This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft
File:                     8CC300FAF2F6D49186A8B62E08F190107743973D.mft (raw, json)
Hash identifier:          4imU2dIReoI6slLOYGJTIg6GWHihKKql43lQjCVPRxo=
Subject key identifier:   28:64:B7:28:CB:67:32:5C:8E:85:87:5A:CB:21:BB:C5:2F:57:92:44
Authority key identifier: 8C:C3:00:FA:F2:F6:D4:91:86:A8:B6:2E:08:F1:90:10:77:43:97:3D
Certificate issuer:       /CN=8cc300faf2f6d49186a8b62e08f190107743973d
Certificate serial:       0520D22149CBF0B310F7BA73AF5070BB440CC97C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft
Manifest number:          24
Signing time:             Mon 09 Feb 2026 14:40:33 +0000
Manifest this update:     Mon 09 Feb 2026 14:35:33 +0000
Manifest next update:     Tue 10 Feb 2026 16:13:33 +0000
Files and hashes:         1: AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer (hash: GFHqWxN9S46J9mAmEiVgStEzFnFl5M2lHDxwpuTvPQs=)
                          2: 8CC300FAF2F6D49186A8B62E08F190107743973D.crl (hash: QN0AaqJ0wdtvS9Ly/Bzvkju1LenS8j+Lo3X5ntpEBJw=)
                          3: 326130303a666265343a3161623a3a2f34382d3438203d3e20323035323335.roa (hash: BQDJ5MQBcUAO3DNIndlqGRpqRDYK9vOMV2e/1C55/mU=)
                          4: 3138352e33382e32342e302f32342d3234203d3e203632313133.roa (hash: DL9cUbkHdgRd6E9kt0CXscnQjaDpUpLE3Ywus/lXk+w=)
                          5: 326130303a666265313a3a2f33322d3332203d3e203632313133.roa (hash: Z+RU3vtzvAe7ynR14QHAUV1/vmbrfJ5VHYPGPd2caBI=)
                          6: 326130303a666265303a3a2f33322d3332203d3e203632313133.roa (hash: WNjAJELB/oLrw9Hz4dnzCW0vPcsiMFGJ+BAVSWItBek=)
                          7: AS62113.asa (hash: Yver10QWMXYIYP5ZY4+AuiARoynXV5PYVi7Q6x7VN9c=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:10:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:20:d2:21:49:cb:f0:b3:10:f7:ba:73:af:50:70:bb:44:0c:c9:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cc300faf2f6d49186a8b62e08f190107743973d
        Validity
            Not Before: Feb  9 14:35:33 2026 GMT
            Not After : Feb 10 16:13:33 2026 GMT
        Subject: CN=2864B728CB67325C8E85875ACB21BBC52F579244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:85:b5:c6:af:8f:cc:7b:e1:8a:14:bf:cd:4c:
                    ba:cc:8e:41:49:1d:22:30:d5:00:20:fb:e4:b4:51:
                    e1:39:50:16:5d:58:f6:83:27:b8:22:c7:72:42:4a:
                    d8:bd:06:5e:63:42:4c:33:9e:a0:57:ef:3c:d8:49:
                    29:73:95:6d:66:91:51:a7:4a:58:dc:77:3a:89:1f:
                    63:97:6f:32:08:6b:64:64:fb:c3:3e:32:2d:60:e6:
                    a3:bb:93:b8:50:1a:af:4e:cf:09:ce:f6:74:90:53:
                    14:4a:cd:23:32:dc:27:b6:08:9d:14:57:f1:5e:24:
                    c1:77:18:78:d6:46:f1:87:7f:ce:97:59:c1:85:47:
                    eb:c9:93:f4:57:f5:a3:08:70:41:dc:d3:4d:ef:17:
                    b2:c5:06:21:24:f8:60:ed:bf:67:db:49:d6:47:06:
                    5f:bc:ff:42:12:7c:0f:41:5e:22:de:24:a5:03:cf:
                    4c:b1:53:4a:b8:35:50:97:c4:bc:13:a2:4d:1e:a2:
                    05:f4:95:ec:cd:27:81:d5:ee:0d:13:64:30:5a:21:
                    3e:1e:41:e8:a7:bf:d4:fd:f9:cd:42:60:be:60:71:
                    c9:df:b4:8d:f5:0e:aa:c0:6a:4c:dc:36:3d:c7:74:
                    45:1a:8d:5b:dc:a1:f4:44:2a:43:b8:d5:d6:f0:08:
                    c9:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:64:B7:28:CB:67:32:5C:8E:85:87:5A:CB:21:BB:C5:2F:57:92:44
            X509v3 Authority Key Identifier:
                keyid:8C:C3:00:FA:F2:F6:D4:91:86:A8:B6:2E:08:F1:90:10:77:43:97:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:bd:2e:a2:c8:0b:fc:3d:ec:9c:2a:34:2b:2e:3b:8f:0c:05:
         db:52:e6:e9:31:2e:f6:7c:49:6c:22:b0:34:ff:de:16:c0:f0:
         81:ec:62:97:53:0d:8c:7f:d2:2d:c1:6b:33:02:e6:85:c2:52:
         cd:49:d2:d2:0e:f0:27:b1:16:04:a5:4c:54:09:ab:56:6d:c2:
         cd:9e:80:31:89:b4:73:c7:b9:fd:c6:98:ec:d1:e3:94:20:8f:
         f1:a4:6e:b2:08:c8:02:ea:9a:53:3f:96:7b:66:6a:15:62:ab:
         4f:d0:ec:a0:4e:9b:6c:52:f9:b8:f8:7b:c9:63:aa:ac:21:cb:
         6a:a0:72:77:20:ab:62:f4:a3:8c:bb:47:95:94:96:c4:fd:8c:
         8e:00:e0:68:f5:22:ce:29:15:64:73:57:50:02:36:1e:50:af:
         86:a5:9a:48:c8:b5:85:4b:19:a5:94:fa:0a:60:e0:70:3b:96:
         e2:0b:fa:8d:d4:f4:9b:90:5c:d3:3c:26:c9:21:83:18:ed:1c:
         f2:fb:fd:57:6e:4a:dc:be:68:3a:bc:14:7b:9f:5e:03:39:69:
         17:06:99:1b:b3:c8:3d:f0:fc:3d:90:bd:39:ee:81:52:c1:da:
         83:15:31:09:9d:ae:fb:06:90:6b:99:45:dd:69:bc:65:9e:9e:
         2b:46:6c:8c
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUBSDSIUnL8LMQ97pzr1Bwu0QMyXwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGNjMzAwZmFmMmY2ZDQ5MTg2YThiNjJlMDhmMTkwMTA3
NzQzOTczZDAeFw0yNjAyMDkxNDM1MzNaFw0yNjAyMTAxNjEzMzNaMDMxMTAvBgNV
BAMTKDI4NjRCNzI4Q0I2NzMyNUM4RTg1ODc1QUNCMjFCQkM1MkY1NzkyNDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFhbXGr4/Me+GKFL/NTLrMjkFJ
HSIw1QAg++S0UeE5UBZdWPaDJ7gix3JCSti9Bl5jQkwznqBX7zzYSSlzlW1mkVGn
SljcdzqJH2OXbzIIa2Rk+8M+Mi1g5qO7k7hQGq9OzwnO9nSQUxRKzSMy3Ce2CJ0U
V/FeJMF3GHjWRvGHf86XWcGFR+vJk/RX9aMIcEHc003vF7LFBiEk+GDtv2fbSdZH
Bl+8/0ISfA9BXiLeJKUDz0yxU0q4NVCXxLwTok0eogX0lezNJ4HV7g0TZDBaIT4e
Qeinv9T9+c1CYL5gccnftI31DqrAakzcNj3HdEUajVvcofREKkO41dbwCMkxAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUKGS3KMtnMlyOhYdayyG7xS9XkkQwHwYDVR0j
BBgwFoAUjMMA+vL21JGGqLYuCPGQEHdDlz0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOGQ5MDYyZGUtZjUzNi00NDVkLWJhNzEtMDM1ZmJmZWNh
YWQ4LzAvOENDMzAwRkFGMkY2RDQ5MTg2QThCNjJFMDhGMTkwMTA3NzQzOTczRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2pNTUEtdkwyMUpHR3FMWXVDUEdRRUhk
RGx6MC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ZDkwNjJkZS1m
NTM2LTQ0NWQtYmE3MS0wMzVmYmZlY2FhZDgvMC84Q0MzMDBGQUYyRjZENDkxODZB
OEI2MkUwOEYxOTAxMDc3NDM5NzNELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvL0uosgL/D3snCo0Ky47
jwwF21Lm6TEu9nxJbCKwNP/eFsDwgexil1MNjH/SLcFrMwLmhcJSzUnS0g7wJ7EW
BKVMVAmrVm3CzZ6AMYm0c8e5/caY7NHjlCCP8aRusgjIAuqaUz+We2ZqFWKrT9Ds
oE6bbFL5uPh7yWOqrCHLaqBydyCrYvSjjLtHlZSWxP2MjgDgaPUizikVZHNXUAI2
HlCvhqWaSMi1hUsZpZT6CmDgcDuW4gv6jdT0m5Bc0zwmySGDGO0c8vv9V25K3L5o
OrwUe59eAzlpFwaZG7PIPfD8PZC9Oe6BUsHagxUxCZ2u+waQa5lF3Wm8ZZ6eK0Zs
jA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:48:13 2026 by rpki-client