This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
File:                     C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft (raw, json)
Hash identifier:          iUPBnRwdyORheP57NAB3zI71qv9cfyWA7S3XYtQaQQs=
Subject key identifier:   E7:A3:B3:48:41:90:59:87:78:C0:53:80:FF:0B:08:BF:D0:58:29:0C
Authority key identifier: C4:CA:D0:EF:CB:E3:05:B4:49:4E:D2:74:7B:B4:F8:2F:43:AC:8C:81
Certificate issuer:       /CN=c4cad0efcbe305b4494ed2747bb4f82f43ac8c81
Certificate serial:       59A4091A42CCBD3B4546BF916FE4AC44BD43187B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xMrQ78vjBbRJTtJ0e7T4L0OsjIE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
Manifest number:          0326
Signing time:             Mon 09 Feb 2026 09:13:32 +0000
Manifest this update:     Mon 09 Feb 2026 09:08:32 +0000
Manifest next update:     Tue 10 Feb 2026 10:20:32 +0000
Files and hashes:         1: C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.crl (hash: q5+hUu6X+DfLBfxquYMIsv4i/CXP1ycxpLte97hr10Y=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xMrQ78vjBbRJTtJ0e7T4L0OsjIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 10:20:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:a4:09:1a:42:cc:bd:3b:45:46:bf:91:6f:e4:ac:44:bd:43:18:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4cad0efcbe305b4494ed2747bb4f82f43ac8c81
        Validity
            Not Before: Feb  9 09:08:32 2026 GMT
            Not After : Feb 10 10:20:32 2026 GMT
        Subject: CN=E7A3B3484190598778C05380FF0B08BFD058290C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:2f:de:d4:22:17:cb:ce:4e:ff:40:f6:bd:89:
                    b0:b4:66:2c:bb:ce:e8:cc:2e:26:a5:ec:07:29:6f:
                    c2:ab:17:8a:c1:c5:e9:7d:3e:c3:79:07:ba:d3:f3:
                    34:ac:89:73:59:bc:f9:81:64:03:b6:a5:18:f2:c8:
                    77:f5:33:83:ad:ab:ed:5c:d9:9f:29:23:fc:bc:b2:
                    ea:ed:61:bd:b3:7e:0e:bf:e6:5c:5d:ac:14:ab:f7:
                    f9:4e:4d:58:e9:61:f2:88:10:29:7b:78:1e:8d:93:
                    7c:3e:57:1f:21:b7:97:6a:9f:99:35:29:53:93:23:
                    3a:e3:21:60:82:41:17:62:bf:73:9e:22:9b:dd:c3:
                    17:c5:70:b9:cc:d9:be:29:4e:8f:59:d6:7a:2a:aa:
                    63:d6:03:ac:b1:a2:1a:74:ec:d2:42:a3:2e:8a:3e:
                    cb:d6:de:3b:2e:c7:70:5a:b6:5b:ef:a6:26:84:52:
                    3e:c2:f4:54:aa:ae:87:23:f1:ea:59:f1:a3:cd:35:
                    dc:93:a9:30:a3:0f:4b:48:da:52:7e:a1:b5:dd:a7:
                    77:d6:cf:f3:22:b4:5b:3c:f7:b7:04:86:42:73:6b:
                    d2:87:9b:d7:64:ab:5f:ac:23:5d:9f:a3:2f:e7:1f:
                    87:17:b7:3a:34:84:2a:a9:a3:8b:71:d5:d5:9a:12:
                    f9:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:A3:B3:48:41:90:59:87:78:C0:53:80:FF:0B:08:BF:D0:58:29:0C
            X509v3 Authority Key Identifier:
                keyid:C4:CA:D0:EF:CB:E3:05:B4:49:4E:D2:74:7B:B4:F8:2F:43:AC:8C:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMrQ78vjBbRJTtJ0e7T4L0OsjIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:cb:ea:3e:fc:0c:19:04:f0:c8:da:6f:d4:4f:15:bc:03:65:
         79:43:f6:31:0e:37:07:52:a9:d7:3d:48:b6:53:da:72:7e:6f:
         74:7e:ee:df:a0:ef:45:f6:97:66:b2:50:75:19:de:cc:6e:42:
         75:50:c9:4d:f9:3d:cd:ba:cd:a5:b8:75:2a:df:7b:8f:3d:6c:
         34:01:ba:ba:97:cb:41:c7:63:52:c1:9c:6d:2f:d4:af:49:91:
         c9:0d:31:6f:a7:72:16:38:e3:24:aa:ba:57:62:e7:9b:c3:20:
         ac:40:b4:5e:2b:8d:1b:50:3d:6b:13:36:00:1c:49:94:dc:ef:
         a5:e0:d9:d9:1e:75:5e:62:1b:b2:af:9c:02:d5:02:dc:72:53:
         72:8a:e5:c7:ee:e6:ed:9e:5f:e6:7d:03:01:6a:04:86:ce:c3:
         f0:18:d3:53:e1:73:15:9a:9b:16:b7:c7:43:c3:8d:80:69:e9:
         8d:14:3f:96:7d:29:be:c8:81:b3:1c:32:90:cb:bd:7a:cd:f7:
         d7:a4:85:cf:ce:d5:10:c0:bf:34:48:6a:86:90:14:8a:1e:b9:
         32:6e:b0:15:38:05:1d:d4:25:a8:a4:80:d3:9c:ae:6b:9d:54:
         83:2c:21:5a:26:45:cf:fe:05:53:c7:12:8e:4d:6d:e6:28:e2:
         17:cd:73:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:42:23 2026 by rpki-client