This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/0/E9FECC3A47B78711E034023473F15AD3B8D48DF9.mft
File:                     E9FECC3A47B78711E034023473F15AD3B8D48DF9.mft (raw, json)
Hash identifier:          lKQkXAwmpF7JLRSWURloT2irl/0xisozboE/GrnlVqQ=
Subject key identifier:   47:08:71:24:BD:8A:4D:29:5A:AB:D9:9C:4F:99:43:9D:11:C6:7D:53
Authority key identifier: E9:FE:CC:3A:47:B7:87:11:E0:34:02:34:73:F1:5A:D3:B8:D4:8D:F9
Certificate issuer:       /CN=e9fecc3a47b78711e034023473f15ad3b8d48df9
Certificate serial:       7181380C93FB362D74FA134D2047C5517AE5246D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6f7MOke3hxHgNAI0c_Fa07jUjfk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/0/E9FECC3A47B78711E034023473F15AD3B8D48DF9.mft
Manifest number:          DA
Signing time:             Mon 02 Feb 2026 03:02:54 +0000
Manifest this update:     Mon 02 Feb 2026 02:57:54 +0000
Manifest next update:     Tue 03 Feb 2026 06:42:54 +0000
Files and hashes:         1: E9FECC3A47B78711E034023473F15AD3B8D48DF9.crl (hash: DCxZ6EUnJdC7rDeFVbqWVyITS0xO8P34D/ED944T3UA=)
                          2: AS207529.asa (hash: WJefrQG9jYfFgi+h6I7ifnwzueVo1DrEwVXU/kxbyaA=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/0/E9FECC3A47B78711E034023473F15AD3B8D48DF9.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/0/E9FECC3A47B78711E034023473F15AD3B8D48DF9.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6f7MOke3hxHgNAI0c_Fa07jUjfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 21:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:81:38:0c:93:fb:36:2d:74:fa:13:4d:20:47:c5:51:7a:e5:24:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9fecc3a47b78711e034023473f15ad3b8d48df9
        Validity
            Not Before: Feb  2 02:57:54 2026 GMT
            Not After : Feb  3 06:42:54 2026 GMT
        Subject: CN=47087124BD8A4D295AABD99C4F99439D11C67D53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:32:e5:04:ce:1d:27:ad:b9:66:f1:55:e8:92:
                    44:99:de:59:6b:b5:2b:e9:cf:b4:05:15:66:ac:a3:
                    dc:a1:1e:a1:91:29:c3:29:13:66:39:81:40:b7:eb:
                    a7:ac:42:23:f0:11:4c:ad:45:de:fa:e7:9a:26:b4:
                    14:13:3d:4f:ce:a5:cd:f9:b2:ee:c1:00:8e:f8:42:
                    63:3c:c2:6b:b9:ac:3b:61:c1:08:8e:03:7c:dd:04:
                    d0:64:c0:ea:b7:5c:d2:d3:75:60:a8:e3:53:17:d3:
                    27:4d:0a:6f:08:6c:f9:10:54:de:e3:ed:98:f3:d5:
                    a6:0e:bd:96:84:e4:65:0b:97:15:4f:de:7c:c3:1a:
                    0a:a9:20:57:6f:2c:b4:1c:ef:eb:a8:ef:f8:50:17:
                    77:61:fb:64:e9:77:3d:57:f6:78:ea:9f:22:a1:3b:
                    c9:0a:96:13:e8:1c:bd:c5:0e:4a:f4:72:7a:b2:39:
                    fe:b8:ab:e5:4f:cc:4f:6f:e0:60:e1:0d:02:d6:d9:
                    9a:2c:18:96:d7:4d:af:fd:fb:70:ae:70:9e:8d:a6:
                    77:0c:cf:80:f7:df:a4:2a:1c:74:29:5d:90:fa:8f:
                    e7:e8:38:1a:94:af:0c:a4:8a:cf:6f:4c:a2:40:2e:
                    85:dd:30:ad:7a:84:9e:d3:76:99:5c:1b:14:07:58:
                    55:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:08:71:24:BD:8A:4D:29:5A:AB:D9:9C:4F:99:43:9D:11:C6:7D:53
            X509v3 Authority Key Identifier:
                keyid:E9:FE:CC:3A:47:B7:87:11:E0:34:02:34:73:F1:5A:D3:B8:D4:8D:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/0/E9FECC3A47B78711E034023473F15AD3B8D48DF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f7MOke3hxHgNAI0c_Fa07jUjfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/0/E9FECC3A47B78711E034023473F15AD3B8D48DF9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:d9:25:d3:1f:d7:c9:bb:3f:f2:b9:c6:6f:5a:5d:45:c8:14:
         31:9f:b9:9b:dd:58:d4:4b:5d:95:67:2e:e1:db:c2:df:08:25:
         30:52:76:7e:71:d9:19:ff:7d:00:bc:5a:85:5c:5d:17:ce:ec:
         d9:21:f6:4f:4d:2c:bd:34:28:7a:4a:fa:eb:a4:d3:cf:68:9a:
         01:21:e6:fd:bb:aa:b5:45:d0:aa:09:df:bc:31:d6:93:f5:cb:
         27:6c:d5:ab:7a:b3:ff:88:c2:cb:9b:00:fe:fb:5d:1a:37:85:
         1a:c9:f2:da:d4:27:ac:0d:96:32:f0:e0:4a:8e:3d:13:6c:fe:
         7b:bb:d3:70:b3:be:25:ae:0b:dc:9e:33:45:22:db:9c:f1:06:
         a4:98:14:f6:a4:04:8f:1c:61:62:ce:ff:e2:5d:90:9c:e1:21:
         45:4a:f4:ad:d6:8b:38:fa:0f:1e:5e:b5:0a:fb:d4:0b:61:68:
         f5:b8:d4:58:2d:0d:4e:87:78:7f:49:0e:71:ec:c0:39:97:d2:
         9a:8b:5f:ee:76:11:ca:fe:96:b3:7f:9d:be:cc:32:d2:c3:44:
         bc:b1:d7:f2:b3:c9:0b:56:cd:b1:9e:73:52:1f:6d:78:7e:79:
         54:2d:71:0b:14:b1:6a:92:34:90:5f:c6:5f:c2:0b:e7:61:71:
         6e:8d:74:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 08:13:44 2026 by rpki-client