This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/4/A6C17E7D363F18F73A2A8E34C1425D2D4656203B.mft
File:                     A6C17E7D363F18F73A2A8E34C1425D2D4656203B.mft (raw, json)
Hash identifier:          x54+sRdFiwvb7t1Nw1kK5kT0VpD0ZNyUJOYBr3ZfFDI=
Subject key identifier:   66:BA:61:A8:2F:23:5A:23:4D:11:7D:F9:A5:A2:E8:78:3D:70:E0:F1
Authority key identifier: A6:C1:7E:7D:36:3F:18:F7:3A:2A:8E:34:C1:42:5D:2D:46:56:20:3B
Certificate issuer:       /CN=a6c17e7d363f18f73a2a8e34c1425d2d4656203b
Certificate serial:       7D53815F17AB0923089B24F7A0837A9DA4E45A76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/psF-fTY_GPc6Ko40wUJdLUZWIDs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/4/A6C17E7D363F18F73A2A8E34C1425D2D4656203B.mft
Manifest number:          023A
Signing time:             Mon 09 Feb 2026 15:56:16 +0000
Manifest this update:     Mon 09 Feb 2026 15:51:16 +0000
Manifest next update:     Tue 10 Feb 2026 18:42:16 +0000
Files and hashes:         1: A6C17E7D363F18F73A2A8E34C1425D2D4656203B.crl (hash: qQs+duSPiUl09blM1XGsWkQQNJVZUhLDLVsAucjxtPo=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/4/A6C17E7D363F18F73A2A8E34C1425D2D4656203B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/4/A6C17E7D363F18F73A2A8E34C1425D2D4656203B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/psF-fTY_GPc6Ko40wUJdLUZWIDs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:53:81:5f:17:ab:09:23:08:9b:24:f7:a0:83:7a:9d:a4:e4:5a:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6c17e7d363f18f73a2a8e34c1425d2d4656203b
        Validity
            Not Before: Feb  9 15:51:16 2026 GMT
            Not After : Feb 10 18:42:16 2026 GMT
        Subject: CN=66BA61A82F235A234D117DF9A5A2E8783D70E0F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:90:9c:b9:92:19:05:a7:1a:7a:46:47:99:e7:
                    0f:5d:78:29:97:df:9d:c5:da:9f:bd:9d:a9:f7:5a:
                    b7:b2:cf:c8:27:cf:20:04:d1:55:5a:a4:58:c0:ae:
                    f3:4a:d5:c3:1c:42:fb:6e:80:c7:5f:2e:6d:01:88:
                    d3:f6:e9:07:08:7a:b9:95:8c:89:c3:15:8b:c0:6b:
                    8b:61:b7:97:cb:91:5c:55:e2:15:c2:f3:bd:c0:4e:
                    6a:45:65:35:54:ad:c2:59:5e:2c:9a:08:20:6a:74:
                    b9:10:ff:08:af:0b:d3:a7:3a:f9:8a:43:85:57:0a:
                    28:a1:9e:29:32:36:25:00:36:b8:57:0a:7b:3b:9b:
                    47:ba:c5:f4:94:73:4d:2c:03:10:72:7b:31:50:b6:
                    ea:37:af:61:12:01:08:45:c5:1c:4f:5a:64:16:e9:
                    0f:cf:bf:77:5c:b3:88:60:4e:d0:9a:c5:fd:ce:77:
                    1c:d6:77:1c:19:c4:a2:88:6d:ee:8d:a8:ec:a4:cc:
                    a4:98:18:28:81:ff:55:32:5a:77:b7:8d:7a:8b:22:
                    18:78:00:e9:d5:47:91:b3:3b:b4:12:40:ad:39:71:
                    39:bd:16:45:dd:4f:b6:0c:da:0a:7c:62:57:01:b1:
                    41:58:83:d7:d0:90:b8:b4:7a:14:5b:4b:ea:77:c2:
                    e9:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:BA:61:A8:2F:23:5A:23:4D:11:7D:F9:A5:A2:E8:78:3D:70:E0:F1
            X509v3 Authority Key Identifier:
                keyid:A6:C1:7E:7D:36:3F:18:F7:3A:2A:8E:34:C1:42:5D:2D:46:56:20:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/4/A6C17E7D363F18F73A2A8E34C1425D2D4656203B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psF-fTY_GPc6Ko40wUJdLUZWIDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/4/A6C17E7D363F18F73A2A8E34C1425D2D4656203B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:d8:a1:4b:19:df:f0:5c:13:b1:85:e2:b6:db:4f:6b:02:b0:
         c0:67:74:e1:10:b2:92:57:15:65:fe:66:4f:e5:dc:bc:83:9a:
         f1:a2:61:a5:6c:b7:2a:53:23:10:00:a5:cf:31:bb:02:20:15:
         a7:d5:68:5e:07:98:be:e2:db:25:3f:b1:09:92:e9:93:77:ad:
         ff:fd:be:cf:c0:d9:4a:bf:10:ba:4c:7e:fe:ea:84:b8:67:0c:
         5f:6b:40:ed:91:9f:5d:70:b1:98:27:26:91:56:ac:06:a9:43:
         68:6f:8a:66:f3:b9:7c:48:45:d5:e0:94:3a:19:bc:66:31:86:
         4b:0f:85:89:21:bd:f4:0d:f6:9e:71:75:d8:33:07:86:95:c7:
         a9:2b:49:28:12:29:8b:ad:90:81:2e:0d:72:de:ad:1b:fb:90:
         85:53:9c:b3:df:ab:b4:23:7c:51:15:57:aa:84:e7:c1:06:de:
         59:4c:5e:f0:64:f9:ae:fe:fa:c9:2a:62:0b:a3:05:6b:7b:e7:
         18:ff:91:4e:eb:df:47:95:e0:c2:c7:ff:fe:9e:ee:04:b7:04:
         3a:7b:2a:d3:28:ba:f1:ea:31:7b:74:c8:47:a9:04:5c:e3:72:
         23:75:e9:02:02:89:ef:b8:ac:46:94:af:bb:ba:74:e7:72:4d:
         ed:33:01:93
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUfVOBXxerCSMImyT3oIN6naTkWnYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYTZjMTdlN2QzNjNmMThmNzNhMmE4ZTM0YzE0MjVkMmQ0
NjU2MjAzYjAeFw0yNjAyMDkxNTUxMTZaFw0yNjAyMTAxODQyMTZaMDMxMTAvBgNV
BAMTKDY2QkE2MUE4MkYyMzVBMjM0RDExN0RGOUE1QTJFODc4M0Q3MEUwRjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6kJy5khkFpxp6RkeZ5w9deCmX
353F2p+9nan3Wreyz8gnzyAE0VVapFjArvNK1cMcQvtugMdfLm0BiNP26QcIermV
jInDFYvAa4tht5fLkVxV4hXC873ATmpFZTVUrcJZXiyaCCBqdLkQ/wivC9OnOvmK
Q4VXCiihnikyNiUANrhXCns7m0e6xfSUc00sAxByezFQtuo3r2ESAQhFxRxPWmQW
6Q/Pv3dcs4hgTtCaxf3OdxzWdxwZxKKIbe6NqOykzKSYGCiB/1UyWne3jXqLIhh4
AOnVR5GzO7QSQK05cTm9FkXdT7YM2gp8YlcBsUFYg9fQkLi0ehRbS+p3wumLAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUZrphqC8jWiNNEX35paLoeD1w4PEwHwYDVR0j
BBgwFoAUpsF+fTY/GPc6Ko40wUJdLUZWIDswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDA2MzMzYzYtOTQ2ZC00YjBiLTk1ZWYtZGFiYTI2MmE0
MmUxLzQvQTZDMTdFN0QzNjNGMThGNzNBMkE4RTM0QzE0MjVEMkQ0NjU2MjAzQi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3BzRi1mVFlfR1BjNktvNDB3VUpkTFVa
V0lEcy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kMDYzMzNjNi05
NDZkLTRiMGItOTVlZi1kYWJhMjYyYTQyZTEvNC9BNkMxN0U3RDM2M0YxOEY3M0Ey
QThFMzRDMTQyNUQyRDQ2NTYyMDNCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArdihSxnf8FwTsYXitttP
awKwwGd04RCyklcVZf5mT+XcvIOa8aJhpWy3KlMjEAClzzG7AiAVp9VoXgeYvuLb
JT+xCZLpk3et//2+z8DZSr8Qukx+/uqEuGcMX2tA7ZGfXXCxmCcmkVasBqlDaG+K
ZvO5fEhF1eCUOhm8ZjGGSw+FiSG99A32nnF12DMHhpXHqStJKBIpi62QgS4Nct6t
G/uQhVOcs9+rtCN8URVXqoTnwQbeWUxe8GT5rv76ySpiC6MFa3vnGP+RTuvfR5Xg
wsf//p7uBLcEOnsq0yi68eoxe3TIR6kEXONyI3XpAgKJ77isRpSvu7p053JN7TMB
kw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:02 2026 by rpki-client