This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/0/DF083FC9C36AB37158AD80E5C84E76BE97ADC09F.mft
File:                     DF083FC9C36AB37158AD80E5C84E76BE97ADC09F.mft (raw, json)
Hash identifier:          Vi29Z+I/qe9sG/q62/Tn9LIma0Lj9Iwplp7qPbuwzio=
Subject key identifier:   B4:75:7A:A3:A8:05:B5:94:63:A6:F0:48:43:59:08:DB:DF:4A:1D:C1
Authority key identifier: DF:08:3F:C9:C3:6A:B3:71:58:AD:80:E5:C8:4E:76:BE:97:AD:C0:9F
Certificate issuer:       /CN=df083fc9c36ab37158ad80e5c84e76be97adc09f
Certificate serial:       446C814D9F6C81D3F19FBB737940C542CF9064A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3wg_ycNqs3FYrYDlyE52vpetwJ8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/0/DF083FC9C36AB37158AD80E5C84E76BE97ADC09F.mft
Manifest number:          63
Signing time:             Mon 09 Feb 2026 08:28:44 +0000
Manifest this update:     Mon 09 Feb 2026 08:23:44 +0000
Manifest next update:     Tue 10 Feb 2026 09:11:44 +0000
Files and hashes:         1: DF083FC9C36AB37158AD80E5C84E76BE97ADC09F.crl (hash: TvqrXPihHnHElCWotP0lRf5TzfiIVSCWv7ew56xTUa8=)
                          2: 323030313a3637383a313134633a3a2f34382d3438203d3e20323034353335.roa (hash: 9p7lN4fPyJsdHWKsoNbq0ArF1KunMN6fkvMq7UIoE20=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/0/DF083FC9C36AB37158AD80E5C84E76BE97ADC09F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/0/DF083FC9C36AB37158AD80E5C84E76BE97ADC09F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3wg_ycNqs3FYrYDlyE52vpetwJ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:11:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:6c:81:4d:9f:6c:81:d3:f1:9f:bb:73:79:40:c5:42:cf:90:64:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df083fc9c36ab37158ad80e5c84e76be97adc09f
        Validity
            Not Before: Feb  9 08:23:44 2026 GMT
            Not After : Feb 10 09:11:44 2026 GMT
        Subject: CN=B4757AA3A805B59463A6F048435908DBDF4A1DC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5d:69:6d:69:33:47:45:ab:e0:1b:2c:26:7e:
                    66:64:3d:a3:39:2f:17:b8:36:56:8f:01:4a:08:dd:
                    cb:7a:ad:25:57:a3:cd:0f:cd:e3:c3:28:dd:37:26:
                    9d:8f:87:aa:34:85:d7:03:6b:e0:32:f9:01:0f:7b:
                    2d:9e:a3:6c:65:cc:e1:7e:38:e3:ce:5f:71:e7:51:
                    ae:8c:a0:28:b1:36:8f:17:e5:de:d6:2d:c2:5d:de:
                    3e:f6:7d:60:e8:9b:ef:9b:5d:a9:d2:f7:a3:52:c1:
                    e9:06:32:f2:d1:60:d0:60:56:b4:21:ed:93:46:20:
                    08:01:8b:05:ab:c2:6b:3f:9a:d5:cc:40:8e:23:fe:
                    d4:42:3b:66:ae:21:5c:77:19:cd:9a:82:2f:17:20:
                    95:d4:a2:cc:ea:d9:b3:b0:29:2d:32:8f:65:93:4f:
                    a3:18:f3:a9:00:00:0c:74:5a:8c:c7:ce:39:4e:2e:
                    40:ae:db:a2:80:f3:6b:3a:d6:f6:29:59:12:99:63:
                    ad:ff:58:7c:0c:fe:92:2e:1a:bc:f2:78:e2:c6:d4:
                    e7:81:a9:e8:a4:26:95:c7:08:a5:f8:02:d9:29:72:
                    68:5f:8b:c9:1e:6c:83:1b:45:90:39:61:f9:82:92:
                    fe:9b:d0:2d:07:4f:5a:9d:20:26:1b:59:02:58:a6:
                    9f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:75:7A:A3:A8:05:B5:94:63:A6:F0:48:43:59:08:DB:DF:4A:1D:C1
            X509v3 Authority Key Identifier:
                keyid:DF:08:3F:C9:C3:6A:B3:71:58:AD:80:E5:C8:4E:76:BE:97:AD:C0:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/0/DF083FC9C36AB37158AD80E5C84E76BE97ADC09F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wg_ycNqs3FYrYDlyE52vpetwJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/0/DF083FC9C36AB37158AD80E5C84E76BE97ADC09F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:8a:ff:dd:a4:8e:ae:13:d2:5b:3d:50:78:2c:d8:87:82:1f:
         24:50:97:44:db:c8:09:14:9e:fe:7d:34:11:f1:f5:33:6e:77:
         da:e2:f5:dd:45:c9:dc:4d:b0:9e:61:a0:d7:52:4f:2e:fe:0d:
         3e:3d:ea:51:d5:82:7f:5f:90:da:57:a7:99:bc:b9:87:39:45:
         95:26:99:f1:5c:97:59:ad:74:8f:9f:3b:bd:bf:49:89:38:77:
         9a:ee:9c:eb:fe:f0:ba:1a:30:31:d0:1d:67:fb:ed:8d:28:a8:
         bc:66:37:cb:7e:f3:e7:c8:ea:4f:ae:88:4c:14:9b:69:db:f5:
         42:2b:90:88:38:f6:38:c5:14:e3:ed:bd:c2:22:f1:b7:54:71:
         e0:1a:5d:96:f9:c5:83:4f:12:0f:bc:da:ee:7e:55:44:e7:01:
         06:eb:a9:95:b0:fa:fc:d0:02:b9:9b:fe:12:17:da:1b:ac:d0:
         4a:38:84:0f:4a:41:49:66:b1:08:50:d7:2b:55:d1:4e:9d:71:
         dc:bb:cd:3b:eb:c7:0a:0e:54:b1:47:af:e7:df:e9:e3:3d:58:
         5a:98:7e:b8:80:b0:a8:dc:f0:c0:ef:16:b2:7c:f5:b9:5e:de:
         4b:c8:6f:46:18:37:f8:c6:45:69:a0:87:92:a0:1b:1e:b4:ca:
         be:d6:b8:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:58:35 2026 by rpki-client