This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
File:                     4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json)
Hash identifier:          eVnOvhGv8GiuUGYDUrWHkW29IGITFz22G9uTs6JEwAU=
Subject key identifier:   56:68:AB:78:A7:4C:93:25:78:D0:CD:EA:5B:5E:5A:F4:49:88:5B:D8
Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Certificate issuer:       /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Certificate serial:       5B41521ECF24204C827AE7D2CC0BD3A6A8D2E8CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
Manifest number:          045B
Signing time:             Sun 08 Feb 2026 23:21:55 +0000
Manifest this update:     Sun 08 Feb 2026 23:16:55 +0000
Manifest next update:     Tue 10 Feb 2026 02:27:55 +0000
Files and hashes:         1: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=)
                          2: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: yAg9nTywF0Eq5R9dzI5Fh5JQsXnCjJLdzEi2wmanQBo=)
                          3: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=)
                          4: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=)
                          5: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=)
                          6: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=)
                          7: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=)
                          8: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Feb 2026 21:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:41:52:1e:cf:24:20:4c:82:7a:e7:d2:cc:0b:d3:a6:a8:d2:e8:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
        Validity
            Not Before: Feb  8 23:16:55 2026 GMT
            Not After : Feb 10 02:27:55 2026 GMT
        Subject: CN=5668AB78A74C932578D0CDEA5B5E5AF449885BD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:f2:17:98:2f:e5:c8:aa:ed:5e:b7:76:60:9f:
                    d6:59:73:86:c8:9a:4a:ba:ab:71:9a:26:26:0f:a1:
                    6f:66:2f:2b:3a:16:59:f2:7f:4f:02:bb:62:f5:16:
                    49:0a:81:36:ef:2b:02:a7:2b:1b:9f:73:ab:c5:17:
                    34:46:d4:0b:40:e2:51:7e:78:31:55:49:56:96:37:
                    a2:c1:5e:04:1c:11:40:5b:62:5c:89:5c:73:be:f4:
                    b8:fc:b0:45:d9:e7:65:7a:68:6d:c7:af:91:99:d5:
                    ec:0f:b4:02:2a:d4:ee:0e:61:06:c6:22:fc:b2:c9:
                    84:2f:61:e2:78:5e:86:ca:c7:f1:25:85:4f:34:9a:
                    a6:8a:4d:e6:21:de:11:cd:c7:28:2a:fe:83:af:41:
                    47:e4:0d:08:59:4b:2f:4a:c0:96:da:6e:a8:81:7c:
                    c7:a0:79:bd:0c:b8:60:4c:b5:ca:a6:d2:f0:b6:c5:
                    73:e5:a5:05:c7:e4:7c:28:a2:c5:69:4b:39:f1:0d:
                    62:4b:ce:47:b5:d6:f5:cd:31:4b:86:65:4e:82:e1:
                    08:4c:f6:a9:7d:d4:1c:14:1f:81:fb:9f:85:16:86:
                    cb:68:a8:7f:b8:4e:fa:a0:37:b1:16:0d:3b:62:79:
                    7f:73:69:0c:c4:13:49:6d:e6:fe:bd:e5:83:d0:63:
                    19:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:68:AB:78:A7:4C:93:25:78:D0:CD:EA:5B:5E:5A:F4:49:88:5B:D8
            X509v3 Authority Key Identifier:
                keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:90:81:fb:ce:af:4f:0c:d5:60:4c:91:7c:9c:53:b1:c8:88:
         ab:3c:22:b9:d8:83:11:c4:d6:bb:98:11:ed:d0:4d:5e:8a:42:
         cb:ae:ba:49:1e:01:28:c1:26:c7:8b:f6:60:48:a9:b4:98:cf:
         9b:50:8c:18:5b:ce:e7:3a:a7:9c:f1:58:4e:1b:9e:2d:55:c9:
         cc:00:49:fc:f6:f6:1a:ea:e1:a4:ec:d2:ba:c3:d5:bf:d0:07:
         44:30:e1:13:40:5f:96:ea:9e:b3:ec:ea:86:ca:2b:cd:16:ab:
         ba:50:bd:21:bf:78:e9:7a:0b:4e:c5:0b:22:8c:d4:a2:17:1b:
         d6:16:6f:36:ca:5f:eb:62:03:85:08:7a:5e:c0:57:52:3c:5a:
         df:a3:30:42:dd:6d:95:6a:4b:54:5e:7c:21:b1:ed:43:5b:a8:
         43:95:a9:c7:55:5e:96:7b:00:c6:2e:e3:6a:16:da:b3:74:d3:
         30:34:6d:4c:13:cb:89:28:e5:21:2d:ba:a4:51:9d:1b:d8:a2:
         1b:ab:46:96:44:c2:29:0a:6c:46:13:56:2a:e0:10:da:58:22:
         e6:f1:d4:73:b0:11:80:f6:b1:31:0c:24:1b:a8:8c:a6:8e:86:
         d0:18:7a:38:2a:2f:8f:80:98:39:5d:0a:63:db:23:c8:ce:a6:
         fa:3c:bd:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 01:12:26 2026 by rpki-client