This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/0/26EAC0C665B207D6F15E4123457505C531F616E2.mft
File:                     26EAC0C665B207D6F15E4123457505C531F616E2.mft (raw, json)
Hash identifier:          RDE4XpFVwzApXki8/mamYrGIRVa652bH56nNMtZhjCQ=
Subject key identifier:   CD:2D:9B:F9:0E:2E:0E:99:41:B3:A6:C7:B0:64:01:CC:D5:2F:0A:2A
Authority key identifier: 26:EA:C0:C6:65:B2:07:D6:F1:5E:41:23:45:75:05:C5:31:F6:16:E2
Certificate issuer:       /CN=26eac0c665b207d6f15e4123457505c531f616e2
Certificate serial:       3ADEF69A9535EAD40276DC8413633E3B8B329389
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JurAxmWyB9bxXkEjRXUFxTH2FuI.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/0/26EAC0C665B207D6F15E4123457505C531F616E2.mft
Manifest number:          7E
Signing time:             Sun 08 Feb 2026 23:21:38 +0000
Manifest this update:     Sun 08 Feb 2026 23:16:38 +0000
Manifest next update:     Tue 10 Feb 2026 02:37:38 +0000
Files and hashes:         1: 26EAC0C665B207D6F15E4123457505C531F616E2.crl (hash: mQ4HgpXgTdIcSGy+axAZwYGW6qM+YxqGFnJEy9S18hs=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/0/26EAC0C665B207D6F15E4123457505C531F616E2.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/0/26EAC0C665B207D6F15E4123457505C531F616E2.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JurAxmWyB9bxXkEjRXUFxTH2FuI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 02:37:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:de:f6:9a:95:35:ea:d4:02:76:dc:84:13:63:3e:3b:8b:32:93:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26eac0c665b207d6f15e4123457505c531f616e2
        Validity
            Not Before: Feb  8 23:16:38 2026 GMT
            Not After : Feb 10 02:37:38 2026 GMT
        Subject: CN=CD2D9BF90E2E0E9941B3A6C7B06401CCD52F0A2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b6:f4:23:d1:3c:18:5c:f9:88:06:5f:4f:86:
                    f7:2d:db:c0:bc:e8:03:6e:69:c6:5c:e3:15:15:2f:
                    a9:b3:d3:c7:3b:f2:42:93:74:b7:0f:a9:99:fd:04:
                    1f:0f:88:22:f4:75:42:d3:63:4f:e0:9d:43:10:03:
                    e1:77:df:8a:15:e7:2b:bb:ec:14:24:84:b8:db:02:
                    0b:b2:74:42:61:6a:62:1e:26:6f:5a:81:77:51:a1:
                    32:6a:bf:f1:26:a0:3f:5d:4b:04:33:21:a1:9e:ad:
                    08:41:c8:04:18:13:2f:6f:56:1b:65:02:72:be:21:
                    e3:9d:4f:a0:fb:d8:7f:22:c6:b2:13:ef:6a:37:9c:
                    1c:47:4c:85:1a:df:13:54:bb:72:6d:1b:ba:1e:96:
                    af:b5:d6:78:16:9c:02:18:f5:ec:5d:20:72:de:89:
                    df:c0:e7:2a:fc:54:83:88:8b:73:b3:19:c1:30:4b:
                    dc:82:49:45:6c:4e:d1:79:20:8f:cd:44:0b:d8:46:
                    82:53:53:64:58:b2:28:27:e6:e1:67:a9:4d:59:9b:
                    e4:01:cd:ad:40:49:7b:11:53:34:33:c9:16:85:22:
                    dd:3e:00:78:17:91:d2:ac:70:21:b3:47:08:1c:89:
                    42:7e:ea:dc:c2:27:d5:71:e0:52:34:c7:55:d2:ae:
                    f8:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:2D:9B:F9:0E:2E:0E:99:41:B3:A6:C7:B0:64:01:CC:D5:2F:0A:2A
            X509v3 Authority Key Identifier:
                keyid:26:EA:C0:C6:65:B2:07:D6:F1:5E:41:23:45:75:05:C5:31:F6:16:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/0/26EAC0C665B207D6F15E4123457505C531F616E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JurAxmWyB9bxXkEjRXUFxTH2FuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4c9acece-d05b-4f73-9c6e-d8785d1789c3/0/26EAC0C665B207D6F15E4123457505C531F616E2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:a4:0a:36:b0:35:5f:c9:a1:bc:26:48:46:dc:83:5b:d9:61:
         60:84:3a:ef:3e:ce:f4:6c:66:35:0d:c3:7b:a0:52:01:95:37:
         14:77:14:0f:61:f6:d6:58:c6:98:7c:a8:42:e4:52:d5:05:b0:
         de:03:28:af:7c:e3:00:7d:7e:cf:bb:e5:56:c6:02:df:36:b4:
         a1:54:cd:37:c5:02:6e:60:b2:ca:c4:ac:2f:88:c4:97:1c:14:
         30:6a:e7:8b:57:80:ec:11:7d:83:dc:e5:54:84:0d:08:b5:e7:
         7b:fd:4b:69:60:39:8d:46:c9:99:c5:9d:0a:a0:80:f1:d1:b7:
         3f:8d:eb:73:1d:06:16:f8:85:d1:d7:9c:1d:e8:4c:08:76:79:
         ad:6a:9e:66:29:80:0e:77:cc:55:9d:ca:51:04:24:16:54:e8:
         a7:bf:8b:e1:7b:d4:13:3c:3b:c9:82:d1:ff:98:f4:c2:9f:43:
         ab:da:60:b4:96:c0:99:e9:bd:1a:37:21:62:9e:f7:e7:45:49:
         c0:c3:4a:0a:da:57:23:d4:42:65:f0:3e:eb:01:bf:f5:69:56:
         00:9c:2d:9d:ab:be:79:fc:d9:ff:ca:55:ad:61:a3:c5:f7:a6:
         fe:8e:94:1e:a0:46:d7:51:5d:a9:61:76:a5:3d:22:ee:93:6b:
         cb:da:a5:f0
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUOt72mpU16tQCdtyEE2M+O4syk4kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjZlYWMwYzY2NWIyMDdkNmYxNWU0MTIzNDU3NTA1YzUz
MWY2MTZlMjAeFw0yNjAyMDgyMzE2MzhaFw0yNjAyMTAwMjM3MzhaMDMxMTAvBgNV
BAMTKENEMkQ5QkY5MEUyRTBFOTk0MUIzQTZDN0IwNjQwMUNDRDUyRjBBMkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKtvQj0TwYXPmIBl9Phvct28C8
6ANuacZc4xUVL6mz08c78kKTdLcPqZn9BB8PiCL0dULTY0/gnUMQA+F334oV5yu7
7BQkhLjbAguydEJhamIeJm9agXdRoTJqv/EmoD9dSwQzIaGerQhByAQYEy9vVhtl
AnK+IeOdT6D72H8ixrIT72o3nBxHTIUa3xNUu3JtG7oelq+11ngWnAIY9exdIHLe
id/A5yr8VIOIi3OzGcEwS9yCSUVsTtF5II/NRAvYRoJTU2RYsign5uFnqU1Zm+QB
za1ASXsRUzQzyRaFIt0+AHgXkdKscCGzRwgciUJ+6tzCJ9Vx4FI0x1XSrvgrAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUzS2b+Q4uDplBs6bHsGQBzNUvCiowHwYDVR0j
BBgwFoAUJurAxmWyB9bxXkEjRXUFxTH2FuIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNGM5YWNlY2UtZDA1Yi00ZjczLTljNmUtZDg3ODVkMTc4
OWMzLzAvMjZFQUMwQzY2NUIyMDdENkYxNUU0MTIzNDU3NTA1QzUzMUY2MTZFMi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0p1ckF4bVd5QjlieFhrRWpSWFVGeFRI
MkZ1SS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80YzlhY2VjZS1k
MDViLTRmNzMtOWM2ZS1kODc4NWQxNzg5YzMvMC8yNkVBQzBDNjY1QjIwN0Q2RjE1
RTQxMjM0NTc1MDVDNTMxRjYxNkUyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg6QKNrA1X8mhvCZIRtyD
W9lhYIQ67z7O9GxmNQ3De6BSAZU3FHcUD2H21ljGmHyoQuRS1QWw3gMor3zjAH1+
z7vlVsYC3za0oVTNN8UCbmCyysSsL4jElxwUMGrni1eA7BF9g9zlVIQNCLXne/1L
aWA5jUbJmcWdCqCA8dG3P43rcx0GFviF0decHehMCHZ5rWqeZimADnfMVZ3KUQQk
FlTop7+L4XvUEzw7yYLR/5j0wp9Dq9pgtJbAmem9GjchYp7350VJwMNKCtpXI9RC
ZfA+6wG/9WlWAJwtnau+efzZ/8pVrWGjxfem/o6UHqBG11FdqWF2pT0i7pNry9ql
8A==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:55:48 2026 by rpki-client