This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
File:                     4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json)
Hash identifier:          EK91I30mrJ2FYlFKEXim779xAneXcPdMc9ZVQOzLsqA=
Subject key identifier:   26:17:D2:B1:54:A4:33:EB:EA:4B:D9:24:73:C2:D6:7E:53:DE:80:58
Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Certificate issuer:       /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Certificate serial:       7B992344F9FE0B202D387E83DFDD02DB14C32049
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
Manifest number:          045A
Signing time:             Sun 08 Feb 2026 06:43:36 +0000
Manifest this update:     Sun 08 Feb 2026 06:38:36 +0000
Manifest next update:     Mon 09 Feb 2026 07:19:36 +0000
Files and hashes:         1: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=)
                          2: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=)
                          3: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=)
                          4: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=)
                          5: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=)
                          6: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=)
                          7: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=)
                          8: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: DmXIMLu3X04034rzADMd0vzpPbp9y9EgxHtUWQtS8Dc=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Feb 2026 03:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:99:23:44:f9:fe:0b:20:2d:38:7e:83:df:dd:02:db:14:c3:20:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
        Validity
            Not Before: Feb  8 06:38:36 2026 GMT
            Not After : Feb  9 07:19:36 2026 GMT
        Subject: CN=2617D2B154A433EBEA4BD92473C2D67E53DE8058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d6:cf:23:bc:bd:93:8e:f1:9c:04:4d:e2:92:
                    27:10:27:d8:7c:7a:66:d0:db:b6:4f:77:5c:de:e8:
                    01:1b:12:91:13:b3:fb:eb:8d:37:c8:b0:4f:23:8f:
                    62:0a:d0:67:32:9c:f6:ce:b2:5b:76:cc:5a:5b:02:
                    53:db:3c:86:00:77:13:5c:84:e3:64:e7:8f:fd:d5:
                    d9:c5:5c:d1:c6:64:2b:65:54:14:0e:a7:6f:37:bd:
                    4d:0e:53:0b:40:b8:e5:ad:9b:18:ad:30:6f:02:ec:
                    a9:7b:31:03:6f:cb:30:38:8d:64:f7:5c:83:a0:d2:
                    9f:df:f3:3e:f5:3e:c8:0b:c2:0c:fd:3e:27:9c:e4:
                    0c:b1:73:9a:56:57:b2:c8:df:d6:4d:e4:99:ee:0e:
                    59:14:b3:b3:4a:fa:44:ab:87:cd:87:33:4f:2e:ff:
                    60:ef:16:65:4f:df:dc:69:96:17:28:a4:fa:b1:94:
                    0f:e7:e1:e2:c6:e1:3c:d8:23:d6:59:e7:e1:86:0a:
                    7e:d6:b4:24:a5:0c:32:07:ec:23:f3:ad:d1:fd:8e:
                    5e:3b:96:71:53:7d:fd:16:e8:29:ed:36:96:25:08:
                    f4:09:3c:5d:30:08:db:49:7e:43:a3:b4:e2:0f:0a:
                    17:97:49:cc:7a:e0:6b:66:52:bb:eb:5b:4a:3d:79:
                    bf:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:17:D2:B1:54:A4:33:EB:EA:4B:D9:24:73:C2:D6:7E:53:DE:80:58
            X509v3 Authority Key Identifier:
                keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:48:f5:a5:ea:78:6c:f6:34:8a:ef:07:88:a3:49:b7:5d:c9:
         48:7a:e0:ad:99:d5:c3:60:4b:ae:85:b0:78:d1:e0:29:ef:7b:
         23:66:66:99:25:1b:d0:94:9d:91:27:0a:dc:29:9a:64:5e:63:
         3b:5e:6d:0e:b6:57:48:0a:d9:94:9c:9c:21:2e:9c:b5:e6:d1:
         91:e7:e8:0d:5e:65:dc:cf:89:b0:3e:51:20:7c:22:8f:1c:41:
         c6:f4:57:17:db:f8:93:fd:8a:b0:61:00:eb:f6:19:16:f6:12:
         06:bb:1e:6b:32:a1:91:04:21:10:6e:02:72:a0:c7:9f:83:99:
         4a:57:67:31:ea:6f:0d:b8:32:35:b1:1a:52:a0:c5:a6:db:93:
         e2:f0:5b:4c:62:7e:61:32:8d:60:1a:cb:db:fd:fa:c8:f8:e7:
         e3:26:db:df:5b:31:12:1f:21:f2:14:37:3b:78:a7:bd:47:bc:
         e9:0b:3b:28:f6:32:57:e3:88:a2:6a:74:72:4f:c6:70:d1:9c:
         97:2c:aa:8e:d0:e7:3d:9e:b4:30:6a:90:fe:e6:d7:d9:ec:bd:
         64:c4:58:db:94:09:68:09:fc:9d:25:b6:f2:94:21:71:2c:e1:
         fd:d8:f3:38:66:9d:46:d3:1b:be:3d:b3:8b:80:a3:c8:63:11:
         47:05:38:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 8 12:42:05 2026 by rpki-client