This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
File:                     DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft (raw, json)
Hash identifier:          A2hXgUldkuY0bZAN0UQoXuQ7P24O2Fofvq49b1SbmlY=
Subject key identifier:   7B:8E:9E:DB:CE:45:1C:F4:9B:5F:B7:32:A0:8C:B1:8F:DF:DE:2A:B0
Authority key identifier: DA:B7:E2:0B:EA:5C:CB:84:F8:26:C6:4D:A1:75:7D:1D:F5:B6:FF:62
Certificate issuer:       /CN=dab7e20bea5ccb84f826c64da1757d1df5b6ff62
Certificate serial:       222A355B16B6B5B020034D2487BF282168849350
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
Manifest number:          02D4
Signing time:             Mon 09 Feb 2026 19:24:43 +0000
Manifest this update:     Mon 09 Feb 2026 19:19:43 +0000
Manifest next update:     Tue 10 Feb 2026 22:26:43 +0000
Files and hashes:         1: AS215085.asa (hash: 5dFoAEB7HJFuEx1H1zqtHsVw/vCbtLiCdGIs1mPf9Xs=)
                          2: DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl (hash: 4QNx/4Acsd7nkwadlki9Aow+3JmYhtgAtNuB3h5Hs+A=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 21:05:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:2a:35:5b:16:b6:b5:b0:20:03:4d:24:87:bf:28:21:68:84:93:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dab7e20bea5ccb84f826c64da1757d1df5b6ff62
        Validity
            Not Before: Feb  9 19:19:43 2026 GMT
            Not After : Feb 10 22:26:43 2026 GMT
        Subject: CN=7B8E9EDBCE451CF49B5FB732A08CB18FDFDE2AB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:81:2a:45:29:0b:7f:fc:4d:b3:81:94:15:75:
                    85:95:1b:4a:96:40:4c:e8:2f:f2:ac:29:aa:20:66:
                    83:05:26:51:59:53:4f:75:c7:1a:ca:99:e7:00:dd:
                    7e:cd:ba:42:d6:dd:e5:6f:bd:65:28:20:41:1a:81:
                    a7:ff:54:71:27:42:3c:45:27:1a:0f:35:e0:49:82:
                    fc:45:1d:6a:79:f7:0c:79:48:f2:62:e7:ac:4e:2b:
                    1e:3d:08:66:76:da:3f:e0:1c:28:6e:45:a8:9d:64:
                    47:a0:4c:14:25:35:7d:18:02:2a:b1:8c:49:84:47:
                    06:e3:d9:f6:d9:53:8d:b1:90:a5:0a:d0:11:88:db:
                    60:d5:fb:71:32:0e:51:79:11:90:1a:11:2e:4d:f4:
                    5d:f4:8a:20:ed:67:c2:6b:6a:dc:ae:e5:83:a1:69:
                    c4:41:3b:e4:04:95:65:ff:72:ed:ab:11:17:4f:f5:
                    67:a9:e9:b5:bd:2a:69:f1:91:e7:15:b6:84:77:3b:
                    71:9b:24:75:bf:73:15:6e:02:74:9d:4f:71:9d:c3:
                    4a:9a:35:d1:c8:01:cc:f9:be:ea:ab:2f:9e:c9:d8:
                    a0:21:27:16:47:e1:f5:7f:06:35:ad:9b:60:f5:4d:
                    d8:fc:5b:af:69:d7:79:06:2d:a2:f7:8d:fb:88:45:
                    c0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:8E:9E:DB:CE:45:1C:F4:9B:5F:B7:32:A0:8C:B1:8F:DF:DE:2A:B0
            X509v3 Authority Key Identifier:
                keyid:DA:B7:E2:0B:EA:5C:CB:84:F8:26:C6:4D:A1:75:7D:1D:F5:B6:FF:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:81:8c:e9:ee:41:22:86:04:2e:ab:a3:80:3a:21:4a:5c:ce:
         3b:44:1f:4f:c0:9b:1a:3d:5c:e3:ff:d6:59:dd:b4:56:f4:56:
         58:7c:1e:fd:b2:a9:90:db:d0:3a:b6:6d:8e:f2:3f:6a:16:19:
         cf:86:a0:92:92:02:6c:f4:35:91:4a:3e:7c:dd:81:4f:82:ee:
         a7:45:ab:34:e9:0d:15:56:77:72:8b:22:bf:a4:7b:49:ed:4b:
         25:18:d0:4d:0e:40:6b:8f:a0:65:cb:e0:0a:2a:66:a3:4f:a6:
         31:ed:98:bb:37:10:d6:4e:9a:aa:6e:1b:42:66:e0:3d:e7:77:
         8b:1e:7b:5d:ba:70:cb:9e:e6:c8:02:df:05:2d:ae:b2:f4:ad:
         c6:8d:87:dc:cb:70:b3:66:6c:41:b6:75:fd:ae:a1:e5:0e:ab:
         9c:bb:bd:d8:ea:1a:09:08:a3:11:57:e5:ca:92:14:d5:db:ae:
         ce:3b:63:ad:0a:51:97:34:fc:01:27:6d:0e:41:a1:7d:85:63:
         22:da:0a:f4:b4:74:44:7e:17:70:d2:47:8e:a9:1a:61:3d:94:
         43:76:28:59:b0:09:77:a4:ae:5d:28:ed:b7:65:c6:fd:5c:47:
         34:b8:37:09:e9:19:fd:2c:f8:37:96:25:08:af:4f:14:c1:e8:
         bc:21:d8:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:42:21 2026 by rpki-client