This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
File:                     600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json)
Hash identifier:          xt7lJl6vAPfFWGhwP0iHMpXjSL3fpPry2AHrhpuXrpA=
Subject key identifier:   05:E1:1D:C6:C0:25:E3:02:34:CD:8A:99:78:0D:F2:F0:DC:9A:D7:2C
Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38
Certificate issuer:       /CN=600579021287ea6495d7f934a6ded30ee2a5bb38
Certificate serial:       2CE52A18EB14EB11C2718FA1FF4871296C136388
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
Manifest number:          0361
Signing time:             Sat 24 Jan 2026 14:53:25 +0000
Manifest this update:     Sat 24 Jan 2026 14:48:25 +0000
Manifest next update:     Sun 25 Jan 2026 15:11:25 +0000
Files and hashes:         1: AS198136.asa (hash: oxfLVHfZkx7+51M9naP5RiZj63x1tsDPX8I9emXGlWY=)
                          2: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: Bgig5l99Ezi9DLpOcohgj3eVzaZ4PGpUU4nIseSfjvo=)
                          3: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: JZBE3tEG4hHOBPTCPwBflh5g3zHGDulGCbGd7xGHBVE=)
                          4: AS212068.asa (hash: rItJZ7SQw8wuKEmquKvMVt291XsbMhoKL7WR9MMRbsc=)
                          5: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: 6CDfNbO4WuVDf6VRQUySBooY4lvDwYP59PUoLcC9iy4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 13:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:e5:2a:18:eb:14:eb:11:c2:71:8f:a1:ff:48:71:29:6c:13:63:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38
        Validity
            Not Before: Jan 24 14:48:25 2026 GMT
            Not After : Jan 25 15:11:25 2026 GMT
        Subject: CN=05E11DC6C025E30234CD8A99780DF2F0DC9AD72C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2e:fe:43:97:bf:c3:67:61:12:1e:1e:4a:f6:
                    1d:24:85:07:5b:bc:d2:79:2d:7e:43:68:2e:09:53:
                    07:49:38:a2:e1:b3:e4:26:12:c1:f6:fb:82:41:19:
                    c0:d3:da:3b:21:b6:74:05:b6:68:b6:93:3d:9a:5f:
                    5c:ae:13:64:27:5f:ea:ff:8a:9d:25:dc:05:30:ce:
                    af:4c:fc:9f:31:da:c9:d2:a4:13:ce:7e:02:68:19:
                    66:ef:cb:62:0e:e9:1e:b3:3b:3d:2f:7a:54:74:f0:
                    d3:68:ab:d9:38:65:82:60:5f:29:59:72:64:06:31:
                    81:35:df:a5:84:4c:2f:70:f8:41:74:74:bc:13:a1:
                    a7:06:28:d7:10:87:c2:a1:f0:64:e0:cb:d5:63:24:
                    90:4b:a6:6d:0c:ce:f5:a7:43:5d:0e:1b:e5:da:e2:
                    57:0e:67:99:45:d3:c1:bb:43:2b:fc:0f:fd:db:99:
                    67:eb:1b:9b:71:f4:78:9f:ca:ed:4c:22:a0:62:e2:
                    ed:2e:61:7f:9c:a9:f0:33:ec:3d:9e:b6:0c:37:e4:
                    64:c2:0b:5f:56:b8:06:55:7a:a3:7d:fe:1e:c0:d6:
                    66:70:15:76:a7:2e:6f:ae:06:38:e8:e7:0b:96:19:
                    64:70:13:c3:be:76:4a:8a:93:67:a3:8a:4a:f2:4b:
                    3e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:E1:1D:C6:C0:25:E3:02:34:CD:8A:99:78:0D:F2:F0:DC:9A:D7:2C
            X509v3 Authority Key Identifier:
                keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:99:92:f9:56:2c:33:d7:72:1b:ae:e1:43:ee:8f:40:4c:79:
         6e:8e:98:17:2f:99:f2:ba:80:45:a3:d0:0b:d5:53:c3:8e:33:
         cc:e5:0a:c7:f5:ad:1c:f7:dc:4c:55:d6:e3:0c:83:27:1b:8d:
         1a:9d:de:1e:8c:05:a8:ce:ac:3b:ad:11:f7:68:45:e0:32:dd:
         43:f5:d7:b6:a5:91:cf:91:d6:71:a6:79:b5:d5:45:e8:ae:de:
         fe:1e:7f:94:a3:f6:fc:2a:2e:ba:e9:d1:c3:72:94:ea:ae:fb:
         14:38:c5:5f:c3:a3:53:b5:ef:74:e3:c4:a3:fb:f9:64:20:8b:
         bf:bd:41:5d:cb:36:49:13:56:a0:e9:fb:66:0d:ba:29:06:89:
         6f:ed:eb:9f:14:0b:e8:5f:25:4b:d8:7f:79:f5:77:1d:83:1a:
         65:ef:64:a8:21:31:0d:80:d0:a3:e8:ce:10:de:45:1e:05:63:
         bd:90:85:f6:3b:2f:35:79:ec:70:d1:0b:f4:3f:7c:de:a3:ce:
         ff:2c:34:21:41:bb:de:13:66:80:7d:40:09:16:12:b0:54:66:
         62:e2:e8:ad:96:4d:11:3b:8a:e4:0d:7a:7f:d0:1e:7e:ba:d5:
         60:48:43:cf:0b:28:ec:b7:e9:f8:ad:6b:a5:3e:d6:24:c8:ea:
         52:00:fa:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 24 20:30:10 2026 by rpki-client