This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft
File:                     B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft (raw, json)
Hash identifier:          +tk6x3h1PgENAIS0wuEtmkbEVMAx6lWeiovJrHkk6gU=
Subject key identifier:   96:2C:C8:DD:E5:1E:A8:A5:45:03:63:85:4D:B5:64:74:35:FE:09:71
Authority key identifier: B5:F5:EC:5C:56:7F:D4:89:BE:73:90:28:62:EB:EE:81:CC:DE:E3:5C
Certificate issuer:       /CN=B5F5EC5C567FD489BE73902862EBEE81CCDEE35C
Certificate serial:       385940E907CDB571CF936650855482CE41F4ABF9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft
Manifest number:          F7
Signing time:             Tue 10 Feb 2026 08:34:02 +0000
Manifest this update:     Tue 10 Feb 2026 08:29:02 +0000
Manifest next update:     Wed 11 Feb 2026 10:46:02 +0000
Files and hashes:         1: 326130623a396534303a3a2f33312d3332203d3e20323134343531.roa (hash: Kwvgoy8rYmD0xpV60BQdFB5n1PMXF0SutBXK7a1aRaY=)
                          2: B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.crl (hash: c8CZr2Ftz+mrJgpzm7iHEteaaIKTScKsbQVm77U3dr8=)
                          3: 326130623a396534373a666666663a3a2f34382d3438203d3e20323132333936.roa (hash: 75MQYcrJ2fBMIggMxPD0oPJNZ5TBWMJfZ5gCQQu+izk=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Feb 2026 09:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:59:40:e9:07:cd:b5:71:cf:93:66:50:85:54:82:ce:41:f4:ab:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5F5EC5C567FD489BE73902862EBEE81CCDEE35C
        Validity
            Not Before: Feb 10 08:29:02 2026 GMT
            Not After : Feb 11 10:46:02 2026 GMT
        Subject: CN=962CC8DDE51EA8A5450363854DB5647435FE0971
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b2:5e:27:51:58:2d:0a:c7:8b:d3:eb:c2:9d:
                    1c:97:b5:a5:83:8e:33:14:02:0c:f1:86:b3:6e:5b:
                    a5:50:80:88:d1:f6:4f:b9:50:27:61:a2:77:ba:37:
                    e4:c7:68:d1:df:4e:a0:8a:c2:3d:96:4e:80:44:59:
                    8a:ee:ae:ae:a1:70:e1:7f:54:21:3f:d4:df:95:53:
                    e2:23:87:41:f4:47:9f:b4:fd:51:7c:5f:94:df:05:
                    95:bb:eb:13:c2:95:1c:50:90:19:20:c7:1b:d0:8b:
                    92:98:aa:05:cb:d9:75:d9:f6:d2:86:06:2d:d3:da:
                    05:29:86:c8:e8:17:b2:64:cd:87:05:af:15:50:5c:
                    dd:bd:42:d9:07:ad:c7:83:11:85:cb:9b:0b:4e:62:
                    ab:38:b5:e3:58:96:f7:51:90:2d:28:4b:0e:a7:7f:
                    2d:49:24:79:bf:35:a9:cb:09:74:c7:82:fd:ac:73:
                    3d:7c:e3:b5:9a:dd:f3:43:22:a7:07:33:c3:e5:98:
                    0b:ac:0b:fb:02:32:8d:d0:96:de:20:1e:64:bf:35:
                    a9:e6:30:c3:fb:a2:29:f5:ae:83:3e:0c:b4:f4:33:
                    13:3a:82:71:4e:76:0f:17:37:91:e6:84:02:2f:a5:
                    3b:64:c4:52:b4:5e:e7:90:dc:0a:9e:85:39:70:8d:
                    6d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:2C:C8:DD:E5:1E:A8:A5:45:03:63:85:4D:B5:64:74:35:FE:09:71
            X509v3 Authority Key Identifier:
                keyid:B5:F5:EC:5C:56:7F:D4:89:BE:73:90:28:62:EB:EE:81:CC:DE:E3:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:84:00:63:9d:87:69:c9:69:21:31:ce:00:43:0a:e2:e7:6e:
         c6:59:f8:5e:8f:88:9a:ed:6d:31:04:c8:00:30:2c:ec:2c:9a:
         d3:7d:60:fa:1d:7b:e4:bf:46:99:78:3d:cf:78:9b:86:f1:f4:
         aa:9b:27:c3:b8:d9:c1:8b:ca:91:6b:5d:68:34:86:aa:36:f7:
         82:1a:9c:6b:49:eb:67:a0:f6:20:03:c7:b8:29:71:98:0a:7c:
         d3:68:45:4a:ed:2f:6f:d8:c1:e4:02:8b:80:a6:4e:30:1c:c3:
         d8:42:5f:a7:95:72:7d:57:ec:fc:b7:5e:0c:04:fe:19:36:a6:
         25:d3:25:c1:85:3a:75:99:dd:08:40:cf:98:d6:37:b4:8e:23:
         2b:12:69:63:f6:50:eb:3e:42:d0:84:ef:d1:87:c6:3d:3e:41:
         a4:44:49:93:bd:a4:cf:98:d0:43:e0:71:1a:24:42:c7:8e:a4:
         bb:6c:32:5a:8e:76:e3:68:ad:79:9e:23:a4:1f:d5:60:0f:fb:
         c8:24:f9:8f:f2:fc:1e:4d:45:ca:33:00:b6:28:e3:20:20:89:
         d2:b8:45:f8:b4:3e:0f:c5:7c:06:2f:4f:44:1e:a1:50:97:f7:
         7e:39:85:e6:3c:93:d4:87:86:0a:ea:b1:c6:6d:db:ac:ab:30:
         c3:d5:23:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 12:30:09 2026 by rpki-client