This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.mft
File:                     317EDB3410058E086217C50FB97009DDE70A6F1A.mft (raw, json)
Hash identifier:          wh5hqiGwhZ8qeCAGXEqSJv/OC+1Q/kyo4ajJBakBxVA=
Subject key identifier:   B9:1E:78:A9:4A:F8:04:60:B1:75:DC:70:65:D8:21:9C:53:F5:82:89
Authority key identifier: 31:7E:DB:34:10:05:8E:08:62:17:C5:0F:B9:70:09:DD:E7:0A:6F:1A
Certificate issuer:       /CN=317edb3410058e086217c50fb97009dde70a6f1a
Certificate serial:       6EC1F0BF2AFF5F4CBB0931DB799587F91E3CE2EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MX7bNBAFjghiF8UPuXAJ3ecKbxo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.mft
Manifest number:          65
Signing time:             Sun 25 Jan 2026 13:04:40 +0000
Manifest this update:     Sun 25 Jan 2026 12:59:40 +0000
Manifest next update:     Mon 26 Jan 2026 16:08:40 +0000
Files and hashes:         1: AS207682.asa (hash: yNMgsZTlVBgZuwAny+gfftheJcltZQ2eLBjscmcmhhI=)
                          2: 317EDB3410058E086217C50FB97009DDE70A6F1A.crl (hash: jQQYPpzob7AENxi8FIOlR7eLmcNqyZ06PTwMXRa4Cm8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MX7bNBAFjghiF8UPuXAJ3ecKbxo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:08:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:c1:f0:bf:2a:ff:5f:4c:bb:09:31:db:79:95:87:f9:1e:3c:e2:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=317edb3410058e086217c50fb97009dde70a6f1a
        Validity
            Not Before: Jan 25 12:59:40 2026 GMT
            Not After : Jan 26 16:08:40 2026 GMT
        Subject: CN=B91E78A94AF80460B175DC7065D8219C53F58289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:c8:0c:8e:40:7d:27:3e:29:d1:76:81:4a:f9:
                    5b:8a:55:67:89:82:0f:3a:fb:de:fd:3f:a5:59:e4:
                    27:ba:a9:70:59:88:ac:c4:63:96:b4:09:83:18:f2:
                    04:83:9f:42:ef:0d:d8:7a:2f:4f:22:ac:51:a9:27:
                    6b:4c:cc:01:06:02:51:78:05:41:6d:12:e5:b6:c5:
                    f8:f4:a9:bb:11:fc:d2:ff:30:8c:d9:14:17:72:38:
                    d4:bd:d9:53:85:fa:ae:27:34:10:db:dd:8d:79:49:
                    fc:8d:80:8e:83:a2:d5:0a:f0:98:46:a3:f6:fa:97:
                    c1:fd:70:de:c7:b2:9f:16:fa:ed:80:e0:6c:ef:b2:
                    c2:e7:76:1b:b3:d1:a6:10:23:b3:3b:23:59:01:7c:
                    71:6c:89:84:f1:01:95:4f:77:fe:cc:d8:29:07:5a:
                    45:15:6e:de:0e:b3:4f:45:02:10:46:59:00:c2:41:
                    52:93:eb:25:d1:ad:db:fe:62:f9:7d:0e:62:e3:f2:
                    7d:c8:85:c5:03:f6:2e:aa:4c:8b:2e:06:2b:b2:ae:
                    e9:60:94:92:c5:1b:13:5c:94:b8:ca:aa:0c:12:e0:
                    b6:19:30:3c:cd:04:3e:2d:40:6a:c9:f1:81:bd:f9:
                    7b:ea:df:fb:1a:af:35:bc:da:88:cf:cf:10:6a:7a:
                    ca:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:1E:78:A9:4A:F8:04:60:B1:75:DC:70:65:D8:21:9C:53:F5:82:89
            X509v3 Authority Key Identifier:
                keyid:31:7E:DB:34:10:05:8E:08:62:17:C5:0F:B9:70:09:DD:E7:0A:6F:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MX7bNBAFjghiF8UPuXAJ3ecKbxo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/3/317EDB3410058E086217C50FB97009DDE70A6F1A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:61:38:69:30:9f:6c:6f:be:fc:e7:7d:b3:48:0b:b2:51:07:
         ef:64:e7:31:fb:18:b4:54:ef:cf:95:f6:16:df:c0:6e:82:95:
         0e:cb:c0:7b:bf:9d:5d:9a:bb:32:af:fa:0b:00:31:94:39:1e:
         53:92:27:47:02:5b:24:59:52:89:fc:1d:b4:13:a3:ff:57:72:
         ab:31:f0:3b:10:df:8d:f7:58:8a:21:7f:23:19:81:bd:28:59:
         24:73:99:17:5c:ff:dd:85:70:0f:11:68:eb:db:a2:54:15:1e:
         07:bc:dd:47:6b:91:56:00:cb:67:13:14:aa:43:a9:45:eb:5c:
         81:14:97:a6:9d:b4:92:96:a4:28:46:49:e3:55:5e:d0:a0:a1:
         2c:76:a0:bf:12:00:e9:e9:e1:77:b2:8e:e1:3f:6d:f3:04:17:
         c8:b0:30:52:49:e7:86:76:d7:3b:c4:ae:bd:2f:99:53:1e:f3:
         fb:b4:0e:62:24:c7:f0:48:58:03:88:7a:c5:c2:84:29:a9:85:
         57:80:9a:b0:4a:bd:92:58:7e:db:92:b4:08:7f:05:58:4a:f4:
         c6:26:b4:24:c4:d5:04:ba:10:b7:05:dc:57:6d:cb:bc:af:c4:
         c8:c1:3f:68:78:85:57:8e:25:13:52:d0:d8:84:ed:79:b7:24:
         84:bf:cd:d7
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUbsHwvyr/X0y7CTHbeZWH+R484uwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzE3ZWRiMzQxMDA1OGUwODYyMTdjNTBmYjk3MDA5ZGRl
NzBhNmYxYTAeFw0yNjAxMjUxMjU5NDBaFw0yNjAxMjYxNjA4NDBaMDMxMTAvBgNV
BAMTKEI5MUU3OEE5NEFGODA0NjBCMTc1REM3MDY1RDgyMTlDNTNGNTgyODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgyAyOQH0nPinRdoFK+VuKVWeJ
gg86+979P6VZ5Ce6qXBZiKzEY5a0CYMY8gSDn0LvDdh6L08irFGpJ2tMzAEGAlF4
BUFtEuW2xfj0qbsR/NL/MIzZFBdyONS92VOF+q4nNBDb3Y15SfyNgI6DotUK8JhG
o/b6l8H9cN7Hsp8W+u2A4GzvssLndhuz0aYQI7M7I1kBfHFsiYTxAZVPd/7M2CkH
WkUVbt4Os09FAhBGWQDCQVKT6yXRrdv+Yvl9DmLj8n3IhcUD9i6qTIsuBiuyrulg
lJLFGxNclLjKqgwS4LYZMDzNBD4tQGrJ8YG9+Xvq3/sarzW82ojPzxBqesp9AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUuR54qUr4BGCxddxwZdghnFP1gokwHwYDVR0j
BBgwFoAUMX7bNBAFjghiF8UPuXAJ3ecKbxowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzAxMTk0NGQtN2ViMy00ZjYzLWExNTktY2ZmMDJjMDI2
YWJmLzMvMzE3RURCMzQxMDA1OEUwODYyMTdDNTBGQjk3MDA5RERFNzBBNkYxQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL01YN2JOQkFGamdoaUY4VVB1WEFKM2Vj
S2J4by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMDExOTQ0ZC03
ZWIzLTRmNjMtYTE1OS1jZmYwMmMwMjZhYmYvMy8zMTdFREIzNDEwMDU4RTA4NjIx
N0M1MEZCOTcwMDlEREU3MEE2RjFBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAmE4aTCfbG++/Od9s0gL
slEH72TnMfsYtFTvz5X2Ft/AboKVDsvAe7+dXZq7Mq/6CwAxlDkeU5InRwJbJFlS
ifwdtBOj/1dyqzHwOxDfjfdYiiF/IxmBvShZJHOZF1z/3YVwDxFo69uiVBUeB7zd
R2uRVgDLZxMUqkOpRetcgRSXpp20kpakKEZJ41Ve0KChLHagvxIA6enhd7KO4T9t
8wQXyLAwUknnhnbXO8SuvS+ZUx7z+7QOYiTH8EhYA4h6xcKEKamFV4CasEq9klh+
25K0CH8FWEr0xia0JMTVBLoQtwXcV23LvK/EyME/aHiFV44lE1LQ2ITtebckhL/N
1w==
-----END CERTIFICATE-----
Generated at Mon Jan 26 09:28:43 2026 by rpki-client