This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft
File:                     CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft (raw, json)
Hash identifier:          cvNJhcOEvsGWrKcPncWHSjwZMkvu/j1AggmpWn8j+JY=
Subject key identifier:   82:C4:63:F0:07:94:AA:FB:C5:A6:60:50:39:37:F4:E6:DE:E9:C6:30
Authority key identifier: CF:C2:6A:6D:EF:2E:2F:F1:EB:CC:10:A9:87:14:78:B8:A8:BF:39:08
Certificate issuer:       /CN=cfc26a6def2e2ff1ebcc10a9871478b8a8bf3908
Certificate serial:       1D38000E9BBB8820ED02D8280B11B9EA87A144B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z8Jqbe8uL_HrzBCphxR4uKi_OQg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft
Manifest number:          0487
Signing time:             Mon 09 Feb 2026 14:33:40 +0000
Manifest this update:     Mon 09 Feb 2026 14:28:40 +0000
Manifest next update:     Tue 10 Feb 2026 17:06:40 +0000
Files and hashes:         1: CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.crl (hash: lTdVcqniMVPIPnSN/zHZ4ILO/AN+jNapGH8AC2JIAD8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z8Jqbe8uL_HrzBCphxR4uKi_OQg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:10:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:38:00:0e:9b:bb:88:20:ed:02:d8:28:0b:11:b9:ea:87:a1:44:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfc26a6def2e2ff1ebcc10a9871478b8a8bf3908
        Validity
            Not Before: Feb  9 14:28:40 2026 GMT
            Not After : Feb 10 17:06:40 2026 GMT
        Subject: CN=82C463F00794AAFBC5A660503937F4E6DEE9C630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:21:92:df:9c:7b:8e:95:5e:69:5b:0c:89:6b:
                    0d:6a:dc:56:d8:83:97:f6:b3:d7:8d:02:54:22:9e:
                    af:02:f3:fd:41:0e:1d:7f:ff:f0:60:3a:f0:57:c4:
                    07:dd:d4:8a:08:59:08:35:55:63:07:15:53:1b:49:
                    46:50:66:37:95:f9:f1:8b:53:9a:4d:c7:89:d7:bc:
                    f6:46:6b:80:e3:41:da:c7:96:60:64:56:64:de:68:
                    ef:0f:d5:4d:50:4c:34:1e:01:ad:21:28:6e:4a:9c:
                    c6:5a:e7:18:fc:ac:b9:9f:2a:06:7c:da:f3:b3:76:
                    43:99:bc:d4:34:8e:65:f1:07:73:66:e6:73:55:15:
                    d9:a9:4a:84:b1:d2:74:53:7e:ad:f8:61:77:77:62:
                    68:7c:2d:dc:3b:e9:ed:e8:c7:30:f5:27:39:26:ea:
                    9e:6a:36:39:df:82:d3:65:e2:5e:ac:31:5b:dd:6b:
                    58:6f:91:38:d8:cf:65:12:b2:89:cd:58:00:9d:81:
                    ed:22:b6:7b:2b:c4:c6:31:1a:7f:b4:94:b0:f2:76:
                    ec:34:16:50:67:e2:19:56:fc:7a:4b:41:1e:3d:c6:
                    d6:16:7b:02:28:0e:06:14:f0:a9:f1:e6:f9:52:ff:
                    2f:d7:f1:b4:1b:9e:a7:04:ef:42:3f:85:5f:16:5e:
                    57:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:C4:63:F0:07:94:AA:FB:C5:A6:60:50:39:37:F4:E6:DE:E9:C6:30
            X509v3 Authority Key Identifier:
                keyid:CF:C2:6A:6D:EF:2E:2F:F1:EB:CC:10:A9:87:14:78:B8:A8:BF:39:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8Jqbe8uL_HrzBCphxR4uKi_OQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:42:4d:d2:8d:e3:07:00:52:3f:2c:22:1b:92:5b:2f:41:4d:
         f2:c5:7f:2c:24:00:a3:33:26:85:63:88:bd:21:33:52:31:9c:
         32:52:30:1e:eb:04:29:ca:51:f8:f1:3c:b0:8c:e5:8b:ef:e1:
         ef:2a:89:ea:98:de:0d:0d:38:56:ae:f5:73:a7:cf:08:97:3d:
         09:42:76:86:df:ec:6f:17:c1:fa:0b:63:c5:a7:90:88:5e:f8:
         75:de:6b:06:94:24:22:5b:9d:07:0c:6b:f8:bf:af:14:18:42:
         06:07:05:c0:dd:c2:b8:e9:b2:d9:2f:f5:0a:c7:e3:31:3c:3e:
         7f:ba:ae:11:a3:e0:4c:83:93:66:aa:5d:04:ab:06:77:69:67:
         16:d0:ea:a8:19:08:a0:be:4d:a7:9c:71:6e:bc:f0:0f:b1:1c:
         a9:44:9c:3a:03:37:59:66:47:26:79:a4:49:5c:42:03:48:2f:
         9b:8e:0f:4a:67:17:be:7b:a0:44:4f:23:1d:37:cd:8a:50:de:
         cd:28:6c:12:38:f8:06:63:34:fe:a2:d5:56:85:e0:b7:f6:86:
         59:ff:e5:76:2e:52:55:f8:20:82:75:3d:09:e8:6e:60:c7:68:
         90:1d:ae:e9:52:9d:51:a8:e7:90:d5:47:c3:76:e6:5a:f6:cc:
         db:1d:1d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:59:31 2026 by rpki-client