This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.mft
File:                     C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.mft (raw, json)
Hash identifier:          NYnuXzl0jotSFgqbL5CfL120f0kYR7JKAdpu7diMtE4=
Subject key identifier:   B5:1D:5D:10:69:DB:D8:F9:27:1A:CE:DD:DF:9A:7F:EA:24:5D:7C:27
Authority key identifier: C7:61:50:31:D0:A8:E0:2B:F5:8E:FC:7F:23:30:AF:3D:65:95:4E:FC
Certificate issuer:       /CN=c7615031d0a8e02bf58efc7f2330af3d65954efc
Certificate serial:       1B860CEB8621F055CD5F8998409D128E1585FE68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x2FQMdCo4Cv1jvx_IzCvPWWVTvw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.mft
Manifest number:          0370
Signing time:             Sun 01 Feb 2026 06:30:22 +0000
Manifest this update:     Sun 01 Feb 2026 06:25:22 +0000
Manifest next update:     Tue 03 Feb 2026 07:45:22 +0000
Files and hashes:         1: AS213525.asa (hash: Fq0YNh+tWWvo+GdVGRIwjFZdtE0RP8wN2+bPbK7JSk8=)
                          2: C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.crl (hash: 1objH88cTYU94I3rP9UXWaJdDwjsZ8i4H/iJP7mvEwo=)
                          3: AS214498.asa (hash: MXybwtu+5M9CBNDZHODBSDxfP4tk/0gnYAktlZuo6sk=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x2FQMdCo4Cv1jvx_IzCvPWWVTvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 21:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:86:0c:eb:86:21:f0:55:cd:5f:89:98:40:9d:12:8e:15:85:fe:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7615031d0a8e02bf58efc7f2330af3d65954efc
        Validity
            Not Before: Feb  1 06:25:22 2026 GMT
            Not After : Feb  3 07:45:22 2026 GMT
        Subject: CN=B51D5D1069DBD8F9271ACEDDDF9A7FEA245D7C27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d5:c3:2f:9a:78:d7:ec:9f:89:2b:12:f7:08:
                    ea:ca:69:11:5c:4e:1c:35:bc:e4:96:f6:f4:b1:5a:
                    fd:88:6f:83:dd:93:58:80:8f:24:8e:01:de:d9:43:
                    84:00:85:ea:72:87:cb:c0:ca:3f:c0:5e:94:95:f7:
                    28:21:d0:0d:1f:e1:e9:a3:9f:5f:2e:ff:aa:cc:0e:
                    a8:59:3a:08:36:ae:a1:81:12:c6:78:90:7b:c7:be:
                    b1:9a:e0:36:ad:00:f9:79:0b:ce:c4:e9:fb:33:0a:
                    1e:fd:56:f1:13:49:79:85:b9:7d:76:3c:5f:c3:a2:
                    f4:95:20:d1:95:bb:92:ff:ce:1f:6c:c9:d5:9a:ae:
                    27:f5:6d:03:07:56:63:82:28:71:cf:01:41:b4:eb:
                    09:25:af:a6:2c:4c:df:8f:ba:e6:24:49:d9:27:7e:
                    d0:38:2a:fc:2d:4f:55:fd:03:bf:1e:5e:c2:2f:a2:
                    d6:8e:b5:fd:a6:cb:b6:f2:5c:b4:b8:13:31:0b:d4:
                    37:4f:2d:a5:fb:97:36:2c:c3:d4:c6:e7:2c:5b:8a:
                    4f:9a:27:35:a5:54:52:fd:88:ca:00:5a:a0:f0:6f:
                    f0:e5:95:d6:e7:ad:f6:80:a0:0e:4d:46:f7:6a:08:
                    fb:bd:16:93:63:a6:10:56:dc:c2:ac:cd:0a:e1:88:
                    20:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:1D:5D:10:69:DB:D8:F9:27:1A:CE:DD:DF:9A:7F:EA:24:5D:7C:27
            X509v3 Authority Key Identifier:
                keyid:C7:61:50:31:D0:A8:E0:2B:F5:8E:FC:7F:23:30:AF:3D:65:95:4E:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2FQMdCo4Cv1jvx_IzCvPWWVTvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:d2:99:e4:f7:42:ce:ec:ec:ad:6d:ee:80:79:28:bf:43:3d:
         6e:6e:c3:f3:5e:f1:6b:0f:6b:ff:e8:97:b6:6b:51:00:f9:e7:
         05:28:53:05:8e:8a:c6:56:f1:b1:8e:09:47:fb:f1:f1:c0:8f:
         3c:99:b7:4e:b6:fe:af:9b:5c:c8:0f:59:05:ab:c0:f0:17:9a:
         ec:95:f3:c0:03:74:3c:bd:7a:74:1f:0b:96:83:7a:a0:77:fd:
         7b:38:c4:ac:bb:3a:34:1e:1c:46:c0:e4:5c:4b:34:4c:cd:c5:
         6e:0a:e1:4c:db:ee:9a:b1:97:43:42:80:8e:0a:f2:b1:a3:2b:
         4c:31:d2:41:7e:a0:6e:90:0e:83:6c:3c:9b:38:9e:e8:2a:58:
         01:91:2f:5a:e4:33:29:a3:68:61:68:c4:90:30:d6:2e:f6:c9:
         bf:3f:9a:b6:c1:a0:b1:4f:69:3c:63:9e:13:94:46:1c:f9:88:
         25:be:12:e5:47:98:f3:41:1a:b5:76:4c:40:ce:78:94:71:e3:
         f0:f8:b8:2a:c9:b2:69:78:4a:19:9c:8d:eb:25:07:53:cc:3a:
         5a:14:4e:3d:cd:6a:1f:c9:dd:1b:80:5b:ba:a4:af:31:13:f8:
         f8:ea:5f:88:28:63:e9:bf:aa:99:d3:b0:78:e6:90:e3:33:ba:
         32:f7:4a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 08:17:38 2026 by rpki-client