This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.mft
File:                     317EDB3410058E086217C50FB97009DDE70A6F1A.mft (raw, json)
Hash identifier:          6Sw+hwXqscsH+FqO16LNnxXgZ0XlzbpFS3JLgJ44w7k=
Subject key identifier:   3E:C2:DF:D5:3E:4C:7D:01:53:E7:78:B2:69:76:26:42:AB:C7:7A:59
Authority key identifier: 31:7E:DB:34:10:05:8E:08:62:17:C5:0F:B9:70:09:DD:E7:0A:6F:1A
Certificate issuer:       /CN=317edb3410058e086217c50fb97009dde70a6f1a
Certificate serial:       756739CE7763909F0A7C3213A394CF216C187881
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MX7bNBAFjghiF8UPuXAJ3ecKbxo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.mft
Manifest number:          6F
Signing time:             Sun 01 Feb 2026 19:49:41 +0000
Manifest this update:     Sun 01 Feb 2026 19:44:41 +0000
Manifest next update:     Mon 02 Feb 2026 23:12:41 +0000
Files and hashes:         1: 317EDB3410058E086217C50FB97009DDE70A6F1A.crl (hash: XpQw9PV5Bb+vC7B3hfd1TBKsog/1Z/iIIPbzDmcnXkU=)
                          2: AS207682.asa (hash: yNMgsZTlVBgZuwAny+gfftheJcltZQ2eLBjscmcmhhI=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MX7bNBAFjghiF8UPuXAJ3ecKbxo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 23:12:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:67:39:ce:77:63:90:9f:0a:7c:32:13:a3:94:cf:21:6c:18:78:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=317edb3410058e086217c50fb97009dde70a6f1a
        Validity
            Not Before: Feb  1 19:44:41 2026 GMT
            Not After : Feb  2 23:12:41 2026 GMT
        Subject: CN=3EC2DFD53E4C7D0153E778B269762642ABC77A59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:60:b0:17:e5:5d:22:00:f6:25:75:a4:5b:c7:
                    ed:ca:14:0b:7b:7d:26:19:b5:e6:99:75:f0:d1:7b:
                    06:b3:c3:00:5a:89:f1:aa:a6:38:0f:8a:53:b4:f1:
                    89:6b:0f:64:bd:b6:b2:78:82:da:57:55:32:67:06:
                    79:f6:c1:dc:74:f9:9f:a1:58:24:25:6e:b8:01:3b:
                    53:c6:bd:30:9c:1f:f3:31:68:f0:a3:c6:37:55:db:
                    7a:58:69:d7:14:a8:dc:1c:54:dc:f8:8e:a4:ce:a6:
                    65:2d:28:22:af:88:7d:23:6c:3a:41:50:b7:f2:29:
                    0f:91:e4:85:20:51:8d:e8:a2:cd:3a:6a:6b:45:a5:
                    f0:d4:7c:37:f8:24:20:97:f9:71:4f:68:31:1c:80:
                    81:41:4e:47:be:d6:44:27:1b:fe:f2:42:6e:ce:9c:
                    77:9c:e9:a1:db:86:ff:26:3d:d6:48:53:d0:54:82:
                    d6:f3:cc:f3:d9:64:60:d2:de:1b:1a:6a:7e:f5:2f:
                    9e:60:aa:42:fd:69:87:12:9a:16:29:3e:6a:2f:67:
                    8d:fe:9e:2f:ae:85:d7:31:3e:6b:1a:36:bd:aa:e8:
                    87:bf:81:f2:27:30:1c:45:ec:d1:26:f9:8e:9d:88:
                    c3:36:80:81:2f:0d:ed:cf:ad:bf:c5:2e:49:91:14:
                    f1:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:C2:DF:D5:3E:4C:7D:01:53:E7:78:B2:69:76:26:42:AB:C7:7A:59
            X509v3 Authority Key Identifier:
                keyid:31:7E:DB:34:10:05:8E:08:62:17:C5:0F:B9:70:09:DD:E7:0A:6F:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MX7bNBAFjghiF8UPuXAJ3ecKbxo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:78:7d:b1:06:3a:c8:e6:69:50:84:aa:19:dd:ef:3b:0c:42:
         8f:09:a7:f8:fd:f6:16:22:21:6c:e6:d6:c8:f0:63:5c:56:5c:
         ec:78:91:f5:38:2e:09:39:01:2f:18:1c:13:59:85:ae:a1:f3:
         43:00:6b:52:81:1e:65:79:6a:d0:e8:03:f3:de:b8:dd:e5:d3:
         50:38:71:82:37:1b:7f:4a:88:3d:04:50:fb:0b:ba:dd:99:1a:
         7c:22:08:5e:fb:14:f0:c7:6c:a4:ea:aa:b8:87:2f:27:be:93:
         f0:5b:51:32:17:df:c2:a6:88:8b:68:8e:34:fe:02:00:db:d1:
         cd:9a:b2:85:78:3a:ed:94:25:f3:fc:06:00:9e:d6:b0:57:50:
         89:81:c6:15:5b:b5:e0:d7:8e:bd:17:cd:92:ab:13:43:1a:0d:
         b7:b9:a9:25:75:50:89:a4:02:07:45:c7:e2:19:2e:8a:98:91:
         f3:c3:fd:12:88:3a:3b:71:20:d1:90:b9:a7:51:d1:d8:3e:56:
         fd:78:4d:18:fa:2f:c7:d8:40:ad:c5:33:10:46:dc:c0:94:ec:
         7f:18:6a:54:7e:6a:b9:eb:e4:7c:5e:9f:e3:cb:d8:91:70:dd:
         97:f7:32:8a:b0:a5:8a:d8:39:b5:76:e1:18:66:6c:ae:8b:5c:
         1a:fa:db:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:13 2026 by rpki-client