This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.mft
File:                     922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.mft (raw, json)
Hash identifier:          CC3MEynRhdAJ2d2l9qaAFjcswN9Tk0w2kMEj+wKeAeU=
Subject key identifier:   85:59:DE:94:0F:5B:7E:43:60:16:E6:B0:07:D1:04:54:0C:CB:A3:3B
Authority key identifier: 92:20:85:CF:F3:65:7F:A2:AE:C6:F9:1D:91:BB:F0:CD:4D:D2:44:18
Certificate issuer:       /CN=922085cff3657fa2aec6f91d91bbf0cd4dd24418
Certificate serial:       62A64BA95B4D040D552F57572B5507955DF99470
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kiCFz_Nlf6KuxvkdkbvwzU3SRBg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.mft
Manifest number:          03C1
Signing time:             Mon 09 Feb 2026 17:01:54 +0000
Manifest this update:     Mon 09 Feb 2026 16:56:54 +0000
Manifest next update:     Tue 10 Feb 2026 19:26:54 +0000
Files and hashes:         1: 922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.crl (hash: ETQ0ak5Uo2BFKfwA+uYy6lbc2tfnnZcuxRjEeWX4MwA=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kiCFz_Nlf6KuxvkdkbvwzU3SRBg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 19:26:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:a6:4b:a9:5b:4d:04:0d:55:2f:57:57:2b:55:07:95:5d:f9:94:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=922085cff3657fa2aec6f91d91bbf0cd4dd24418
        Validity
            Not Before: Feb  9 16:56:54 2026 GMT
            Not After : Feb 10 19:26:54 2026 GMT
        Subject: CN=8559DE940F5B7E436016E6B007D104540CCBA33B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d1:86:1b:bb:a1:54:9c:d0:6a:33:63:df:6d:
                    52:a0:21:c8:05:4c:1d:b7:eb:8e:66:47:dd:be:c0:
                    0a:bd:90:59:a0:95:25:66:01:53:62:fd:b5:d9:67:
                    fd:06:39:40:5e:9a:33:6d:cc:c9:2c:74:da:8b:a4:
                    48:8d:7f:57:11:3c:84:d3:56:97:2e:aa:e0:10:54:
                    b4:3f:62:8e:bb:bc:6f:39:c5:93:bd:d7:cc:58:9f:
                    ec:cf:bb:ed:ac:3a:32:76:b3:be:b3:61:64:43:7f:
                    58:69:e5:17:97:d7:69:e6:14:af:7a:64:9c:b0:b8:
                    3e:f7:a0:5e:eb:f9:82:b6:da:ef:ab:a6:6c:94:1c:
                    83:82:5b:a6:71:a2:82:2d:97:76:07:47:64:2e:fa:
                    40:cf:23:45:61:3c:49:fd:59:5d:18:45:8f:0d:8a:
                    5d:ef:d5:1b:8a:fa:5f:4d:64:a2:e4:a8:4d:31:ff:
                    f3:8c:74:2c:4d:d2:b3:3e:6c:8a:3f:1b:dc:d3:f6:
                    0f:6d:09:28:76:63:73:ec:a6:19:7a:1f:89:df:8a:
                    7d:4d:b2:c8:ef:bc:79:32:3d:33:32:f5:fc:6e:67:
                    82:e5:53:37:1b:c3:e7:fd:0d:b1:ef:b1:54:7c:5f:
                    a1:68:bd:2d:9e:20:6c:74:30:fd:ee:2a:d9:09:e6:
                    d1:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:59:DE:94:0F:5B:7E:43:60:16:E6:B0:07:D1:04:54:0C:CB:A3:3B
            X509v3 Authority Key Identifier:
                keyid:92:20:85:CF:F3:65:7F:A2:AE:C6:F9:1D:91:BB:F0:CD:4D:D2:44:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiCFz_Nlf6KuxvkdkbvwzU3SRBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:c6:90:25:67:e4:d3:a9:24:74:97:a6:b4:78:d7:b7:3b:8d:
         11:58:22:e1:a7:f7:b0:4c:88:a6:40:a5:e6:9c:0a:9b:e6:6e:
         5b:92:01:3a:84:8c:34:71:de:df:8e:1d:27:41:a0:68:2f:41:
         99:48:27:0d:59:a8:b3:53:a5:33:1d:e2:96:e8:5f:29:0a:f8:
         88:13:cf:5a:92:7a:60:37:b1:38:6f:8a:32:6b:6b:4d:55:68:
         1f:8e:52:2f:49:57:45:eb:0e:43:98:bb:1e:67:85:85:af:e4:
         c3:b5:f5:83:9b:71:d4:1c:c1:60:76:0b:c5:a6:73:55:b5:4a:
         52:6b:69:7e:39:28:52:21:f3:3e:bf:90:34:97:8a:7f:6b:52:
         44:4a:e1:c6:84:d9:ea:3d:dc:07:97:a4:07:79:70:b4:4b:06:
         7c:f5:c3:eb:19:21:49:ed:e2:f7:01:ee:c8:fe:7b:77:c7:53:
         ec:c8:8e:4e:5c:31:c3:6a:d7:30:a3:da:70:df:4a:7b:aa:e8:
         99:a1:2b:d8:1a:67:e5:6c:18:19:49:18:fa:0e:25:2f:47:76:
         d7:5d:01:6e:3b:ce:69:17:99:d5:e3:5f:cc:96:9c:5b:68:31:
         fe:ca:17:e5:26:54:7d:7a:42:c9:d4:ec:0b:64:e1:ae:a0:7a:
         f9:b2:ab:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:41:23 2026 by rpki-client