This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
File:                     E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft (raw, json)
Hash identifier:          1qVMsLKzHJc6YxJlanThFO/zBX/pVBfflPRKWzT9JCc=
Subject key identifier:   1A:C2:23:73:3F:CA:84:9E:BF:C3:06:52:E7:42:45:7A:AE:ED:46:78
Authority key identifier: E8:BC:98:76:17:4D:9A:73:85:FC:E9:34:3E:2B:B7:D9:8F:52:3B:11
Certificate issuer:       /CN=e8bc9876174d9a7385fce9343e2bb7d98f523b11
Certificate serial:       2334BE37B1AE983D04DF3B14A43C514C9DC4494D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
Manifest number:          0541
Signing time:             Sun 01 Feb 2026 14:18:01 +0000
Manifest this update:     Sun 01 Feb 2026 14:13:01 +0000
Manifest next update:     Mon 02 Feb 2026 14:44:01 +0000
Files and hashes:         1: AS208453.asa (hash: toOH13RB5+pWltEn+DIWd3Jh25GA7/n1ICrPv2hKjZc=)
                          2: E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl (hash: mbQwUswRRwlBo11zof79g8Z/b+bG/EYjdhkiQaUsd5M=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 14:44:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:34:be:37:b1:ae:98:3d:04:df:3b:14:a4:3c:51:4c:9d:c4:49:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8bc9876174d9a7385fce9343e2bb7d98f523b11
        Validity
            Not Before: Feb  1 14:13:01 2026 GMT
            Not After : Feb  2 14:44:01 2026 GMT
        Subject: CN=1AC223733FCA849EBFC30652E742457AAEED4678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:33:99:11:55:31:16:6f:27:0d:d7:38:35:37:
                    86:c3:36:ab:36:e7:1a:2f:64:2d:a5:aa:0f:0e:33:
                    bd:5e:19:57:a2:c1:35:76:db:ee:b5:ce:6d:6f:7d:
                    ae:55:68:14:4a:bc:c7:66:a3:84:58:c4:3a:e4:73:
                    44:c0:f8:6a:41:6f:02:77:c1:d5:89:47:6c:af:30:
                    8d:84:c6:cd:b9:a4:88:9c:1a:de:92:4d:41:f7:2b:
                    0b:90:1c:bb:97:7c:42:36:c5:ce:75:1c:0c:8f:76:
                    ce:fe:f1:d1:30:81:d4:7c:fd:45:7e:91:6c:74:a4:
                    15:f4:8d:20:cc:9d:a7:db:77:95:3e:ad:e8:35:9f:
                    13:dd:e6:dd:34:02:69:5f:dd:11:84:f7:53:3b:22:
                    b7:21:82:63:80:9f:0e:70:33:14:6f:77:f2:27:a5:
                    1a:1a:47:61:8a:04:c7:3b:22:40:d1:b2:9d:59:39:
                    a8:8e:0f:f8:08:31:2d:1b:d7:ca:39:f9:42:ad:dd:
                    30:62:e8:3d:36:74:29:78:a4:44:e9:4e:16:9a:9c:
                    d3:f9:a4:c5:fe:14:41:b2:51:a2:36:af:1c:d1:09:
                    93:bc:8f:b2:09:92:b1:83:74:f6:ec:dc:52:54:c2:
                    7b:69:b6:cc:6e:21:0f:b2:10:6f:7a:5a:71:4f:4c:
                    0a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:C2:23:73:3F:CA:84:9E:BF:C3:06:52:E7:42:45:7A:AE:ED:46:78
            X509v3 Authority Key Identifier:
                keyid:E8:BC:98:76:17:4D:9A:73:85:FC:E9:34:3E:2B:B7:D9:8F:52:3B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:40:5c:71:77:fa:8e:d1:a2:0f:f4:f5:ed:d7:bc:c7:d9:ab:
         f2:62:36:ca:3a:ea:86:06:06:b3:ef:77:fb:8a:27:3d:c5:21:
         d1:5c:7b:a5:14:04:8e:83:e3:81:92:9d:23:1b:24:d2:06:70:
         86:4c:19:e8:07:2f:d7:d7:ac:f3:28:94:00:99:84:17:60:1f:
         d6:34:a2:65:d7:ea:d7:0b:55:cf:aa:66:b4:14:d1:7a:2a:d7:
         46:4f:c7:27:d9:e2:38:0d:d2:e3:47:0f:a8:bc:73:e5:33:11:
         ff:20:80:62:00:d5:a2:58:b9:53:7e:56:3f:09:58:87:b2:f9:
         bb:e7:51:1b:74:5a:4e:2d:25:17:10:73:bc:1b:0d:b2:e5:4e:
         84:68:77:a4:7d:0a:f9:53:05:e4:01:ef:b6:26:f6:27:7a:12:
         76:37:05:fc:13:19:07:90:05:bc:7e:d1:81:46:01:61:76:cd:
         97:08:90:60:c3:82:27:79:8a:7f:2a:26:ea:c9:d4:7a:47:da:
         eb:a9:06:d5:40:a8:a5:79:18:76:85:61:07:1d:07:68:cf:81:
         1e:ca:aa:db:e2:ce:28:41:64:0c:af:8d:6d:56:e4:87:06:cd:
         ba:30:78:61:be:5f:7f:2b:73:90:92:5f:53:49:e9:1f:a3:3c:
         82:1c:13:6f
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUIzS+N7GumD0E3zsUpDxRTJ3ESU0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZThiYzk4NzYxNzRkOWE3Mzg1ZmNlOTM0M2UyYmI3ZDk4
ZjUyM2IxMTAeFw0yNjAyMDExNDEzMDFaFw0yNjAyMDIxNDQ0MDFaMDMxMTAvBgNV
BAMTKDFBQzIyMzczM0ZDQTg0OUVCRkMzMDY1MkU3NDI0NTdBQUVFRDQ2NzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAM5kRVTEWbycN1zg1N4bDNqs2
5xovZC2lqg8OM71eGVeiwTV22+61zm1vfa5VaBRKvMdmo4RYxDrkc0TA+GpBbwJ3
wdWJR2yvMI2Exs25pIicGt6STUH3KwuQHLuXfEI2xc51HAyPds7+8dEwgdR8/UV+
kWx0pBX0jSDMnafbd5U+reg1nxPd5t00Amlf3RGE91M7IrchgmOAnw5wMxRvd/In
pRoaR2GKBMc7IkDRsp1ZOaiOD/gIMS0b18o5+UKt3TBi6D02dCl4pETpThaanNP5
pMX+FEGyUaI2rxzRCZO8j7IJkrGDdPbs3FJUwntptsxuIQ+yEG96WnFPTAoFAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUGsIjcz/KhJ6/wwZS50JFeq7tRngwHwYDVR0j
BBgwFoAU6LyYdhdNmnOF/Ok0Piu32Y9SOxEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE0NzZkNjItOWNmYS00ODcxLWEyZDktZmFkZjU3ODFj
MTFiLzAvRThCQzk4NzYxNzREOUE3Mzg1RkNFOTM0M0UyQkI3RDk4RjUyM0IxMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZMeVlkaGRObW5PRl9PazBQaXUzMlk5
U094RS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MTQ3NmQ2Mi05
Y2ZhLTQ4NzEtYTJkOS1mYWRmNTc4MWMxMWIvMC9FOEJDOTg3NjE3NEQ5QTczODVG
Q0U5MzQzRTJCQjdEOThGNTIzQjExLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAkBccXf6jtGiD/T17de8
x9mr8mI2yjrqhgYGs+93+4onPcUh0Vx7pRQEjoPjgZKdIxsk0gZwhkwZ6Acv19es
8yiUAJmEF2Af1jSiZdfq1wtVz6pmtBTReirXRk/HJ9niOA3S40cPqLxz5TMR/yCA
YgDVoli5U35WPwlYh7L5u+dRG3RaTi0lFxBzvBsNsuVOhGh3pH0K+VMF5AHvtib2
J3oSdjcF/BMZB5AFvH7RgUYBYXbNlwiQYMOCJ3mKfyom6snUekfa66kG1UCopXkY
doVhBx0HaM+BHsqq2+LOKEFkDK+NbVbkhwbNujB4Yb5ffytzkJJfU0npH6M8ghwT
bw==
-----END CERTIFICATE-----
Generated at Mon Feb 2 08:17:13 2026 by rpki-client