This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
File:                     ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft (raw, json)
Hash identifier:          wQ7mT+krOtFcCqP9EsjmOPN86Km/7rZcJuy/7e8XSpc=
Subject key identifier:   C3:F2:08:0B:09:17:2B:51:D4:6A:16:8B:E4:62:12:FE:AF:63:03:35
Authority key identifier: AD:FF:D4:77:85:7D:1E:9B:E9:5B:82:71:7A:42:7F:35:AF:A9:A7:D6
Certificate issuer:       /CN=adffd477857d1e9be95b82717a427f35afa9a7d6
Certificate serial:       202F43584E614A125A24550AB3EB9733CA05BDB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
Manifest number:          02BB
Signing time:             Tue 27 Jan 2026 16:09:17 +0000
Manifest this update:     Tue 27 Jan 2026 16:04:17 +0000
Manifest next update:     Thu 29 Jan 2026 18:41:17 +0000
Files and hashes:         1: AS44355.asa (hash: noT3NQk7rtD6jNk1GY90L8a80oYtiLLuAlQV7OyslJk=)
                          2: ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl (hash: hzk/fLJeaDkbkvR/uSliS7J4LHqqeGii26Z4Hl1L0Xw=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Jan 2026 20:26:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:2f:43:58:4e:61:4a:12:5a:24:55:0a:b3:eb:97:33:ca:05:bd:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adffd477857d1e9be95b82717a427f35afa9a7d6
        Validity
            Not Before: Jan 27 16:04:17 2026 GMT
            Not After : Jan 29 18:41:17 2026 GMT
        Subject: CN=C3F2080B09172B51D46A168BE46212FEAF630335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:b2:eb:81:b9:f7:b3:d8:dc:63:03:e7:c8:f4:
                    6c:4c:9c:4e:b5:bc:b9:e0:9a:77:8b:a9:90:ef:12:
                    6f:67:b2:49:cb:ce:e2:fa:b3:28:29:c5:72:42:5a:
                    bc:17:9f:a0:9e:c9:bf:36:42:8d:fb:1f:90:f2:eb:
                    4e:d0:5a:2d:8e:a5:14:76:3b:54:1c:4b:d6:f8:9b:
                    07:b4:69:1e:bc:0e:b9:ee:a5:d3:c9:a3:c6:87:95:
                    01:d5:45:31:6b:4f:00:1c:ac:66:15:fd:92:8d:f7:
                    0e:42:22:b0:70:f4:cd:26:08:9a:32:43:83:99:e9:
                    d7:7b:f3:d8:b3:e3:8d:38:ef:6c:9c:74:06:e2:e6:
                    90:3d:36:60:d7:a9:a6:16:d1:74:c2:8b:fe:a7:a1:
                    f2:c1:3f:7a:3b:d7:e6:7a:73:a9:e6:3d:0c:3c:12:
                    42:10:ba:83:e0:2d:85:dd:14:a8:f9:5a:9c:8d:92:
                    34:64:5d:9d:47:3b:c2:b6:ef:35:87:a6:24:c2:1a:
                    dc:3f:f8:ba:31:fe:78:d1:5e:38:3e:ad:8b:b0:ee:
                    3c:3d:d1:d4:f1:0c:f9:e7:d2:e9:cd:5b:2e:ca:85:
                    23:27:24:99:9f:e8:88:ab:23:bf:bd:b8:81:ee:c7:
                    7d:91:00:d3:1e:68:95:4b:3c:ab:57:50:4f:71:6f:
                    fe:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F2:08:0B:09:17:2B:51:D4:6A:16:8B:E4:62:12:FE:AF:63:03:35
            X509v3 Authority Key Identifier:
                keyid:AD:FF:D4:77:85:7D:1E:9B:E9:5B:82:71:7A:42:7F:35:AF:A9:A7:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rf_Ud4V9HpvpW4JxekJ_Na-pp9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/2/ADFFD477857D1E9BE95B82717A427F35AFA9A7D6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:48:26:6c:48:e9:d9:ad:f9:d9:ff:34:82:a4:56:ab:58:4c:
         0b:92:3e:a2:a9:9f:e4:c3:d0:b0:7f:7a:f2:24:f1:7a:cf:03:
         96:27:40:41:ff:ea:d5:b0:9d:ac:a8:f0:f8:8c:78:5e:0b:73:
         1d:3a:11:e6:de:3c:63:5d:a1:47:be:1f:37:58:a7:b5:c6:a5:
         d7:9b:d8:65:4a:fc:04:72:62:83:8d:bb:15:a4:16:1e:98:db:
         66:83:a0:fd:2b:23:36:18:9f:e1:1f:57:07:94:cf:d2:d1:14:
         db:4f:4c:7a:59:dd:e5:c9:c4:b5:32:ea:36:e1:55:45:67:bd:
         d7:b5:67:8a:a8:f7:f0:91:b7:87:25:69:67:8a:55:63:07:94:
         2e:5b:b4:3e:15:24:a2:bc:47:0c:fd:be:36:2a:e7:1d:bd:15:
         58:ce:2c:26:4b:06:d9:c4:68:4c:5e:ca:c1:6e:fa:c8:cc:eb:
         de:b1:4f:c9:b1:b9:ec:b2:02:c8:19:a0:fd:f6:bb:38:34:d8:
         13:a3:2b:71:8f:fd:c9:5b:e0:ec:45:78:96:e8:80:8b:dc:f7:
         2b:ef:ab:54:42:f1:95:a9:ba:c7:20:9a:d5:13:4c:da:f5:f9:
         26:e9:17:e8:83:2a:07:ba:e7:35:59:72:fa:3f:a3:55:56:42:
         da:09:18:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 28 03:10:51 2026 by rpki-client