This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
File:                     600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json)
Hash identifier:          +jFYMBxEw1wChVKjjsbizckhvf0/KMN1q6GdA6mP7JM=
Subject key identifier:   2F:0F:49:37:76:83:65:19:CE:46:8B:D8:89:5A:13:57:BB:F9:0A:70
Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38
Certificate issuer:       /CN=600579021287ea6495d7f934a6ded30ee2a5bb38
Certificate serial:       07C215B195592097837B768E7A15E1111ADB2696
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
Manifest number:          0376
Signing time:             Mon 09 Feb 2026 11:13:32 +0000
Manifest this update:     Mon 09 Feb 2026 11:08:32 +0000
Manifest next update:     Tue 10 Feb 2026 11:24:32 +0000
Files and hashes:         1: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=)
                          2: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: vb4GZA4a3r+yeYYYrI1qmvQOkl45PlkXOXkVQowNIe4=)
                          3: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=)
                          4: AS212068.asa (hash: ZjAKH1vEYwreC82cNdEXiUxsMPLukf1LK/YhPMdarpE=)
                          5: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:24:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:c2:15:b1:95:59:20:97:83:7b:76:8e:7a:15:e1:11:1a:db:26:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38
        Validity
            Not Before: Feb  9 11:08:32 2026 GMT
            Not After : Feb 10 11:24:32 2026 GMT
        Subject: CN=2F0F493776836519CE468BD8895A1357BBF90A70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a1:29:e0:b2:6f:4b:62:36:c5:05:0a:f8:48:
                    24:17:cf:b3:99:d4:92:e6:7e:93:1f:b7:ff:a6:c3:
                    db:f2:fa:8d:0b:7f:05:65:10:e9:c9:63:6d:01:c7:
                    a6:f6:fb:67:8d:7a:1f:ae:83:5c:97:7a:10:03:d5:
                    32:e3:5d:72:44:89:6c:f9:b1:d9:36:a6:d1:3a:0d:
                    3f:84:fa:da:dd:fb:62:26:e0:73:24:1a:75:a5:32:
                    4a:47:5d:8d:60:17:2d:80:05:c1:17:3f:92:ea:4e:
                    fd:e0:ce:ea:f1:0c:3a:21:23:e7:ca:ba:40:f7:ce:
                    8f:b1:a3:3d:e0:b1:08:94:9d:14:81:40:79:59:f4:
                    10:31:7f:b8:90:95:33:55:38:4a:26:5f:98:4f:c0:
                    f3:ad:bd:24:fe:f3:a7:fe:93:48:f7:1b:21:99:cb:
                    17:f7:cf:fa:59:8e:18:b3:93:1d:49:1d:24:d7:d9:
                    51:a6:bc:05:5f:8c:d9:47:d4:bc:ba:db:ad:93:c2:
                    20:04:36:cb:7b:ac:31:39:cc:41:95:9c:9b:3c:bf:
                    b6:1a:f3:eb:0d:56:26:eb:ee:06:ee:51:22:50:ce:
                    9c:bd:c1:0b:48:16:fa:69:ef:cb:77:b7:70:e3:d0:
                    3f:76:c7:27:5c:05:c2:1a:29:00:18:26:43:f0:f8:
                    81:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:0F:49:37:76:83:65:19:CE:46:8B:D8:89:5A:13:57:BB:F9:0A:70
            X509v3 Authority Key Identifier:
                keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:c6:68:9a:92:57:71:e0:3a:d2:25:37:5c:37:4b:41:f7:44:
         9b:95:64:27:bf:1f:18:3c:bf:7d:26:b2:84:11:53:1f:0b:4b:
         a7:c5:50:15:f9:42:e7:1c:ec:d6:15:64:8f:bc:8b:0f:7f:d5:
         14:69:c9:41:29:01:05:27:1d:c4:73:28:ff:4a:18:e6:8e:43:
         41:10:87:ac:fb:4f:cf:32:ac:6c:70:80:d0:5d:1a:a4:14:f4:
         a8:08:94:4f:d6:33:ee:c9:0a:cd:bc:ab:b0:6a:9a:f2:43:42:
         49:10:8d:81:b8:2c:97:22:23:45:8e:0a:38:e8:4c:13:72:5f:
         e5:e7:94:2a:98:fe:f6:21:d6:1b:81:b5:16:09:d5:53:23:0d:
         8c:24:4f:b4:14:d0:1c:a1:05:b6:7f:d1:e9:58:97:af:c2:f4:
         64:05:da:8b:d4:c7:4a:4d:8c:5b:da:45:bb:c2:1e:aa:ab:28:
         3c:e9:51:12:20:07:7b:69:28:6a:70:d9:a9:59:2e:f9:19:c7:
         72:45:3f:a6:50:8d:96:4e:69:c2:2c:9d:9c:16:04:66:69:ee:
         58:a2:7f:60:82:e6:b0:d6:a9:4e:59:62:a2:67:5e:76:c6:fc:
         a9:80:ac:7a:32:85:6d:fd:dd:d0:e2:24:72:0c:71:25:5b:36:
         bb:ce:00:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:02:22 2026 by rpki-client