This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.mft
File:                     5E5179BB1757068D7028510FEEB1177AA7CC8818.mft (raw, json)
Hash identifier:          Ka8ZoWzRYH1K8QAmqjBueHJ4k89m2yetR1kYK2APLWY=
Subject key identifier:   32:AE:4A:66:78:14:34:66:45:83:CA:5A:95:F1:D9:0E:06:6E:50:EE
Authority key identifier: 5E:51:79:BB:17:57:06:8D:70:28:51:0F:EE:B1:17:7A:A7:CC:88:18
Certificate issuer:       /CN=5e5179bb1757068d7028510feeb1177aa7cc8818
Certificate serial:       4B45964C4F2F76F66A33E2294B8AB3EE1F79FF70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.mft
Manifest number:          05EB
Signing time:             Thu 29 Jan 2026 17:18:46 +0000
Manifest this update:     Thu 29 Jan 2026 17:13:46 +0000
Manifest next update:     Fri 30 Jan 2026 21:17:46 +0000
Files and hashes:         1: 5E5179BB1757068D7028510FEEB1177AA7CC8818.crl (hash: VYOY34G4io/XpkRHFhf5N5jCaXhkGJnBU73MLBVTBTE=)
                          2: 38332e3135302e3231372e302f32342d3234203d3e20323132353034.roa (hash: k8RY7QTEncAN/MOxUGAuMRRlssrdtl7ahwCsdlVrRY0=)
                          3: 38332e3135302e3231362e302f32322d3234203d3e203631333137.roa (hash: bA7vtpR0TyML0HjZJJdgMHPc1uK0jGA3YpWrjwZ8y+U=)
                          4: 3139322e3130392e31302e302f32342d3234203d3e203239383032.roa (hash: CCWx5/mnzUAvPW2QXDisPqaJoMOmAAYfjlJp2z2VVX8=)
                          5: 38332e3135302e3231382e302f32342d3234203d3e20313939343135.roa (hash: yCFgEcnTSAhMVf29HMHp04B1k4DqC3mlqJPDdmg8wFQ=)
                          6: 38332e3135302e3231392e302f32342d3234203d3e203533333430.roa (hash: GXLgWx6Q3CLvfyeGG+4M+PXnBAwSeVlRcKDTfEKYkeQ=)
                          7: 3139322e3130392e31312e302f32342d3234203d3e203136323736.roa (hash: qRWEBAMqR9/oXRv8A+nfXFduPkpHZgx8k4TEVcf/LOk=)
                          8: 38332e3135302e3231362e302f32342d3234203d3e2039333034.roa (hash: SHO6BxDoTVCg+5Db1T6qj1oU+zO9Nrl8AN0Cw80zXoY=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 30 Jan 2026 21:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:45:96:4c:4f:2f:76:f6:6a:33:e2:29:4b:8a:b3:ee:1f:79:ff:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e5179bb1757068d7028510feeb1177aa7cc8818
        Validity
            Not Before: Jan 29 17:13:46 2026 GMT
            Not After : Jan 30 21:17:46 2026 GMT
        Subject: CN=32AE4A66781434664583CA5A95F1D90E066E50EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1c:29:54:fd:7d:7a:e4:ae:ba:72:e4:ac:e0:
                    8a:c2:65:e4:72:e3:89:e8:30:ce:8e:d5:ef:67:c2:
                    cb:c3:02:46:30:f4:d6:8d:7e:c4:dd:71:d6:9a:d7:
                    89:d6:48:29:ca:8f:2a:ea:8b:ce:a5:5a:49:3b:84:
                    28:2a:0e:2a:74:ff:60:92:e0:8c:cc:f7:e1:c8:7c:
                    d4:c7:47:6a:dc:7a:f6:27:da:33:de:82:f0:70:e6:
                    9d:78:48:94:a3:5f:bb:c0:04:1d:69:11:11:02:26:
                    ca:36:a6:0c:b8:e9:76:99:77:4a:d0:38:1d:59:24:
                    f9:e7:16:d8:89:72:2f:55:ee:db:87:81:9c:98:bf:
                    9e:c7:a0:41:4a:03:d8:4d:46:50:d7:e5:92:a3:03:
                    90:be:c1:ab:48:e2:36:57:2b:aa:8b:d1:cd:8f:29:
                    30:cb:9b:c5:0c:0a:1b:cd:01:d6:8e:83:61:78:2a:
                    f7:36:a0:7f:0f:ff:38:fc:79:83:53:8a:d1:80:54:
                    b3:52:28:6b:ca:3a:17:3b:a7:e7:5a:98:36:ab:79:
                    f4:be:5f:cb:08:47:d9:22:ba:1b:28:37:67:ad:00:
                    be:fa:f2:64:26:d7:1d:b7:4c:04:ac:b6:ff:e1:40:
                    19:0f:96:b8:4a:be:7e:e8:e6:ab:7e:db:9c:ea:a7:
                    34:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:AE:4A:66:78:14:34:66:45:83:CA:5A:95:F1:D9:0E:06:6E:50:EE
            X509v3 Authority Key Identifier:
                keyid:5E:51:79:BB:17:57:06:8D:70:28:51:0F:EE:B1:17:7A:A7:CC:88:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:b4:1e:f7:82:f7:59:ee:64:d2:d6:5f:08:40:89:4a:39:b6:
         41:8f:3b:56:b2:59:7d:f2:9e:26:13:86:18:7f:ad:92:a6:05:
         2b:0f:b5:6a:b1:e4:94:69:a9:fa:c1:b3:28:2d:f3:e3:86:b7:
         6b:54:6c:1c:22:f7:bb:3b:f7:48:1d:cd:cc:23:d8:1a:45:c0:
         8f:ea:f3:6c:be:f4:10:11:a9:91:64:f3:3c:65:9e:b4:4a:17:
         94:a5:81:97:da:2e:3b:90:18:dd:93:2d:43:0a:6e:da:3b:0f:
         c3:20:2f:c3:80:29:c3:d6:d3:d4:02:24:fa:42:e0:19:1d:27:
         05:0e:4b:24:b8:d5:68:22:7e:fe:ec:71:de:fc:46:44:9f:e1:
         5f:d1:42:89:09:fa:04:3a:ac:c3:69:5d:a8:0f:a8:d0:74:e4:
         08:7e:ce:66:fa:39:61:0d:de:d6:90:eb:b9:84:b7:d0:e4:59:
         84:6c:69:e8:43:78:a1:7e:24:5f:cb:10:c5:4e:44:09:5e:0d:
         54:f4:14:7a:04:40:a7:88:da:38:12:0e:35:c8:01:c0:57:16:
         a1:29:c7:60:fe:d4:0c:46:f7:ec:55:24:db:75:f5:54:a3:35:
         2f:b1:5f:76:59:77:10:8d:fa:70:d9:dc:c0:0c:77:7a:fd:cd:
         4e:61:b8:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 30 14:12:25 2026 by rpki-client