This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
File:                     600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json)
Hash identifier:          4EiBMKUVk6jiuLnQxIsAUOV05HLIqVy9lY0VdJJJ7AU=
Subject key identifier:   1B:0B:FC:B7:51:F9:76:F7:B4:47:1B:3D:2B:34:8D:59:87:2A:B6:53
Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38
Certificate issuer:       /CN=600579021287ea6495d7f934a6ded30ee2a5bb38
Certificate serial:       06C01A9A0478CAA3FCA5C3F87BB7FE952C0A6EBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
Manifest number:          0374
Signing time:             Sat 07 Feb 2026 21:33:32 +0000
Manifest this update:     Sat 07 Feb 2026 21:28:32 +0000
Manifest next update:     Mon 09 Feb 2026 00:41:32 +0000
Files and hashes:         1: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=)
                          2: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: eNGDnxe738bYRlMJGvGl5cSAhySkePFKHgEREKBbTgw=)
                          3: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=)
                          4: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=)
                          5: AS212068.asa (hash: ZjAKH1vEYwreC82cNdEXiUxsMPLukf1LK/YhPMdarpE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Feb 2026 00:41:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:c0:1a:9a:04:78:ca:a3:fc:a5:c3:f8:7b:b7:fe:95:2c:0a:6e:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38
        Validity
            Not Before: Feb  7 21:28:32 2026 GMT
            Not After : Feb  9 00:41:32 2026 GMT
        Subject: CN=1B0BFCB751F976F7B4471B3D2B348D59872AB653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:2f:55:84:fa:4f:0b:29:ec:7f:32:7d:b3:7c:
                    6f:2c:79:7a:fe:64:b9:f6:c7:83:72:ef:80:08:17:
                    09:c3:7a:07:d9:d6:a5:e9:5c:66:6b:66:3c:ee:9b:
                    70:55:1f:f8:20:56:dd:0e:dd:c1:46:18:82:1b:e8:
                    f0:ba:46:13:20:d4:ba:02:e2:2f:ed:8f:1c:67:22:
                    06:41:65:1f:44:18:33:01:4d:3e:3d:bd:b7:ae:17:
                    07:7d:0d:1d:40:13:c6:24:35:3b:1d:a8:78:28:28:
                    de:ba:13:fd:94:49:05:6e:10:e0:03:20:2c:62:39:
                    80:9e:89:09:a2:d6:26:dd:e5:8d:52:e3:0b:48:9b:
                    3e:44:7a:86:aa:83:e6:71:53:9e:2a:13:91:1d:13:
                    db:5a:b0:99:ff:c2:9a:ba:bd:8d:b8:e4:9e:94:e9:
                    0b:9d:c3:83:d0:00:a3:82:00:7f:37:ac:0b:87:5a:
                    4b:b5:17:b7:2d:a7:1b:18:73:a6:2c:ed:4b:d2:30:
                    9e:41:ef:59:51:54:41:a0:01:d5:14:a7:80:25:b5:
                    51:61:8b:91:6c:c8:12:76:33:a7:0e:02:33:47:41:
                    61:e2:1a:f2:7f:e9:6a:92:60:75:8f:c0:47:3a:2b:
                    b9:fd:3c:e2:ec:ae:fc:ff:d4:d8:e5:d0:08:3b:fa:
                    f7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:0B:FC:B7:51:F9:76:F7:B4:47:1B:3D:2B:34:8D:59:87:2A:B6:53
            X509v3 Authority Key Identifier:
                keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:cc:ca:fc:c1:8c:cf:17:76:2d:eb:b7:26:29:3b:5d:57:d0:
         c9:0b:9f:ed:21:71:38:14:18:d2:87:90:a9:40:5f:03:13:2b:
         f7:75:64:66:e9:3f:86:6b:8b:2e:ab:26:94:fc:ca:0c:e2:32:
         33:0b:0d:00:63:3d:a3:6b:0f:c2:fb:5f:fb:1b:43:bd:72:43:
         a6:e8:5c:8a:f5:e2:2f:fc:96:f6:fe:aa:bc:3d:01:eb:7b:51:
         e4:53:57:7e:db:de:a7:19:68:b5:92:26:33:da:4d:8b:94:6f:
         ac:7a:ef:39:a1:f9:eb:34:cf:0a:c9:90:02:06:13:2b:79:f3:
         70:c6:b5:d1:64:6d:d4:5d:b0:d6:84:be:aa:a3:84:69:f0:93:
         45:ab:ac:2a:30:eb:68:04:7d:fb:f5:11:86:a7:ea:10:36:a5:
         4c:9f:2e:54:2a:c0:bb:13:10:cb:6f:8b:4a:04:0e:ec:35:9e:
         ad:f3:31:b7:3e:80:70:d9:f0:6b:7d:ce:7f:7b:6d:05:ea:e8:
         95:6b:03:6f:60:58:30:fe:a9:27:a6:3d:b6:95:f1:1d:20:76:
         10:b0:1a:5f:ea:bb:aa:df:80:b2:9c:53:78:bd:eb:69:ed:e7:
         81:73:d3:14:6c:b1:22:5b:33:29:f3:2f:5a:39:6e:41:6d:e4:
         83:04:c4:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 8 15:11:24 2026 by rpki-client