This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/0/1215278DAD24717513E9235A15705AA467DD6205.mft
File:                     1215278DAD24717513E9235A15705AA467DD6205.mft (raw, json)
Hash identifier:          czqW775AhB4aG2wBP53tAP1xq2HhTnuTTXU/c15Oe94=
Subject key identifier:   B2:88:46:71:F3:64:99:3B:E7:1B:E0:AA:89:89:E0:68:04:2A:61:00
Authority key identifier: 12:15:27:8D:AD:24:71:75:13:E9:23:5A:15:70:5A:A4:67:DD:62:05
Certificate issuer:       /CN=1215278dad24717513e9235a15705aa467dd6205
Certificate serial:       7899207D5D314D4729F79A0107D8F240EF2D1312
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EhUnja0kcXUT6SNaFXBapGfdYgU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/0/1215278DAD24717513E9235A15705AA467DD6205.mft
Manifest number:          82
Signing time:             Mon 09 Feb 2026 15:57:53 +0000
Manifest this update:     Mon 09 Feb 2026 15:52:53 +0000
Manifest next update:     Tue 10 Feb 2026 16:22:53 +0000
Files and hashes:         1: 1215278DAD24717513E9235A15705AA467DD6205.crl (hash: /BdTVME26wtUQQ58z3b78cvMzx/mfaVGtoPheGbHiM0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/0/1215278DAD24717513E9235A15705AA467DD6205.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/0/1215278DAD24717513E9235A15705AA467DD6205.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EhUnja0kcXUT6SNaFXBapGfdYgU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:99:20:7d:5d:31:4d:47:29:f7:9a:01:07:d8:f2:40:ef:2d:13:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1215278dad24717513e9235a15705aa467dd6205
        Validity
            Not Before: Feb  9 15:52:53 2026 GMT
            Not After : Feb 10 16:22:53 2026 GMT
        Subject: CN=B2884671F364993BE71BE0AA8989E068042A6100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:96:c2:a8:d3:d9:42:41:f2:be:95:92:4f:b8:
                    ce:2c:22:1d:ab:df:c6:4a:f6:c1:19:b7:f6:d1:fb:
                    b8:bd:54:8e:df:cc:c8:4d:84:39:d3:0d:60:39:c7:
                    12:57:dc:85:5f:ca:54:44:51:ad:52:7a:ce:25:07:
                    a0:da:c2:60:ac:25:bf:cb:bc:68:40:85:2f:2d:f4:
                    1e:9f:d5:4a:12:30:d1:4f:a5:04:f4:4c:61:64:d2:
                    dc:98:9a:f4:bd:78:30:4d:95:c1:3c:89:72:c7:2a:
                    1f:bb:e9:85:32:22:0b:f5:33:e4:3a:ae:2e:3a:65:
                    5b:83:67:ce:d2:f2:fd:f0:5f:ce:3c:62:11:e8:3b:
                    b1:15:e2:3c:34:2c:0c:8b:cc:71:44:b9:3e:33:72:
                    89:3c:7f:81:36:30:c2:53:74:ef:ab:95:fc:a8:67:
                    cf:3a:eb:28:9c:5d:5f:34:39:30:08:89:45:29:7a:
                    0c:a4:6a:94:4c:a8:b3:ef:44:35:b3:6b:c8:cb:63:
                    8c:af:84:98:e3:2e:4b:f2:ce:96:17:52:b2:86:24:
                    4a:a3:56:68:22:0c:f7:a5:0b:10:a0:95:83:6a:0d:
                    a8:64:3a:ce:40:48:44:b1:07:f0:cd:91:ab:2b:0e:
                    d7:84:2a:ad:b9:65:e5:e3:43:a2:76:19:cc:f6:27:
                    a0:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:88:46:71:F3:64:99:3B:E7:1B:E0:AA:89:89:E0:68:04:2A:61:00
            X509v3 Authority Key Identifier:
                keyid:12:15:27:8D:AD:24:71:75:13:E9:23:5A:15:70:5A:A4:67:DD:62:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/0/1215278DAD24717513E9235A15705AA467DD6205.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhUnja0kcXUT6SNaFXBapGfdYgU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/0/1215278DAD24717513E9235A15705AA467DD6205.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:49:ca:48:73:ee:17:7e:fa:b8:c5:6b:5e:a7:22:34:a4:98:
         5f:a4:35:6e:32:c2:b4:82:d5:cb:16:68:c1:5b:49:0e:22:46:
         c3:71:b0:c0:a2:1e:a0:1b:06:2c:a3:6c:2c:64:58:f6:eb:d8:
         d2:82:55:8e:51:4f:87:8b:bf:1b:08:6a:07:7a:6c:bd:92:c4:
         2d:8b:38:93:3d:b5:18:35:49:4d:15:6d:8a:ed:fe:ed:ac:0e:
         2e:60:d9:0f:b0:88:4d:d5:82:a4:36:83:a8:c2:64:89:5d:34:
         20:6b:fb:0c:bb:cf:55:a1:23:6c:8c:6a:59:25:68:0e:3c:95:
         4d:ea:aa:73:ee:b3:6a:dd:ab:06:35:7c:d7:94:11:46:8a:a6:
         17:a8:e9:36:5e:a1:ec:bb:a0:7b:fd:c3:4b:c5:cc:bc:57:48:
         7f:e3:85:48:8e:34:64:7a:b2:44:3a:c2:89:cd:b8:9a:44:c3:
         23:e0:33:50:92:e1:f2:0d:7a:01:88:9f:14:e5:97:cb:c6:d8:
         ca:cb:33:a9:f3:67:89:69:5e:ca:9d:00:00:3f:ae:5e:97:ce:
         0b:e4:cc:c5:22:82:ff:37:ee:d9:68:f0:a8:b0:93:bd:3e:8d:
         78:8b:1b:1d:8b:96:76:f0:01:cb:59:6e:cf:bc:3d:01:ba:d5:
         3c:3f:e8:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:49:04 2026 by rpki-client