This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/0/EC5F579A068CE6CFBF46FDA7C3EB4DD6F94653F1.mft
File:                     EC5F579A068CE6CFBF46FDA7C3EB4DD6F94653F1.mft (raw, json)
Hash identifier:          ejY2SnJnE2YLBjOJ1xjn/GHoHdyGlID8cOi4AhWAT8s=
Subject key identifier:   BB:7B:B0:2E:2E:37:66:76:D4:85:93:E2:86:CC:EE:9D:EB:61:0E:3E
Authority key identifier: EC:5F:57:9A:06:8C:E6:CF:BF:46:FD:A7:C3:EB:4D:D6:F9:46:53:F1
Certificate issuer:       /CN=EC5F579A068CE6CFBF46FDA7C3EB4DD6F94653F1
Certificate serial:       1F44C56B18F4732C048B33E7A3E87A165DCF2C0D
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/EC5F579A068CE6CFBF46FDA7C3EB4DD6F94653F1.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/0/EC5F579A068CE6CFBF46FDA7C3EB4DD6F94653F1.mft
Manifest number:          09
Signing time:             Tue 20 Jan 2026 06:25:30 +0000
Manifest this update:     Tue 20 Jan 2026 06:20:30 +0000
Manifest next update:     Wed 21 Jan 2026 08:29:30 +0000
Files and hashes:         1: 326131343a373538313a333830303a3a2f34302d3438203d3e20313531363733.roa (hash: r53+tlnjK7xAc5kJlxhFUell1c4S1jQNbSq/pievGCs=)
                          2: EC5F579A068CE6CFBF46FDA7C3EB4DD6F94653F1.crl (hash: 3T+IbADrEkEcEGhDGcmfzTU6nCDUwqA1NeN5a+ZAwC0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/0/EC5F579A068CE6CFBF46FDA7C3EB4DD6F94653F1.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/0/EC5F579A068CE6CFBF46FDA7C3EB4DD6F94653F1.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/EC5F579A068CE6CFBF46FDA7C3EB4DD6F94653F1.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Jan 2026 08:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:44:c5:6b:18:f4:73:2c:04:8b:33:e7:a3:e8:7a:16:5d:cf:2c:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC5F579A068CE6CFBF46FDA7C3EB4DD6F94653F1
        Validity
            Not Before: Jan 20 06:20:30 2026 GMT
            Not After : Jan 21 08:29:30 2026 GMT
        Subject: CN=BB7BB02E2E376676D48593E286CCEE9DEB610E3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:9e:70:f2:5b:30:ee:5c:c3:c3:5b:68:18:49:
                    90:94:90:20:e5:19:8e:62:38:c9:a4:a2:c7:fe:e6:
                    17:83:66:5f:ab:10:8c:14:42:34:34:33:7e:59:d7:
                    e0:e6:cf:49:88:13:72:e0:2e:60:34:c6:dc:71:5a:
                    c4:e7:39:7a:6a:f4:54:7e:f5:3b:1b:06:1d:20:05:
                    5f:9c:14:c1:d5:03:31:30:09:13:6b:c0:d0:5b:42:
                    e9:58:f4:55:86:b7:af:f3:d0:0b:18:f8:f0:32:94:
                    63:94:a6:db:ac:0d:b5:c5:0a:d3:4d:1f:c7:86:56:
                    88:80:ae:4d:b8:1f:7d:4d:bf:07:ca:c4:3f:99:d6:
                    44:69:aa:62:77:7d:0a:87:b5:63:9e:f7:02:4a:30:
                    97:96:86:b2:3f:90:be:29:82:df:cf:9e:15:18:1e:
                    3e:a1:4b:00:14:42:ae:93:78:3f:3b:c6:c0:68:da:
                    4f:d9:21:b5:10:93:99:a1:5f:94:19:b3:46:c6:05:
                    eb:70:2e:65:27:a6:2c:44:25:59:d3:46:80:ba:e4:
                    21:e4:b9:9b:a7:df:e0:0e:9d:f5:e6:af:13:7d:45:
                    dd:ce:f2:88:87:0b:4a:ca:a8:bd:86:5b:8d:53:d7:
                    7d:14:65:ad:d4:fc:41:dd:0f:1a:d3:71:a5:ba:89:
                    33:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:7B:B0:2E:2E:37:66:76:D4:85:93:E2:86:CC:EE:9D:EB:61:0E:3E
            X509v3 Authority Key Identifier:
                keyid:EC:5F:57:9A:06:8C:E6:CF:BF:46:FD:A7:C3:EB:4D:D6:F9:46:53:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/0/EC5F579A068CE6CFBF46FDA7C3EB4DD6F94653F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/EC5F579A068CE6CFBF46FDA7C3EB4DD6F94653F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/0/EC5F579A068CE6CFBF46FDA7C3EB4DD6F94653F1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:d2:08:2e:7d:29:e8:f2:d0:06:bc:7e:0a:76:05:3e:6e:e8:
         eb:f5:74:ad:f6:97:a0:de:60:1f:7a:a7:21:66:e4:e5:5d:d4:
         9b:8d:59:0a:ea:8a:bb:89:c1:2b:5a:d0:24:34:f2:bf:7a:9f:
         0f:df:35:b5:b0:65:87:bd:8b:56:33:51:9f:37:22:52:ba:09:
         bf:3c:fc:d5:0e:75:5a:95:d6:7d:d5:01:9e:22:01:7d:cc:11:
         cb:31:b2:57:8a:ff:96:f1:26:0d:21:42:8c:e5:ec:2c:00:ac:
         5e:84:3f:70:1d:fd:cc:d9:20:4c:a0:b0:c9:6b:05:6c:c0:7b:
         e7:0c:ad:2b:33:7b:c6:16:94:21:3f:5b:e5:b7:1a:e5:43:8e:
         a1:d1:17:b6:fd:02:fc:d0:02:33:bf:7a:09:69:13:a4:40:11:
         86:f7:0f:74:07:d2:8e:42:a6:25:41:88:b2:9d:62:0e:c9:60:
         11:f7:e8:52:0a:6a:52:bc:43:68:15:64:b4:bd:cf:ca:e0:e2:
         1e:e5:9f:32:5a:ae:68:80:00:f1:ca:58:c0:41:a2:b4:ee:14:
         ef:27:bc:08:5e:ab:5b:b7:ec:71:98:13:89:92:de:84:92:be:
         81:f2:b3:3b:89:29:30:69:99:b9:50:4d:af:63:4c:d0:e2:32:
         cc:b8:2d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 23:49:50 2026 by rpki-client