This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File:                     6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier:          8C9rltxjF7eO0FcUNMA5Lg4WMVIrmW2rGFuJpfzocKg=
Subject key identifier:   23:AC:0B:D3:2D:5B:E3:54:88:D0:F0:23:9E:CF:CC:7A:9C:2B:76:46
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer:       /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial:       0B2151032F049E1A8954598D649B2C62B10EE472
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number:          0369
Signing time:             Mon 02 Feb 2026 04:23:50 +0000
Manifest this update:     Mon 02 Feb 2026 04:18:50 +0000
Manifest next update:     Tue 03 Feb 2026 06:02:50 +0000
Files and hashes:         1: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: KkLgZBJQJPJtx2KnzJhHNMbSAPRgNXw0J65/RqJbAbQ=)
                          2: AS216107.asa (hash: SZjGVwi1GjAkhFm3nT5ayCum6XandBtWxpLVDU2nJp8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 21:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:21:51:03:2f:04:9e:1a:89:54:59:8d:64:9b:2c:62:b1:0e:e4:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
        Validity
            Not Before: Feb  2 04:18:50 2026 GMT
            Not After : Feb  3 06:02:50 2026 GMT
        Subject: CN=23AC0BD32D5BE35488D0F0239ECFCC7A9C2B7646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a9:f5:94:25:26:85:67:d0:10:ef:44:7a:d2:
                    13:b0:3d:56:c8:27:4e:87:f2:36:b6:bd:1c:af:c1:
                    b1:75:5a:1e:70:63:3e:f0:27:8b:fe:3d:b8:55:12:
                    8d:04:fd:f8:bd:68:f4:8f:db:b1:59:f7:d3:74:27:
                    f5:37:6a:04:61:1a:b2:04:52:49:12:1f:40:5f:bf:
                    c3:fe:41:92:29:27:56:c3:9e:df:76:20:75:32:f0:
                    24:6c:8d:0a:fd:42:d8:78:8b:71:99:bf:96:b9:f9:
                    76:58:53:8e:43:ef:73:86:ab:30:05:d1:c7:19:ab:
                    65:23:01:e5:88:e1:fe:d1:05:6a:94:14:cd:5a:6f:
                    29:f8:b9:d0:40:a8:31:95:60:a2:66:b5:0e:6f:cc:
                    11:93:20:64:48:ca:2a:16:b9:63:7a:86:63:67:e4:
                    76:84:6b:41:7e:fd:ec:35:f8:69:36:31:d4:d9:a5:
                    90:f4:09:91:85:b2:0b:63:36:04:a0:d4:65:ba:bb:
                    fa:15:8d:4c:e9:c0:4e:93:17:53:a2:78:8d:1a:df:
                    93:3c:be:20:f7:15:08:e1:b2:5f:b6:67:91:66:9e:
                    15:7d:8c:a9:28:26:08:26:6b:a3:57:1a:1a:59:38:
                    c1:bd:62:21:a4:ca:54:e4:23:25:fd:5b:6e:42:72:
                    41:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:AC:0B:D3:2D:5B:E3:54:88:D0:F0:23:9E:CF:CC:7A:9C:2B:76:46
            X509v3 Authority Key Identifier:
                keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:0d:2e:cb:64:e2:d7:f1:08:e0:3b:a1:05:ac:c1:d6:51:73:
         bc:41:f8:87:20:66:1a:fe:cd:59:a7:c4:a2:0c:c5:7a:4e:17:
         42:e6:7d:9d:a1:c0:1f:ee:fe:d4:84:39:a1:86:f3:a1:78:3a:
         da:e2:9b:2a:60:20:2a:41:1b:bb:15:a8:9b:ca:d7:e2:f5:0c:
         66:7f:0d:7b:e4:79:10:27:66:d9:94:53:47:dc:41:d1:b5:04:
         4c:6c:e2:07:9a:1b:67:10:b6:b9:43:98:08:50:b2:83:21:44:
         6a:be:b5:b5:60:22:18:de:1c:a4:6b:96:13:08:c8:3e:bd:3d:
         4d:ba:93:ca:cc:02:c4:42:da:ab:a1:32:87:ba:f9:87:26:e2:
         fd:c3:88:5d:1c:92:d2:03:a6:8c:1e:23:13:47:ea:a6:63:98:
         4d:ba:12:57:46:ec:72:df:0b:fc:0b:74:07:ad:44:15:39:90:
         4c:a1:53:9b:39:13:77:9e:7c:ed:ba:25:15:b5:4f:03:21:9f:
         cc:ca:05:3f:82:cc:d1:f5:5b:f3:b1:d7:15:cb:70:ec:5a:22:
         01:24:e3:44:2d:aa:2e:79:67:e2:e4:2d:f2:36:2e:3d:08:2e:
         52:16:4c:99:3e:41:19:24:65:4c:7e:31:82:0a:2a:01:f5:75:
         9e:8d:51:99
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUCyFRAy8EnhqJVFmNZJssYrEO5HIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNmU3NzBiNzE0ZjY2ZjBmMmQ0NDY0MDI5ZGZjZDg2NWJi
N2VlNzZjZDAeFw0yNjAyMDIwNDE4NTBaFw0yNjAyMDMwNjAyNTBaMDMxMTAvBgNV
BAMTKDIzQUMwQkQzMkQ1QkUzNTQ4OEQwRjAyMzlFQ0ZDQzdBOUMyQjc2NDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxqfWUJSaFZ9AQ70R60hOwPVbI
J06H8ja2vRyvwbF1Wh5wYz7wJ4v+PbhVEo0E/fi9aPSP27FZ99N0J/U3agRhGrIE
UkkSH0Bfv8P+QZIpJ1bDnt92IHUy8CRsjQr9Qth4i3GZv5a5+XZYU45D73OGqzAF
0ccZq2UjAeWI4f7RBWqUFM1abyn4udBAqDGVYKJmtQ5vzBGTIGRIyioWuWN6hmNn
5HaEa0F+/ew1+Gk2MdTZpZD0CZGFsgtjNgSg1GW6u/oVjUzpwE6TF1OieI0a35M8
viD3FQjhsl+2Z5FmnhV9jKkoJggma6NXGhpZOMG9YiGkylTkIyX9W25CckHbAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUI6wL0y1b41SI0PAjns/MepwrdkYwHwYDVR0j
BBgwFoAUbncLcU9m8PLURkAp382GW7fuds0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjhjZDYyMjQtYTNiMC00NjhlLWFhMzctODJjYTZhM2U5
MjQzLzAvNkU3NzBCNzE0RjY2RjBGMkQ0NDY0MDI5REZDRDg2NUJCN0VFNzZDRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JuY0xjVTltOFBMVVJrQXAzODJHVzdm
dWRzMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yOGNkNjIyNC1h
M2IwLTQ2OGUtYWEzNy04MmNhNmEzZTkyNDMvMC82RTc3MEI3MTRGNjZGMEYyRDQ0
NjQwMjlERkNEODY1QkI3RUU3NkNELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASw0uy2Ti1/EI4DuhBazB
1lFzvEH4hyBmGv7NWafEogzFek4XQuZ9naHAH+7+1IQ5oYbzoXg62uKbKmAgKkEb
uxWom8rX4vUMZn8Ne+R5ECdm2ZRTR9xB0bUETGziB5obZxC2uUOYCFCygyFEar61
tWAiGN4cpGuWEwjIPr09TbqTyswCxELaq6Eyh7r5hybi/cOIXRyS0gOmjB4jE0fq
pmOYTboSV0bsct8L/At0B61EFTmQTKFTmzkTd5587bolFbVPAyGfzMoFP4LM0fVb
87HXFctw7FoiASTjRC2qLnln4uQt8jYuPQguUhZMmT5BGSRlTH4xggoqAfV1no1R
mQ==
-----END CERTIFICATE-----
Generated at Mon Feb 2 09:09:06 2026 by rpki-client