This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File:                     6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier:          ZNzQsBD0eHYf9YI1XNwtvFiD5Kel9EmYU5X2oW9bx4M=
Subject key identifier:   33:45:3B:5C:73:E0:D2:99:1B:75:CF:49:70:EB:CF:E1:C5:3F:03:C8
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer:       /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial:       4B0C9EFE0BDA170CD54DE878E93A03BEBD02713F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number:          0349
Signing time:             Fri 09 Jan 2026 06:43:38 +0000
Manifest this update:     Fri 09 Jan 2026 06:38:38 +0000
Manifest next update:     Sat 10 Jan 2026 08:41:38 +0000
Files and hashes:         1: AS216107.asa (hash: SZjGVwi1GjAkhFm3nT5ayCum6XandBtWxpLVDU2nJp8=)
                          2: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: wiuy8Dyv2U0XyePYY6+Jcg4r8JtfSVoz8V+013nizic=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Jan 2026 08:41:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:0c:9e:fe:0b:da:17:0c:d5:4d:e8:78:e9:3a:03:be:bd:02:71:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
        Validity
            Not Before: Jan  9 06:38:38 2026 GMT
            Not After : Jan 10 08:41:38 2026 GMT
        Subject: CN=33453B5C73E0D2991B75CF4970EBCFE1C53F03C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9a:2e:9f:d1:67:da:62:13:8b:6b:b1:fc:e0:
                    38:67:ae:e0:6f:6a:bd:3f:10:5a:1e:2c:4a:b6:d1:
                    cc:ed:3f:b6:f9:00:81:d3:c6:e1:b6:0d:e4:96:a6:
                    f1:de:d6:a8:43:92:58:4c:ca:ee:a0:09:89:16:fd:
                    29:26:07:34:40:4d:2d:50:ed:ce:f1:08:2e:9b:19:
                    af:77:bf:d7:1e:50:54:82:d2:d8:ad:01:e8:8f:5f:
                    31:41:60:6e:a7:59:f4:71:19:44:b8:05:8d:8e:04:
                    b8:d8:82:82:06:46:31:79:0e:f5:01:d9:56:4c:52:
                    bf:cb:89:3f:56:c1:fe:6c:55:fc:26:0b:45:3f:5d:
                    1c:ee:e5:3a:82:cb:9c:fb:1b:ee:cc:17:10:22:72:
                    fb:93:fa:b7:87:74:ed:e2:5d:cf:3f:db:b8:52:a2:
                    e2:9a:1c:05:a5:99:0e:dd:5b:0f:a6:ee:57:b1:f9:
                    76:00:65:19:a8:f8:1b:b9:cf:50:4a:a1:b0:05:fd:
                    13:ba:e5:b3:15:7c:a1:3e:c0:b5:48:09:15:ac:bd:
                    32:d0:1c:ae:e3:ba:d8:4c:e9:18:c1:28:dc:7a:87:
                    41:bb:f4:23:b3:c4:1b:43:60:7b:80:80:8a:f3:c0:
                    e2:f1:32:aa:a0:c7:24:a9:00:87:ff:f6:6f:34:fb:
                    75:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:45:3B:5C:73:E0:D2:99:1B:75:CF:49:70:EB:CF:E1:C5:3F:03:C8
            X509v3 Authority Key Identifier:
                keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:c8:d1:37:e4:6e:c6:a5:d0:ae:63:c8:4e:ae:3e:b6:ad:de:
         1c:cc:e7:ed:fb:e2:06:d3:31:02:ce:1f:0f:a7:a7:ca:89:81:
         8b:77:96:c9:39:28:be:3c:9f:40:d4:c3:3b:08:dc:9b:4c:46:
         b7:8c:40:e6:ee:18:00:8b:73:5c:95:20:e5:25:db:63:56:6a:
         42:23:63:c6:2f:5d:e4:08:3f:4c:3e:71:e4:16:64:00:e1:ca:
         4b:e9:d1:5e:29:99:1f:5f:89:39:af:4c:e8:3a:23:c5:0e:e0:
         e6:f7:d7:da:a7:9b:15:d5:dd:8e:40:ce:14:15:00:a4:f3:40:
         b6:80:04:7a:37:eb:13:62:37:cb:b4:d8:85:1d:a9:2c:30:69:
         66:89:58:2f:5e:94:f5:98:44:3a:7f:50:3c:bc:80:5d:06:e7:
         fa:7e:74:cf:0c:6c:5b:9d:7e:aa:d6:82:92:02:0e:e5:3d:ce:
         9f:4b:66:49:47:a8:b7:69:ef:7d:89:c4:19:ca:06:6f:76:10:
         34:69:29:80:53:e9:ea:7d:df:21:e8:ac:6c:74:ff:93:56:20:
         0f:4c:f9:d5:4d:29:36:0c:5a:25:77:7a:dd:95:51:0a:74:ac:
         79:79:2e:b6:b6:e1:6e:21:78:87:56:8a:a8:1f:c7:00:f4:5e:
         8a:b1:a6:da
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUSwye/gvaFwzVTeh46ToDvr0CcT8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNmU3NzBiNzE0ZjY2ZjBmMmQ0NDY0MDI5ZGZjZDg2NWJi
N2VlNzZjZDAeFw0yNjAxMDkwNjM4MzhaFw0yNjAxMTAwODQxMzhaMDMxMTAvBgNV
BAMTKDMzNDUzQjVDNzNFMEQyOTkxQjc1Q0Y0OTcwRUJDRkUxQzUzRjAzQzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQmi6f0WfaYhOLa7H84DhnruBv
ar0/EFoeLEq20cztP7b5AIHTxuG2DeSWpvHe1qhDklhMyu6gCYkW/SkmBzRATS1Q
7c7xCC6bGa93v9ceUFSC0titAeiPXzFBYG6nWfRxGUS4BY2OBLjYgoIGRjF5DvUB
2VZMUr/LiT9Wwf5sVfwmC0U/XRzu5TqCy5z7G+7MFxAicvuT+reHdO3iXc8/27hS
ouKaHAWlmQ7dWw+m7lex+XYAZRmo+Bu5z1BKobAF/RO65bMVfKE+wLVICRWsvTLQ
HK7juthM6RjBKNx6h0G79COzxBtDYHuAgIrzwOLxMqqgxySpAIf/9m80+3URAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUM0U7XHPg0pkbdc9JcOvP4cU/A8gwHwYDVR0j
BBgwFoAUbncLcU9m8PLURkAp382GW7fuds0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjhjZDYyMjQtYTNiMC00NjhlLWFhMzctODJjYTZhM2U5
MjQzLzAvNkU3NzBCNzE0RjY2RjBGMkQ0NDY0MDI5REZDRDg2NUJCN0VFNzZDRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JuY0xjVTltOFBMVVJrQXAzODJHVzdm
dWRzMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yOGNkNjIyNC1h
M2IwLTQ2OGUtYWEzNy04MmNhNmEzZTkyNDMvMC82RTc3MEI3MTRGNjZGMEYyRDQ0
NjQwMjlERkNEODY1QkI3RUU3NkNELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL8jRN+RuxqXQrmPITq4+
tq3eHMzn7fviBtMxAs4fD6enyomBi3eWyTkovjyfQNTDOwjcm0xGt4xA5u4YAItz
XJUg5SXbY1ZqQiNjxi9d5Ag/TD5x5BZkAOHKS+nRXimZH1+JOa9M6DojxQ7g5vfX
2qebFdXdjkDOFBUApPNAtoAEejfrE2I3y7TYhR2pLDBpZolYL16U9ZhEOn9QPLyA
XQbn+n50zwxsW51+qtaCkgIO5T3On0tmSUeot2nvfYnEGcoGb3YQNGkpgFPp6n3f
IeisbHT/k1YgD0z51U0pNgxaJXd63ZVRCnSseXkutrbhbiF4h1aKqB/HAPReirGm
2g==
-----END CERTIFICATE-----
Generated at Fri Jan 9 14:28:52 2026 by rpki-client