This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/0/1A715D4CFA1F15075FC610EDBB0905220D66929D.mft
File:                     1A715D4CFA1F15075FC610EDBB0905220D66929D.mft (raw, json)
Hash identifier:          KN6cG++2gfrdQUkekT+km8reDRkYKxhSFQ6TOlv0f7Q=
Subject key identifier:   EA:3A:35:40:7D:C6:D6:EE:C0:24:76:C2:12:BB:5E:7B:F0:B7:DF:6E
Authority key identifier: 1A:71:5D:4C:FA:1F:15:07:5F:C6:10:ED:BB:09:05:22:0D:66:92:9D
Certificate issuer:       /CN=1a715d4cfa1f15075fc610edbb0905220d66929d
Certificate serial:       2B0215D528BF5712CA70416E746DDD008E8A99B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GnFdTPofFQdfxhDtuwkFIg1mkp0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/0/1A715D4CFA1F15075FC610EDBB0905220D66929D.mft
Manifest number:          E2
Signing time:             Mon 09 Feb 2026 14:40:55 +0000
Manifest this update:     Mon 09 Feb 2026 14:35:55 +0000
Manifest next update:     Tue 10 Feb 2026 17:04:55 +0000
Files and hashes:         1: 1A715D4CFA1F15075FC610EDBB0905220D66929D.crl (hash: 8erQ9PZ15jqqM/qZ3Q9crkZYP8PPhQrge7gKNezhQNM=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/0/1A715D4CFA1F15075FC610EDBB0905220D66929D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/0/1A715D4CFA1F15075FC610EDBB0905220D66929D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GnFdTPofFQdfxhDtuwkFIg1mkp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:02:15:d5:28:bf:57:12:ca:70:41:6e:74:6d:dd:00:8e:8a:99:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a715d4cfa1f15075fc610edbb0905220d66929d
        Validity
            Not Before: Feb  9 14:35:55 2026 GMT
            Not After : Feb 10 17:04:55 2026 GMT
        Subject: CN=EA3A35407DC6D6EEC02476C212BB5E7BF0B7DF6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f0:03:01:79:a8:a4:72:8f:c5:3c:88:4b:50:
                    5d:61:42:a1:85:80:f0:b3:cb:cd:6d:72:ef:fd:76:
                    24:fc:6c:2d:73:ce:ad:14:46:53:c2:32:01:9f:1e:
                    aa:f4:f2:f9:1a:b0:c5:10:55:43:a2:28:ef:f3:e5:
                    3e:28:66:5d:4e:e8:0c:77:cb:35:fa:64:77:68:60:
                    ee:1b:db:dc:f1:f9:7e:75:b6:68:0d:37:eb:04:5a:
                    2a:31:4d:24:91:b3:7d:bd:6e:37:65:eb:88:c8:3b:
                    e9:4c:ff:81:bd:d6:04:e5:9e:aa:46:8f:46:2e:e7:
                    3a:36:a3:ac:0d:9b:cf:24:de:47:01:47:7a:dd:69:
                    32:a3:8d:d0:c7:ee:f2:53:68:ae:dd:3b:9d:d1:1e:
                    ad:58:80:14:25:1b:7e:87:d8:92:a9:6f:56:5a:db:
                    c5:a2:93:98:cf:5b:86:45:cd:04:6d:28:3d:3f:78:
                    7e:77:ba:07:8f:c9:c5:84:49:4b:9d:5c:f1:23:96:
                    7c:9b:fe:c7:c9:1f:9a:84:fb:7a:ac:d1:0c:e0:2c:
                    c6:e5:c4:7f:94:0a:04:96:a2:b3:a7:85:26:e6:ff:
                    b0:cd:5a:d5:6e:42:1b:3a:1b:cb:ca:60:1e:e7:c9:
                    c3:66:6c:70:67:55:37:0b:86:ef:a5:2d:aa:55:d8:
                    08:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:3A:35:40:7D:C6:D6:EE:C0:24:76:C2:12:BB:5E:7B:F0:B7:DF:6E
            X509v3 Authority Key Identifier:
                keyid:1A:71:5D:4C:FA:1F:15:07:5F:C6:10:ED:BB:09:05:22:0D:66:92:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/0/1A715D4CFA1F15075FC610EDBB0905220D66929D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnFdTPofFQdfxhDtuwkFIg1mkp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2285be6f-5111-4c3c-8254-d2e415510284/0/1A715D4CFA1F15075FC610EDBB0905220D66929D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:e7:ca:51:96:2a:cc:6f:b5:82:85:65:fc:fd:11:e8:27:d4:
         76:04:62:e8:01:a3:2e:86:48:8a:bd:88:35:46:e9:58:06:9c:
         af:d5:59:42:8b:47:c4:6c:09:44:8f:e6:3a:a7:0d:c2:b3:86:
         3a:e9:6a:5d:b8:2b:fa:3e:d6:65:24:b7:e6:2c:64:b4:bc:2a:
         9e:fa:8a:90:76:13:95:c9:b8:c2:4b:c3:2b:e8:fc:74:69:69:
         6b:c5:89:c9:0b:dd:72:4e:ed:41:54:16:73:25:3e:68:87:73:
         06:ae:a4:1b:7d:f1:03:9e:d1:8c:bf:01:8a:ec:37:2c:e3:6d:
         42:a2:dd:8d:86:be:af:14:ba:e6:b7:ef:97:b8:1e:b6:ab:bd:
         54:17:6b:f1:ce:e4:30:7c:79:61:52:b9:81:3e:fa:e8:5d:58:
         96:89:42:f3:31:4a:e8:26:97:ab:eb:26:8c:62:a9:ac:0d:c6:
         06:81:23:93:a1:c8:c5:70:7e:68:85:cb:93:4e:6c:10:d9:d0:
         5f:39:bb:58:00:2e:95:d3:e1:88:c4:70:7f:ba:85:0a:15:99:
         44:5c:83:f8:01:c4:07:ca:7b:1a:b3:c7:cf:f7:6e:0e:b0:9b:
         ac:d2:49:e9:6e:f1:69:8e:7c:85:1d:cf:d6:57:e1:78:e2:aa:
         fd:e6:f2:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:49:09 2026 by rpki-client