This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft
File:                     5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft (raw, json)
Hash identifier:          ZAX/LNRQGz4qypXEQhqL7NH75KdCKBm36/phO5TX6io=
Subject key identifier:   6D:8C:68:E6:02:D0:0A:FC:2F:79:C6:8E:72:B4:B0:91:E8:0C:35:EF
Authority key identifier: 5D:A3:21:5A:BF:A4:62:1D:57:70:9F:83:8A:92:80:1F:2E:90:DD:FE
Certificate issuer:       /CN=5da3215abfa4621d57709f838a92801f2e90ddfe
Certificate serial:       78400745E2AC9043E7B9005733A251AEA2C87C53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft
Manifest number:          05AC
Signing time:             Mon 09 Feb 2026 02:41:23 +0000
Manifest this update:     Mon 09 Feb 2026 02:36:23 +0000
Manifest next update:     Tue 10 Feb 2026 04:54:23 +0000
Files and hashes:         1: 34352e38312e35362e302f32342d3234203d3e20383334.roa (hash: RvBwqpsMFaC4kQ3VLDNfZDDqspDe1yGNu+5Eo3ESLBg=)
                          2: 34352e38312e35392e302f32342d3234203d3e20323131343339.roa (hash: PzQrEpsLL9icV7+wAMJ22TsUek+9+7dTOPFgPD6vtOM=)
                          3: 5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl (hash: vUvKiBYfC0pO/N4HqcBaheadkJ2H4ZkscnN9+ibHmow=)
                          4: 34352e38312e35372e302f32342d3234203d3e203631333137.roa (hash: wLY+uAAZaapza9rnm+rvcKy/RGqb5OINBZoQF5pW50I=)
                          5: 34352e38312e35392e302f32342d3234203d3e20323132333834.roa (hash: Z55LDvJNhjuOlIMhPU51UoeT0VK3qlu4pE/EHJdIaDE=)
                          6: 326130393a643634303a3a2f32392d3239203d3e20313938333435.roa (hash: 2ZJoizA2XrGcopsLwhs8oaMaqFtkP0G9iClmvxEJgnM=)
                          7: 34352e38312e35382e302f32342d3234203d3e20323039323432.roa (hash: Cjq2FzLN5G1VEvkKyI6FB5noxcWUxvPOvV4W7hBfw5c=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 04:54:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:40:07:45:e2:ac:90:43:e7:b9:00:57:33:a2:51:ae:a2:c8:7c:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5da3215abfa4621d57709f838a92801f2e90ddfe
        Validity
            Not Before: Feb  9 02:36:23 2026 GMT
            Not After : Feb 10 04:54:23 2026 GMT
        Subject: CN=6D8C68E602D00AFC2F79C68E72B4B091E80C35EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:23:80:04:4b:f3:57:2f:a9:76:52:3b:71:d4:
                    6c:06:e6:e5:5e:93:6f:ce:fa:1d:0c:39:00:80:4b:
                    b1:b0:47:6e:c4:45:27:ec:7e:60:f9:51:a1:24:2e:
                    9c:9b:f3:8c:49:32:3c:6e:00:f5:59:66:20:01:54:
                    90:c4:97:13:2e:92:ef:9b:47:60:1f:d7:03:5a:6b:
                    8a:3f:9c:4c:c3:96:be:5e:4d:6c:60:8e:c4:a2:c9:
                    12:87:a7:11:67:0f:af:e7:83:19:78:6d:69:67:09:
                    fb:41:77:19:f2:c8:66:fb:ff:87:9b:ae:00:22:22:
                    46:7b:2d:f7:9d:05:47:0a:c2:fe:69:9f:12:ba:52:
                    8d:e1:57:38:c7:16:d7:98:f0:2a:1d:a2:c6:67:04:
                    3b:42:92:a7:a5:3f:dc:b9:02:e8:c5:a0:2c:b7:7f:
                    b9:0b:d9:87:09:7e:10:31:9b:f5:fa:d4:16:e3:8c:
                    42:7c:e9:15:74:23:36:09:d2:b0:f5:b0:8a:28:9a:
                    89:cd:97:db:da:d9:4f:b9:d7:7e:e8:42:fe:2f:91:
                    31:e9:39:58:bc:f0:5b:8e:f4:ca:db:2f:c4:6b:65:
                    b3:34:f6:b2:2e:4c:35:79:2b:04:c5:e7:bd:54:6d:
                    41:05:c8:7a:04:8c:1f:ae:b8:6b:81:7a:32:09:89:
                    e6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:8C:68:E6:02:D0:0A:FC:2F:79:C6:8E:72:B4:B0:91:E8:0C:35:EF
            X509v3 Authority Key Identifier:
                keyid:5D:A3:21:5A:BF:A4:62:1D:57:70:9F:83:8A:92:80:1F:2E:90:DD:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:75:1f:0b:2e:c5:30:b5:e9:e5:20:29:67:2e:de:fc:0f:e0:
         61:e1:1f:60:51:31:ba:80:68:0e:8e:61:8b:6c:82:79:56:85:
         45:56:52:c6:9a:3d:68:99:38:89:58:8c:f2:93:cb:06:40:90:
         d1:82:3b:f2:71:9d:7c:c1:10:58:02:4e:53:a9:63:e9:3d:ca:
         32:d5:b1:79:1d:42:61:c0:57:29:05:02:8f:3c:c1:b1:52:89:
         5a:c9:d7:1c:1e:b5:10:8c:72:8c:47:5c:11:d0:ce:4f:bf:c5:
         92:02:7b:50:a5:3d:78:c4:86:a3:e9:38:58:44:b2:02:8c:05:
         30:94:28:f3:07:a3:cf:85:73:0b:3e:83:33:39:98:d2:3a:6d:
         49:7f:89:09:67:0e:d2:b2:a2:0d:11:e4:56:5b:14:c3:85:cf:
         29:db:3f:94:3d:ac:97:f7:89:81:5b:58:bd:38:ee:e9:c1:53:
         21:12:35:0c:bd:07:53:60:aa:4e:0b:64:c4:38:2c:d7:1c:9d:
         38:bf:ac:92:69:55:ac:83:50:ce:25:85:e6:b0:e6:ab:a1:d1:
         89:03:c2:54:cc:fd:cd:ad:9c:2e:b8:db:7e:b8:59:1b:63:50:
         fe:a5:86:45:70:71:d9:7a:f8:43:78:da:0b:4b:55:4b:45:c8:
         ae:88:18:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:49 2026 by rpki-client