This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
File:                     94521D5EA7B7900080F6E66836D4DEDA347054FD.mft (raw, json)
Hash identifier:          gKnMZIS6ADa0UhMzQl2+Mf1dZxD50FsKvE6D7+0cQHI=
Subject key identifier:   11:2C:C2:63:E4:6F:8A:77:14:5C:4A:8F:7D:7A:F3:B8:FA:A1:98:37
Authority key identifier: 94:52:1D:5E:A7:B7:90:00:80:F6:E6:68:36:D4:DE:DA:34:70:54:FD
Certificate issuer:       /CN=94521d5ea7b7900080f6e66836d4deda347054fd
Certificate serial:       0DE16A8DE4539AF89CF48D7A9BC4DAE32E8AD0CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
Manifest number:          0251
Signing time:             Sun 01 Feb 2026 18:50:20 +0000
Manifest this update:     Sun 01 Feb 2026 18:45:20 +0000
Manifest next update:     Tue 03 Feb 2026 09:38:20 +0000
Files and hashes:         1: 94521D5EA7B7900080F6E66836D4DEDA347054FD.crl (hash: 6lw5n1hdXvD8a4moYZy1AFERyFG62fZJXURsMdi3kaU=)
                          2: AS214701.asa (hash: EwiuTDTlJzzW3BaZbT2OcjZ0BGKln2twmg9+cBCEmTw=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 21:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:e1:6a:8d:e4:53:9a:f8:9c:f4:8d:7a:9b:c4:da:e3:2e:8a:d0:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94521d5ea7b7900080f6e66836d4deda347054fd
        Validity
            Not Before: Feb  1 18:45:20 2026 GMT
            Not After : Feb  3 09:38:20 2026 GMT
        Subject: CN=112CC263E46F8A77145C4A8F7D7AF3B8FAA19837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:10:5f:31:4b:0a:36:00:2a:ac:2f:d8:2d:c1:
                    c7:f1:74:6f:b4:92:73:80:8f:96:2c:87:fe:bd:84:
                    90:3c:8f:9a:41:34:fe:bb:ce:f3:67:0c:29:14:05:
                    0a:23:2d:25:eb:c2:9f:de:1e:5c:eb:44:41:5e:09:
                    45:25:cc:fa:39:47:c7:ff:da:07:41:8a:33:6c:ae:
                    c8:62:7b:0a:0c:08:96:f9:e0:fa:f8:8b:f9:46:c0:
                    44:4d:18:47:b6:98:ec:b4:f0:88:40:fd:8d:af:e3:
                    19:88:47:b1:e9:6e:ef:2b:d4:ea:b7:2e:36:04:99:
                    2f:aa:0d:85:b6:5e:5a:ef:73:a0:35:8d:7b:66:93:
                    0a:9e:d5:9a:b9:17:07:20:6e:c9:eb:de:87:f8:ee:
                    21:e7:81:60:f5:0c:41:51:cd:81:2c:cc:b4:ec:ca:
                    24:91:c0:d1:c1:f0:df:3b:59:38:5f:fa:bf:a6:b1:
                    03:d6:15:6b:19:3b:c8:e8:4d:d0:a6:a6:03:4b:a7:
                    72:07:e1:1c:52:a0:08:0f:29:5f:c8:09:29:14:c5:
                    c6:4a:e3:3d:e8:d9:af:f0:45:37:a5:97:71:01:64:
                    d0:21:45:a1:4d:f5:44:0f:e3:b6:9e:f2:f3:ea:12:
                    46:ef:b3:1b:f2:0d:f8:47:60:a1:35:19:92:51:87:
                    64:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:2C:C2:63:E4:6F:8A:77:14:5C:4A:8F:7D:7A:F3:B8:FA:A1:98:37
            X509v3 Authority Key Identifier:
                keyid:94:52:1D:5E:A7:B7:90:00:80:F6:E6:68:36:D4:DE:DA:34:70:54:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lFIdXqe3kACA9uZoNtTe2jRwVP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/0/94521D5EA7B7900080F6E66836D4DEDA347054FD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:d2:45:de:ad:e2:e7:98:35:3d:85:4c:8d:83:3a:98:cd:2d:
         b1:0d:dc:75:7c:04:31:33:d1:4f:2e:2a:fe:47:85:d3:b4:c1:
         10:90:d9:11:ec:b5:e8:c8:c2:4c:3b:4c:c1:a3:23:34:21:9f:
         01:7f:2a:51:c0:d6:17:e8:b8:00:95:f3:30:73:96:2e:5d:f8:
         c4:5e:0b:f9:13:43:c0:36:da:cb:32:1f:e0:47:2e:08:a8:ec:
         a2:5c:b4:6c:22:05:f8:e8:68:56:13:2e:6e:e0:ee:db:9f:bd:
         a0:8f:e7:f8:50:00:5b:0a:fa:be:69:e5:1d:41:4a:18:ef:ab:
         20:1e:69:9c:12:96:70:b4:c6:fa:70:33:ec:b6:f6:e0:de:fa:
         a3:ce:e0:54:6b:07:c8:52:ff:b0:8a:89:f8:9b:1f:31:c6:b2:
         60:bb:6e:8f:b1:e9:27:82:3e:58:6a:b4:b1:45:a6:10:f5:6a:
         ba:55:1e:a2:d7:a8:71:ed:df:a3:39:5c:6b:a3:71:17:65:e2:
         29:c2:87:ad:3c:07:83:a0:b8:95:11:0b:e1:1c:19:9a:02:7f:
         17:a7:8d:66:1a:b3:fc:bc:8a:4f:b7:69:e6:4e:f2:c2:70:b1:
         7c:02:2f:b7:cb:51:a3:8a:46:8a:cb:eb:38:44:c4:9e:24:78:
         c9:7d:f4:d5
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUDeFqjeRTmvic9I16m8Ta4y6K0MwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTQ1MjFkNWVhN2I3OTAwMDgwZjZlNjY4MzZkNGRlZGEz
NDcwNTRmZDAeFw0yNjAyMDExODQ1MjBaFw0yNjAyMDMwOTM4MjBaMDMxMTAvBgNV
BAMTKDExMkNDMjYzRTQ2RjhBNzcxNDVDNEE4RjdEN0FGM0I4RkFBMTk4MzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGEF8xSwo2ACqsL9gtwcfxdG+0
knOAj5Ysh/69hJA8j5pBNP67zvNnDCkUBQojLSXrwp/eHlzrREFeCUUlzPo5R8f/
2gdBijNsrshiewoMCJb54Pr4i/lGwERNGEe2mOy08IhA/Y2v4xmIR7Hpbu8r1Oq3
LjYEmS+qDYW2Xlrvc6A1jXtmkwqe1Zq5Fwcgbsnr3of47iHngWD1DEFRzYEszLTs
yiSRwNHB8N87WThf+r+msQPWFWsZO8joTdCmpgNLp3IH4RxSoAgPKV/ICSkUxcZK
4z3o2a/wRTell3EBZNAhRaFN9UQP47ae8vPqEkbvsxvyDfhHYKE1GZJRh2TbAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUESzCY+RvincUXEqPfXrzuPqhmDcwHwYDVR0j
BBgwFoAUlFIdXqe3kACA9uZoNtTe2jRwVP0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYmVhZDJkY2YtZWFkNS00OTU0LWFkODQtNjU4MGNkMmE5
YzUwLzAvOTQ1MjFENUVBN0I3OTAwMDgwRjZFNjY4MzZENERFREEzNDcwNTRGRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2xGSWRYcWUza0FDQTl1Wm9OdFRlMmpS
d1ZQMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZWFkMmRjZi1l
YWQ1LTQ5NTQtYWQ4NC02NTgwY2QyYTljNTAvMC85NDUyMUQ1RUE3Qjc5MDAwODBG
NkU2NjgzNkQ0REVEQTM0NzA1NEZELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJdJF3q3i55g1PYVMjYM6
mM0tsQ3cdXwEMTPRTy4q/keF07TBEJDZEey16MjCTDtMwaMjNCGfAX8qUcDWF+i4
AJXzMHOWLl34xF4L+RNDwDbayzIf4EcuCKjsoly0bCIF+OhoVhMubuDu25+9oI/n
+FAAWwr6vmnlHUFKGO+rIB5pnBKWcLTG+nAz7Lb24N76o87gVGsHyFL/sIqJ+Jsf
McayYLtuj7HpJ4I+WGq0sUWmEPVqulUeoteoce3fozlca6NxF2XiKcKHrTwHg6C4
lREL4RwZmgJ/F6eNZhqz/LyKT7dp5k7ywnCxfAIvt8tRo4pGisvrOETEniR4yX30
1Q==
-----END CERTIFICATE-----
Generated at Mon Feb 2 08:15:06 2026 by rpki-client