This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.mft
File:                     0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.mft (raw, json)
Hash identifier:          pNSX12Q08BFOLGfhDWyN4gMP1HATXfAa9XPZf/A4K0Q=
Subject key identifier:   85:93:15:B5:0F:DE:8F:E4:B1:51:14:A7:26:66:A5:27:93:C5:9D:03
Authority key identifier: 0E:ED:1B:7B:26:C3:5D:22:B5:0C:5D:0C:D8:55:44:BE:88:DD:8F:23
Certificate issuer:       /CN=0eed1b7b26c35d22b50c5d0cd85544be88dd8f23
Certificate serial:       7BAD7FD29595756F9D6A24BBC28897D67C827E32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Du0beybDXSK1DF0M2FVEvojdjyM.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.mft
Manifest number:          051D
Signing time:             Mon 09 Feb 2026 13:33:14 +0000
Manifest this update:     Mon 09 Feb 2026 13:28:14 +0000
Manifest next update:     Tue 10 Feb 2026 15:29:14 +0000
Files and hashes:         1: 0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.crl (hash: HjcRTAKA2dVqP2x5J4rzBflfLB/MgdKYazl2vZK0nNw=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Du0beybDXSK1DF0M2FVEvojdjyM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:10:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:ad:7f:d2:95:95:75:6f:9d:6a:24:bb:c2:88:97:d6:7c:82:7e:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0eed1b7b26c35d22b50c5d0cd85544be88dd8f23
        Validity
            Not Before: Feb  9 13:28:14 2026 GMT
            Not After : Feb 10 15:29:14 2026 GMT
        Subject: CN=859315B50FDE8FE4B15114A72666A52793C59D03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:38:36:17:9f:18:7a:aa:03:22:fc:cd:5a:ed:
                    1b:b0:eb:6c:21:b0:93:82:dd:ac:62:84:f8:80:d1:
                    c6:12:33:a1:31:bc:90:27:1c:8a:96:a1:0f:ba:3b:
                    7c:f1:46:5d:75:72:4a:93:29:41:2c:8e:9f:68:52:
                    14:75:09:c5:8f:21:b1:49:dc:f7:dd:13:2e:26:af:
                    53:e9:5d:73:48:44:a5:da:4e:2c:dc:a4:ec:e7:83:
                    c2:3a:aa:13:89:1b:32:6b:b7:f5:07:d6:6a:14:89:
                    a6:f0:d3:8d:df:ef:d6:5d:ff:15:11:8e:d3:b3:e3:
                    91:41:f8:44:25:ff:5d:4c:63:16:bf:a7:cf:36:fd:
                    77:df:03:9f:cc:ba:5a:81:59:cd:c7:fe:94:67:8d:
                    16:6f:c7:6e:33:92:e1:78:2e:2d:11:81:89:9c:c1:
                    54:5d:91:ca:50:03:d8:08:f2:59:cf:c2:18:58:81:
                    67:e0:37:93:d9:d9:0d:2c:32:8b:05:7c:ec:58:31:
                    ee:70:18:ba:f9:60:c6:8f:e8:be:73:b8:e4:bd:cd:
                    bc:d1:8c:c5:02:e2:b5:48:9e:74:95:bb:ab:a5:f6:
                    61:82:30:3e:e9:81:b3:22:9e:2b:9b:f4:bd:cd:84:
                    58:d5:55:e7:00:cd:4e:d1:00:b2:24:8f:d4:17:ee:
                    46:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:93:15:B5:0F:DE:8F:E4:B1:51:14:A7:26:66:A5:27:93:C5:9D:03
            X509v3 Authority Key Identifier:
                keyid:0E:ED:1B:7B:26:C3:5D:22:B5:0C:5D:0C:D8:55:44:BE:88:DD:8F:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Du0beybDXSK1DF0M2FVEvojdjyM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:8f:56:ce:2d:9c:8f:92:68:df:07:61:d1:40:55:a3:ea:4c:
         25:f6:8a:92:21:6b:aa:b5:c0:2e:80:0f:1f:1a:6a:bd:9f:ce:
         c0:12:6e:b1:b5:47:20:a3:54:73:61:01:11:ba:68:1d:49:6c:
         6a:f7:e8:40:19:4f:77:59:f7:21:65:74:70:28:7e:4e:9c:f1:
         97:27:98:e0:a5:29:7d:9a:9d:05:56:15:78:3d:b8:ff:5b:06:
         43:ae:33:90:aa:d1:e7:b2:f8:6d:e9:c7:35:90:d0:5a:16:f3:
         92:d5:ae:c9:9c:44:4b:fa:c9:a8:1b:ac:66:2c:4d:f2:85:ad:
         5c:81:f8:a7:c3:6a:56:db:f9:65:91:d7:8f:2c:75:52:24:75:
         c3:c7:96:4a:25:0a:0f:51:91:a6:f8:ea:ee:75:53:ca:56:38:
         94:fd:78:db:16:a3:f5:3e:5d:08:68:27:db:37:97:a4:6e:3b:
         2e:5c:10:c0:da:b5:ef:3a:a9:09:86:2c:d3:3a:0d:dc:53:9a:
         a1:6a:c6:3e:b6:63:0f:ff:7b:72:58:94:d7:a6:ad:98:a0:93:
         30:c4:af:d7:cf:76:60:bf:9a:75:b4:b6:5b:6b:dc:45:3c:d6:
         fd:ae:89:0d:d9:ec:36:37:7d:1a:9b:04:1c:61:84:7c:05:d9:
         d5:ee:06:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:54:25 2026 by rpki-client