This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.mft
File:                     6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.mft (raw, json)
Hash identifier:          ubBgLhcsRTkyAkoIu//sdRiRdPkSP7K2qba1ygq3KhA=
Subject key identifier:   A8:23:79:F1:31:98:0C:8D:B5:E0:4C:2D:FD:F0:97:9C:B1:72:7E:80
Authority key identifier: 60:19:C1:16:C8:AE:31:8A:FD:4B:82:2E:9F:4E:EE:A0:C3:4B:AA:CA
Certificate issuer:       /CN=6019c116c8ae318afd4b822e9f4eeea0c34baaca
Certificate serial:       0708DD72940AB60C41AA4ECAB286C8F9246CB09A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YBnBFsiuMYr9S4Iun07uoMNLqso.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.mft
Manifest number:          03AC
Signing time:             Mon 09 Feb 2026 15:04:09 +0000
Manifest this update:     Mon 09 Feb 2026 14:59:09 +0000
Manifest next update:     Tue 10 Feb 2026 17:52:09 +0000
Files and hashes:         1: 6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.crl (hash: gSOzETjPTQYa8qTKRRhITIzmU1DI4SPA8gfqZws4gLU=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YBnBFsiuMYr9S4Iun07uoMNLqso.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:08:dd:72:94:0a:b6:0c:41:aa:4e:ca:b2:86:c8:f9:24:6c:b0:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6019c116c8ae318afd4b822e9f4eeea0c34baaca
        Validity
            Not Before: Feb  9 14:59:09 2026 GMT
            Not After : Feb 10 17:52:09 2026 GMT
        Subject: CN=A82379F131980C8DB5E04C2DFDF0979CB1727E80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:6d:d9:55:00:36:8d:39:c7:1a:6a:92:5d:ae:
                    c1:70:53:e1:1f:24:e9:06:ad:18:12:01:54:6d:2e:
                    04:a5:cb:9f:64:68:02:dd:ed:13:8e:f9:e5:e7:ca:
                    f4:a0:4c:e4:57:17:99:c0:eb:f0:85:46:70:cf:9a:
                    0c:4e:58:4a:cf:9a:56:e7:24:da:46:d9:23:77:d1:
                    6e:b7:56:8b:d1:bf:6e:74:d8:f7:d6:e4:99:92:ea:
                    6e:8e:e2:98:2a:d1:12:c2:ce:89:37:2c:6b:f8:f7:
                    d8:dd:8c:b1:8a:ec:f2:8e:5a:46:a7:23:3c:37:00:
                    96:32:82:05:2a:98:e9:b2:2d:2c:4f:b1:b4:c5:68:
                    d0:dc:f9:8a:e3:41:ed:79:3d:a7:d0:d1:40:c3:29:
                    b9:7c:96:a2:a7:c1:94:b3:85:cf:ec:31:13:52:f9:
                    db:f9:ec:65:20:5b:cf:b7:8d:71:a8:41:52:30:2a:
                    2f:71:53:c8:1b:a1:e3:6f:4d:56:17:01:dd:0e:13:
                    3c:26:1c:ab:04:e2:a5:46:7c:3f:0b:c2:c0:a0:84:
                    e7:4d:a6:2c:7b:76:3c:70:cc:16:75:65:62:88:1e:
                    a0:6c:21:62:2c:79:95:eb:de:1f:cc:c9:34:bb:d1:
                    68:41:cd:18:f2:1a:43:30:12:81:67:bc:a8:61:93:
                    de:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:23:79:F1:31:98:0C:8D:B5:E0:4C:2D:FD:F0:97:9C:B1:72:7E:80
            X509v3 Authority Key Identifier:
                keyid:60:19:C1:16:C8:AE:31:8A:FD:4B:82:2E:9F:4E:EE:A0:C3:4B:AA:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBnBFsiuMYr9S4Iun07uoMNLqso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:91:02:99:c5:d6:5b:29:4b:1f:54:10:ee:81:36:e8:11:83:
         d0:fa:1e:be:c2:96:e5:51:c3:7b:c8:2e:e5:d1:19:9b:71:e2:
         00:cf:16:f8:18:fd:1a:d5:b0:79:fb:af:98:af:6c:f4:21:07:
         ed:e7:b9:75:2a:16:25:f4:f5:84:05:21:3a:0b:96:51:92:7c:
         ed:28:41:82:ce:5a:62:32:63:92:e9:91:fe:c8:42:b4:90:74:
         0b:ac:91:f3:66:e2:50:ad:f7:bd:06:91:19:cd:9c:45:e0:b3:
         4b:6a:8f:5b:5c:84:c3:6d:a9:b4:7e:02:d7:0c:d2:84:f9:38:
         7b:de:7d:ef:08:ad:3b:a1:4f:cc:3f:8d:6e:1f:95:e3:d9:5a:
         b6:38:28:f9:d7:1c:6d:c6:e0:68:67:5a:cc:2f:8c:2d:d8:45:
         32:03:a0:97:83:8e:d7:04:20:4f:b2:18:31:cd:74:f5:aa:5d:
         a5:4e:b1:eb:4a:13:e5:6e:81:30:6c:03:3f:4d:33:b8:12:96:
         22:c0:51:12:b8:cc:69:0f:e1:74:7c:01:e2:af:80:b3:d2:52:
         f2:ca:cd:db:8c:7b:80:e5:41:da:c4:d8:60:01:5a:fb:3e:52:
         3a:59:73:c2:7d:e0:cf:4a:02:cc:d8:81:0c:d5:53:a5:00:d1:
         32:97:38:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:41:51 2026 by rpki-client