This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
File:                     4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json)
Hash identifier:          G2lXWbymhLIjaEVI3BKPRfohWr+VQOWkwjN9I82Hj9g=
Subject key identifier:   52:7C:C0:CF:E1:A9:FC:AE:1D:64:CF:C9:BE:4A:BB:22:7D:03:7C:98
Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Certificate issuer:       /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Certificate serial:       3A0CA489B842D1D33A587D8B3E7469B3A671B00E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
Manifest number:          0464
Signing time:             Sun 15 Feb 2026 18:24:27 +0000
Manifest this update:     Sun 15 Feb 2026 18:19:27 +0000
Manifest next update:     Mon 16 Feb 2026 20:05:27 +0000
Files and hashes:         1: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=)
                          2: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=)
                          3: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=)
                          4: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: 2dL7glXw3BTW6PW7E3+I4hBF5qkeESS490YQbtnbOAA=)
                          5: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=)
                          6: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=)
                          7: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=)
                          8: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Feb 2026 20:05:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:0c:a4:89:b8:42:d1:d3:3a:58:7d:8b:3e:74:69:b3:a6:71:b0:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
        Validity
            Not Before: Feb 15 18:19:27 2026 GMT
            Not After : Feb 16 20:05:27 2026 GMT
        Subject: CN=527CC0CFE1A9FCAE1D64CFC9BE4ABB227D037C98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:81:f3:da:22:13:6c:e1:8d:05:f7:2d:73:6e:
                    29:45:e1:79:82:a9:8c:91:e9:4f:f9:6b:6d:9c:7c:
                    98:ac:7e:ae:e4:e4:ff:c7:2e:4c:47:f9:ca:46:88:
                    99:21:3d:43:dc:97:4f:5f:07:90:3d:aa:76:7b:d9:
                    d1:fc:5b:a9:3d:ba:eb:97:ae:23:40:bd:93:a3:86:
                    47:fa:2e:a0:a0:a3:8e:5a:96:f9:7e:02:22:95:28:
                    9c:30:2d:c0:07:f1:d7:2f:69:fe:61:27:51:44:1b:
                    a6:df:23:b5:1d:d6:dc:eb:89:c8:cd:6d:67:16:e2:
                    a9:b1:fe:c2:43:42:12:ec:3c:54:92:89:95:17:5d:
                    98:50:39:95:ba:13:82:a6:0a:10:8a:e8:3d:24:7b:
                    2f:b5:a5:17:ea:e4:ad:9b:f9:b8:ae:c2:59:95:f0:
                    e7:b0:4b:70:ff:bf:ad:eb:f6:19:5f:17:8d:73:09:
                    99:b0:0a:31:eb:6a:df:1c:a4:96:f3:1d:20:63:54:
                    fa:04:e2:99:19:84:be:d8:fe:24:7c:cb:0f:f3:11:
                    52:4c:88:c8:fb:17:d1:b9:ee:71:53:ee:57:60:bc:
                    32:e7:e5:8a:11:b7:61:4d:61:31:76:35:90:d1:99:
                    b7:83:83:e5:8c:0d:4a:ee:64:75:8d:13:7c:61:82:
                    92:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:7C:C0:CF:E1:A9:FC:AE:1D:64:CF:C9:BE:4A:BB:22:7D:03:7C:98
            X509v3 Authority Key Identifier:
                keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:83:47:b6:c3:6f:d8:c8:07:0e:f0:92:09:1e:b8:fd:98:2f:
         dc:f4:38:eb:27:79:ca:bc:d0:f1:fc:b5:d1:65:10:98:dd:a0:
         ba:9d:4b:b4:b1:23:d5:9a:96:62:c4:9a:35:40:c6:72:06:18:
         d3:33:65:13:b9:c6:62:af:ab:f2:1a:86:38:91:be:94:27:90:
         2a:50:b4:68:66:da:fb:4c:67:ef:ba:5a:91:b0:c8:c6:61:9b:
         4c:af:f7:ce:9a:22:10:6d:19:f5:b7:68:85:87:66:fe:42:fa:
         ea:31:1e:d3:df:33:7a:8d:c4:c2:dc:b2:52:65:23:3e:62:87:
         c0:19:01:27:34:ba:2f:78:86:29:d5:d2:d4:3a:c5:70:de:b6:
         17:8e:a2:1b:20:d7:61:03:9e:1b:26:62:9d:86:26:8a:cf:5f:
         2e:29:9a:96:fc:38:d9:39:2d:eb:ac:6f:18:29:97:e4:a6:b1:
         6f:51:65:6e:fd:70:e8:14:87:5b:0b:e7:42:bc:5b:fb:b9:f4:
         02:41:a4:ed:c0:3b:fa:af:cb:da:32:cd:a8:8d:7e:ed:f4:fa:
         52:82:97:e0:1e:76:b6:01:b6:4d:5e:fc:6e:b7:ce:77:09:06:
         bc:c0:57:48:92:69:93:23:77:fb:61:5d:73:67:ef:3a:2e:4e:
         24:a1:ae:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 16 04:27:06 2026 by rpki-client