This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
File:                     E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft (raw, json)
Hash identifier:          2H9vS6k0Xnm+ezNqM38nq4fR4KrrQOhhETGmgZQ6qFk=
Subject key identifier:   8A:6B:B0:4E:58:07:36:BA:96:A9:79:1F:8D:06:17:D6:55:02:CA:D3
Authority key identifier: E8:BC:98:76:17:4D:9A:73:85:FC:E9:34:3E:2B:B7:D9:8F:52:3B:11
Certificate issuer:       /CN=e8bc9876174d9a7385fce9343e2bb7d98f523b11
Certificate serial:       432A0B033E44A6C605C5ED31D504467166AA7DD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
Manifest number:          0542
Signing time:             Mon 02 Feb 2026 06:48:01 +0000
Manifest this update:     Mon 02 Feb 2026 06:43:01 +0000
Manifest next update:     Tue 03 Feb 2026 09:07:01 +0000
Files and hashes:         1: AS208453.asa (hash: toOH13RB5+pWltEn+DIWd3Jh25GA7/n1ICrPv2hKjZc=)
                          2: E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl (hash: BlYUdOup4VcE1tg4FJV+UbhK9jTHkTG5HXTI2jkt1ik=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 06:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:2a:0b:03:3e:44:a6:c6:05:c5:ed:31:d5:04:46:71:66:aa:7d:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8bc9876174d9a7385fce9343e2bb7d98f523b11
        Validity
            Not Before: Feb  2 06:43:01 2026 GMT
            Not After : Feb  3 09:07:01 2026 GMT
        Subject: CN=8A6BB04E580736BA96A9791F8D0617D65502CAD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b2:a6:33:84:2d:0c:22:d4:88:4f:a6:6c:6e:
                    66:7d:b9:e8:be:2f:e2:7e:c3:33:76:0e:f8:04:3a:
                    ff:e9:5a:42:fb:22:d7:36:ab:8e:7b:94:79:5b:c9:
                    f6:99:94:cd:4d:cc:1e:21:be:25:22:3c:b5:79:22:
                    f3:d7:02:c2:42:81:de:7d:31:4d:3f:88:7b:9a:af:
                    86:82:09:a8:f9:d4:23:08:5d:2b:3c:55:f4:f2:4f:
                    8a:c2:91:86:cc:af:78:ae:07:9c:a8:73:f9:f7:14:
                    d1:0e:35:5b:ef:ff:cb:6f:d2:91:76:94:38:5c:28:
                    43:ef:2a:c8:2b:91:42:28:71:a9:e7:1b:75:49:a5:
                    24:94:05:f4:e3:a6:d4:ae:66:0a:b7:c8:17:2b:06:
                    d4:06:88:52:f4:97:60:15:0a:5c:8f:16:97:18:ee:
                    bf:5b:71:42:48:69:58:45:93:02:5a:c5:7c:7c:f0:
                    6a:f9:1c:33:18:b4:cc:e5:b1:d5:59:83:a7:6d:f9:
                    cc:ac:ba:f9:3c:4e:d2:8c:78:b0:a9:38:40:2c:2f:
                    8a:3b:52:45:5c:7f:2a:bb:36:3b:67:6d:c7:67:c8:
                    0e:20:20:69:eb:06:f8:09:7b:32:c7:34:59:16:54:
                    1a:2a:b6:bc:55:04:c1:9a:ae:b6:54:5c:3c:e4:01:
                    c2:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:6B:B0:4E:58:07:36:BA:96:A9:79:1F:8D:06:17:D6:55:02:CA:D3
            X509v3 Authority Key Identifier:
                keyid:E8:BC:98:76:17:4D:9A:73:85:FC:E9:34:3E:2B:B7:D9:8F:52:3B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:8e:05:93:32:b4:1d:af:fd:7e:09:d0:27:05:7b:ba:bd:d4:
         9c:46:fa:19:48:93:21:c1:30:95:20:a2:92:40:11:f3:3d:37:
         2e:87:70:af:27:ca:89:0a:2e:f8:cc:22:bc:b4:aa:42:c3:12:
         a8:a8:7f:3f:a7:7b:ad:08:c3:6b:b2:3c:f2:ed:bc:b8:c3:44:
         91:21:bf:80:6b:ab:5e:34:e4:95:b8:33:00:8a:2f:78:3f:9e:
         56:61:2c:93:64:0f:44:02:76:67:d0:0b:a0:ca:3e:63:0a:18:
         e4:ae:2c:d9:2f:ba:e6:78:b6:70:8f:61:db:b7:1f:f3:28:bb:
         ee:c2:d5:50:2f:ee:2d:59:a8:db:84:1a:be:10:b3:3d:aa:5b:
         8e:41:44:32:bf:0c:36:ae:92:7e:29:6d:9f:c7:ba:ba:8c:86:
         2b:90:a2:8a:ea:b2:1c:73:db:e7:e6:78:fa:a1:d1:13:87:be:
         58:dc:00:4d:14:1d:fb:77:2f:3c:af:cc:ed:c9:f5:b7:ef:bf:
         4e:dc:53:bd:7c:9a:4f:df:d7:d6:6f:28:f2:12:59:30:6e:0f:
         74:4c:c6:34:50:70:2d:71:57:b2:67:80:74:96:1d:b2:8c:7d:
         7c:1d:8d:12:e9:9f:ad:ce:d1:9d:80:4a:76:78:86:1e:86:27:
         d5:2a:08:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:50:41 2026 by rpki-client