This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/188078EA8ABD561E7C13EFCE9131BC671DE29F96.mft
File:                     188078EA8ABD561E7C13EFCE9131BC671DE29F96.mft (raw, json)
Hash identifier:          awZCoG7tq+gqPH0CDYjnBbYH5WDyQ4u/41mXUnQtYB0=
Subject key identifier:   0A:2F:11:61:F1:1C:18:48:8B:24:37:94:85:95:72:99:94:EA:DA:B6
Authority key identifier: 18:80:78:EA:8A:BD:56:1E:7C:13:EF:CE:91:31:BC:67:1D:E2:9F:96
Certificate issuer:       /CN=188078EA8ABD561E7C13EFCE9131BC671DE29F96
Certificate serial:       417CC4C773FCD94F6305EA814BE5A1AB9DFBF170
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/188078EA8ABD561E7C13EFCE9131BC671DE29F96.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/188078EA8ABD561E7C13EFCE9131BC671DE29F96.mft
Manifest number:          8F
Signing time:             Sat 10 Jan 2026 04:24:15 +0000
Manifest this update:     Sat 10 Jan 2026 04:19:15 +0000
Manifest next update:     Sun 11 Jan 2026 06:45:15 +0000
Files and hashes:         1: 188078EA8ABD561E7C13EFCE9131BC671DE29F96.crl (hash: Igj5Q57OVvrWPbRID4T1F2zJjbo2OMACTa0lft6Hrhs=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/188078EA8ABD561E7C13EFCE9131BC671DE29F96.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/188078EA8ABD561E7C13EFCE9131BC671DE29F96.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/188078EA8ABD561E7C13EFCE9131BC671DE29F96.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Jan 2026 21:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:7c:c4:c7:73:fc:d9:4f:63:05:ea:81:4b:e5:a1:ab:9d:fb:f1:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=188078EA8ABD561E7C13EFCE9131BC671DE29F96
        Validity
            Not Before: Jan 10 04:19:15 2026 GMT
            Not After : Jan 11 06:45:15 2026 GMT
        Subject: CN=0A2F1161F11C18488B2437948595729994EADAB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:83:7a:86:3c:99:bf:ef:3e:8a:9c:fb:24:35:
                    53:73:a2:c0:b0:29:45:64:28:54:2d:99:6c:8f:69:
                    85:c9:4c:87:fb:e0:78:86:a9:c7:e8:06:87:f9:b7:
                    73:43:ce:05:73:35:85:e3:4c:5d:d3:70:db:4f:60:
                    de:49:1f:e5:cc:67:14:71:c6:30:6d:8b:d0:d2:88:
                    b7:cc:87:fa:a0:27:0b:e0:b7:b6:98:1a:10:52:61:
                    9c:ae:90:b3:b7:9a:f0:2f:03:25:98:ad:b9:8d:84:
                    52:62:d5:5f:06:90:a2:a6:ff:cf:68:28:49:cc:83:
                    04:ed:45:fe:f3:16:0c:1d:f8:81:b5:83:b8:0c:88:
                    2d:3a:b5:e0:5b:2e:4d:bc:85:28:77:8e:13:87:89:
                    ed:ad:94:0b:81:ee:ee:16:bd:7e:cc:72:15:af:fe:
                    8c:a0:f9:d3:f9:94:d8:85:f9:5e:52:19:fc:5e:f0:
                    c1:ea:00:8c:09:22:6e:ed:5e:bc:29:f1:80:e7:b2:
                    2e:7e:d8:1e:65:28:09:78:52:ec:57:47:db:4a:0b:
                    6b:5e:a8:7b:e8:aa:b9:83:f8:a3:b5:63:3f:cb:39:
                    a4:9a:f6:99:2d:de:29:a0:33:ac:71:48:07:49:00:
                    50:26:f9:9a:bc:6e:7e:84:7d:9b:b4:59:8a:48:ea:
                    2c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:2F:11:61:F1:1C:18:48:8B:24:37:94:85:95:72:99:94:EA:DA:B6
            X509v3 Authority Key Identifier:
                keyid:18:80:78:EA:8A:BD:56:1E:7C:13:EF:CE:91:31:BC:67:1D:E2:9F:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/188078EA8ABD561E7C13EFCE9131BC671DE29F96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/188078EA8ABD561E7C13EFCE9131BC671DE29F96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/188078EA8ABD561E7C13EFCE9131BC671DE29F96.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:d7:5a:b3:1d:9c:ae:00:0d:52:32:01:53:50:2d:65:eb:59:
         c9:ef:70:d0:d4:75:a2:7b:6b:93:8e:a1:5b:d5:93:ed:12:bb:
         59:d6:fb:69:43:71:3e:4a:ff:6c:2d:32:ab:80:71:87:c3:5f:
         c2:1c:b8:de:e2:cb:10:2b:85:20:0b:e1:fe:41:a0:63:7f:5b:
         3f:3f:bc:62:29:22:8d:24:40:aa:8c:40:0d:24:19:ae:96:a4:
         11:14:7d:e0:15:fd:9e:a8:f2:d5:40:78:66:83:b8:1f:e7:68:
         c8:ea:65:23:bf:ef:13:ee:fe:74:1f:7e:05:08:51:1a:9b:26:
         69:76:e4:51:3b:f0:3d:3c:eb:51:b5:ff:fb:0c:29:dd:96:7a:
         2d:75:cf:41:70:d4:2b:f5:1d:29:eb:a7:bf:00:d3:85:32:99:
         ec:2b:55:f8:a9:8f:c4:81:84:66:2f:f0:55:55:31:09:77:86:
         85:d3:23:a6:a8:0b:b5:c2:6d:f5:a0:81:91:d7:56:c2:53:c2:
         cb:e2:f7:3f:c4:47:c5:9d:2f:e5:fc:c6:ea:e2:f8:e8:6d:ab:
         d8:50:81:9d:69:ae:26:cd:7e:08:e4:98:a0:03:20:78:1f:6f:
         39:da:84:0d:5b:65:10:92:6d:7e:82:cd:d7:03:ee:4c:a6:f2:
         f0:1d:f5:be
-----BEGIN CERTIFICATE-----
MIIFbTCCBFWgAwIBAgIUQXzEx3P82U9jBeqBS+Whq5378XAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTg4MDc4RUE4QUJENTYxRTdDMTNFRkNFOTEzMUJDNjcx
REUyOUY5NjAeFw0yNjAxMTAwNDE5MTVaFw0yNjAxMTEwNjQ1MTVaMDMxMTAvBgNV
BAMTKDBBMkYxMTYxRjExQzE4NDg4QjI0Mzc5NDg1OTU3Mjk5OTRFQURBQjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpg3qGPJm/7z6KnPskNVNzosCw
KUVkKFQtmWyPaYXJTIf74HiGqcfoBof5t3NDzgVzNYXjTF3TcNtPYN5JH+XMZxRx
xjBti9DSiLfMh/qgJwvgt7aYGhBSYZyukLO3mvAvAyWYrbmNhFJi1V8GkKKm/89o
KEnMgwTtRf7zFgwd+IG1g7gMiC06teBbLk28hSh3jhOHie2tlAuB7u4WvX7MchWv
/oyg+dP5lNiF+V5SGfxe8MHqAIwJIm7tXrwp8YDnsi5+2B5lKAl4UuxXR9tKC2te
qHvoqrmD+KO1Yz/LOaSa9pkt3imgM6xxSAdJAFAm+Zq8bn6EfZu0WYpI6ixnAgMB
AAGjggJ3MIICczAdBgNVHQ4EFgQUCi8RYfEcGEiLJDeUhZVymZTq2rYwHwYDVR0j
BBgwFoAUGIB46oq9Vh58E+/OkTG8Zx3in5YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4
MDhiLzUvMTg4MDc4RUE4QUJENTYxRTdDMTNFRkNFOTEzMUJDNjcxREUyOUY5Ni5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzcvMTg4MDc4RUE4QUJENTYxRTdDMTNFRkNFOTEzMUJDNjcxREUy
OUY5Ni5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJiYi1m
MDQ4LTRkZTEtOTIwNi04ZDQwZjA3MTgwOGIvNS8xODgwNzhFQThBQkQ1NjFFN0Mx
M0VGQ0U5MTMxQkM2NzFERTI5Rjk2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZddasx2crgANUjIBU1At
ZetZye9w0NR1ontrk46hW9WT7RK7Wdb7aUNxPkr/bC0yq4Bxh8Nfwhy43uLLECuF
IAvh/kGgY39bPz+8YikijSRAqoxADSQZrpakERR94BX9nqjy1UB4ZoO4H+doyOpl
I7/vE+7+dB9+BQhRGpsmaXbkUTvwPTzrUbX/+wwp3ZZ6LXXPQXDUK/UdKeunvwDT
hTKZ7CtV+KmPxIGEZi/wVVUxCXeGhdMjpqgLtcJt9aCBkddWwlPCy+L3P8RHxZ0v
5fzG6uL46G2r2FCBnWmuJs1+COSYoAMgeB9vOdqEDVtlEJJtfoLN1wPuTKby8B31
vg==
-----END CERTIFICATE-----
Generated at Sat Jan 10 05:58:00 2026 by rpki-client