This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/EC342ADD81633658330112D2BF8B1DE3EE19F684.mft
File:                     EC342ADD81633658330112D2BF8B1DE3EE19F684.mft (raw, json)
Hash identifier:          Rc79oK921JuTxN/tI7cK9Te/yNZHB5Cu0OQkWxeMdfg=
Subject key identifier:   14:26:DD:E8:B5:1D:AC:A5:06:61:90:75:CB:6B:B4:4A:C4:B3:0E:42
Authority key identifier: EC:34:2A:DD:81:63:36:58:33:01:12:D2:BF:8B:1D:E3:EE:19:F6:84
Certificate issuer:       /CN=ec342add81633658330112d2bf8b1de3ee19f684
Certificate serial:       5208B881AF75F86E8BF084D9CE65EC7012E25B61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7DQq3YFjNlgzARLSv4sd4-4Z9oQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/EC342ADD81633658330112D2BF8B1DE3EE19F684.mft
Manifest number:          10
Signing time:             Sun 01 Feb 2026 22:53:54 +0000
Manifest this update:     Sun 01 Feb 2026 22:48:54 +0000
Manifest next update:     Tue 03 Feb 2026 00:50:54 +0000
Files and hashes:         1: AS214420.asa (hash: tOBgFhFeKhPKL8j6hl+YVclDNEAVdP8vQyMPoEBSkDM=)
                          2: EC342ADD81633658330112D2BF8B1DE3EE19F684.crl (hash: LzZmvH0HZZ2zb8rB6XpLiiAHtOKv5ibQ3KncG3kMIYo=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/EC342ADD81633658330112D2BF8B1DE3EE19F684.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/EC342ADD81633658330112D2BF8B1DE3EE19F684.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7DQq3YFjNlgzARLSv4sd4-4Z9oQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 21:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:08:b8:81:af:75:f8:6e:8b:f0:84:d9:ce:65:ec:70:12:e2:5b:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec342add81633658330112d2bf8b1de3ee19f684
        Validity
            Not Before: Feb  1 22:48:54 2026 GMT
            Not After : Feb  3 00:50:54 2026 GMT
        Subject: CN=1426DDE8B51DACA506619075CB6BB44AC4B30E42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:08:09:8d:e0:4f:78:61:43:1a:16:ae:37:be:
                    4d:5d:ce:de:11:73:ff:39:b9:26:db:fc:15:df:23:
                    0a:7e:5b:57:ae:b0:4e:82:4d:ee:02:11:dd:1a:a6:
                    82:ef:f3:1e:19:42:87:96:f7:10:47:74:ee:41:41:
                    04:9b:9b:b1:43:2b:10:51:6c:63:14:bd:96:ef:26:
                    f6:57:ac:49:89:cd:a4:24:7c:e8:be:05:f8:c7:17:
                    76:59:9e:e0:d5:bd:00:ff:85:c9:b4:06:0d:16:86:
                    6d:3c:59:fb:f9:91:be:b0:3a:68:45:9b:5a:8e:7d:
                    16:ec:2b:5f:44:9a:ab:da:e9:41:3e:82:46:24:35:
                    13:8e:de:89:74:67:a0:78:02:c4:ee:22:b3:2b:f2:
                    d6:04:2d:4d:77:7c:44:b0:7f:5d:73:c6:d9:c0:41:
                    73:15:19:c4:54:bf:c6:57:cf:4e:57:1d:79:8f:37:
                    a6:25:5a:d7:38:25:fb:63:dc:93:9d:c2:60:44:cf:
                    8d:2d:a0:6d:1d:2a:00:2b:79:42:7c:36:2b:ee:f1:
                    fe:79:70:ec:06:ae:63:99:b2:52:94:29:70:c9:72:
                    10:3d:5c:8b:56:99:4b:ea:b4:b0:a9:29:2b:2f:43:
                    5e:83:0f:20:6d:02:6d:d9:ef:ba:94:47:b2:1c:77:
                    57:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:26:DD:E8:B5:1D:AC:A5:06:61:90:75:CB:6B:B4:4A:C4:B3:0E:42
            X509v3 Authority Key Identifier:
                keyid:EC:34:2A:DD:81:63:36:58:33:01:12:D2:BF:8B:1D:E3:EE:19:F6:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/EC342ADD81633658330112D2BF8B1DE3EE19F684.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7DQq3YFjNlgzARLSv4sd4-4Z9oQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/727b5ef7-d121-4ae2-bab6-410d205349b8/0/EC342ADD81633658330112D2BF8B1DE3EE19F684.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:41:e9:f1:f7:1e:8a:54:7e:d6:77:de:3f:e5:e1:91:45:67:
         84:f4:8a:82:0f:8e:ec:c0:87:d7:13:aa:fd:15:ec:a9:5e:a0:
         cb:c2:8e:fa:90:43:16:c4:a7:df:3e:47:f5:69:eb:fc:59:cc:
         a4:45:02:f3:a3:b5:cf:a8:f3:75:f5:f9:74:86:75:66:29:76:
         69:e4:b2:d5:f9:ab:13:e6:eb:48:8d:da:64:70:f1:8f:2c:cb:
         cc:84:13:f1:ce:ed:99:a8:7e:ed:1e:e4:3c:23:b3:c2:c8:81:
         f0:4c:b7:80:9a:a9:5c:f0:70:ab:ae:68:5f:ec:0e:0e:f3:70:
         94:4a:d1:b2:db:92:37:6b:21:d0:f3:02:f8:82:59:9c:6a:dd:
         36:2c:40:1d:de:2c:7b:24:cd:48:eb:92:5f:ce:cb:11:79:72:
         e6:10:7c:91:15:29:af:e6:af:b6:4c:d6:37:6a:b3:ee:7e:21:
         57:6e:a4:d5:aa:8f:8e:49:db:23:d6:5f:16:86:ff:27:62:08:
         03:11:78:1d:c7:87:ae:e1:9a:9f:c6:90:87:90:1c:fb:f7:79:
         fa:ef:76:b7:0c:ee:d7:a2:33:ca:6b:f1:5b:f0:07:ad:3a:4d:
         8a:c2:3a:57:cf:c9:ae:db:8f:c1:91:ab:47:6a:8f:d0:2c:56:
         e0:07:ef:13
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUUgi4ga91+G6L8ITZzmXscBLiW2EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZWMzNDJhZGQ4MTYzMzY1ODMzMDExMmQyYmY4YjFkZTNl
ZTE5ZjY4NDAeFw0yNjAyMDEyMjQ4NTRaFw0yNjAyMDMwMDUwNTRaMDMxMTAvBgNV
BAMTKDE0MjZEREU4QjUxREFDQTUwNjYxOTA3NUNCNkJCNDRBQzRCMzBFNDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsCAmN4E94YUMaFq43vk1dzt4R
c/85uSbb/BXfIwp+W1eusE6CTe4CEd0apoLv8x4ZQoeW9xBHdO5BQQSbm7FDKxBR
bGMUvZbvJvZXrEmJzaQkfOi+BfjHF3ZZnuDVvQD/hcm0Bg0Whm08Wfv5kb6wOmhF
m1qOfRbsK19Emqva6UE+gkYkNROO3ol0Z6B4AsTuIrMr8tYELU13fESwf11zxtnA
QXMVGcRUv8ZXz05XHXmPN6YlWtc4Jftj3JOdwmBEz40toG0dKgAreUJ8Nivu8f55
cOwGrmOZslKUKXDJchA9XItWmUvqtLCpKSsvQ16DDyBtAm3Z77qUR7Icd1dLAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUFCbd6LUdrKUGYZB1y2u0SsSzDkIwHwYDVR0j
BBgwFoAU7DQq3YFjNlgzARLSv4sd4+4Z9oQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzI3YjVlZjctZDEyMS00YWUyLWJhYjYtNDEwZDIwNTM0
OWI4LzAvRUMzNDJBREQ4MTYzMzY1ODMzMDExMkQyQkY4QjFERTNFRTE5RjY4NC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdEUXEzWUZqTmxnekFSTFN2NHNkNC00
WjlvUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MjdiNWVmNy1k
MTIxLTRhZTItYmFiNi00MTBkMjA1MzQ5YjgvMC9FQzM0MkFERDgxNjMzNjU4MzMw
MTEyRDJCRjhCMURFM0VFMTlGNjg0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdUHp8fceilR+1nfeP+Xh
kUVnhPSKgg+O7MCH1xOq/RXsqV6gy8KO+pBDFsSn3z5H9Wnr/FnMpEUC86O1z6jz
dfX5dIZ1Zil2aeSy1fmrE+brSI3aZHDxjyzLzIQT8c7tmah+7R7kPCOzwsiB8Ey3
gJqpXPBwq65oX+wODvNwlErRstuSN2sh0PMC+IJZnGrdNixAHd4seyTNSOuSX87L
EXly5hB8kRUpr+avtkzWN2qz7n4hV26k1aqPjknbI9ZfFob/J2IIAxF4HceHruGa
n8aQh5Ac+/d5+u92twzu16IzymvxW/AHrTpNisI6V8/JrtuPwZGrR2qP0CxW4Afv
Ew==
-----END CERTIFICATE-----
Generated at Mon Feb 2 08:07:38 2026 by rpki-client