This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/0/5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.mft
File:                     5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.mft (raw, json)
Hash identifier:          ips7zxQk5iX/Z3nGO64osC9Wt4PA0/WzxZbbHZKa7+Y=
Subject key identifier:   FD:2F:4B:C3:90:3B:5F:83:78:F1:F7:70:BF:B1:DF:DF:B2:83:7B:29
Authority key identifier: 5E:DB:D6:E7:9C:68:9C:56:A8:4F:A4:6C:D7:C9:FA:31:51:DF:E0:BB
Certificate issuer:       /CN=5edbd6e79c689c56a84fa46cd7c9fa3151dfe0bb
Certificate serial:       31C1B92F4008EE1743301FFE946053A727238CE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XtvW55xonFaoT6Rs18n6MVHf4Ls.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/0/5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.mft
Manifest number:          0266
Signing time:             Mon 09 Feb 2026 03:22:11 +0000
Manifest this update:     Mon 09 Feb 2026 03:17:11 +0000
Manifest next update:     Tue 10 Feb 2026 06:37:11 +0000
Files and hashes:         1: 5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.crl (hash: O8Utl4EQUc0kN3yIGcv9rhc3xEb0ZmdeSuA/nKMqlzM=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/0/5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/0/5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XtvW55xonFaoT6Rs18n6MVHf4Ls.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 06:37:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:c1:b9:2f:40:08:ee:17:43:30:1f:fe:94:60:53:a7:27:23:8c:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5edbd6e79c689c56a84fa46cd7c9fa3151dfe0bb
        Validity
            Not Before: Feb  9 03:17:11 2026 GMT
            Not After : Feb 10 06:37:11 2026 GMT
        Subject: CN=FD2F4BC3903B5F8378F1F770BFB1DFDFB2837B29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ae:11:3e:04:6a:07:71:53:33:0d:7c:7c:cf:
                    2b:71:ab:17:cb:7f:57:19:1c:f0:82:c9:a4:02:0d:
                    34:62:62:a1:70:f8:ba:45:b0:33:f2:d5:df:8c:7b:
                    da:a4:fa:89:48:07:b0:9a:7b:4f:4c:7d:50:86:11:
                    f8:3a:6b:d5:6d:d6:57:b6:d3:b5:fa:71:8e:ef:f6:
                    39:f8:20:a8:84:05:d6:1e:8b:d8:24:3f:f0:c5:2a:
                    cd:83:70:da:e3:42:ff:d2:4e:dd:10:47:1f:73:16:
                    71:d3:f6:62:5a:48:6d:ad:bd:f3:11:5d:ed:29:c6:
                    c9:94:f0:4a:5f:9c:54:cf:a3:b1:91:5a:0d:d0:af:
                    b8:e8:cd:e6:0c:be:d1:ad:15:59:82:2e:6a:23:ab:
                    4f:f4:82:0e:50:0d:8f:12:8c:45:88:62:24:5d:85:
                    9e:06:e8:f1:be:71:c9:93:ff:92:1a:50:f8:fa:1b:
                    e3:30:a0:8e:d5:99:f5:0e:7e:b6:cc:a9:63:10:72:
                    2d:47:d2:51:8c:34:e2:48:0f:27:e3:26:e1:57:85:
                    22:3f:7a:4f:c9:52:2e:7b:6c:76:f9:5c:ae:f7:54:
                    e3:00:91:35:88:90:e5:b1:a3:45:a7:8f:78:29:af:
                    60:0f:17:2c:8f:fe:d7:43:10:0c:f7:30:a6:7f:ac:
                    89:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:2F:4B:C3:90:3B:5F:83:78:F1:F7:70:BF:B1:DF:DF:B2:83:7B:29
            X509v3 Authority Key Identifier:
                keyid:5E:DB:D6:E7:9C:68:9C:56:A8:4F:A4:6C:D7:C9:FA:31:51:DF:E0:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/0/5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XtvW55xonFaoT6Rs18n6MVHf4Ls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/0/5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:88:f9:40:2f:4b:a2:9f:39:77:ad:8f:22:52:a1:2a:0d:5b:
         08:36:c2:60:53:6f:dc:13:9e:f1:be:0a:8d:99:d7:7f:c5:9d:
         e3:9f:f5:39:2c:eb:20:01:00:40:44:28:bb:2e:f3:44:1c:9d:
         e0:41:8c:7d:c5:41:41:14:e8:5e:f2:c3:bb:29:b5:28:6c:22:
         08:71:59:e6:c9:f0:73:80:bf:84:09:54:21:2f:4c:60:8f:f2:
         0a:4b:f7:32:be:e7:b1:56:29:ba:a3:5b:73:bd:3d:ef:f0:23:
         e2:73:b4:a7:e9:19:a8:c9:f1:1f:c9:62:21:3f:b1:f0:1d:81:
         ed:a7:5e:75:98:55:f6:cb:b9:30:2b:f0:6b:c1:20:9c:2a:2a:
         1d:27:e1:a2:97:8c:e9:25:14:27:93:9e:ed:10:7b:ad:fa:ad:
         d7:6d:65:77:dc:29:8e:c6:4a:f7:44:3b:52:1c:61:2f:58:b1:
         b3:3c:0c:80:72:ae:73:37:16:1e:22:14:f0:d7:34:07:f7:41:
         62:7b:75:c2:ca:c8:64:45:66:3e:fa:24:45:79:a0:9f:f4:42:
         a5:43:2c:39:5e:fc:19:d6:d0:2c:d9:f2:d4:5d:a9:d1:e5:61:
         bd:a2:ef:04:1b:3f:c3:49:ed:ff:13:5c:2a:08:54:11:8b:02:
         b9:35:99:c0
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUMcG5L0AI7hdDMB/+lGBTpycjjOMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWVkYmQ2ZTc5YzY4OWM1NmE4NGZhNDZjZDdjOWZhMzE1
MWRmZTBiYjAeFw0yNjAyMDkwMzE3MTFaFw0yNjAyMTAwNjM3MTFaMDMxMTAvBgNV
BAMTKEZEMkY0QkMzOTAzQjVGODM3OEYxRjc3MEJGQjFERkRGQjI4MzdCMjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJrhE+BGoHcVMzDXx8zytxqxfL
f1cZHPCCyaQCDTRiYqFw+LpFsDPy1d+Me9qk+olIB7Cae09MfVCGEfg6a9Vt1le2
07X6cY7v9jn4IKiEBdYei9gkP/DFKs2DcNrjQv/STt0QRx9zFnHT9mJaSG2tvfMR
Xe0pxsmU8EpfnFTPo7GRWg3Qr7jozeYMvtGtFVmCLmojq0/0gg5QDY8SjEWIYiRd
hZ4G6PG+ccmT/5IaUPj6G+MwoI7VmfUOfrbMqWMQci1H0lGMNOJIDyfjJuFXhSI/
ek/JUi57bHb5XK73VOMAkTWIkOWxo0Wnj3gpr2APFyyP/tdDEAz3MKZ/rIkhAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU/S9Lw5A7X4N48fdwv7Hf37KDeykwHwYDVR0j
BBgwFoAUXtvW55xonFaoT6Rs18n6MVHf4LswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTUzNjIzYzQtMzNiZC00MzhhLWE5M2UtMDE4ZDY1YzRl
ODM3LzAvNUVEQkQ2RTc5QzY4OUM1NkE4NEZBNDZDRDdDOUZBMzE1MURGRTBCQi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1h0dlc1NXhvbkZhb1Q2UnMxOG42TVZI
ZjRMcy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS81NTM2MjNjNC0z
M2JkLTQzOGEtYTkzZS0wMThkNjVjNGU4MzcvMC81RURCRDZFNzlDNjg5QzU2QTg0
RkE0NkNEN0M5RkEzMTUxREZFMEJCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgIj5QC9Lop85d62PIlKh
Kg1bCDbCYFNv3BOe8b4KjZnXf8Wd45/1OSzrIAEAQEQouy7zRByd4EGMfcVBQRTo
XvLDuym1KGwiCHFZ5snwc4C/hAlUIS9MYI/yCkv3Mr7nsVYpuqNbc7097/Aj4nO0
p+kZqMnxH8liIT+x8B2B7adedZhV9su5MCvwa8EgnCoqHSfhopeM6SUUJ5Oe7RB7
rfqt121ld9wpjsZK90Q7UhxhL1ixszwMgHKuczcWHiIU8Nc0B/dBYnt1wsrIZEVm
PvokRXmgn/RCpUMsOV78GdbQLNny1F2p0eVhvaLvBBs/w0nt/xNcKghUEYsCuTWZ
wA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:30:52 2026 by rpki-client