This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
File:                     4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json)
Hash identifier:          m8bIR8jgaR84RooBSMoHyb5gtEzGe9w1lwC4cKuGSjg=
Subject key identifier:   CC:5E:D7:D9:8D:9E:B7:CF:B1:C1:FF:DF:81:73:C2:35:2E:ED:09:09
Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Certificate issuer:       /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Certificate serial:       536323D925315FCC66EC45ADD46B282430A28F15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
Manifest number:          0460
Signing time:             Thu 12 Feb 2026 16:59:47 +0000
Manifest this update:     Thu 12 Feb 2026 16:54:47 +0000
Manifest next update:     Fri 13 Feb 2026 20:45:47 +0000
Files and hashes:         1: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=)
                          2: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: eJVnMdDL8Hvmb/SHGu2FK7KY+1hNRV5zPQ39asmMTxQ=)
                          3: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=)
                          4: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=)
                          5: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=)
                          6: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=)
                          7: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=)
                          8: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Feb 2026 20:36:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:63:23:d9:25:31:5f:cc:66:ec:45:ad:d4:6b:28:24:30:a2:8f:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
        Validity
            Not Before: Feb 12 16:54:47 2026 GMT
            Not After : Feb 13 20:45:47 2026 GMT
        Subject: CN=CC5ED7D98D9EB7CFB1C1FFDF8173C2352EED0909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:d0:90:a1:fb:20:a6:34:cd:83:29:a3:73:e5:
                    8c:da:b4:98:ad:ce:5a:5b:06:c9:66:3f:5c:60:00:
                    bf:b6:a3:fe:06:da:a4:ca:88:47:81:9a:03:26:12:
                    44:ca:41:80:b3:09:bc:dd:70:35:73:49:c3:bd:39:
                    c7:e1:77:4a:09:9d:62:ad:58:9f:75:75:5b:b0:77:
                    5c:3b:d9:9b:b8:0e:f8:d1:1b:88:6a:50:44:04:56:
                    b3:4c:11:82:66:41:0d:9e:27:f3:1a:c8:9f:9e:03:
                    40:e2:b0:53:79:7a:ca:3b:de:f9:b4:0f:a9:fc:0c:
                    41:bb:a4:e7:5c:c0:c6:fc:34:40:95:04:b9:e5:a9:
                    af:1f:cd:1a:19:28:82:c7:92:92:48:d2:37:51:46:
                    8c:6a:d9:4d:62:21:8d:3a:5c:38:e7:52:6b:65:6c:
                    a2:7b:8d:12:b8:26:5a:27:4e:2b:a7:db:1a:31:ec:
                    d3:0a:3d:e5:84:0f:bc:7e:82:66:59:a4:e0:2a:45:
                    12:7c:e9:92:fa:77:00:1d:64:83:40:ad:32:33:85:
                    8e:8f:01:d8:89:53:69:a6:86:bf:f5:a0:b1:b1:49:
                    06:40:84:ca:02:65:41:31:25:13:ed:6d:bf:8c:5c:
                    2b:8c:8b:d7:73:73:bb:52:13:2b:82:f8:96:1a:e0:
                    e2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:5E:D7:D9:8D:9E:B7:CF:B1:C1:FF:DF:81:73:C2:35:2E:ED:09:09
            X509v3 Authority Key Identifier:
                keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:2e:a3:cc:d5:7e:d4:30:7c:7f:f5:d3:df:dd:f2:f8:4d:b7:
         db:bc:24:47:9e:b0:a9:4c:ff:63:d8:f0:b6:85:1a:80:75:6f:
         63:d8:9f:6c:90:fe:b1:a2:cd:39:03:49:2b:9b:a5:92:ce:fb:
         7c:90:f6:d3:f4:8b:f4:59:f9:03:11:93:6c:1b:d9:fe:09:48:
         af:00:9d:21:5e:ec:d1:7d:ed:3e:6d:e0:8e:26:a5:5b:3f:b2:
         13:dd:13:ae:86:56:6b:10:49:43:c8:77:19:40:e5:7e:9b:79:
         8e:d3:6d:20:74:3f:c2:e0:97:1d:14:a9:34:0d:ae:c6:e8:af:
         99:9a:db:50:df:a4:ec:0f:d5:83:44:04:6b:ad:7e:ce:99:52:
         83:f1:8d:65:c3:4d:be:f2:cb:38:f7:18:67:00:54:ea:54:8e:
         45:29:e2:aa:6d:7b:0b:b7:d4:b6:61:84:71:2c:30:f6:2e:c6:
         3b:ba:f3:b4:6b:ad:c9:d0:35:c3:b1:ba:72:3f:16:59:11:98:
         cd:ac:e9:a7:96:9b:60:09:44:ac:cb:da:9b:5a:54:6b:be:c7:
         18:9a:c7:1f:28:f8:c5:cb:f9:d5:87:0a:f6:b9:7f:83:75:39:
         0a:46:e5:18:7b:39:69:aa:d8:8b:29:d9:db:61:14:fa:26:b5:
         13:88:e5:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 13 01:30:24 2026 by rpki-client