This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.mft
File:                     883931AAB8B1363015BC8FDDF0B582321767440A.mft (raw, json)
Hash identifier:          dJS+v6ItAydFtzDmNQoLzlqcB3jpEJhx3exaIy6DO94=
Subject key identifier:   99:5B:6A:98:74:8B:19:4E:C5:62:7F:07:3C:D9:18:AD:50:9A:A1:C7
Authority key identifier: 88:39:31:AA:B8:B1:36:30:15:BC:8F:DD:F0:B5:82:32:17:67:44:0A
Certificate issuer:       /CN=883931aab8b1363015bc8fddf0b582321767440a
Certificate serial:       57307A0EA416695FA0806AA020EE4076B3981D75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iDkxqrixNjAVvI_d8LWCMhdnRAo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.mft
Manifest number:          2A
Signing time:             Mon 26 Jan 2026 01:52:06 +0000
Manifest this update:     Mon 26 Jan 2026 01:47:06 +0000
Manifest next update:     Tue 27 Jan 2026 03:25:06 +0000
Files and hashes:         1: 883931AAB8B1363015BC8FDDF0B582321767440A.crl (hash: 1AOHuFC6ilN/rX+qw9GuNQoHasNOEyZGJjbXe9GQfKU=)
                          2: AS213605.asa (hash: vDTrzMEAXQDX/rAJbwqFTc96En0LeH2npreVsst7mlA=)
                          3: 323030313a3637383a3533633a3a2f34382d3438203d3e20313534313835.roa (hash: ToBUFvUom+h4rbM7uZ7L3aEUItGSsZaFzls2rQ5hJzY=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iDkxqrixNjAVvI_d8LWCMhdnRAo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 01:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:30:7a:0e:a4:16:69:5f:a0:80:6a:a0:20:ee:40:76:b3:98:1d:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=883931aab8b1363015bc8fddf0b582321767440a
        Validity
            Not Before: Jan 26 01:47:06 2026 GMT
            Not After : Jan 27 03:25:06 2026 GMT
        Subject: CN=995B6A98748B194EC5627F073CD918AD509AA1C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:0b:37:61:82:65:73:e1:75:f3:c0:ef:7e:ef:
                    d2:8c:ac:6d:e2:b6:f2:cb:53:61:41:b9:75:6e:c6:
                    bd:ce:b5:ce:50:a0:2b:95:aa:38:2d:75:9c:55:fd:
                    10:c2:48:a2:d7:09:5f:5e:f7:a4:e4:d4:bc:64:c6:
                    4d:bf:b8:cd:24:10:e7:8e:f4:9d:78:2e:1c:11:e7:
                    ae:70:f0:58:70:9c:e6:af:ad:7f:7e:14:0e:e0:cd:
                    d6:56:58:43:14:c0:d9:0f:8b:68:3f:84:34:dc:2d:
                    de:ce:44:c9:a1:8d:15:a3:46:f1:45:11:2e:5d:95:
                    82:8f:30:51:dc:12:82:fb:92:d6:89:86:89:3a:3e:
                    95:de:1e:50:1f:fd:f7:a1:42:cb:2d:a4:1a:74:50:
                    65:cd:52:47:77:c4:a4:18:fc:48:99:e0:d9:91:3c:
                    50:8e:84:63:89:e1:a4:7a:98:bb:4f:e8:3f:7b:32:
                    a0:2e:6a:b3:73:dc:65:60:ac:01:f2:55:4b:16:aa:
                    7d:a6:0e:a8:2c:a2:2c:d1:ec:f9:7b:91:60:72:a8:
                    8d:dd:85:53:85:fe:e1:97:77:88:f3:95:0d:e7:32:
                    87:2e:b3:31:a7:cd:1a:29:33:54:fb:df:48:cb:99:
                    a6:58:92:90:74:1d:7c:11:7e:94:13:6c:7d:57:56:
                    25:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:5B:6A:98:74:8B:19:4E:C5:62:7F:07:3C:D9:18:AD:50:9A:A1:C7
            X509v3 Authority Key Identifier:
                keyid:88:39:31:AA:B8:B1:36:30:15:BC:8F:DD:F0:B5:82:32:17:67:44:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDkxqrixNjAVvI_d8LWCMhdnRAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/0/883931AAB8B1363015BC8FDDF0B582321767440A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:86:f8:99:f8:b2:f2:2d:da:dd:14:e3:a3:90:f7:8f:7e:ea:
         ac:82:47:21:6d:95:ad:46:3c:cb:51:f4:cc:bd:80:00:74:0a:
         4d:e3:88:1e:4b:92:f6:d0:98:b6:44:b3:6c:61:e0:d7:c2:e5:
         f5:13:21:12:20:4d:af:34:1b:74:39:80:26:95:ef:6a:8e:20:
         41:1f:90:36:4c:62:c2:38:ad:cc:37:e0:1a:93:70:b8:01:c4:
         0e:50:bf:8e:43:e4:1e:09:ae:6f:b6:60:d0:4f:38:3a:ff:41:
         dc:0a:8d:b4:52:9c:47:2b:60:09:8a:38:95:65:22:a6:de:72:
         ce:95:58:b8:2b:c8:ac:d0:7f:17:e5:5e:b0:c3:05:31:0b:2f:
         01:4b:39:50:1d:e6:88:60:4e:65:18:ae:b2:eb:ee:2f:37:9f:
         e1:83:57:c1:fb:52:36:10:d5:41:36:81:8e:ab:d0:09:5f:7f:
         c9:d3:6c:93:81:17:41:8f:96:5f:da:fc:42:52:aa:d2:40:58:
         c1:fa:91:e1:37:32:c0:48:5d:8e:a4:36:74:ca:03:f7:43:6b:
         e5:4c:5d:79:37:e7:83:cb:84:bb:99:b5:91:8c:c4:49:6b:1f:
         26:18:28:be:cc:c0:df:ed:cf:47:5a:af:0a:bc:f0:65:f7:ba:
         8f:28:f4:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 09:40:29 2026 by rpki-client