This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft
File:                     578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft (raw, json)
Hash identifier:          AzDFn/xBBhfLP3AloQK02uc+Kw0zUBKnXL/ium3mXN4=
Subject key identifier:   B2:A3:52:94:08:DD:90:1E:E4:14:6B:AB:47:EE:CB:08:94:C3:83:79
Authority key identifier: 57:8D:7D:C9:77:9B:27:81:5E:BB:5C:3F:5F:CF:07:CC:58:37:08:B3
Certificate issuer:       /CN=578d7dc9779b27815ebb5c3f5fcf07cc583708b3
Certificate serial:       22B826CA231E1056BDE0971EC00A10982E39F857
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V419yXebJ4Feu1w_X88HzFg3CLM.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft
Manifest number:          01DB
Signing time:             Sun 01 Feb 2026 19:38:18 +0000
Manifest this update:     Sun 01 Feb 2026 19:33:18 +0000
Manifest next update:     Mon 02 Feb 2026 20:39:18 +0000
Files and hashes:         1: 578D7DC9779B27815EBB5C3F5FCF07CC583708B3.crl (hash: uOQR7rDCuYrTGlDgoJdI4y9MY8Qj6TS1XU3bJa63Xxk=)
                          2: AS215296.asa (hash: OtSM7n/M5H4Gr1eK1WwYJcN3J5IxezG9iWmcyo289w0=)
                          3: 3130332e3134372e3135332e302f32342d3234203d3e20323135323936.roa (hash: O+6twnNOV5ruNsTz6gyqZDCueGHR/39L745XmWi2d5I=)
                          4: 323030313a3637633a6533633a3a2f34382d3438203d3e20323135323936.roa (hash: RGTgCra6z97DL3zPw+EaFuLG0rQZ9DlytQ3X3ko6llc=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V419yXebJ4Feu1w_X88HzFg3CLM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 20:39:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:b8:26:ca:23:1e:10:56:bd:e0:97:1e:c0:0a:10:98:2e:39:f8:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=578d7dc9779b27815ebb5c3f5fcf07cc583708b3
        Validity
            Not Before: Feb  1 19:33:18 2026 GMT
            Not After : Feb  2 20:39:18 2026 GMT
        Subject: CN=B2A3529408DD901EE4146BAB47EECB0894C38379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e8:a8:b4:54:74:7d:05:50:42:91:9f:74:0e:
                    9d:66:c1:4b:44:71:10:20:50:50:b3:83:a4:ad:b6:
                    6c:0e:aa:45:d5:e3:96:ec:9f:0a:80:46:13:46:9a:
                    7e:27:a4:0c:a2:c4:00:d5:93:e8:fe:12:e3:83:9b:
                    bc:07:47:3f:ee:b8:26:43:3a:9d:f1:b4:f0:75:94:
                    d9:44:d1:07:d0:33:97:5c:05:5e:42:36:6f:19:d6:
                    b2:c7:95:5f:f0:3f:dc:a5:1d:37:9b:a8:a9:66:28:
                    00:8e:5f:07:7c:24:18:10:a4:83:0f:22:d5:3e:80:
                    d4:a1:fb:fb:a9:75:97:3d:d9:0d:bf:98:d7:88:08:
                    2a:8a:9b:b9:db:f6:e8:87:72:a4:29:77:4c:e6:cf:
                    5f:1d:d7:09:b0:be:cc:c8:e6:fa:75:7e:93:2d:13:
                    14:5a:03:87:39:f3:7e:0d:bd:c6:f4:2f:f6:b2:1a:
                    2a:73:f9:13:95:d5:7e:78:bb:60:20:13:df:fe:67:
                    03:27:56:15:54:70:30:43:31:ab:3c:2a:fc:bc:40:
                    76:6e:85:67:cd:40:4b:b5:28:6e:3a:22:99:75:cc:
                    4c:57:bf:36:d0:11:47:ef:46:a5:ac:7e:49:b9:b0:
                    53:e4:a8:04:77:23:a9:fe:62:9e:c4:66:0f:e1:7a:
                    75:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:A3:52:94:08:DD:90:1E:E4:14:6B:AB:47:EE:CB:08:94:C3:83:79
            X509v3 Authority Key Identifier:
                keyid:57:8D:7D:C9:77:9B:27:81:5E:BB:5C:3F:5F:CF:07:CC:58:37:08:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V419yXebJ4Feu1w_X88HzFg3CLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eca25350-9e3f-46e1-ae2b-1c61b6ea5ae2/0/578D7DC9779B27815EBB5C3F5FCF07CC583708B3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:5e:77:9a:f7:a8:20:fb:bb:b0:ac:5e:e4:f3:5f:4e:8c:68:
         63:6d:14:58:04:04:1b:28:37:2b:b3:04:c2:ae:55:d7:3b:19:
         55:cf:c6:43:1b:ed:e6:7d:0e:d6:44:59:75:8d:33:e1:79:19:
         ca:91:03:37:1a:67:d8:bd:3e:ee:f6:f7:a5:00:0a:61:fb:e8:
         d1:ba:d4:69:e2:92:3a:da:2d:ca:48:d3:7a:e5:25:df:aa:39:
         b4:c1:4e:ee:b0:32:cc:02:8f:24:05:9f:31:f3:ca:86:d9:30:
         dd:57:af:4b:43:ba:2b:3a:0c:c7:98:eb:9e:e2:76:ab:c1:21:
         1a:32:87:13:b2:b7:1a:50:57:7d:bf:52:8f:0d:8f:03:58:07:
         65:fd:7e:3c:3f:7a:b1:3b:08:ce:e8:a6:14:54:33:4f:8f:d3:
         37:5a:0b:b4:0e:04:b3:34:1c:74:c7:3a:74:5f:c5:92:da:74:
         7b:25:f0:8d:0e:7e:21:ef:40:52:3d:d3:26:6a:9c:e6:76:bd:
         62:a8:9a:ed:1e:cc:c7:78:cd:4b:60:58:5b:38:43:db:26:90:
         52:74:64:6b:84:1d:cb:a3:10:4d:fe:b9:2c:e4:61:da:a8:41:
         14:8f:6d:09:f7:81:02:25:66:2c:3f:b5:62:10:3b:d2:f4:cd:
         1e:6e:03:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 08:13:44 2026 by rpki-client