This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.mft
File:                     317EDB3410058E086217C50FB97009DDE70A6F1A.mft (raw, json)
Hash identifier:          4L3tPHuta6faGhxhxEo1VbALSTgs0sV3Rn9uiPP3N2U=
Subject key identifier:   B8:3A:A8:44:E6:29:DD:5F:5E:10:95:52:EC:61:99:74:99:69:47:67
Authority key identifier: 31:7E:DB:34:10:05:8E:08:62:17:C5:0F:B9:70:09:DD:E7:0A:6F:1A
Certificate issuer:       /CN=317edb3410058e086217c50fb97009dde70a6f1a
Certificate serial:       5800EEAF4512795181EDEE4EBB0F4C468637BDA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MX7bNBAFjghiF8UPuXAJ3ecKbxo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.mft
Manifest number:          64
Signing time:             Sat 24 Jan 2026 18:19:40 +0000
Manifest this update:     Sat 24 Jan 2026 18:14:40 +0000
Manifest next update:     Sun 25 Jan 2026 21:01:40 +0000
Files and hashes:         1: AS207682.asa (hash: yNMgsZTlVBgZuwAny+gfftheJcltZQ2eLBjscmcmhhI=)
                          2: 317EDB3410058E086217C50FB97009DDE70A6F1A.crl (hash: npqjL7yhz78CUIrgAwu73OBkSLN5TXut0eO5/uKYXRM=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MX7bNBAFjghiF8UPuXAJ3ecKbxo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 21:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:00:ee:af:45:12:79:51:81:ed:ee:4e:bb:0f:4c:46:86:37:bd:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=317edb3410058e086217c50fb97009dde70a6f1a
        Validity
            Not Before: Jan 24 18:14:40 2026 GMT
            Not After : Jan 25 21:01:40 2026 GMT
        Subject: CN=B83AA844E629DD5F5E109552EC61997499694767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c2:35:24:1e:66:34:e2:fc:e3:40:4b:68:4f:
                    e2:42:37:07:ac:5d:fa:4a:f8:2e:97:59:c4:bf:bd:
                    b7:4f:c6:cb:43:87:90:77:6d:de:3d:f4:ec:5f:db:
                    84:57:6b:a2:c7:99:dd:8a:6b:d7:5c:a3:33:55:48:
                    53:9b:f5:13:b0:51:54:e0:57:df:c1:1f:4d:a8:2b:
                    42:c7:f3:10:c2:f9:35:01:29:98:d1:92:bd:d9:88:
                    a2:a9:84:b4:cd:d6:5a:2a:6c:7c:25:91:7c:7b:57:
                    fc:bf:a9:a6:9e:43:06:77:a3:40:42:b4:e6:3e:b4:
                    ba:91:7f:e0:99:0a:26:11:ca:4e:f9:97:41:99:3d:
                    bd:5a:d1:24:81:ab:0b:39:04:5a:8d:65:58:91:89:
                    46:c7:ff:ee:53:33:f4:47:ae:de:eb:d9:f3:1d:3b:
                    45:19:a1:cd:7a:fa:82:5c:eb:73:ea:c1:0c:ab:91:
                    2e:3c:1b:21:90:06:75:b5:bf:24:fd:60:31:65:36:
                    46:fe:1a:8a:53:41:1d:85:94:39:11:0d:29:ef:fd:
                    4d:82:97:86:cb:41:15:8e:8f:5e:81:ba:5d:03:8f:
                    b4:04:6c:5e:a4:38:36:5a:4b:ec:59:90:e1:4a:92:
                    33:d9:7e:34:ad:34:83:87:49:a3:b8:02:e3:ed:ae:
                    d2:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:3A:A8:44:E6:29:DD:5F:5E:10:95:52:EC:61:99:74:99:69:47:67
            X509v3 Authority Key Identifier:
                keyid:31:7E:DB:34:10:05:8E:08:62:17:C5:0F:B9:70:09:DD:E7:0A:6F:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MX7bNBAFjghiF8UPuXAJ3ecKbxo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:f5:a0:3c:4c:74:46:9f:d4:ce:c4:4b:a5:3c:16:00:be:59:
         71:05:20:de:aa:9a:a4:a3:f8:4d:20:1b:0d:79:fa:09:5e:e9:
         39:32:15:b7:3a:cb:79:4b:5e:2e:d1:5f:60:73:38:36:d3:2f:
         4a:79:84:d2:18:60:79:1d:6e:f8:27:11:d1:fe:3e:3e:59:d5:
         fd:f1:0b:95:52:b9:bc:70:83:82:48:fc:4f:88:c8:37:f2:79:
         c7:7f:5b:d8:3c:77:74:04:eb:b4:f4:d2:89:ad:2d:3a:b8:2b:
         05:00:31:b8:78:30:d9:d8:7c:0c:c3:37:e8:41:bb:82:59:27:
         14:07:fe:dd:41:ca:7a:45:96:30:42:ef:68:f5:6f:89:91:fb:
         a4:3f:80:88:e9:53:77:c5:b2:f6:36:3e:80:4d:d8:5c:7b:95:
         1e:11:e7:d5:33:6d:d1:a3:9b:69:43:ed:fb:f6:bc:7d:37:91:
         4d:18:0b:33:ba:8e:82:0f:72:2a:0c:95:40:a0:34:8a:41:c6:
         c8:cb:0c:10:92:4e:47:bf:bf:fd:92:26:39:2b:40:42:3f:15:
         dd:4c:05:2c:f4:a0:80:5d:70:bc:f9:24:02:75:a5:94:76:93:
         f6:53:ae:9e:bc:25:12:cf:d5:bb:3d:4e:95:e9:12:42:b9:85:
         10:e6:60:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:42:06 2026 by rpki-client