This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft
File:                     4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft (raw, json)
Hash identifier:          IoPg+KWLhgXGASK1EmRlOi0ZLgER4gfmiWI5xydLdrY=
Subject key identifier:   31:8E:BE:C6:01:44:5B:2A:67:AE:C1:8B:A5:9F:70:8E:B1:BD:00:49
Authority key identifier: 4E:C2:49:B7:AF:3E:E6:9C:5B:BD:F3:C7:F4:CB:EE:1E:AA:EC:49:4F
Certificate issuer:       /CN=4ec249b7af3ee69c5bbdf3c7f4cbee1eaaec494f
Certificate serial:       018D7CBAC6F36CB9367201CFC324B8E000FB2D8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TsJJt68-5pxbvfPH9MvuHqrsSU8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft
Manifest number:          4A
Signing time:             Wed 11 Feb 2026 11:47:41 +0000
Manifest this update:     Wed 11 Feb 2026 11:42:41 +0000
Manifest next update:     Thu 12 Feb 2026 14:56:41 +0000
Files and hashes:         1: AS216299.asa (hash: X6AXlCP9HIyHTXbg3649O81EGxBI70CVhawZpaYBepA=)
                          2: 4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.crl (hash: DkSz5r2BUfeWFeeyGwH7+IVWD5DOLzK7owFZ1ZHIedU=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TsJJt68-5pxbvfPH9MvuHqrsSU8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Feb 2026 14:56:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:7c:ba:c6:f3:6c:b9:36:72:01:cf:c3:24:b8:e0:00:fb:2d:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ec249b7af3ee69c5bbdf3c7f4cbee1eaaec494f
        Validity
            Not Before: Feb 11 11:42:41 2026 GMT
            Not After : Feb 12 14:56:41 2026 GMT
        Subject: CN=318EBEC601445B2A67AEC18BA59F708EB1BD0049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1c:ca:55:f0:19:f7:0b:4d:1d:f6:55:e1:b0:
                    ea:64:28:90:61:b7:e7:49:8d:e3:fa:51:81:fb:a6:
                    c2:db:50:1b:16:0b:18:1d:2f:69:ef:f1:c4:2d:76:
                    85:75:d6:b5:1b:dd:8f:1f:c0:ab:61:3f:3d:60:df:
                    56:92:de:54:36:c5:9e:77:9b:30:4a:50:3b:29:49:
                    9c:6b:55:b7:80:a0:fd:17:a2:86:8f:05:5b:30:c7:
                    6b:4b:a5:84:c8:fd:8b:1d:1d:d1:6a:be:3e:df:e8:
                    fe:66:2b:32:95:e2:d7:9d:e0:8f:94:d8:c3:cb:50:
                    0a:cf:bd:75:fc:fc:f4:ed:d4:d0:22:aa:c6:b8:b5:
                    0c:22:5e:0c:c4:57:9d:85:26:ed:66:1d:58:c9:ab:
                    67:52:06:06:0e:ab:ed:f1:60:32:25:d7:93:cf:6c:
                    f2:08:fc:1c:db:2e:27:b1:77:72:a7:62:2b:42:28:
                    73:77:a6:e8:74:fb:67:e7:6c:61:c4:c8:7e:8c:87:
                    4f:8a:ca:3f:03:01:3e:5e:80:c1:83:63:be:31:c7:
                    cc:86:66:07:a1:86:d5:90:9f:01:08:b5:6a:69:05:
                    c3:12:28:83:88:c3:b2:11:51:6f:45:e1:40:b0:49:
                    3f:84:11:d8:00:2b:c1:6a:62:1e:ba:c0:ae:f0:01:
                    53:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:8E:BE:C6:01:44:5B:2A:67:AE:C1:8B:A5:9F:70:8E:B1:BD:00:49
            X509v3 Authority Key Identifier:
                keyid:4E:C2:49:B7:AF:3E:E6:9C:5B:BD:F3:C7:F4:CB:EE:1E:AA:EC:49:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsJJt68-5pxbvfPH9MvuHqrsSU8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/1/4EC249B7AF3EE69C5BBDF3C7F4CBEE1EAAEC494F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:73:05:b3:9a:be:a8:b9:5a:00:8e:95:a5:d8:47:ad:42:c7:
         c7:2b:61:d4:4e:de:5b:17:bd:61:f4:5c:43:fd:b0:84:ab:58:
         08:15:ed:30:7e:d1:6d:11:dc:4b:88:61:2d:eb:1a:9c:de:42:
         e4:75:9d:90:85:bb:2e:16:a0:63:70:98:48:eb:2c:65:92:0a:
         33:ad:f2:53:86:4a:93:c8:d8:e2:3b:84:3b:8d:4b:12:9d:36:
         40:c0:92:90:23:f7:eb:7d:01:cb:ee:f7:3c:30:f6:d2:1c:cd:
         39:db:bb:d3:12:65:1d:d0:0d:eb:40:4c:f9:d4:34:80:01:c2:
         22:99:ec:13:9c:f5:28:32:6a:84:e7:a1:fe:f8:87:7c:ee:dc:
         69:b4:4c:ec:23:74:5d:01:c0:bb:4e:b2:af:48:50:e6:51:83:
         04:c0:ff:71:8a:f9:9d:30:0c:a5:a3:e4:2a:c2:9f:b3:b5:85:
         61:d2:ed:ee:bc:e5:72:6d:71:5e:78:90:3e:4d:4e:12:cb:d4:
         d4:2c:63:41:da:b8:09:2b:45:43:ba:85:88:4c:36:5e:a0:4a:
         55:2b:6a:93:d2:92:37:a2:b4:3f:b4:68:f2:a6:ba:ab:31:6f:
         bd:ba:6e:7a:31:53:30:8a:e9:9e:b7:77:22:a9:f5:28:f7:e8:
         38:39:e6:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 11 19:18:41 2026 by rpki-client