This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/0/0565A7F9F9C9B366073C53CAEECD7FF4D1FCDD07.mft
File:                     0565A7F9F9C9B366073C53CAEECD7FF4D1FCDD07.mft (raw, json)
Hash identifier:          TZmZ8p11ZQpWT8rKJpXbgwGI+O/cSIgY+sPHZ3krjDQ=
Subject key identifier:   0E:03:F8:A1:21:A7:42:B6:15:C3:7A:1A:9F:C7:60:20:78:2B:A9:87
Authority key identifier: 05:65:A7:F9:F9:C9:B3:66:07:3C:53:CA:EE:CD:7F:F4:D1:FC:DD:07
Certificate issuer:       /CN=0565a7f9f9c9b366073c53caeecd7ff4d1fcdd07
Certificate serial:       51451CA4DBA6A0E6445D42133D0EECB35A5C2736
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BWWn-fnJs2YHPFPK7s1_9NH83Qc.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/0/0565A7F9F9C9B366073C53CAEECD7FF4D1FCDD07.mft
Manifest number:          32
Signing time:             Sun 25 Jan 2026 10:18:10 +0000
Manifest this update:     Sun 25 Jan 2026 10:13:10 +0000
Manifest next update:     Mon 26 Jan 2026 12:56:10 +0000
Files and hashes:         1: 0565A7F9F9C9B366073C53CAEECD7FF4D1FCDD07.crl (hash: DlRuv1yGgZnpYt88TSuQY58PADLwIkASKwJ3djKvf5A=)
                          2: AS210464.asa (hash: tKIhalhXY6I+0EDGy/78YEDPN++vnxEZAwy81FFa3O0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/0/0565A7F9F9C9B366073C53CAEECD7FF4D1FCDD07.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/0/0565A7F9F9C9B366073C53CAEECD7FF4D1FCDD07.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BWWn-fnJs2YHPFPK7s1_9NH83Qc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 12:56:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:45:1c:a4:db:a6:a0:e6:44:5d:42:13:3d:0e:ec:b3:5a:5c:27:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0565a7f9f9c9b366073c53caeecd7ff4d1fcdd07
        Validity
            Not Before: Jan 25 10:13:10 2026 GMT
            Not After : Jan 26 12:56:10 2026 GMT
        Subject: CN=0E03F8A121A742B615C37A1A9FC76020782BA987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b4:9e:0d:37:2e:ea:6a:67:da:1b:a6:fb:ba:
                    97:68:30:79:83:6f:ee:c4:27:93:23:dd:49:56:e9:
                    d4:5b:f9:c2:4b:fc:75:27:64:97:6e:70:a6:29:d8:
                    c9:2b:65:8c:05:f3:b3:df:45:f2:70:06:6a:6d:69:
                    21:de:bf:36:69:ac:e3:05:63:60:c0:a4:5e:1c:ce:
                    ed:fd:03:e4:6f:43:7c:91:0f:0d:14:71:53:85:56:
                    f2:c4:ce:be:3f:ef:58:9e:1f:5c:6f:0f:e4:26:22:
                    db:e2:8f:46:01:ca:15:32:70:bd:11:1d:f9:90:39:
                    39:88:df:ba:0e:c8:35:8f:7a:a1:6b:6c:37:76:a3:
                    48:bb:8a:4e:16:1a:94:3e:fb:ee:da:18:e8:32:b0:
                    6c:1e:e7:a7:6f:ee:fb:3b:c0:1b:3a:16:af:19:79:
                    6b:fa:3e:b9:3d:c4:f3:cc:0a:28:85:b3:77:a3:bb:
                    21:d0:45:2b:9c:bc:15:b4:5c:a3:93:66:2b:30:83:
                    8d:ec:7b:fb:75:79:e6:98:2e:d2:20:48:8c:e7:51:
                    9b:51:87:4b:e0:12:91:ee:4d:c8:78:d7:75:00:f5:
                    d8:02:60:65:b0:aa:8e:d5:24:cb:cd:3f:4a:9b:3d:
                    b6:59:4c:f8:a8:c4:0d:7c:44:76:64:d2:a2:cf:88:
                    b5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:03:F8:A1:21:A7:42:B6:15:C3:7A:1A:9F:C7:60:20:78:2B:A9:87
            X509v3 Authority Key Identifier:
                keyid:05:65:A7:F9:F9:C9:B3:66:07:3C:53:CA:EE:CD:7F:F4:D1:FC:DD:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/0/0565A7F9F9C9B366073C53CAEECD7FF4D1FCDD07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWWn-fnJs2YHPFPK7s1_9NH83Qc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/0/0565A7F9F9C9B366073C53CAEECD7FF4D1FCDD07.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:6a:7e:ea:34:90:5c:fa:b5:9e:25:0c:ba:52:10:e1:66:e1:
         0e:88:3f:0d:25:83:f8:1b:b4:df:55:94:34:e5:22:45:89:ff:
         79:40:9e:87:96:bc:93:05:a2:a9:4d:4d:58:94:f0:ee:d2:c3:
         df:e4:b2:a0:6a:73:bd:6b:11:95:8a:67:3f:58:f6:d9:d4:61:
         4e:31:d9:17:75:21:0d:97:79:29:21:af:4d:df:d8:3e:9d:bf:
         03:39:4b:b7:f3:b4:53:21:5b:60:98:60:de:3e:c0:5c:c1:56:
         5e:08:82:e1:78:f7:ce:03:78:9b:fd:3d:a6:bf:96:22:ef:a4:
         05:0c:ea:0a:8f:3e:d2:e1:c8:67:08:fb:b3:44:f0:0f:69:8f:
         79:61:a2:e7:a8:7b:75:b4:a0:b7:46:84:1d:61:0c:6f:ad:e5:
         13:12:f5:ff:4c:6b:01:77:d1:84:79:2c:be:60:eb:e8:a4:3a:
         6d:66:77:6a:4a:71:c3:55:44:1b:76:8f:fa:b0:07:01:25:1e:
         ef:ae:7b:d3:4a:12:84:ae:07:fe:76:b5:57:f3:01:b2:ad:2d:
         f6:b8:42:52:97:5d:29:8f:5f:97:17:82:8c:4e:38:f3:0e:64:
         ba:95:0e:b5:9a:c9:f9:6f:94:71:f2:20:a5:c7:4d:b6:da:58:
         1e:2f:41:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:03:21 2026 by rpki-client