This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/0/13ED27EBF744512BB7C4303FD2FE8B94E4486242.mft
File:                     13ED27EBF744512BB7C4303FD2FE8B94E4486242.mft (raw, json)
Hash identifier:          ldEmU0GF60KjDk9joQrvOYAJuaPTB8zOwy1KEuU/vgI=
Subject key identifier:   76:E8:18:CA:33:C5:69:08:59:85:DE:28:6A:1C:53:50:3E:9C:36:AB
Authority key identifier: 13:ED:27:EB:F7:44:51:2B:B7:C4:30:3F:D2:FE:8B:94:E4:48:62:42
Certificate issuer:       /CN=13ed27ebf744512bb7c4303fd2fe8b94e4486242
Certificate serial:       24E9B0EA4E9B924FB920E71F86D5CF7D9A92CBFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-0n6_dEUSu3xDA_0v6LlORIYkI.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/0/13ED27EBF744512BB7C4303FD2FE8B94E4486242.mft
Manifest number:          1E
Signing time:             Sun 01 Feb 2026 19:10:25 +0000
Manifest this update:     Sun 01 Feb 2026 19:05:25 +0000
Manifest next update:     Mon 02 Feb 2026 19:43:25 +0000
Files and hashes:         1: 13ED27EBF744512BB7C4303FD2FE8B94E4486242.crl (hash: MYQS8WDWD88OIp94JrqyL+ypHs5OqpWoNKqiRO3B3kQ=)
                          2: AS202335.asa (hash: 9/OOvItdTQu4kOT6MnZzlSM8QNOKgaUoVDKLqjwz+xA=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/0/13ED27EBF744512BB7C4303FD2FE8B94E4486242.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/0/13ED27EBF744512BB7C4303FD2FE8B94E4486242.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E-0n6_dEUSu3xDA_0v6LlORIYkI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:43:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:e9:b0:ea:4e:9b:92:4f:b9:20:e7:1f:86:d5:cf:7d:9a:92:cb:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13ed27ebf744512bb7c4303fd2fe8b94e4486242
        Validity
            Not Before: Feb  1 19:05:25 2026 GMT
            Not After : Feb  2 19:43:25 2026 GMT
        Subject: CN=76E818CA33C569085985DE286A1C53503E9C36AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fc:b0:34:bd:1e:dd:24:42:3d:2f:7b:c0:bb:
                    b5:6d:5b:3f:2b:4f:10:d8:ad:a5:ad:1e:f4:b5:f6:
                    71:ef:20:23:e9:12:bf:6c:b5:0b:de:ef:6d:30:93:
                    e0:7a:76:ca:6d:f0:69:f1:4c:b6:27:12:88:fd:7e:
                    42:b4:81:61:fc:a7:ed:40:22:05:24:e9:47:be:8c:
                    bf:6a:58:77:cb:be:ff:a5:fd:35:e3:87:05:f5:e0:
                    11:17:ce:8b:b1:7f:ef:13:f5:2f:9d:e5:35:f3:3d:
                    3c:6d:2c:ca:cb:b7:75:79:ab:83:fb:ac:81:a0:e3:
                    c8:84:44:0f:85:1f:89:c7:c5:e6:6c:70:55:27:f6:
                    cb:05:63:5f:4e:31:33:b9:77:ac:ce:88:7b:cc:69:
                    4c:3b:27:fc:7e:68:26:de:8f:7d:cb:d6:34:cd:c6:
                    5b:d3:5b:c7:f6:20:5e:e0:ac:5c:a9:7e:d7:ee:ed:
                    52:89:26:d3:54:29:62:80:91:69:82:3f:1d:07:ff:
                    66:b8:30:78:e1:01:3c:a5:1b:b9:a9:65:d4:81:2b:
                    24:9c:e1:12:be:85:b5:74:c1:b7:16:74:31:63:25:
                    2c:65:37:81:5e:a0:45:d3:37:12:a9:96:e7:be:fa:
                    4b:3b:89:c0:d2:d5:90:5c:a6:e4:29:44:fc:4e:85:
                    3d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:E8:18:CA:33:C5:69:08:59:85:DE:28:6A:1C:53:50:3E:9C:36:AB
            X509v3 Authority Key Identifier:
                keyid:13:ED:27:EB:F7:44:51:2B:B7:C4:30:3F:D2:FE:8B:94:E4:48:62:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/0/13ED27EBF744512BB7C4303FD2FE8B94E4486242.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-0n6_dEUSu3xDA_0v6LlORIYkI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40cba61d-4056-46a9-9392-a61dfc500dc9/0/13ED27EBF744512BB7C4303FD2FE8B94E4486242.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:a3:fa:b3:51:d9:01:da:2c:3d:83:db:d8:fa:c7:a4:b7:37:
         70:40:8b:82:9a:d8:dd:88:cb:27:8a:e6:e2:64:41:1b:ed:ed:
         f5:41:38:df:f2:3d:c6:86:8e:c4:6e:84:17:d8:8e:85:a6:fe:
         0e:c0:62:df:f8:f6:6e:80:89:a9:e2:f3:af:c4:6d:b8:2b:ad:
         83:4d:c3:1a:df:54:f3:e7:ab:58:aa:c7:b9:4a:d2:16:ef:12:
         01:f2:9c:fc:78:0b:3f:89:c9:a6:35:68:f8:72:74:9d:d3:3f:
         a0:47:43:23:26:fc:f3:5c:b4:66:03:80:d4:8a:3e:e7:77:b8:
         67:1b:19:cc:8a:6c:2a:5f:8d:7b:13:15:f0:73:84:a7:e4:c1:
         13:31:ab:0a:2f:40:64:97:f3:a0:fd:bb:a0:e7:6b:6f:0c:b7:
         33:58:28:6b:6e:82:62:d2:5c:05:ea:00:31:22:51:f9:4e:15:
         d6:16:42:89:bd:76:04:04:10:63:02:ef:86:c4:24:7b:b7:2c:
         30:5e:f0:86:81:c0:19:a6:23:17:ce:8a:19:e2:3b:2a:e8:aa:
         57:6e:49:65:ab:ad:7d:3a:99:72:ec:58:86:a2:b3:96:25:1e:
         f4:ac:fc:a0:2f:9a:dc:af:8e:2b:54:c5:a0:75:7f:b7:fe:a5:
         88:48:f8:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 08:08:26 2026 by rpki-client