This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/0/C9E75975E66E7BC4344F9CDE2C3073B8E54A2F0E.mft
File:                     C9E75975E66E7BC4344F9CDE2C3073B8E54A2F0E.mft (raw, json)
Hash identifier:          juHxqHcz1K/mrIR8kjYFNPrQHTY4BXTnHmmoOVmlqYg=
Subject key identifier:   57:D9:63:99:9D:B1:9A:BD:48:B3:7B:52:BC:D2:03:3D:2A:27:95:FE
Authority key identifier: C9:E7:59:75:E6:6E:7B:C4:34:4F:9C:DE:2C:30:73:B8:E5:4A:2F:0E
Certificate issuer:       /CN=c9e75975e66e7bc4344f9cde2c3073b8e54a2f0e
Certificate serial:       67412CB214398AD406F9A3253E03C4E5CFE94463
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yedZdeZue8Q0T5zeLDBzuOVKLw4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/0/C9E75975E66E7BC4344F9CDE2C3073B8E54A2F0E.mft
Manifest number:          02A9
Signing time:             Tue 03 Feb 2026 03:34:41 +0000
Manifest this update:     Tue 03 Feb 2026 03:29:41 +0000
Manifest next update:     Wed 04 Feb 2026 05:53:41 +0000
Files and hashes:         1: C9E75975E66E7BC4344F9CDE2C3073B8E54A2F0E.crl (hash: 1/paYDS15qEol0lmq4M2FauV7ZrY31lbbeilSXkHBuw=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:41:2c:b2:14:39:8a:d4:06:f9:a3:25:3e:03:c4:e5:cf:e9:44:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9e75975e66e7bc4344f9cde2c3073b8e54a2f0e
        Validity
            Not Before: Feb  3 03:29:41 2026 GMT
            Not After : Feb  4 05:53:41 2026 GMT
        Subject: CN=57D963999DB19ABD48B37B52BCD2033D2A2795FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ae:cf:28:c4:98:7e:2a:3c:11:b2:e5:af:75:
                    ee:c5:62:cd:d6:2e:6f:a0:16:04:90:cd:cf:5d:00:
                    fc:95:a6:d5:d0:6e:1e:fb:ed:c7:1f:43:95:57:33:
                    26:7d:50:ae:d6:a4:b5:c3:95:f9:05:2d:09:62:91:
                    1c:58:63:ac:33:f8:47:5f:13:f1:b3:20:28:f9:ab:
                    9d:be:11:cd:bd:97:08:8c:96:21:dc:cb:be:59:7d:
                    ca:f6:3f:16:f1:6d:5f:76:4b:50:bb:8e:9e:5e:f4:
                    1a:7d:63:fd:0a:77:29:61:96:c9:1b:6f:13:84:2e:
                    47:d5:fb:e3:5a:6e:8a:1d:f3:53:e2:f9:50:93:ed:
                    e1:4d:d2:e3:bb:3e:7c:11:dc:d6:4b:ac:a8:59:7e:
                    91:5d:5f:a3:59:a4:a1:33:29:c3:7f:66:1c:11:0f:
                    06:4f:f2:c4:9c:83:1d:6f:8d:ca:01:ed:9e:5a:a6:
                    f0:8c:5c:cc:f3:44:35:88:39:67:2e:f9:02:9c:bc:
                    7e:03:ff:64:a0:88:14:dc:53:0d:93:d1:c2:b8:e7:
                    ec:62:69:a3:f7:87:63:97:78:51:0b:24:8e:55:6f:
                    aa:65:1a:9f:b2:b4:c8:2c:90:ce:df:a5:64:e8:31:
                    f1:a6:81:35:c4:9f:8d:9b:51:b5:e8:8f:09:83:f2:
                    cf:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D9:63:99:9D:B1:9A:BD:48:B3:7B:52:BC:D2:03:3D:2A:27:95:FE
            X509v3 Authority Key Identifier:
                keyid:C9:E7:59:75:E6:6E:7B:C4:34:4F:9C:DE:2C:30:73:B8:E5:4A:2F:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/0/C9E75975E66E7BC4344F9CDE2C3073B8E54A2F0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yedZdeZue8Q0T5zeLDBzuOVKLw4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/0/C9E75975E66E7BC4344F9CDE2C3073B8E54A2F0E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:cd:84:be:0f:2a:f1:6f:eb:4d:18:38:41:98:1e:90:33:d6:
         bd:b3:98:a0:2b:fe:e0:ac:ee:66:71:b9:c4:33:b4:3b:a9:62:
         41:39:9a:5f:52:c8:28:cd:d0:0f:d4:e8:96:04:81:46:39:f4:
         ef:eb:72:e7:fc:d2:95:a3:e5:f1:be:43:be:52:42:8c:cb:6f:
         7a:df:19:42:6a:cc:e1:2d:aa:fe:23:41:f2:14:77:8d:20:9e:
         2a:8d:01:53:99:a9:9f:fa:22:64:a6:09:ae:81:59:5b:f2:47:
         c7:d8:0b:5a:04:73:d0:21:3b:5a:30:53:d5:65:a0:90:d0:27:
         3c:f9:71:78:ef:66:3b:01:5d:ba:3c:3e:f7:3f:82:68:4f:ca:
         7e:f9:54:90:73:f1:1c:f5:1f:02:19:a7:77:8a:87:55:3b:f4:
         9c:5e:b2:9c:c0:16:a3:6c:b9:ff:01:02:7d:9c:65:4c:60:51:
         60:79:cc:7f:3b:c7:82:ea:86:3c:cd:f3:aa:13:5a:cc:35:dd:
         b1:d4:0b:08:4c:b2:48:82:82:eb:82:fa:47:37:6b:10:f7:de:
         36:10:6d:78:77:70:db:2e:85:e7:b8:da:44:96:b4:83:44:17:
         53:b1:2e:2f:bc:81:ba:f4:49:e2:0b:97:7e:bc:de:c4:4c:8f:
         ad:22:e7:ef
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUZ0EsshQ5itQG+aMlPgPE5c/pRGMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzllNzU5NzVlNjZlN2JjNDM0NGY5Y2RlMmMzMDczYjhl
NTRhMmYwZTAeFw0yNjAyMDMwMzI5NDFaFw0yNjAyMDQwNTUzNDFaMDMxMTAvBgNV
BAMTKDU3RDk2Mzk5OURCMTlBQkQ0OEIzN0I1MkJDRDIwMzNEMkEyNzk1RkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwrs8oxJh+KjwRsuWvde7FYs3W
Lm+gFgSQzc9dAPyVptXQbh777ccfQ5VXMyZ9UK7WpLXDlfkFLQlikRxYY6wz+Edf
E/GzICj5q52+Ec29lwiMliHcy75Zfcr2PxbxbV92S1C7jp5e9Bp9Y/0Kdylhlskb
bxOELkfV++Nabood81Pi+VCT7eFN0uO7PnwR3NZLrKhZfpFdX6NZpKEzKcN/ZhwR
DwZP8sScgx1vjcoB7Z5apvCMXMzzRDWIOWcu+QKcvH4D/2SgiBTcUw2T0cK45+xi
aaP3h2OXeFELJI5Vb6plGp+ytMgskM7fpWToMfGmgTXEn42bUbXojwmD8s/xAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUV9ljmZ2xmr1Is3tSvNIDPSonlf4wHwYDVR0j
BBgwFoAUyedZdeZue8Q0T5zeLDBzuOVKLw4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDkxYTQzYmMtNzZlYy00YWJlLWJhN2QtZTczZTkwZDY2
MmNiLzAvQzlFNzU5NzVFNjZFN0JDNDM0NEY5Q0RFMkMzMDczQjhFNTRBMkYwRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3llZFpkZVp1ZThRMFQ1emVMREJ6dU9W
S0x3NC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80OTFhNDNiYy03
NmVjLTRhYmUtYmE3ZC1lNzNlOTBkNjYyY2IvMC9DOUU3NTk3NUU2NkU3QkM0MzQ0
RjlDREUyQzMwNzNCOEU1NEEyRjBFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm82Evg8q8W/rTRg4QZge
kDPWvbOYoCv+4KzuZnG5xDO0O6liQTmaX1LIKM3QD9TolgSBRjn07+ty5/zSlaPl
8b5DvlJCjMtvet8ZQmrM4S2q/iNB8hR3jSCeKo0BU5mpn/oiZKYJroFZW/JHx9gL
WgRz0CE7WjBT1WWgkNAnPPlxeO9mOwFdujw+9z+CaE/KfvlUkHPxHPUfAhmnd4qH
VTv0nF6ynMAWo2y5/wECfZxlTGBRYHnMfzvHguqGPM3zqhNazDXdsdQLCEyySIKC
64L6RzdrEPfeNhBteHdw2y6F57jaRJa0g0QXU7EuL7yBuvRJ4guXfrzexEyPrSLn
7w==
-----END CERTIFICATE-----