This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/0/B8288EA9E3D67DC3D38FA775181C4B2C87729BDF.mft
File:                     B8288EA9E3D67DC3D38FA775181C4B2C87729BDF.mft (raw, json)
Hash identifier:          OAP2Zub+5OMapSSxS6x+QVX0Z/bz0878CyDzTgQOMzU=
Subject key identifier:   DB:86:70:11:0A:58:1B:28:4E:7D:15:1A:95:D4:09:01:AF:26:29:1F
Authority key identifier: B8:28:8E:A9:E3:D6:7D:C3:D3:8F:A7:75:18:1C:4B:2C:87:72:9B:DF
Certificate issuer:       /CN=b8288ea9e3d67dc3d38fa775181c4b2c87729bdf
Certificate serial:       77DAD60421CEEA87CB106CB1951D23E81781C2C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uCiOqePWfcPTj6d1GBxLLIdym98.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/0/B8288EA9E3D67DC3D38FA775181C4B2C87729BDF.mft
Manifest number:          011E
Signing time:             Mon 09 Feb 2026 19:32:43 +0000
Manifest this update:     Mon 09 Feb 2026 19:27:43 +0000
Manifest next update:     Tue 10 Feb 2026 21:33:43 +0000
Files and hashes:         1: B8288EA9E3D67DC3D38FA775181C4B2C87729BDF.crl (hash: LcczwW4/4QpkNRC96fkxqYjuHPFjYbt+DPKsbgcZeuE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/0/B8288EA9E3D67DC3D38FA775181C4B2C87729BDF.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/0/B8288EA9E3D67DC3D38FA775181C4B2C87729BDF.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uCiOqePWfcPTj6d1GBxLLIdym98.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:da:d6:04:21:ce:ea:87:cb:10:6c:b1:95:1d:23:e8:17:81:c2:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8288ea9e3d67dc3d38fa775181c4b2c87729bdf
        Validity
            Not Before: Feb  9 19:27:43 2026 GMT
            Not After : Feb 10 21:33:43 2026 GMT
        Subject: CN=DB8670110A581B284E7D151A95D40901AF26291F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:36:7d:f5:4d:08:42:a6:2b:93:09:3b:ff:3b:
                    de:79:b1:8f:33:9b:2d:e6:40:87:f0:fb:ce:e9:4e:
                    aa:d4:c2:b7:d4:17:f7:27:9c:a5:f9:e7:af:34:8e:
                    ba:1a:cd:e1:cd:80:3d:ca:c0:26:30:00:77:8a:d7:
                    ba:cb:16:39:75:0f:77:b7:2f:80:8a:39:19:33:b9:
                    f9:8a:96:f2:12:4e:9a:ff:31:aa:ea:e1:ed:23:8e:
                    52:7d:82:8d:e9:5f:62:a8:7c:ca:c8:f1:27:bd:37:
                    9c:14:91:78:e5:db:28:fe:d0:f4:f9:f6:bf:d0:42:
                    bb:cd:44:f1:77:f2:8b:1b:06:45:2d:4d:20:72:d1:
                    52:0c:b4:32:ea:7e:68:2b:16:b2:45:4a:b5:74:3a:
                    62:0f:6c:83:92:a1:55:b0:a4:0c:77:b6:4c:aa:8e:
                    df:87:f5:95:d3:7a:70:33:6a:9e:fe:92:d0:0b:06:
                    15:59:c2:00:3e:22:bf:5a:a1:7b:0b:ef:ed:64:f1:
                    d7:5d:49:1e:05:f7:71:10:d5:08:7e:e9:89:37:ed:
                    f0:0e:69:f6:5f:8b:26:ed:50:92:9c:1f:c6:36:80:
                    60:6f:94:0b:f8:46:50:49:aa:b7:59:0d:4c:c7:13:
                    45:f9:24:a4:cd:15:8f:f1:03:5c:60:91:75:bb:ca:
                    79:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:86:70:11:0A:58:1B:28:4E:7D:15:1A:95:D4:09:01:AF:26:29:1F
            X509v3 Authority Key Identifier:
                keyid:B8:28:8E:A9:E3:D6:7D:C3:D3:8F:A7:75:18:1C:4B:2C:87:72:9B:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/0/B8288EA9E3D67DC3D38FA775181C4B2C87729BDF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCiOqePWfcPTj6d1GBxLLIdym98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/0/B8288EA9E3D67DC3D38FA775181C4B2C87729BDF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:d1:5b:c1:10:5d:81:3f:41:1f:d1:2a:08:ee:bc:64:0d:3e:
         1e:5a:3b:f0:78:8f:b0:1c:34:e9:97:e3:cb:51:4f:ff:66:c4:
         73:d6:83:da:43:c1:f1:3e:dd:11:11:4a:33:06:bd:9e:12:a3:
         12:ad:14:06:3f:f1:93:9e:bc:8b:66:17:8c:8f:02:ba:e9:b4:
         40:84:0d:99:3c:f7:6c:1d:4e:a6:1d:02:54:e6:da:b2:08:1f:
         7c:66:6a:55:24:1c:4f:75:d7:c0:ef:0e:f8:17:0c:c5:d1:41:
         a2:69:fc:d8:5f:6f:e8:59:7a:85:de:cc:61:0b:de:66:e4:ef:
         cb:22:9d:77:66:41:26:96:4f:2a:3a:53:87:dd:e1:e9:9e:ab:
         27:8e:e4:3b:b3:25:bc:1d:70:36:87:61:65:bc:12:9a:ad:43:
         f4:cc:97:b4:5d:28:67:34:67:75:86:ef:01:29:d4:ae:e2:51:
         a7:cf:f1:d1:01:a3:cd:35:cd:19:42:75:81:83:77:fb:a1:94:
         37:08:94:ad:e3:44:bc:75:97:a4:30:f7:73:dc:bd:80:1a:ca:
         74:fc:62:bd:a4:05:e4:2a:cc:7b:c6:23:e4:83:69:be:d0:b7:
         bf:00:35:8e:64:97:c2:6c:33:6d:b9:2e:90:68:9c:5d:cf:f7:
         eb:f6:da:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:42:17 2026 by rpki-client