This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.mft
File:                     E7585B5CD477D90075CDB63109F57279766C2976.mft (raw, json)
Hash identifier:          DGMaulBasY5zPZiOlhIvN19Rxej7Ost/myM6ikEwd5s=
Subject key identifier:   F6:FB:DB:0E:82:F3:7D:6F:DD:5F:7C:37:5A:1D:C5:A4:D5:A1:C3:36
Authority key identifier: E7:58:5B:5C:D4:77:D9:00:75:CD:B6:31:09:F5:72:79:76:6C:29:76
Certificate issuer:       /CN=e7585b5cd477d90075cdb63109f57279766c2976
Certificate serial:       1848ED904644C1E49EFBC99EEB746FB6314F25D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/51hbXNR32QB1zbYxCfVyeXZsKXY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.mft
Manifest number:          A2
Signing time:             Sun 01 Feb 2026 13:25:02 +0000
Manifest this update:     Sun 01 Feb 2026 13:20:02 +0000
Manifest next update:     Mon 02 Feb 2026 15:54:02 +0000
Files and hashes:         1: AS52112.asa (hash: k1dT0USOW6BxHoz9q3E4S9mfG6kLP+S5hbS8fUHZGks=)
                          2: 323030313a3766383a38393a3a2f34382d3634203d3e203438323830.roa (hash: toWECki1z50+cTDXuuD0ix4TCBXmtlZ4RV70JAsHdxg=)
                          3: E7585B5CD477D90075CDB63109F57279766C2976.crl (hash: RK6CmW+zcw2dvXhrocohD2u3NCPesTwjSjxdPb34SNc=)
                          4: 326130393a323530303a3a2f34382d3438203d3e203532313132.roa (hash: TDWiIW/XU7HlZAno8Kh/w5WDO0yfFHK1ooS2A8uJ/gU=)
                          5: 3139342e3135332e3135382e302f32362d3236203d3e203438323830.roa (hash: vANCAIBQUmiZCdG8mosZNJVFV3jH6SOLvVTY393OKek=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/51hbXNR32QB1zbYxCfVyeXZsKXY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 15:54:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:48:ed:90:46:44:c1:e4:9e:fb:c9:9e:eb:74:6f:b6:31:4f:25:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7585b5cd477d90075cdb63109f57279766c2976
        Validity
            Not Before: Feb  1 13:20:02 2026 GMT
            Not After : Feb  2 15:54:02 2026 GMT
        Subject: CN=F6FBDB0E82F37D6FDD5F7C375A1DC5A4D5A1C336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a8:a5:d3:7b:9a:95:ba:65:ce:30:6b:9c:3f:
                    9e:09:6a:3a:37:9f:e6:8a:33:00:57:61:ba:a8:be:
                    eb:0d:8b:04:7c:7e:93:31:ef:57:72:dc:c4:9e:0f:
                    5f:ab:f3:6b:ad:d7:e9:c7:82:0b:90:c0:ea:ef:c9:
                    67:9b:e0:49:43:e6:ec:6f:e4:46:eb:5c:a8:f4:66:
                    da:43:c9:80:60:1f:3e:b0:02:ca:67:a0:87:f2:00:
                    77:4b:7a:a3:8e:27:1c:ce:18:c3:64:25:9a:cd:3d:
                    af:a9:73:a1:be:32:a0:a1:b5:3d:a9:93:f4:da:1e:
                    41:31:cc:a7:0a:4d:fe:63:41:2c:a2:40:d3:33:27:
                    60:97:90:ee:f5:3c:cd:e4:91:63:d2:6c:0f:f0:ad:
                    dd:d1:62:f9:92:e0:74:21:18:7c:12:3d:e5:5e:2a:
                    60:7c:01:60:16:8c:40:c0:80:31:bd:28:7e:2f:7e:
                    70:d7:27:17:a4:33:ce:92:16:c0:37:17:b2:09:f5:
                    b7:85:e5:c2:5f:4d:6c:e0:fe:27:1c:d8:4e:58:1b:
                    33:2c:e3:fd:ff:bb:93:b4:ad:f6:39:61:5c:bb:61:
                    3a:16:c3:3d:d4:99:e8:dc:75:ba:da:86:51:c8:3f:
                    24:f1:f3:1c:b8:91:18:df:a1:2c:24:36:34:69:27:
                    58:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:FB:DB:0E:82:F3:7D:6F:DD:5F:7C:37:5A:1D:C5:A4:D5:A1:C3:36
            X509v3 Authority Key Identifier:
                keyid:E7:58:5B:5C:D4:77:D9:00:75:CD:B6:31:09:F5:72:79:76:6C:29:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51hbXNR32QB1zbYxCfVyeXZsKXY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/1/E7585B5CD477D90075CDB63109F57279766C2976.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:63:32:ab:3e:26:ce:f4:a4:ee:8b:79:de:15:2b:45:e1:83:
         44:de:08:79:8d:98:3c:dd:7b:25:ab:1b:04:82:fe:b2:03:5e:
         9a:c5:cd:66:c4:8e:51:72:61:ec:ad:a4:3e:fe:52:33:bb:ae:
         d9:55:93:de:68:cd:53:67:2e:90:02:61:cd:8b:ee:04:12:48:
         6f:20:c4:a3:3b:25:b9:95:6a:fb:98:aa:84:d3:00:5b:1b:40:
         05:d4:7b:ca:25:55:75:94:07:35:e9:2d:98:78:b0:6e:4f:59:
         ab:0f:59:d0:62:45:ad:83:9b:7c:0f:1b:a0:c6:91:0c:07:30:
         2d:ea:f7:ec:2b:5b:4f:47:85:40:9c:dc:b9:34:ae:05:bc:61:
         31:3d:89:fc:2b:6d:b7:6a:15:16:e2:4e:1a:3b:75:5f:5b:45:
         70:41:b3:f7:94:46:22:19:53:2b:f8:e7:f9:dc:7d:6e:1c:c0:
         03:80:7d:40:2a:92:87:51:d1:83:cc:2a:9f:9e:b9:92:a9:f7:
         57:de:e1:8d:c7:dc:97:b3:2a:4d:44:2e:03:89:0b:43:62:84:
         8a:b4:45:48:bc:a5:b2:c0:a3:06:84:2f:dc:d5:4e:48:76:43:
         db:cb:79:02:4e:2c:ba:01:06:57:5f:e0:fc:87:84:0c:6d:73:
         5a:80:f6:06
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUGEjtkEZEweSe+8me63RvtjFPJdIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZTc1ODViNWNkNDc3ZDkwMDc1Y2RiNjMxMDlmNTcyNzk3
NjZjMjk3NjAeFw0yNjAyMDExMzIwMDJaFw0yNjAyMDIxNTU0MDJaMDMxMTAvBgNV
BAMTKEY2RkJEQjBFODJGMzdENkZERDVGN0MzNzVBMURDNUE0RDVBMUMzMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPqKXTe5qVumXOMGucP54Jajo3
n+aKMwBXYbqovusNiwR8fpMx71dy3MSeD1+r82ut1+nHgguQwOrvyWeb4ElD5uxv
5EbrXKj0ZtpDyYBgHz6wAspnoIfyAHdLeqOOJxzOGMNkJZrNPa+pc6G+MqChtT2p
k/TaHkExzKcKTf5jQSyiQNMzJ2CXkO71PM3kkWPSbA/wrd3RYvmS4HQhGHwSPeVe
KmB8AWAWjEDAgDG9KH4vfnDXJxekM86SFsA3F7IJ9beF5cJfTWzg/icc2E5YGzMs
4/3/u5O0rfY5YVy7YToWwz3UmejcdbrahlHIPyTx8xy4kRjfoSwkNjRpJ1gDAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU9vvbDoLzfW/dX3w3Wh3FpNWhwzYwHwYDVR0j
BBgwFoAU51hbXNR32QB1zbYxCfVyeXZsKXYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZTMwZGU4NGItNDAwYS00ZmQxLWFiOGEtZTc2MTZlMjQ1
YjQ5LzEvRTc1ODVCNUNENDc3RDkwMDc1Q0RCNjMxMDlGNTcyNzk3NjZDMjk3Ni5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUxaGJYTlIzMlFCMXpiWXhDZlZ5ZVha
c0tYWS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMzBkZTg0Yi00
MDBhLTRmZDEtYWI4YS1lNzYxNmUyNDViNDkvMS9FNzU4NUI1Q0Q0NzdEOTAwNzVD
REI2MzEwOUY1NzI3OTc2NkMyOTc2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ2Myqz4mzvSk7ot53hUr
ReGDRN4IeY2YPN17JasbBIL+sgNemsXNZsSOUXJh7K2kPv5SM7uu2VWT3mjNU2cu
kAJhzYvuBBJIbyDEozsluZVq+5iqhNMAWxtABdR7yiVVdZQHNektmHiwbk9Zqw9Z
0GJFrYObfA8boMaRDAcwLer37CtbT0eFQJzcuTSuBbxhMT2J/Cttt2oVFuJOGjt1
X1tFcEGz95RGIhlTK/jn+dx9bhzAA4B9QCqSh1HRg8wqn565kqn3V97hjcfcl7Mq
TUQuA4kLQ2KEirRFSLylssCjBoQv3NVOSHZD28t5Ak4sugEGV1/g/IeEDG1zWoD2
Bg==
-----END CERTIFICATE-----
Generated at Mon Feb 2 09:42:58 2026 by rpki-client