This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.mft
File:                     193B972646653C886D4001CDAD73EC4E473DA173.mft (raw, json)
Hash identifier:          dZr045p724MYA3RBOUHFkndfg13UFnvqhsnJfXju+Sc=
Subject key identifier:   4B:09:BD:D9:6D:AB:E8:ED:19:52:26:77:7A:D9:12:E5:8F:E1:6F:00
Authority key identifier: 19:3B:97:26:46:65:3C:88:6D:40:01:CD:AD:73:EC:4E:47:3D:A1:73
Certificate issuer:       /CN=193b972646653c886d4001cdad73ec4e473da173
Certificate serial:       30CA18E7D86D1E9BE1E47341F9735546B0158914
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GTuXJkZlPIhtQAHNrXPsTkc9oXM.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.mft
Manifest number:          02E4
Signing time:             Mon 09 Feb 2026 18:15:45 +0000
Manifest this update:     Mon 09 Feb 2026 18:10:45 +0000
Manifest next update:     Tue 10 Feb 2026 18:35:45 +0000
Files and hashes:         1: 193B972646653C886D4001CDAD73EC4E473DA173.crl (hash: uc5DXOcosOGplm1nwzTsIT4Fmijf2m4mdQv1fk2SSKo=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GTuXJkZlPIhtQAHNrXPsTkc9oXM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:ca:18:e7:d8:6d:1e:9b:e1:e4:73:41:f9:73:55:46:b0:15:89:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=193b972646653c886d4001cdad73ec4e473da173
        Validity
            Not Before: Feb  9 18:10:45 2026 GMT
            Not After : Feb 10 18:35:45 2026 GMT
        Subject: CN=4B09BDD96DABE8ED195226777AD912E58FE16F00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:92:3d:18:cd:38:47:df:26:6e:94:32:9f:24:
                    c0:d1:26:43:f0:6d:96:a8:d5:88:49:d1:d6:18:c3:
                    0d:28:60:f0:d5:13:0a:58:9a:ad:8a:51:c9:8e:16:
                    31:55:d3:33:15:2e:a9:9c:1a:46:df:e3:47:31:e6:
                    63:eb:0b:bc:79:e6:4d:fb:e4:f3:66:f5:b8:6b:00:
                    4c:81:5e:8f:2a:3a:c5:b2:70:32:8f:87:52:48:44:
                    77:2e:a8:e6:ec:76:19:02:98:45:4e:ae:4a:69:6c:
                    d6:ca:e4:79:a4:dd:a7:60:e9:49:6f:71:d6:62:33:
                    68:eb:a4:07:2c:63:82:8e:51:0a:e1:ac:f5:c9:af:
                    85:7a:0b:b6:54:97:08:0b:08:40:fd:d8:1e:bc:61:
                    6c:24:ae:de:af:17:c6:d9:5f:7e:a9:55:79:8c:4c:
                    b7:46:30:b5:68:00:b3:a0:83:4b:a4:d2:39:61:57:
                    45:1b:c9:b9:a8:a8:8e:85:64:d0:7d:f4:90:27:95:
                    3e:34:d4:f5:07:74:f9:9a:a0:a9:72:d7:c5:45:cd:
                    fa:b2:27:36:1b:20:c5:3a:c9:06:bc:0c:26:4a:e8:
                    6c:81:ed:ac:03:ef:3a:8b:7a:1f:33:fe:45:97:63:
                    09:a6:61:bf:4e:45:c3:54:28:78:e4:17:b6:80:66:
                    59:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:09:BD:D9:6D:AB:E8:ED:19:52:26:77:7A:D9:12:E5:8F:E1:6F:00
            X509v3 Authority Key Identifier:
                keyid:19:3B:97:26:46:65:3C:88:6D:40:01:CD:AD:73:EC:4E:47:3D:A1:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GTuXJkZlPIhtQAHNrXPsTkc9oXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:9d:0f:2c:0f:c3:da:94:ed:8d:30:c3:7e:54:bf:e5:d5:8b:
         35:fc:f3:58:fe:3d:02:46:49:45:7b:15:d3:3d:56:ba:47:dc:
         f1:92:2a:e5:7f:cd:20:49:b1:6d:ab:3c:d3:14:27:b7:40:c9:
         32:c6:ea:1d:4f:08:d9:cd:d9:16:24:b0:73:36:5a:54:60:8a:
         7c:56:71:9d:6d:02:90:cb:eb:44:cb:17:ff:55:28:76:17:ca:
         a1:6c:e3:8e:ca:4f:57:aa:81:d6:a0:6e:6e:54:c0:e1:99:1f:
         ac:92:fe:f1:95:aa:2c:01:31:5c:b0:41:ff:0a:e4:b4:0f:24:
         dc:da:81:e7:33:5f:94:55:ef:71:71:5c:25:76:dc:f2:93:b9:
         ed:ac:be:16:1d:bd:54:b5:f5:76:01:93:b5:68:d8:69:8b:8e:
         86:c0:d4:1d:c9:59:f9:3e:ac:f8:aa:98:bf:d4:ed:c0:1b:07:
         7e:83:72:4e:13:dd:cd:67:ad:14:ff:e1:7a:62:14:c7:af:d5:
         3a:b2:7a:00:d6:d3:d2:d8:50:a5:20:e1:c3:f6:83:0f:10:1f:
         e4:ea:56:f3:61:c6:5d:47:ee:cf:7e:c6:96:33:78:05:4c:99:
         a8:b7:d6:ed:f0:63:8f:9a:65:a9:14:3c:e8:db:dc:b5:7f:2d:
         5d:cb:12:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:41:48 2026 by rpki-client