This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft
File:                     72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft (raw, json)
Hash identifier:          kF+IvvMQLrcBakTy8qOwkgNrp39jGrv154OD74SjTkk=
Subject key identifier:   45:0D:9C:4A:C2:08:B6:85:14:0B:5A:2D:6B:C7:BF:ED:03:3E:42:7E
Authority key identifier: 72:F3:EE:16:9F:9B:D7:1F:78:A4:2D:1A:72:FE:0F:2A:82:48:22:D1
Certificate issuer:       /CN=72f3ee169f9bd71f78a42d1a72fe0f2a824822d1
Certificate serial:       188FF09043A331CE1100C2C27537317F1C35594A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cvPuFp-b1x94pC0acv4PKoJIItE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft
Manifest number:          0180
Signing time:             Mon 09 Feb 2026 08:59:11 +0000
Manifest this update:     Mon 09 Feb 2026 08:54:11 +0000
Manifest next update:     Tue 10 Feb 2026 12:27:11 +0000
Files and hashes:         1: 72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.crl (hash: UF0ZFOWeE6bLwu5L4i5SfKai9MWMmOmqP087U+I7CuA=)
                          2: 326131333a363134303a3a2f32392d3332203d3e203331313834.roa (hash: HEAzsbwZSQMPtZWHDUG9J3+dKm/03SetBs7lrO1nkwI=)
                          3: 3139332e32322e3235332e302f32342d3234203d3e203331313834.roa (hash: WrMYNrMKiwcHb7Layep1L0ANnPM7z3AEErZKMOJmYxg=)
                          4: 3139352e37342e34302e302f32322d3234203d3e203331313834.roa (hash: OWTrG12il6+R+m95Ctsd+LQNgEyVIDW3AMDlydaSO3g=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cvPuFp-b1x94pC0acv4PKoJIItE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:27:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:8f:f0:90:43:a3:31:ce:11:00:c2:c2:75:37:31:7f:1c:35:59:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72f3ee169f9bd71f78a42d1a72fe0f2a824822d1
        Validity
            Not Before: Feb  9 08:54:11 2026 GMT
            Not After : Feb 10 12:27:11 2026 GMT
        Subject: CN=450D9C4AC208B685140B5A2D6BC7BFED033E427E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:05:75:df:97:02:94:7a:5d:17:0a:08:a6:a9:
                    15:ac:11:6d:8e:0a:d1:47:3f:94:fd:60:b8:77:14:
                    1e:9c:3b:86:15:43:08:d6:1e:71:cd:ca:a7:00:17:
                    7e:25:da:a7:a2:20:ab:5c:63:d5:db:b8:63:42:41:
                    57:46:0d:81:0f:c2:21:94:2f:d0:1a:33:64:fa:5d:
                    9e:bf:39:27:00:7a:37:d9:05:41:54:85:14:8e:e3:
                    7e:8b:6b:40:44:10:39:c5:94:09:b7:24:7d:64:ee:
                    ce:e4:c3:43:7c:24:db:30:d5:0a:d3:78:7b:c5:fe:
                    c3:3a:dd:23:a7:1c:bd:54:4b:5f:e1:57:d1:d4:8c:
                    e6:1f:00:f5:16:58:cc:19:df:83:9e:f9:1a:a6:b6:
                    bc:90:9a:1c:19:13:6c:d4:c3:4e:7f:70:f7:1d:14:
                    9e:c2:47:5d:49:8c:af:a2:29:fa:cc:22:65:3e:ff:
                    fd:7b:4c:e9:a8:bf:ec:aa:78:1f:6a:57:97:c0:c7:
                    82:8a:28:4e:9a:b0:37:bc:8b:8a:12:46:18:bb:4c:
                    75:2b:4c:58:14:4a:7a:f1:54:b9:05:a5:06:d0:87:
                    08:b8:27:9e:0e:7e:ec:b9:50:a7:41:af:50:24:9a:
                    40:04:86:e6:19:92:a9:8c:4d:bd:c4:77:37:89:f8:
                    84:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:0D:9C:4A:C2:08:B6:85:14:0B:5A:2D:6B:C7:BF:ED:03:3E:42:7E
            X509v3 Authority Key Identifier:
                keyid:72:F3:EE:16:9F:9B:D7:1F:78:A4:2D:1A:72:FE:0F:2A:82:48:22:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvPuFp-b1x94pC0acv4PKoJIItE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/282b5e00-2ac3-49f1-a29b-26a5fdf0fa41/0/72F3EE169F9BD71F78A42D1A72FE0F2A824822D1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:fe:b3:47:cb:fb:94:41:a3:17:cc:3f:ac:4f:9c:e9:cc:0a:
         7a:8e:ac:a6:82:57:da:73:18:5f:48:76:e1:01:1d:58:81:df:
         d5:06:02:e0:a2:f2:ad:5c:32:06:7a:e0:fd:1c:cd:7a:59:aa:
         c3:02:da:93:af:fc:45:f7:7a:16:83:a4:b5:95:37:3e:09:80:
         69:83:c1:9d:3f:2f:6c:78:77:0c:33:9d:6c:8a:bf:2d:aa:fd:
         4e:f6:8b:80:be:e3:2f:a6:ea:1b:0e:24:59:af:8c:31:7b:b1:
         1d:dc:30:0b:62:6c:6f:08:7b:1e:6b:87:08:75:1f:aa:4b:4b:
         a6:1b:0f:55:5e:e9:ba:a5:69:4f:5b:ea:94:20:b1:27:f0:94:
         27:f6:d3:4d:90:d8:38:52:34:31:4b:45:59:56:5c:d9:0f:fb:
         ef:c5:92:58:0a:e3:fe:e9:e5:bd:2c:30:79:6f:6f:f9:27:b9:
         7a:3b:4a:43:d3:eb:9f:a1:50:82:58:97:a2:10:a3:77:ec:4f:
         d9:c3:55:ff:47:d6:b0:e2:b3:89:0c:ab:ff:80:85:c2:4b:f8:
         2d:3c:17:ae:b4:7e:72:60:0a:ea:ba:0e:e7:a8:bc:0b:0f:96:
         47:1d:0f:14:48:c3:02:d4:46:2b:2e:17:f4:4f:01:c6:12:85:
         22:c5:83:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:30:58 2026 by rpki-client