This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft
File:                     74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft (raw, json)
Hash identifier:          LDuh6FLH7Gwui3ST3/LlgL78BT6aU5jdPGIt96zDvBw=
Subject key identifier:   C3:F5:42:1F:F2:32:21:20:65:C7:C3:1B:EF:AE:5C:BE:1F:0F:C5:60
Authority key identifier: 74:E9:19:65:A8:09:D1:AC:5A:A0:F0:D0:55:06:AC:B0:DD:B0:2A:B8
Certificate issuer:       /CN=74e91965a809d1ac5aa0f0d05506acb0ddb02ab8
Certificate serial:       7176DE9B403E60B6CFAF8D0BCE831BFD660C747E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dOkZZagJ0axaoPDQVQassN2wKrg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft
Manifest number:          027E
Signing time:             Mon 09 Feb 2026 09:29:02 +0000
Manifest this update:     Mon 09 Feb 2026 09:24:02 +0000
Manifest next update:     Tue 10 Feb 2026 09:31:02 +0000
Files and hashes:         1: 74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.crl (hash: 5U+7H2XXGaA0NMp5s8JB8xrRdWNQcQMfATLKVe9pVSw=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dOkZZagJ0axaoPDQVQassN2wKrg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:76:de:9b:40:3e:60:b6:cf:af:8d:0b:ce:83:1b:fd:66:0c:74:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74e91965a809d1ac5aa0f0d05506acb0ddb02ab8
        Validity
            Not Before: Feb  9 09:24:02 2026 GMT
            Not After : Feb 10 09:31:02 2026 GMT
        Subject: CN=C3F5421FF232212065C7C31BEFAE5CBE1F0FC560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:89:eb:b4:f1:7e:d4:5b:a7:30:4f:21:32:75:
                    60:dd:4a:20:02:ab:ef:fc:37:40:21:00:79:ea:f3:
                    6c:84:d9:4c:04:d5:fa:4c:ce:9a:35:6e:e1:11:22:
                    38:6f:98:ab:64:b1:ab:ed:4c:88:c3:30:83:55:09:
                    01:8d:2e:3e:34:7a:50:84:ec:6a:bd:ce:19:9c:29:
                    88:bb:67:90:aa:d7:20:99:c8:9d:83:30:f9:2b:53:
                    f2:ce:4a:85:79:2f:73:bf:3a:a7:0d:82:d8:7f:72:
                    06:15:ee:e7:5a:1a:b1:4e:7f:ac:82:5c:9b:54:5f:
                    ba:1b:c0:d1:4f:31:93:4c:c1:3b:36:1f:d6:aa:bc:
                    34:c9:64:ce:53:27:03:d8:21:05:5e:78:df:29:5a:
                    cc:b8:6e:bc:18:de:7b:ec:6d:cf:ae:ea:89:a6:ff:
                    b8:97:ac:09:ea:c5:a7:66:64:ad:4a:22:63:c5:c0:
                    ca:e2:50:2f:f1:e8:e2:4b:b7:61:d9:60:d3:20:34:
                    99:fd:ed:20:d3:5f:d7:86:e8:e8:cb:9b:cf:a1:dd:
                    d2:ec:ef:00:a6:92:8a:03:f5:0d:c2:73:e5:2d:d3:
                    3e:9e:e4:b8:9b:ea:6e:96:a9:3d:ad:41:f6:c0:36:
                    94:a7:f7:e1:a8:3c:ac:d6:10:9e:8f:cb:a4:31:92:
                    ef:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F5:42:1F:F2:32:21:20:65:C7:C3:1B:EF:AE:5C:BE:1F:0F:C5:60
            X509v3 Authority Key Identifier:
                keyid:74:E9:19:65:A8:09:D1:AC:5A:A0:F0:D0:55:06:AC:B0:DD:B0:2A:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOkZZagJ0axaoPDQVQassN2wKrg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:50:33:e8:90:80:69:42:96:c8:12:36:9d:d0:9e:bc:7a:ab:
         b8:e1:dc:fa:7d:30:14:3e:92:60:3d:8e:b1:f3:e8:db:73:85:
         91:e6:86:03:30:c4:cd:ad:b1:74:1c:40:4a:b3:d0:29:5d:da:
         6e:eb:f7:af:d0:79:d9:8a:5d:53:ce:1c:bf:1c:fe:bc:e7:ee:
         3a:01:fc:3a:96:94:8d:dc:e5:e5:cc:66:45:2d:c2:05:a7:39:
         90:4e:e7:46:b3:88:4b:e9:c6:60:21:ea:fe:94:76:d2:cc:1b:
         c9:c4:0d:ff:00:3d:ea:0b:15:de:cc:da:7d:ea:80:8b:98:e3:
         5f:7b:7b:1c:63:fb:77:0c:da:cf:04:4a:98:48:d1:a6:67:eb:
         73:59:ce:61:e7:b1:d7:92:98:4c:5f:4c:43:53:77:14:5b:2f:
         ee:52:cc:81:93:79:8a:bd:a1:50:82:56:e8:b6:19:ab:b3:8f:
         48:b7:cd:96:da:9b:c5:98:b3:12:7a:16:6b:99:e7:3a:83:f3:
         24:cb:7a:59:b7:59:3b:73:3a:b8:eb:c6:64:ef:09:d0:3b:16:
         28:c7:1e:10:15:8f:0c:98:72:52:02:28:56:96:a3:50:2c:71:
         8e:f8:d9:8e:d3:4f:d3:66:14:75:dc:68:59:7c:c9:ca:28:22:
         8a:f6:09:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 02:55:05 2026 by rpki-client