This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File:                     6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier:          FRLsbcrc2dBii8Y/DvYHR+oCe5KxD3W546kKUkhuy4k=
Subject key identifier:   2A:97:FC:23:CD:2C:FB:A5:88:60:09:50:18:40:F3:BB:7B:87:FC:60
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer:       /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial:       0F7CDFEC7949654E91839C1336BE1D5B4E082FC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number:          0371
Signing time:             Sun 08 Feb 2026 05:48:51 +0000
Manifest this update:     Sun 08 Feb 2026 05:43:51 +0000
Manifest next update:     Mon 09 Feb 2026 05:51:51 +0000
Files and hashes:         1: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: gTXCrDRQR5u6URivkqcZrI3ajtjWzlzfscPkw+GTitQ=)
                          2: AS216107.asa (hash: SZjGVwi1GjAkhFm3nT5ayCum6XandBtWxpLVDU2nJp8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Feb 2026 05:51:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:7c:df:ec:79:49:65:4e:91:83:9c:13:36:be:1d:5b:4e:08:2f:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
        Validity
            Not Before: Feb  8 05:43:51 2026 GMT
            Not After : Feb  9 05:51:51 2026 GMT
        Subject: CN=2A97FC23CD2CFBA5886009501840F3BB7B87FC60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bd:dc:7e:cc:ae:6e:3b:71:3c:9d:4c:a9:aa:
                    f7:a8:4d:46:c7:a5:1b:fe:1c:f1:de:3e:10:1a:89:
                    55:7c:b6:b0:e7:da:e9:e6:e4:10:da:c6:bd:03:61:
                    07:5b:f6:26:3a:3c:71:90:2c:62:5b:ed:51:05:c7:
                    e8:44:83:d2:d7:e4:29:ee:b0:ec:db:36:2e:7e:8d:
                    c2:47:01:fe:c9:a0:5f:ce:05:50:45:11:01:b0:dc:
                    b0:36:ac:45:a2:bc:b1:d0:e6:e2:4d:eb:40:06:eb:
                    ca:b3:5e:43:f0:3b:84:0d:bd:f4:22:fb:22:fc:01:
                    41:f2:6d:80:58:ca:e8:3f:1f:db:fc:51:df:ab:1b:
                    67:67:71:51:6c:ba:ea:2f:e0:b2:43:8b:85:35:40:
                    ef:e7:c9:91:48:78:f7:ae:d6:3a:72:45:0b:25:d0:
                    5e:f2:9c:4e:03:09:86:2b:71:82:50:d2:c2:dd:a8:
                    35:a9:8b:6c:b9:c7:85:e9:69:ad:cc:69:3d:90:38:
                    57:91:ef:5e:6d:e1:17:dc:ea:55:45:a8:2b:7b:03:
                    09:1f:c5:27:8c:69:65:52:69:8a:e6:b4:02:9c:90:
                    16:46:bc:95:be:53:0f:77:b6:8a:9f:60:46:84:a3:
                    4e:bc:e8:84:ae:19:04:60:5b:6b:c4:c0:94:84:e4:
                    ca:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:97:FC:23:CD:2C:FB:A5:88:60:09:50:18:40:F3:BB:7B:87:FC:60
            X509v3 Authority Key Identifier:
                keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:16:08:0f:18:c6:e7:0f:64:0e:3f:00:30:7a:8d:0e:fc:9b:
         24:63:de:8c:7e:3b:b3:57:fa:63:4f:0e:37:48:7f:5e:e5:a7:
         0c:86:ee:17:28:46:42:4f:14:11:cf:ec:37:b1:eb:59:5e:c5:
         51:9c:e5:5b:c9:df:63:1e:52:36:ae:d1:69:b8:f6:b2:fc:7c:
         42:ad:28:87:ed:df:87:69:50:86:5f:55:da:b9:ef:95:dd:0a:
         ce:b7:00:ca:a0:58:57:c7:13:43:12:a3:1b:91:78:67:18:fe:
         b6:4c:4c:b3:e1:ec:bb:02:6a:e8:28:8a:34:2c:35:21:cb:c0:
         9c:b6:4a:fd:fa:1d:e2:06:96:83:e8:23:47:66:1f:bf:bc:a1:
         03:e1:88:3f:41:76:79:05:17:56:e3:ed:ef:9f:3c:04:cd:96:
         e7:9c:d0:67:95:d8:26:19:3b:ba:8e:fc:a5:f0:86:07:ad:66:
         6c:01:58:e5:0c:bc:24:8f:55:e7:4c:db:66:88:b9:9b:05:61:
         ce:da:6a:b9:8e:3e:ab:01:28:83:00:0a:50:94:a4:39:1b:ec:
         9d:39:bc:85:45:2a:51:fb:d3:14:f9:ac:3e:27:da:2f:01:e8:
         02:a3:dd:cc:c6:db:67:50:2a:9a:bf:b6:bb:bd:c4:e0:d7:ad:
         59:ab:54:0f
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUD3zf7HlJZU6Rg5wTNr4dW04IL8QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNmU3NzBiNzE0ZjY2ZjBmMmQ0NDY0MDI5ZGZjZDg2NWJi
N2VlNzZjZDAeFw0yNjAyMDgwNTQzNTFaFw0yNjAyMDkwNTUxNTFaMDMxMTAvBgNV
BAMTKDJBOTdGQzIzQ0QyQ0ZCQTU4ODYwMDk1MDE4NDBGM0JCN0I4N0ZDNjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9vdx+zK5uO3E8nUypqveoTUbH
pRv+HPHePhAaiVV8trDn2unm5BDaxr0DYQdb9iY6PHGQLGJb7VEFx+hEg9LX5Cnu
sOzbNi5+jcJHAf7JoF/OBVBFEQGw3LA2rEWivLHQ5uJN60AG68qzXkPwO4QNvfQi
+yL8AUHybYBYyug/H9v8Ud+rG2dncVFsuuov4LJDi4U1QO/nyZFIePeu1jpyRQsl
0F7ynE4DCYYrcYJQ0sLdqDWpi2y5x4Xpaa3MaT2QOFeR715t4Rfc6lVFqCt7Awkf
xSeMaWVSaYrmtAKckBZGvJW+Uw93toqfYEaEo0686ISuGQRgW2vEwJSE5Mq/AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUKpf8I80s+6WIYAlQGEDzu3uH/GAwHwYDVR0j
BBgwFoAUbncLcU9m8PLURkAp382GW7fuds0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjhjZDYyMjQtYTNiMC00NjhlLWFhMzctODJjYTZhM2U5
MjQzLzAvNkU3NzBCNzE0RjY2RjBGMkQ0NDY0MDI5REZDRDg2NUJCN0VFNzZDRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JuY0xjVTltOFBMVVJrQXAzODJHVzdm
dWRzMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yOGNkNjIyNC1h
M2IwLTQ2OGUtYWEzNy04MmNhNmEzZTkyNDMvMC82RTc3MEI3MTRGNjZGMEYyRDQ0
NjQwMjlERkNEODY1QkI3RUU3NkNELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlBYIDxjG5w9kDj8AMHqN
DvybJGPejH47s1f6Y08ON0h/XuWnDIbuFyhGQk8UEc/sN7HrWV7FUZzlW8nfYx5S
Nq7Rabj2svx8Qq0oh+3fh2lQhl9V2rnvld0KzrcAyqBYV8cTQxKjG5F4Zxj+tkxM
s+HsuwJq6CiKNCw1IcvAnLZK/fod4gaWg+gjR2Yfv7yhA+GIP0F2eQUXVuPt7588
BM2W55zQZ5XYJhk7uo78pfCGB61mbAFY5Qy8JI9V50zbZoi5mwVhztpquY4+qwEo
gwAKUJSkORvsnTm8hUUqUfvTFPmsPifaLwHoAqPdzMbbZ1Aqmr+2u73E4NetWatU
Dw==
-----END CERTIFICATE-----
Generated at Sun Feb 8 17:29:03 2026 by rpki-client