This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.mft
File:                     391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.mft (raw, json)
Hash identifier:          UNINjl4IDQgpZ8jjCc8LMaNDaVEdca66V98bhg9939k=
Subject key identifier:   4C:97:75:5B:75:E4:B0:BC:2A:2B:E1:D4:16:1C:79:E9:CF:E7:B1:2C
Authority key identifier: 39:1F:20:F2:6A:A6:D6:35:98:FF:30:25:CD:DB:DB:4B:9C:9A:B6:7D
Certificate issuer:       /CN=391f20f26aa6d63598ff3025cddbdb4b9c9ab67d
Certificate serial:       234A4A17A2D8D07859B065173470BD6F876A5AE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OR8g8mqm1jWY_zAlzdvbS5yatn0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.mft
Manifest number:          0E
Signing time:             Mon 09 Feb 2026 10:18:07 +0000
Manifest this update:     Mon 09 Feb 2026 10:13:07 +0000
Manifest next update:     Tue 10 Feb 2026 11:40:07 +0000
Files and hashes:         1: 323030313a3637383a6139303a3a2f34382d3438203d3e20323135363835.roa (hash: f01olELinbK/WN+AKKfNEa3BaJPmtAdvY7LAPWQjTbg=)
                          2: 391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.crl (hash: AGlWjQfnpNePBd4io7Yz/8OAB+X5Bdp4oBpH4I+gMGE=)
                          3: AS215685.asa (hash: xszbeU8CdJRCRJHJvQgY81m0i0Z3/8sM5z/Hw/x2m0Q=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OR8g8mqm1jWY_zAlzdvbS5yatn0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 11:40:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:4a:4a:17:a2:d8:d0:78:59:b0:65:17:34:70:bd:6f:87:6a:5a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=391f20f26aa6d63598ff3025cddbdb4b9c9ab67d
        Validity
            Not Before: Feb  9 10:13:07 2026 GMT
            Not After : Feb 10 11:40:07 2026 GMT
        Subject: CN=4C97755B75E4B0BC2A2BE1D4161C79E9CFE7B12C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:24:31:97:d7:3e:81:0a:84:76:62:3b:69:84:
                    aa:48:38:e8:10:2e:26:e7:3a:d3:03:e9:c5:8b:6f:
                    2a:b1:89:1f:48:9d:62:e5:d8:6a:1e:94:fa:88:57:
                    09:ea:d4:98:57:8a:17:d7:22:9e:21:48:6b:72:43:
                    b3:c3:0b:39:a7:46:ac:48:77:7e:2a:0b:73:e3:f5:
                    38:53:5b:eb:7f:a5:94:5a:7a:d2:4c:ad:0c:fb:ba:
                    9d:8e:ef:43:a4:16:b3:24:0d:e9:db:ba:50:d1:c9:
                    35:2a:a0:06:65:8c:d4:3c:b5:45:a7:3c:44:dc:bd:
                    3f:2d:fa:a0:5c:3d:35:c2:fe:f0:dc:63:be:15:e8:
                    28:c6:ff:07:e5:c7:71:38:2b:f3:b7:a9:e3:a2:33:
                    04:ca:c6:db:37:17:66:e2:8e:2d:cf:3d:9f:2a:1c:
                    a4:c8:70:6d:cf:74:4c:7d:5d:ff:61:10:ab:01:0f:
                    3d:4b:86:4d:6b:8a:53:c9:92:66:6d:d4:33:e8:61:
                    8f:00:7d:0f:32:50:b8:2e:66:0d:0d:53:8b:cf:19:
                    49:6e:72:ad:2f:d0:a9:9d:4f:37:ac:88:e0:73:be:
                    bb:fd:de:48:bc:1d:29:29:8f:6f:81:69:c9:19:36:
                    81:ac:78:bf:b4:13:d8:93:01:b2:d0:c8:b9:bf:ee:
                    46:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:97:75:5B:75:E4:B0:BC:2A:2B:E1:D4:16:1C:79:E9:CF:E7:B1:2C
            X509v3 Authority Key Identifier:
                keyid:39:1F:20:F2:6A:A6:D6:35:98:FF:30:25:CD:DB:DB:4B:9C:9A:B6:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OR8g8mqm1jWY_zAlzdvbS5yatn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6e7f747e-ff68-4fa2-b2e3-f6ede548a320/0/391F20F26AA6D63598FF3025CDDBDB4B9C9AB67D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:46:cf:8e:2c:22:ce:26:c0:15:ca:76:4f:69:a7:12:a5:d6:
         ad:51:57:af:94:aa:c1:60:b0:e9:91:12:a6:3b:7e:4a:07:01:
         66:bb:a6:ad:31:39:7a:0d:bb:6b:f2:0e:4d:c4:e0:84:c4:5d:
         7d:f7:06:13:0f:a2:be:91:07:2b:a1:ba:0d:21:3f:93:54:dd:
         89:79:e1:5a:97:af:82:d4:30:29:c0:d7:58:01:5d:74:fd:d4:
         f5:84:79:1f:80:fb:61:73:6e:87:23:19:3d:de:27:23:0a:f0:
         f2:ba:ce:b2:b5:e6:0f:54:f8:30:a5:90:06:38:95:04:94:3d:
         6d:93:6b:bd:f1:55:70:7e:f9:4f:d9:ec:81:e8:4a:71:4a:73:
         3b:e4:82:68:98:29:5a:46:13:7c:f4:2b:9e:7e:a6:06:ec:eb:
         6c:36:15:70:8a:97:8f:0e:d9:bf:80:6d:aa:44:b5:4d:e6:6e:
         c8:d1:a6:0a:46:e6:5d:08:ef:c3:be:f7:e3:d1:ad:f2:29:d5:
         81:0f:e3:06:e9:15:0f:7c:c0:55:e9:a8:af:40:b7:8d:7d:9f:
         a4:ab:14:b0:fd:af:48:b7:48:66:a3:1b:69:10:c2:cf:fb:59:
         eb:e2:cf:f8:7b:a0:88:8e:00:94:fc:e6:b6:68:b9:4d:bd:23:
         0e:2a:67:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:38:51 2026 by rpki-client