This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
File:                     6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft (raw, json)
Hash identifier:          FGLlUoae2XInl2pvp6aNnMyIItXQUOfQJVaxwbZn0Xs=
Subject key identifier:   35:93:3E:EC:EA:A6:E3:E5:ED:6C:48:74:AC:02:C1:16:53:4C:04:E1
Authority key identifier: 6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD
Certificate issuer:       /CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
Certificate serial:       658A7188DB384437DE0B8C324A788EA59F07BF2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
Manifest number:          035F
Signing time:             Sun 25 Jan 2026 11:53:49 +0000
Manifest this update:     Sun 25 Jan 2026 11:48:49 +0000
Manifest next update:     Mon 26 Jan 2026 14:23:49 +0000
Files and hashes:         1: AS216107.asa (hash: SZjGVwi1GjAkhFm3nT5ayCum6XandBtWxpLVDU2nJp8=)
                          2: 6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl (hash: 2Ai01c1LZen38wLq2EI4jSv5cJfIUCGYNW2sWIPbAoo=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:8a:71:88:db:38:44:37:de:0b:8c:32:4a:78:8e:a5:9f:07:bf:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e770b714f66f0f2d4464029dfcd865bb7ee76cd
        Validity
            Not Before: Jan 25 11:48:49 2026 GMT
            Not After : Jan 26 14:23:49 2026 GMT
        Subject: CN=35933EECEAA6E3E5ED6C4874AC02C116534C04E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e5:2d:5f:6e:52:e7:79:01:0f:a3:d4:bc:51:
                    53:f8:70:96:39:1b:3d:05:7e:5e:58:32:66:57:2f:
                    ce:6a:ce:83:5c:d9:76:af:e7:c2:33:80:78:03:80:
                    35:0d:09:c0:7d:18:06:98:c2:81:c1:f5:8e:4f:f3:
                    fe:6f:b6:72:90:5b:70:da:0d:48:b7:af:e4:4b:a3:
                    f6:91:8a:a9:54:40:b0:3b:22:99:e1:2b:3a:2e:da:
                    66:08:51:ed:1a:6d:4f:64:26:c5:25:60:b5:30:17:
                    17:b7:2f:7e:f0:58:cb:d7:03:6b:f3:3d:d2:ab:b7:
                    ac:9a:8d:85:5c:38:2f:09:99:8f:94:06:a2:2a:53:
                    d2:7f:0f:e5:aa:22:e4:73:16:d0:1c:56:1c:db:63:
                    36:10:bd:26:c2:b8:4e:6a:52:f8:e6:41:97:e8:08:
                    69:e2:2b:1e:de:8d:d2:bf:a5:3d:f8:f2:ea:ea:78:
                    f9:97:78:50:cc:49:36:64:55:1a:a1:da:ad:6f:41:
                    f4:75:69:8c:48:1a:16:73:86:91:3b:55:50:81:74:
                    8d:34:fd:bf:4b:ea:93:67:31:c4:c5:8d:57:e8:85:
                    95:1b:f6:85:ac:3a:4c:a9:aa:54:15:36:d2:6a:2d:
                    3a:7b:3f:9a:5c:be:e3:ad:6f:98:c5:94:e8:55:5d:
                    cb:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:93:3E:EC:EA:A6:E3:E5:ED:6C:48:74:AC:02:C1:16:53:4C:04:E1
            X509v3 Authority Key Identifier:
                keyid:6E:77:0B:71:4F:66:F0:F2:D4:46:40:29:DF:CD:86:5B:B7:EE:76:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bncLcU9m8PLURkAp382GW7fuds0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/0/6E770B714F66F0F2D4464029DFCD865BB7EE76CD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:67:e5:e6:2e:c1:28:20:fe:a5:72:94:dc:06:41:41:eb:ff:
         48:7f:89:c8:46:af:bd:15:26:76:69:1a:89:6a:99:1b:71:dd:
         af:af:fd:25:a2:9c:5e:92:3c:15:f5:46:2f:41:13:db:16:c4:
         6d:bf:37:6f:c3:a1:d6:0c:f1:f3:6a:51:84:2d:32:18:bb:29:
         ef:84:b2:3a:ac:d4:85:c9:85:ab:71:0f:31:7c:83:52:52:8e:
         e3:20:8b:17:7a:f6:84:d9:ee:dc:8e:72:be:d2:2a:c2:ee:a0:
         cc:97:bc:33:03:74:60:4f:12:fd:b7:79:de:f0:5b:93:6a:bc:
         91:31:50:b0:19:27:23:fb:e0:b9:b5:ef:29:68:00:c0:56:15:
         99:bc:9f:8e:33:1f:c5:1c:28:62:b0:03:c1:47:63:0f:29:16:
         31:2a:1c:cc:d9:2b:cd:be:a1:04:1d:79:d5:9f:51:39:f6:d2:
         b1:bf:86:12:7e:c6:6d:e7:15:38:92:e2:ea:56:45:15:83:f6:
         7c:8f:64:47:71:29:6b:49:99:72:9b:45:a7:8a:d4:8d:7f:8d:
         55:c5:e2:a9:5e:01:4c:2f:e3:33:b3:44:78:8a:ec:c3:7e:fd:
         6c:71:03:45:7c:5c:69:cf:08:1f:e8:11:86:b8:6a:10:90:ca:
         08:8f:f4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:24:32 2026 by rpki-client