This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.mft
File:                     53A2AA1601CC09214461D03CA771ED50EC1D6325.mft (raw, json)
Hash identifier:          051zfyl2SOs9+3qGeezfjksRHmvjwcnxLAuv5YKcK5Q=
Subject key identifier:   83:B7:CF:94:AC:1E:37:E9:8A:3E:05:F9:92:44:1E:6F:C7:C7:02:BF
Authority key identifier: 53:A2:AA:16:01:CC:09:21:44:61:D0:3C:A7:71:ED:50:EC:1D:63:25
Certificate issuer:       /CN=53a2aa1601cc09214461d03ca771ed50ec1d6325
Certificate serial:       612B6C5AC882911CA879CA77F58ED12A1B4FD081
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U6KqFgHMCSFEYdA8p3HtUOwdYyU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.mft
Manifest number:          02E4
Signing time:             Sun 25 Jan 2026 15:50:06 +0000
Manifest this update:     Sun 25 Jan 2026 15:45:06 +0000
Manifest next update:     Mon 26 Jan 2026 19:31:06 +0000
Files and hashes:         1: AS215171.asa (hash: gdJa6WG2GERDZaDbnz7OAqIN3lLaJy+y5wFkZsKkjzo=)
                          2: 53A2AA1601CC09214461D03CA771ED50EC1D6325.crl (hash: j2tB0MrpfMUP/edP2qjH4c8P4WCCOJtEtYO8dzaLUFM=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U6KqFgHMCSFEYdA8p3HtUOwdYyU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 19:31:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:2b:6c:5a:c8:82:91:1c:a8:79:ca:77:f5:8e:d1:2a:1b:4f:d0:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53a2aa1601cc09214461d03ca771ed50ec1d6325
        Validity
            Not Before: Jan 25 15:45:06 2026 GMT
            Not After : Jan 26 19:31:06 2026 GMT
        Subject: CN=83B7CF94AC1E37E98A3E05F992441E6FC7C702BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3c:02:7f:43:17:c6:bf:25:cb:2f:1a:f6:e6:
                    ae:3d:4d:a7:75:79:1f:7a:a3:fc:5e:19:ba:db:c1:
                    fe:08:81:a1:04:b2:53:8c:a6:09:a0:77:dd:c1:d5:
                    be:fb:2f:fa:3e:33:5d:7e:36:b1:7f:fc:db:a4:9f:
                    81:c8:b0:1c:f8:7e:4d:65:cd:36:36:e0:fd:b3:1d:
                    76:4a:6a:e8:4d:13:f4:2e:6f:56:14:5d:39:42:cf:
                    87:41:38:38:ed:40:19:ba:57:4a:da:12:3f:dc:30:
                    68:9d:d8:75:3b:1e:f3:25:24:f1:8d:6d:a8:ab:65:
                    da:85:b7:ba:f3:1a:8c:93:08:09:1e:9f:1f:02:ef:
                    6a:82:d2:a9:b2:ef:1f:e5:ba:de:b0:63:a9:7f:0f:
                    0c:25:8a:af:19:df:3f:93:6c:78:f3:48:20:ad:98:
                    49:cf:07:6e:9b:b7:a7:ec:ba:60:c1:10:16:94:db:
                    62:d5:f7:21:30:bc:91:e1:e7:03:31:89:22:0b:8c:
                    74:b6:d5:a1:d7:2e:36:af:40:09:64:d0:a6:91:cf:
                    82:e0:3b:54:eb:ca:91:39:1c:4e:d5:9f:8a:87:a8:
                    c0:07:a7:26:36:c0:09:77:1f:de:00:b5:de:08:6f:
                    66:81:16:a6:70:39:b6:2f:60:1d:7e:86:2c:14:9b:
                    4f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:B7:CF:94:AC:1E:37:E9:8A:3E:05:F9:92:44:1E:6F:C7:C7:02:BF
            X509v3 Authority Key Identifier:
                keyid:53:A2:AA:16:01:CC:09:21:44:61:D0:3C:A7:71:ED:50:EC:1D:63:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U6KqFgHMCSFEYdA8p3HtUOwdYyU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:e6:43:cd:11:d6:f5:ff:13:85:dc:2c:c1:a1:46:df:7d:95:
         c5:f6:06:83:41:cf:1c:a0:a1:1b:da:59:4f:e6:93:57:e6:e4:
         a1:f2:86:71:63:ea:0d:a2:4b:81:dc:2e:cd:25:e5:8f:f8:58:
         3c:a1:c6:12:3f:3b:6f:27:e3:46:af:47:3b:39:9c:0d:bd:6c:
         83:a3:92:c5:17:e0:a9:5b:c7:3f:b8:e4:3c:4e:1c:76:26:27:
         43:15:1f:29:d6:c5:9b:70:d5:2f:ab:e7:39:67:14:ce:67:49:
         d8:9e:aa:58:9e:14:7e:db:25:76:cc:95:13:d7:1a:e2:da:c1:
         5e:53:b6:c8:d0:63:aa:6f:93:57:2c:e9:59:d7:10:2a:40:94:
         59:09:6b:7b:8a:9d:0e:10:91:e3:40:62:54:db:6b:04:d2:f0:
         72:b9:cd:a8:c9:ca:8a:d9:b5:6a:78:78:af:07:86:b3:b0:f1:
         aa:92:8f:0f:35:00:43:0e:8c:da:08:a4:58:0b:e4:6f:00:93:
         cc:96:00:4e:c2:bd:1f:d9:83:75:9e:4f:10:8c:c1:86:e1:f1:
         eb:fe:7e:d1:1b:d0:17:4f:d6:fe:6f:e9:64:6d:3b:ca:ba:b2:
         da:c5:48:01:d6:f9:79:df:56:81:ae:e7:91:63:e8:af:03:59:
         c5:fb:e8:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 08:01:47 2026 by rpki-client