This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/1/E4B988E0C5F16CD5A58B879A31737B4F2F086B95.mft
File:                     E4B988E0C5F16CD5A58B879A31737B4F2F086B95.mft (raw, json)
Hash identifier:          sqqSy2pxUEIhHGh0jov775J0Pe/eFs+ZC6NrUMa/gDs=
Subject key identifier:   6C:E8:94:91:0E:2C:8E:33:6E:75:E6:B8:67:35:EC:A3:6B:5E:A1:A4
Authority key identifier: E4:B9:88:E0:C5:F1:6C:D5:A5:8B:87:9A:31:73:7B:4F:2F:08:6B:95
Certificate issuer:       /CN=e4b988e0c5f16cd5a58b879a31737b4f2f086b95
Certificate serial:       267D8FF6E5D2C438D3D932E40DB0E944DACCD106
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5LmI4MXxbNWli4eaMXN7Ty8Ia5U.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/1/E4B988E0C5F16CD5A58B879A31737B4F2F086B95.mft
Manifest number:          34
Signing time:             Sun 25 Jan 2026 22:48:10 +0000
Manifest this update:     Sun 25 Jan 2026 22:43:10 +0000
Manifest next update:     Mon 26 Jan 2026 23:50:10 +0000
Files and hashes:         1: E4B988E0C5F16CD5A58B879A31737B4F2F086B95.crl (hash: FlUmXhRjFU/7D9DndR/QNJHCy2yMDBMt7WeinTqHANM=)
                          2: AS214976.asa (hash: v5lBSdK131Etk8q/qrO2YWGrpYrwgCaCsAichEGY55Y=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/1/E4B988E0C5F16CD5A58B879A31737B4F2F086B95.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/1/E4B988E0C5F16CD5A58B879A31737B4F2F086B95.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5LmI4MXxbNWli4eaMXN7Ty8Ia5U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:7d:8f:f6:e5:d2:c4:38:d3:d9:32:e4:0d:b0:e9:44:da:cc:d1:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4b988e0c5f16cd5a58b879a31737b4f2f086b95
        Validity
            Not Before: Jan 25 22:43:10 2026 GMT
            Not After : Jan 26 23:50:10 2026 GMT
        Subject: CN=6CE894910E2C8E336E75E6B86735ECA36B5EA1A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8d:03:b3:6f:68:ba:74:59:06:48:41:39:99:
                    68:12:59:37:2d:be:15:1c:e7:ea:7b:03:56:c8:12:
                    07:cd:72:68:de:f7:a7:13:86:d6:48:78:6b:61:7e:
                    4b:0e:e4:f9:45:83:10:34:a6:53:5f:9b:91:82:59:
                    3c:0f:e2:4c:e0:f6:3d:65:03:ac:f2:9e:54:48:66:
                    90:c3:3c:38:cd:63:45:b5:a2:46:db:c6:c2:13:61:
                    94:ee:f8:82:54:f7:c1:09:ef:60:b1:fb:21:06:26:
                    9c:83:04:c1:9f:e1:93:6e:7f:31:f6:f8:f1:f0:fd:
                    fc:c4:aa:9f:74:64:8e:e3:6a:9c:e6:1d:3f:c8:04:
                    05:f7:30:d1:55:6b:74:37:88:af:5f:00:bd:6b:1c:
                    de:fb:8b:7b:d8:8d:76:9c:74:16:cc:f5:e8:d5:f8:
                    7c:c0:fa:d1:81:24:0c:c7:55:e0:3f:3d:c0:c7:61:
                    f4:de:f1:87:89:c0:3d:2c:92:79:9a:d1:dc:13:01:
                    69:32:be:66:7e:23:8d:89:8e:ab:bd:d4:05:d0:b4:
                    ad:0e:0f:31:8c:fc:76:03:59:22:6d:98:5d:16:ba:
                    a5:23:98:fa:2e:0c:a0:8f:c6:f3:a2:1c:07:fb:b9:
                    3d:7a:75:a8:a2:bb:16:c9:10:db:cc:e0:ea:f8:08:
                    c9:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:E8:94:91:0E:2C:8E:33:6E:75:E6:B8:67:35:EC:A3:6B:5E:A1:A4
            X509v3 Authority Key Identifier:
                keyid:E4:B9:88:E0:C5:F1:6C:D5:A5:8B:87:9A:31:73:7B:4F:2F:08:6B:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/1/E4B988E0C5F16CD5A58B879A31737B4F2F086B95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LmI4MXxbNWli4eaMXN7Ty8Ia5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/1/E4B988E0C5F16CD5A58B879A31737B4F2F086B95.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:95:87:4e:6f:37:96:36:11:15:8e:87:0d:98:41:e4:c4:9c:
         99:34:50:79:50:80:35:96:34:98:44:37:a2:bd:d8:35:cd:40:
         9b:ac:43:e7:ce:eb:ec:6d:ec:ee:b0:e8:60:b9:17:2a:45:7c:
         5f:ff:f7:fa:e9:14:42:99:e6:e5:99:50:2d:aa:19:74:1c:c2:
         74:8e:23:24:18:1e:95:fa:0e:9a:b3:d7:e7:39:22:b0:d2:a4:
         49:4e:88:3e:66:6e:27:40:b2:76:80:01:30:0d:fb:7e:b4:67:
         85:73:d6:d9:7b:0b:0e:25:bf:1d:92:c3:38:af:e7:89:8c:37:
         8f:12:1d:11:e6:f6:0d:87:54:1b:12:95:f2:33:23:a5:e8:88:
         a2:87:e9:3d:3e:70:ae:e3:f7:5b:92:c1:b1:dd:0d:a9:a7:5d:
         6d:a8:c1:73:36:15:b5:fb:67:93:22:6f:01:87:89:9a:1c:bd:
         b3:dc:37:d0:7b:f9:7c:69:97:b5:77:6f:d6:9f:fb:81:65:8f:
         9d:d4:41:83:96:c1:ce:85:14:62:2a:05:c7:68:6f:16:46:b7:
         44:78:4c:74:38:9b:15:ce:77:cb:11:f8:95:c7:a1:78:66:0a:
         83:9e:85:7f:a8:6c:5c:22:33:bb:b6:e5:34:9c:4e:76:c2:2f:
         33:a0:45:d7
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUJn2P9uXSxDjT2TLkDbDpRNrM0QYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZTRiOTg4ZTBjNWYxNmNkNWE1OGI4NzlhMzE3MzdiNGYy
ZjA4NmI5NTAeFw0yNjAxMjUyMjQzMTBaFw0yNjAxMjYyMzUwMTBaMDMxMTAvBgNV
BAMTKDZDRTg5NDkxMEUyQzhFMzM2RTc1RTZCODY3MzVFQ0EzNkI1RUExQTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4jQOzb2i6dFkGSEE5mWgSWTct
vhUc5+p7A1bIEgfNcmje96cThtZIeGthfksO5PlFgxA0plNfm5GCWTwP4kzg9j1l
A6zynlRIZpDDPDjNY0W1okbbxsITYZTu+IJU98EJ72Cx+yEGJpyDBMGf4ZNufzH2
+PHw/fzEqp90ZI7japzmHT/IBAX3MNFVa3Q3iK9fAL1rHN77i3vYjXacdBbM9ejV
+HzA+tGBJAzHVeA/PcDHYfTe8YeJwD0sknma0dwTAWkyvmZ+I42Jjqu91AXQtK0O
DzGM/HYDWSJtmF0WuqUjmPouDKCPxvOiHAf7uT16daiiuxbJENvM4Or4CMnxAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUbOiUkQ4sjjNudea4ZzXso2teoaQwHwYDVR0j
BBgwFoAU5LmI4MXxbNWli4eaMXN7Ty8Ia5UwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmM0M2QzYTYtN2QxMy00ODk1LTk1OWQtNDE5YjlhNmVi
MzRiLzEvRTRCOTg4RTBDNUYxNkNENUE1OEI4NzlBMzE3MzdCNEYyRjA4NkI5NS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVMbUk0TVh4Yk5XbGk0ZWFNWE43VHk4
SWE1VS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82YzQzZDNhNi03
ZDEzLTQ4OTUtOTU5ZC00MTliOWE2ZWIzNGIvMS9FNEI5ODhFMEM1RjE2Q0Q1QTU4
Qjg3OUEzMTczN0I0RjJGMDg2Qjk1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARJWHTm83ljYRFY6HDZhB
5MScmTRQeVCANZY0mEQ3or3YNc1Am6xD587r7G3s7rDoYLkXKkV8X//3+ukUQpnm
5ZlQLaoZdBzCdI4jJBgelfoOmrPX5zkisNKkSU6IPmZuJ0CydoABMA37frRnhXPW
2XsLDiW/HZLDOK/niYw3jxIdEeb2DYdUGxKV8jMjpeiIoofpPT5wruP3W5LBsd0N
qaddbajBczYVtftnkyJvAYeJmhy9s9w30Hv5fGmXtXdv1p/7gWWPndRBg5bBzoUU
YioFx2hvFka3RHhMdDibFc53yxH4lceheGYKg56Ff6hsXCIzu7blNJxOdsIvM6BF
1w==
-----END CERTIFICATE-----
Generated at Mon Jan 26 01:41:25 2026 by rpki-client