This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.mft
File:                     547BC28C92A229A5AC78C0DE287D89CE37726409.mft (raw, json)
Hash identifier:          S03XH3aDL5t8kZKTFm9mNr01B2rw87DhqwQ6e8D32HQ=
Subject key identifier:   A2:96:ED:5D:12:71:76:3C:13:F2:18:0A:88:C1:09:B0:21:9D:CB:C3
Authority key identifier: 54:7B:C2:8C:92:A2:29:A5:AC:78:C0:DE:28:7D:89:CE:37:72:64:09
Certificate issuer:       /CN=547bc28c92a229a5ac78c0de287d89ce37726409
Certificate serial:       248468B0F1A9312A6CCE75D0186346466DC2DC38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VHvCjJKiKaWseMDeKH2JzjdyZAk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.mft
Manifest number:          02D0
Signing time:             Mon 02 Feb 2026 01:05:47 +0000
Manifest this update:     Mon 02 Feb 2026 01:00:47 +0000
Manifest next update:     Tue 03 Feb 2026 01:50:47 +0000
Files and hashes:         1: 547BC28C92A229A5AC78C0DE287D89CE37726409.crl (hash: UaNi7/lMzgnUW6wyeVlNcFZybdKerko3qFgsSf8Zxqk=)
                          2: 323030313a3637383a6362303a3a2f34382d3438203d3e20323034393331.roa (hash: dHqMpXO8Fn1QmdwMgzIUNohViMqf6+wcagP7yILYRFI=)
                          3: AS60431.asa (hash: W8B2btvY8654NatOoBPRRMV+PSLMlHitlzk3n1vMklQ=)
                          4: AS204931.asa (hash: zM51UdB/A/IZqHl1wn4NbUbXZwQrun9iugvDxBnKfTA=)
                          5: 323030313a3637383a6362303a3a2f34382d3438203d3e203630343331.roa (hash: utwrqG/1k6qyhjzxqxfsIfDkj33KE0HmwhjLx5CU12Y=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VHvCjJKiKaWseMDeKH2JzjdyZAk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 21:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:84:68:b0:f1:a9:31:2a:6c:ce:75:d0:18:63:46:46:6d:c2:dc:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=547bc28c92a229a5ac78c0de287d89ce37726409
        Validity
            Not Before: Feb  2 01:00:47 2026 GMT
            Not After : Feb  3 01:50:47 2026 GMT
        Subject: CN=A296ED5D1271763C13F2180A88C109B0219DCBC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:63:2f:f7:1d:77:5d:69:21:49:64:db:41:b7:
                    6b:97:22:0b:2b:02:68:a0:52:6e:ec:2b:7b:42:0c:
                    e4:ba:06:a3:b3:3b:7d:36:18:c5:4a:14:de:16:cf:
                    46:e6:a6:84:d7:98:be:81:16:d7:8b:82:b5:c6:3c:
                    38:84:4b:29:b3:d2:a2:32:fd:c1:db:37:bf:86:a0:
                    d9:27:03:7f:09:db:88:8e:86:a1:36:90:bf:46:86:
                    dc:c9:d2:30:ac:7e:0a:0f:4e:76:26:89:df:ef:cc:
                    9a:f0:9a:74:4c:f4:4b:3c:aa:e1:be:cf:2c:36:14:
                    1a:14:1a:49:64:51:96:8e:6b:d8:05:da:04:11:fc:
                    88:7c:f1:f9:aa:9a:8e:e5:80:aa:2b:be:76:4c:7c:
                    6b:7e:49:1d:95:53:16:80:ef:de:fc:c3:fd:f9:9e:
                    b8:cd:09:b3:92:14:3f:4d:04:a0:5b:5a:5d:56:f2:
                    3d:39:4f:53:4c:ca:e7:df:9b:95:1a:58:e0:64:89:
                    09:cc:22:f7:a7:16:63:70:1c:dc:8a:0c:3b:91:cc:
                    c2:db:68:33:f7:39:d3:4c:aa:1f:98:a3:24:54:a7:
                    01:b5:53:b6:28:5e:c6:65:1d:a1:20:ca:fc:7e:57:
                    20:04:66:ce:c8:73:bd:57:93:d9:8a:50:b7:1b:19:
                    41:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:96:ED:5D:12:71:76:3C:13:F2:18:0A:88:C1:09:B0:21:9D:CB:C3
            X509v3 Authority Key Identifier:
                keyid:54:7B:C2:8C:92:A2:29:A5:AC:78:C0:DE:28:7D:89:CE:37:72:64:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHvCjJKiKaWseMDeKH2JzjdyZAk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:43:a0:32:1c:5c:a0:d6:ce:51:3f:ad:b1:c7:0b:24:5e:21:
         76:b8:3e:e9:50:f7:08:38:b4:7e:45:7d:88:e0:cf:ed:50:52:
         d3:0c:42:8f:14:0c:2b:ae:91:14:e8:39:88:bb:75:74:6e:8a:
         8d:07:39:38:f8:66:18:be:36:11:69:98:60:25:76:2a:be:3c:
         81:bd:49:42:77:11:bc:2b:8d:f4:89:41:b1:3c:ef:77:f5:89:
         b9:c7:4d:c1:40:5b:0b:24:59:48:ab:25:59:7d:e5:18:1b:58:
         6d:80:23:fa:b9:09:da:ea:e5:f4:ef:42:9e:b3:23:1b:52:23:
         13:45:47:01:4e:04:42:11:7b:1f:46:dd:04:15:ab:d1:fa:8a:
         ab:56:3d:4d:8e:da:31:d5:95:4c:f1:88:eb:c0:e3:0c:65:15:
         c9:9e:f8:65:e9:69:ee:a2:db:66:a3:05:2e:b2:c8:c8:4c:07:
         96:1f:d8:11:8b:89:c2:31:e8:94:51:30:12:56:3a:62:46:6d:
         5d:de:44:a3:28:7c:ba:cb:b9:2c:e3:3f:aa:cf:26:74:6c:7d:
         2b:e5:69:ad:94:28:98:9f:06:62:d6:0e:4b:f3:76:82:b0:eb:
         3e:38:09:d4:03:fd:63:7a:3c:56:b0:58:6c:a9:31:e7:b3:c7:
         37:69:2b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 08:13:54 2026 by rpki-client