This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.mft
File:                     735D93706CBF4688CE7D60FC0ED693D4CC4A9326.mft (raw, json)
Hash identifier:          8OkNAHlFIRHq8tGV3uRr01GbO3r4CIzclNf9nHtae+E=
Subject key identifier:   29:EB:7D:37:C8:AF:8F:31:61:89:A0:47:44:4C:C8:FC:7B:3E:80:84
Authority key identifier: 73:5D:93:70:6C:BF:46:88:CE:7D:60:FC:0E:D6:93:D4:CC:4A:93:26
Certificate issuer:       /CN=735d93706cbf4688ce7d60fc0ed693d4cc4a9326
Certificate serial:       7669E907B09AAE5A7B9859D8D05F55625B5C3CF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.mft
Manifest number:          04D7
Signing time:             Sat 17 Jan 2026 16:08:26 +0000
Manifest this update:     Sat 17 Jan 2026 16:03:26 +0000
Manifest next update:     Sun 18 Jan 2026 19:57:26 +0000
Files and hashes:         1: AS48961.roa (hash: 3cIbAXwf9Yl1EVegsCq9QH9D9FfXgLy3FkzfZ43rjN4=)
                          2: 735D93706CBF4688CE7D60FC0ED693D4CC4A9326.crl (hash: WFo3UxhSuJAnDpkxBM2mBcaDfG0ukInjV7iourGoO3k=)
                          3: AS7029.roa (hash: 8PLTntWjTUT/j3wb4jf3whlNbIemwNkkni4M1Q4/mDw=)
                          4: AS6079.roa (hash: cwt2kgma2qYi3LhLoT0eQ8hzydzk6ECH01Cp7+lYh5Q=)
                          5: AS42689.roa (hash: OGi0fOBGeOOs5mHqzbV17lZisG6Hn/1OzlvinOYWVW8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Jan 2026 19:57:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:69:e9:07:b0:9a:ae:5a:7b:98:59:d8:d0:5f:55:62:5b:5c:3c:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=735d93706cbf4688ce7d60fc0ed693d4cc4a9326
        Validity
            Not Before: Jan 17 16:03:26 2026 GMT
            Not After : Jan 18 19:57:26 2026 GMT
        Subject: CN=29EB7D37C8AF8F316189A047444CC8FC7B3E8084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f3:c5:41:97:4d:39:90:72:25:60:dd:85:a8:
                    24:40:b8:c5:7d:cc:46:53:db:8a:a3:ea:02:1e:18:
                    08:b6:68:40:5b:a5:12:4a:49:de:a9:91:bb:ff:e9:
                    96:bb:44:c6:31:07:ba:fd:69:dd:f2:3e:46:e5:a3:
                    31:12:a9:9f:b7:57:5b:c7:01:dc:ac:1e:6c:0e:f3:
                    ab:56:1e:f1:80:b3:39:3b:ff:cf:b3:10:6b:d5:21:
                    f7:06:73:79:f1:72:54:d3:fb:7f:c6:60:d4:df:06:
                    59:d8:d1:e7:27:9a:21:09:4f:f8:ad:ca:3f:30:67:
                    1a:3b:40:70:a9:fd:8e:02:be:fe:36:77:27:d9:8e:
                    df:27:fa:11:28:16:86:68:ba:da:c4:37:d2:59:3b:
                    c5:ff:47:ac:3d:10:ef:04:34:d8:a4:5a:34:aa:01:
                    6a:c8:0d:7b:69:3e:4e:79:e7:39:6f:b2:dd:33:a2:
                    b5:bf:a0:87:f2:be:2f:1d:ee:69:99:b1:6e:29:90:
                    15:bf:69:76:59:31:d8:b5:76:ad:17:41:d1:ec:6b:
                    35:46:a7:60:55:32:db:bf:dc:90:92:33:d2:62:fc:
                    dc:5c:34:cb:9d:74:fa:8d:ba:4b:d6:3f:a8:ea:e5:
                    5c:c9:05:1a:35:7d:7a:4b:09:0c:54:a2:fd:80:72:
                    dd:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:EB:7D:37:C8:AF:8F:31:61:89:A0:47:44:4C:C8:FC:7B:3E:80:84
            X509v3 Authority Key Identifier:
                keyid:73:5D:93:70:6C:BF:46:88:CE:7D:60:FC:0E:D6:93:D4:CC:4A:93:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:2c:dc:25:66:82:d2:c9:1e:72:db:18:2b:54:43:45:20:bd:
         ee:64:20:53:5c:c7:19:42:89:ec:ba:4d:01:42:12:87:eb:01:
         0b:03:6d:ba:db:d8:80:41:db:05:be:6e:ba:07:d6:40:c6:40:
         a8:82:64:51:ab:7e:b6:a6:6f:f8:f9:24:c1:3e:be:32:71:79:
         b7:0b:85:57:65:f1:8a:d9:a9:9b:f9:7c:b4:c0:6f:b5:62:68:
         8d:05:8e:ab:53:d7:57:71:c7:fd:b2:15:a8:57:61:58:e8:20:
         15:33:ea:c7:2a:55:90:be:7a:9d:0d:40:49:b5:2a:b7:e6:af:
         7d:69:49:83:0c:cc:8e:bf:8e:90:c4:29:f0:64:19:f4:8d:40:
         6a:d1:d5:b4:87:c5:cc:ea:04:1b:19:77:7c:86:0b:6e:15:53:
         04:96:ff:6e:89:1a:d8:c7:fb:50:ba:b2:e9:47:03:62:e1:2a:
         c7:2b:e5:01:22:9f:e2:f7:86:ed:93:c0:d2:4b:d7:76:18:0a:
         3c:51:62:11:de:9a:60:a1:e0:bd:65:7c:89:2d:86:f9:48:80:
         04:cf:98:e1:ed:47:74:66:00:55:7b:25:d9:e9:ba:a1:f3:d1:
         b7:4a:fa:b0:2a:b7:88:d3:27:0b:a8:35:5d:87:d3:f0:66:6a:
         b8:61:56:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 09:53:26 2026 by rpki-client