated at Tue Feb 10 02:54:56 2026 by rpki-client