This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
File:                     600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json)
Hash identifier:          AhblX0qYUHd4o2x29bszODTg9xM+45oUCsGkCaUJxtk=
Subject key identifier:   D5:7A:B5:7C:1E:6A:6D:25:25:E1:52:0A:50:80:64:A6:93:33:4A:0E
Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38
Certificate issuer:       /CN=600579021287ea6495d7f934a6ded30ee2a5bb38
Certificate serial:       7227484E2A28602729032F202D9C27D6F520C416
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
Manifest number:          036F
Signing time:             Wed 04 Feb 2026 00:23:32 +0000
Manifest this update:     Wed 04 Feb 2026 00:18:32 +0000
Manifest next update:     Thu 05 Feb 2026 03:36:32 +0000
Files and hashes:         1: AS212068.asa (hash: ZjAKH1vEYwreC82cNdEXiUxsMPLukf1LK/YhPMdarpE=)
                          2: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: skwuRsenr1vSONLpAeFQrUykeFrujaQ2wTVCOvoNGRM=)
                          3: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=)
                          4: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=)
                          5: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Feb 2026 03:36:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:27:48:4e:2a:28:60:27:29:03:2f:20:2d:9c:27:d6:f5:20:c4:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38
        Validity
            Not Before: Feb  4 00:18:32 2026 GMT
            Not After : Feb  5 03:36:32 2026 GMT
        Subject: CN=D57AB57C1E6A6D2525E1520A508064A693334A0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8a:df:57:20:36:8c:13:4e:9a:da:b5:04:58:
                    36:93:e4:94:e1:4a:16:27:eb:48:55:53:ca:98:e1:
                    fb:bc:bf:ea:e5:e6:7f:ce:b3:58:23:7c:d2:df:9c:
                    5b:04:85:b8:8c:2b:09:e7:51:75:d7:57:e7:ca:53:
                    b5:3c:8e:56:c8:73:4f:41:78:5b:5a:f6:c3:c2:b9:
                    dc:07:7b:7d:68:e8:08:65:7b:92:19:41:87:c3:61:
                    51:3d:d9:47:7f:cd:be:ea:fe:9a:4a:13:2c:54:39:
                    95:ae:f6:7e:c8:ab:53:2c:0d:23:01:3f:ab:68:b6:
                    5c:ec:79:a6:15:66:c2:98:16:d0:81:12:91:9f:de:
                    57:a3:64:63:2d:7f:54:25:3c:4a:cd:aa:04:d7:1a:
                    78:6b:2e:24:ab:dc:41:bb:62:03:4f:d2:1f:f0:d5:
                    47:f6:21:37:f8:19:88:47:2a:09:09:cd:22:58:3d:
                    8c:9f:80:6b:0d:61:5a:1e:31:5c:30:f6:8e:b9:17:
                    31:de:b7:b1:92:ce:db:af:f7:7a:ff:a7:95:35:9e:
                    4a:35:9b:19:d7:64:41:d7:9d:3c:87:65:64:35:94:
                    85:8f:1d:4a:d0:4c:1c:b9:02:05:24:b5:58:8d:58:
                    ac:5c:01:5a:cc:3c:38:ed:e7:db:b0:5e:25:f1:33:
                    b2:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:7A:B5:7C:1E:6A:6D:25:25:E1:52:0A:50:80:64:A6:93:33:4A:0E
            X509v3 Authority Key Identifier:
                keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:d2:56:09:a7:54:03:e6:9d:b7:e9:c3:07:c4:59:d0:3e:56:
         6f:42:2a:5e:31:ba:41:b3:b2:d1:ac:73:a9:34:75:b0:64:da:
         83:1a:8a:18:e5:7d:f4:10:f7:90:58:3e:fd:22:d7:c6:f7:56:
         94:18:8b:84:9a:06:c9:5c:1d:4a:4d:07:91:86:d5:4e:fc:b8:
         74:75:c3:ed:4c:82:4a:c1:50:80:86:cb:51:d7:b7:a6:9d:5c:
         84:34:a3:bf:99:fc:62:cd:1f:a8:02:f6:ba:e0:7a:fc:02:21:
         a0:7e:5b:fb:73:62:9c:f7:89:5c:fd:1a:0d:88:58:ba:a4:4b:
         cb:bb:14:bc:b9:71:78:56:b8:6c:2e:2f:af:e9:fb:4a:8f:73:
         d6:75:75:7d:07:4e:96:d1:39:b0:b0:90:6f:fe:e5:e1:ed:b7:
         5e:fb:75:c2:19:e8:b6:e4:1f:5c:31:f3:ea:a0:3d:b2:08:a0:
         2d:f1:c7:36:ec:95:9c:14:3c:38:6e:8f:f1:b0:77:30:4c:3c:
         77:71:23:17:6c:a1:96:9b:68:93:7d:56:2d:c9:4d:8c:73:2f:
         1e:aa:57:eb:6e:7f:fe:dd:e0:44:8d:65:16:8c:25:dc:9e:97:
         cc:d5:7f:b6:79:77:f9:0f:92:1f:eb:ce:65:cc:10:d6:8f:3f:
         89:db:57:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 14:33:14 2026 by rpki-client