This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File:                     6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier:          e7JBY8CUaT+M3fUnvpX8kYSzKRDALHmTs57quajZdTg=
Subject key identifier:   74:18:99:E3:19:D0:04:B2:C9:E3:20:51:F1:27:1F:74:22:E3:06:64
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer:       /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial:       7D635EA7A0A13E0B6AF94C67C0D8C52C421E2B00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number:          0354
Signing time:             Sat 17 Jan 2026 13:48:40 +0000
Manifest this update:     Sat 17 Jan 2026 13:43:40 +0000
Manifest next update:     Sun 18 Jan 2026 14:20:40 +0000
Files and hashes:         1: AS216107.asa (hash: SZjGVwi1GjAkhFm3nT5ayCum6XandBtWxpLVDU2nJp8=)
                          2: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: yCvLf9h25Xm8IVTLhW7r7baRx4M01EoyVHSZgkKslig=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Jan 2026 12:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:63:5e:a7:a0:a1:3e:0b:6a:f9:4c:67:c0:d8:c5:2c:42:1e:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
        Validity
            Not Before: Jan 17 13:43:40 2026 GMT
            Not After : Jan 18 14:20:40 2026 GMT
        Subject: CN=741899E319D004B2C9E32051F1271F7422E30664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:50:b8:bc:96:5e:0a:90:13:15:87:93:e4:c7:
                    97:fd:45:f4:e8:a3:0c:76:9e:e2:54:38:5f:f4:18:
                    16:d1:f6:46:64:82:46:a7:c0:6c:e7:02:ff:54:0b:
                    8b:06:aa:5b:16:ed:52:78:79:46:3a:a4:35:cc:8b:
                    7f:70:b7:f9:0f:70:20:bd:b1:17:55:7f:dd:15:2c:
                    64:83:fe:6d:ff:72:49:10:62:13:a7:c4:b9:36:a0:
                    99:cc:81:61:ea:66:19:fd:55:b5:b1:03:7d:20:ba:
                    ab:4b:88:aa:78:89:8f:6c:83:be:f8:1e:c4:ff:ad:
                    01:67:83:4f:2b:49:46:70:22:27:9d:bb:7e:e9:f0:
                    51:39:40:44:35:f6:8f:af:42:1f:31:6a:14:0b:be:
                    ac:8c:7d:04:82:16:20:86:db:9f:cf:ba:24:cd:a6:
                    43:f3:08:ef:82:96:ab:58:7f:0c:87:19:4b:6b:00:
                    e1:b9:ce:16:fa:ac:f2:67:48:be:39:66:10:63:e8:
                    f7:65:38:34:ad:0b:2c:8d:68:5b:35:5c:4e:3b:9f:
                    bf:36:ca:9d:65:55:34:20:39:cd:9a:44:75:d1:88:
                    8b:86:0c:be:1e:60:ea:8b:aa:47:b8:65:6e:f1:a7:
                    cf:5a:76:c5:64:ac:69:03:a7:7d:b9:a7:ab:88:93:
                    9e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:18:99:E3:19:D0:04:B2:C9:E3:20:51:F1:27:1F:74:22:E3:06:64
            X509v3 Authority Key Identifier:
                keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:9e:73:b4:a4:64:19:70:89:d7:31:5c:3f:b9:36:47:63:90:
         cb:31:39:2c:ca:da:13:b2:53:db:82:f9:f3:c9:ad:16:8a:7f:
         ad:bc:52:2e:60:aa:cf:73:eb:b0:a8:a4:5b:25:c8:e6:fe:95:
         de:59:56:f0:4a:1f:f2:02:f2:3f:12:dc:cf:86:00:a5:be:80:
         b6:b0:02:b0:21:98:6e:96:c7:de:f1:56:6e:06:5a:8e:94:e1:
         71:54:4e:54:17:07:3c:2b:1b:26:f2:26:f3:3b:c1:7f:d9:8f:
         94:5a:70:b8:c8:41:31:af:a2:4d:2c:e8:f4:15:b5:22:34:85:
         ff:14:8d:e7:7e:fb:ea:04:8f:10:9d:c8:2e:d6:13:3c:b4:79:
         8c:42:67:1c:9c:ed:1f:ad:ca:f4:3c:a8:2e:bd:34:08:e8:2f:
         af:0b:96:a5:6b:6e:b2:91:0b:bb:e3:3a:6e:2b:52:15:cd:9a:
         5c:04:80:a7:92:03:12:b0:2e:f3:80:20:0a:7f:0d:a9:dc:01:
         21:16:a0:cb:f9:9e:0f:5f:60:d5:d6:d6:74:a7:91:34:20:67:
         41:19:ea:9f:2e:e3:75:08:5d:f9:f1:cd:d2:41:2b:34:2e:52:
         07:29:ee:b7:89:51:b3:bc:82:73:c3:db:b2:a6:05:61:51:97:
         74:90:f1:56
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUfWNep6ChPgtq+UxnwNjFLEIeKwAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNmU3NzBiNzE0ZjY2ZjBmMmQ0NDY0MDI5ZGZjZDg2NWJi
N2VlNzZjZDAeFw0yNjAxMTcxMzQzNDBaFw0yNjAxMTgxNDIwNDBaMDMxMTAvBgNV
BAMTKDc0MTg5OUUzMTlEMDA0QjJDOUUzMjA1MUYxMjcxRjc0MjJFMzA2NjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNULi8ll4KkBMVh5Pkx5f9RfTo
owx2nuJUOF/0GBbR9kZkgkanwGznAv9UC4sGqlsW7VJ4eUY6pDXMi39wt/kPcCC9
sRdVf90VLGSD/m3/ckkQYhOnxLk2oJnMgWHqZhn9VbWxA30guqtLiKp4iY9sg774
HsT/rQFng08rSUZwIiedu37p8FE5QEQ19o+vQh8xahQLvqyMfQSCFiCG25/PuiTN
pkPzCO+ClqtYfwyHGUtrAOG5zhb6rPJnSL45ZhBj6PdlODStCyyNaFs1XE47n782
yp1lVTQgOc2aRHXRiIuGDL4eYOqLqke4ZW7xp89adsVkrGkDp325p6uIk57BAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUdBiZ4xnQBLLJ4yBR8ScfdCLjBmQwHwYDVR0j
BBgwFoAUbncLcU9m8PLURkAp382GW7fuds0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjhjZDYyMjQtYTNiMC00NjhlLWFhMzctODJjYTZhM2U5
MjQzLzAvNkU3NzBCNzE0RjY2RjBGMkQ0NDY0MDI5REZDRDg2NUJCN0VFNzZDRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JuY0xjVTltOFBMVVJrQXAzODJHVzdm
dWRzMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yOGNkNjIyNC1h
M2IwLTQ2OGUtYWEzNy04MmNhNmEzZTkyNDMvMC82RTc3MEI3MTRGNjZGMEYyRDQ0
NjQwMjlERkNEODY1QkI3RUU3NkNELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA55ztKRkGXCJ1zFcP7k2
R2OQyzE5LMraE7JT24L588mtFop/rbxSLmCqz3PrsKikWyXI5v6V3llW8Eof8gLy
PxLcz4YApb6AtrACsCGYbpbH3vFWbgZajpThcVROVBcHPCsbJvIm8zvBf9mPlFpw
uMhBMa+iTSzo9BW1IjSF/xSN53776gSPEJ3ILtYTPLR5jEJnHJztH63K9DyoLr00
COgvrwuWpWtuspELu+M6bitSFc2aXASAp5IDErAu84AgCn8NqdwBIRagy/meD19g
1dbWdKeRNCBnQRnqny7jdQhd+fHN0kErNC5SBynut4lRs7yCc8PbsqYFYVGXdJDx
Vg==
-----END CERTIFICATE-----
Generated at Sat Jan 17 19:01:21 2026 by rpki-client