This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft
File:                     B3C078E149D9741434FD8877AB4CED46DC2720DA.mft (raw, json)
Hash identifier:          2KbDFREPdaF39Ey0IU0R12BJHNbeZhoAtOfV2+VzTM8=
Subject key identifier:   10:52:8C:E3:91:55:B8:1E:3B:EE:D1:A7:50:BF:A1:C7:F0:F9:4E:84
Authority key identifier: B3:C0:78:E1:49:D9:74:14:34:FD:88:77:AB:4C:ED:46:DC:27:20:DA
Certificate issuer:       /CN=b3c078e149d9741434fd8877ab4ced46dc2720da
Certificate serial:       2BA0C3924D7F614D4D42E7C076F9FC28FEC1CAC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft
Manifest number:          0403
Signing time:             Mon 02 Feb 2026 00:49:15 +0000
Manifest this update:     Mon 02 Feb 2026 00:44:15 +0000
Manifest next update:     Tue 03 Feb 2026 01:55:15 +0000
Files and hashes:         1: AS215147.asa (hash: GjsvLtdFoDUTAXomZoavpdPPd8CJuRsD46c0/yYhSME=)
                          2: B3C078E149D9741434FD8877AB4CED46DC2720DA.crl (hash: pTmSQ1SGPN244lS0fN3AE/72VC7vuyDFA3Y8hm3HUwQ=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 01:55:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:a0:c3:92:4d:7f:61:4d:4d:42:e7:c0:76:f9:fc:28:fe:c1:ca:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3c078e149d9741434fd8877ab4ced46dc2720da
        Validity
            Not Before: Feb  2 00:44:15 2026 GMT
            Not After : Feb  3 01:55:15 2026 GMT
        Subject: CN=10528CE39155B81E3BEED1A750BFA1C7F0F94E84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f2:1e:97:49:45:e6:89:6c:c1:36:31:10:a1:
                    52:fc:53:c0:02:9b:5c:a3:ea:2f:18:08:93:c4:15:
                    11:b0:be:50:29:0d:5c:b3:b3:e5:ba:a5:b0:6a:a9:
                    40:4f:11:e4:1e:ff:5e:33:58:94:f3:27:08:70:9f:
                    4d:4f:87:d5:02:4f:65:09:ac:7e:ac:d3:2f:21:48:
                    26:b4:b2:6f:da:cc:b0:69:fa:7f:bd:c2:fa:c4:21:
                    81:c3:cd:67:57:ca:99:7c:1e:d1:a7:6c:7a:ba:0e:
                    cb:b6:25:6b:0a:59:05:33:9f:36:91:d7:63:7d:e6:
                    4e:0e:d5:ec:20:8c:36:56:7b:ff:f6:0b:bf:bb:05:
                    a5:b3:39:57:90:3d:84:95:7f:ae:a7:a0:54:1c:3e:
                    75:44:ec:be:26:8b:29:07:46:32:9b:b8:e3:45:89:
                    a8:60:d4:61:ee:2a:ff:c7:be:9f:40:b5:8f:5a:05:
                    a8:5e:43:86:f0:53:18:1c:ac:a8:05:07:f0:f8:81:
                    fc:7c:63:73:21:10:80:6b:1d:76:0e:91:5d:68:8b:
                    e1:7b:a8:e7:8c:5f:9e:80:fc:3f:f7:08:0a:cf:55:
                    49:75:51:8c:88:6c:3a:fa:f7:12:af:95:a9:61:88:
                    f8:22:7e:7d:5d:41:9a:c6:ec:68:36:84:ee:1b:03:
                    a4:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:52:8C:E3:91:55:B8:1E:3B:EE:D1:A7:50:BF:A1:C7:F0:F9:4E:84
            X509v3 Authority Key Identifier:
                keyid:B3:C0:78:E1:49:D9:74:14:34:FD:88:77:AB:4C:ED:46:DC:27:20:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:32:54:97:98:b9:da:62:32:11:f9:3b:9c:74:9d:f4:84:3d:
         f3:7c:9a:bc:a7:bd:a3:e1:09:3e:5e:61:c1:92:5d:60:05:12:
         c6:64:e5:73:b5:a3:76:ad:60:4f:f1:a6:c0:71:3b:4a:c0:8f:
         e4:04:92:2e:56:20:ad:4d:12:1b:d9:ba:4b:6e:15:a3:5b:b6:
         71:34:5f:f0:d4:a5:25:40:4c:a4:e2:4e:46:01:1e:4d:fb:f0:
         50:b3:67:f8:64:f1:c8:9c:79:52:5b:ec:9a:f7:f4:65:ef:29:
         98:1f:78:3b:a7:b7:ae:2e:11:a5:11:e0:6a:85:6a:6e:ba:f2:
         67:52:69:45:b1:cb:1d:26:ae:ec:4d:cf:5e:7b:47:26:f8:b0:
         87:4f:18:65:5f:63:8b:3b:e8:f9:7e:81:81:0c:50:88:a0:5f:
         33:64:5f:ca:2b:41:4a:e5:3d:eb:91:2c:d6:c8:10:c2:e1:cb:
         e1:0d:96:60:6d:d3:32:95:4f:18:dd:df:ec:91:64:eb:37:d7:
         82:a2:2d:b1:2e:e0:12:9e:0b:f6:1f:5a:29:ca:60:a4:dd:b5:
         03:a7:d4:fa:cd:d5:6a:07:22:91:2b:d8:e1:93:b6:33:01:f0:
         a2:72:48:b8:ec:c1:2d:4b:a9:b0:15:6c:9e:3c:11:45:06:de:
         b1:29:8e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:42:11 2026 by rpki-client