This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File:                     6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier:          VlIj//YKNB2aLDEPfGqJiaa2GiR2MME5qxaYq2LfdLw=
Subject key identifier:   3C:E0:CE:51:13:DC:22:8E:5F:B5:AD:4F:50:CC:4A:B6:ED:5A:A7:C4
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer:       /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial:       31173DF4094D2F6A1FE4FB8DA1993F24AF16B7E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number:          0358
Signing time:             Tue 20 Jan 2026 10:48:49 +0000
Manifest this update:     Tue 20 Jan 2026 10:43:49 +0000
Manifest next update:     Wed 21 Jan 2026 11:41:49 +0000
Files and hashes:         1: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: qb8Unq35jZ4eXhtxWiax2h/umVRImTrGmpaWJIPTpSI=)
                          2: AS216107.asa (hash: SZjGVwi1GjAkhFm3nT5ayCum6XandBtWxpLVDU2nJp8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Jan 2026 11:41:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:17:3d:f4:09:4d:2f:6a:1f:e4:fb:8d:a1:99:3f:24:af:16:b7:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
        Validity
            Not Before: Jan 20 10:43:49 2026 GMT
            Not After : Jan 21 11:41:49 2026 GMT
        Subject: CN=3CE0CE5113DC228E5FB5AD4F50CC4AB6ED5AA7C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d9:90:6c:c7:6d:f1:36:c7:16:65:ee:19:30:
                    35:e4:ee:18:94:6a:d5:78:e6:c7:d5:ea:a5:5e:0e:
                    e2:06:b8:f5:74:ab:2d:ad:bd:c6:f1:4e:64:9b:62:
                    40:7b:b2:54:67:cd:28:13:1f:cd:56:9b:ae:c7:9e:
                    bc:c5:ef:3b:d1:f4:1c:87:de:eb:ad:35:f6:1e:99:
                    e4:5d:df:d8:86:b8:a8:44:39:8c:b1:d3:8d:fc:14:
                    2e:ae:ce:3b:cd:5a:d6:16:68:77:00:75:c6:3d:e0:
                    5a:24:b6:29:4f:e1:0a:86:b3:49:e2:77:0d:59:2e:
                    20:a1:1d:cb:de:e3:92:bc:94:b6:64:7d:1f:bf:ad:
                    80:69:55:d8:1d:ce:95:8e:47:c1:cb:56:1a:45:da:
                    bf:66:32:60:a8:16:64:28:3b:ee:05:00:5c:a5:a7:
                    b9:71:68:ff:69:79:df:73:a7:e1:e5:fb:26:43:38:
                    25:b2:6a:79:cd:e6:ea:9d:b0:f3:1f:86:c4:5d:01:
                    34:8a:ea:bd:57:7f:ed:0d:df:10:10:2c:d5:69:b1:
                    ea:ec:13:e5:54:01:6d:75:da:c1:d0:91:d6:f8:b5:
                    20:b4:4f:f5:f3:8c:b3:35:3a:0b:22:98:ee:dc:17:
                    64:32:0e:4e:39:e4:36:c5:26:b4:bd:22:85:50:f7:
                    ba:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:E0:CE:51:13:DC:22:8E:5F:B5:AD:4F:50:CC:4A:B6:ED:5A:A7:C4
            X509v3 Authority Key Identifier:
                keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:f0:c8:f0:49:86:8b:31:72:e1:a0:73:b8:83:3b:7c:70:3c:
         b4:c6:2a:1d:ab:91:77:18:79:7e:91:fe:f5:82:fd:2f:9f:0a:
         51:44:c1:38:1a:ab:1f:d8:60:1a:d9:bd:f9:9c:36:17:36:fb:
         28:71:a3:15:96:6d:ba:6a:1a:e4:33:18:ed:52:15:3b:54:f9:
         6e:cc:6c:1b:94:fb:54:6c:af:e8:80:52:58:6a:29:b3:a6:fa:
         c7:ad:7e:8b:ee:1a:d3:e7:3e:38:8c:0c:6b:21:ad:be:9c:16:
         e3:24:56:ed:4a:22:8d:9f:8a:4d:a3:5a:c6:1e:cc:ad:30:64:
         2a:98:eb:88:8e:8c:20:4e:14:e4:cb:9f:d2:a1:1c:61:0c:dc:
         d2:6f:d2:b1:49:39:a8:1e:0c:9c:2c:09:24:51:a3:a9:9c:bd:
         d1:98:9a:05:d6:95:79:f1:50:d2:48:5f:e8:6e:77:7e:5c:ab:
         75:8a:f2:c8:0f:97:f9:e9:3b:e0:ad:fb:a8:55:8c:97:33:4d:
         c6:95:93:ba:59:75:fc:e3:0a:ce:a5:a6:fa:77:db:f6:29:d9:
         61:a1:a1:35:e4:6a:dd:2d:e7:25:1c:5c:15:e3:1d:d0:0f:91:
         51:3b:4d:eb:ed:6c:56:cc:7b:a7:65:3a:99:54:5d:60:9f:c9:
         e4:56:34:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 23:03:45 2026 by rpki-client