This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft
File:                     64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft (raw, json)
Hash identifier:          Cb9m5idblmqwqNFijtwphNU9RLo7+CNNt58f+WP+RLU=
Subject key identifier:   C0:3D:15:5D:D2:62:06:CF:D9:81:3A:67:95:B5:27:24:E5:EF:68:AC
Authority key identifier: 64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE
Certificate issuer:       /CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe
Certificate serial:       6D0CBB5F751DFB166299B8969B605B00FD5C71DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft
Manifest number:          03AA
Signing time:             Mon 09 Feb 2026 04:56:26 +0000
Manifest this update:     Mon 09 Feb 2026 04:51:26 +0000
Manifest next update:     Tue 10 Feb 2026 08:36:26 +0000
Files and hashes:         1: 34352e3135302e342e302f32342d3234203d3e203432383331.roa (hash: 702sTF4T+4tyFOCkBSwyFht2LvCuhPDht8ofZOjL5aw=)
                          2: 34352e3135302e372e302f32342d3234203d3e203430363736.roa (hash: byqPGvSaG6esVs7ttHZAm5MeDtXny30fRGCsgkrnWc0=)
                          3: 34352e3135302e352e302f32342d3234203d3e20323039383534.roa (hash: Crd2ncf4lQNUDj/2Yu6qDEEKdYEoj89TZ7JLTUVoXfY=)
                          4: 64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl (hash: ogE9v4dHoP0q5gvBWClGLhRqIYNAzZkQ/GRS8cW6cGA=)
                          5: 34352e3135302e362e302f32342d3234203d3e203538303631.roa (hash: yaUDjxZGhyEVxNfdUbfnMRoUwlBxM/900/kJEwn4Oxc=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 08:36:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:0c:bb:5f:75:1d:fb:16:62:99:b8:96:9b:60:5b:00:fd:5c:71:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe
        Validity
            Not Before: Feb  9 04:51:26 2026 GMT
            Not After : Feb 10 08:36:26 2026 GMT
        Subject: CN=C03D155DD26206CFD9813A6795B52724E5EF68AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:19:89:27:1f:66:4c:18:d5:4d:cc:cb:f0:2f:
                    f8:ea:09:7e:70:89:b2:f3:f7:a4:52:3c:13:2e:5f:
                    81:b6:4a:f8:0d:37:6c:87:0a:e4:b3:1d:da:19:59:
                    4b:20:d7:05:a4:ff:c4:46:04:22:53:fe:32:d7:42:
                    cd:9d:0d:f1:29:20:12:45:8f:3e:f6:11:8b:2f:3f:
                    8e:b2:25:1d:24:9d:19:5a:b0:71:25:aa:57:29:eb:
                    c9:44:13:67:a5:df:8e:53:fd:df:92:64:cc:a8:d1:
                    2a:2c:02:be:f7:f2:49:0b:03:f7:33:75:3b:40:87:
                    77:ce:a8:7d:e9:ca:1b:22:b0:15:5e:29:c6:a9:e8:
                    5d:18:76:82:08:fc:22:e3:25:48:f8:ac:fe:a4:75:
                    0d:7e:d4:85:17:41:0e:d3:35:fe:bd:0b:13:04:88:
                    c9:17:28:ef:8a:f4:e4:b0:a2:37:20:c8:46:c8:2f:
                    67:cb:9a:53:6a:c2:8f:8b:d8:21:07:e1:40:23:ee:
                    89:b6:4d:66:d1:af:d1:9a:34:6e:de:c8:0c:90:e5:
                    8e:fe:b9:7c:9e:b0:e0:68:03:1d:b3:fa:1d:fd:2e:
                    81:93:b3:f2:fe:78:ab:11:5d:91:49:cf:c1:1d:e1:
                    88:be:23:9c:ac:d1:62:44:f5:8e:83:96:de:c6:3d:
                    a4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:3D:15:5D:D2:62:06:CF:D9:81:3A:67:95:B5:27:24:E5:EF:68:AC
            X509v3 Authority Key Identifier:
                keyid:64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:1c:f5:4c:f1:33:bc:8e:3e:f3:aa:f4:c0:47:08:db:94:cf:
         ce:7e:75:02:7a:58:27:fe:c5:64:b2:67:58:f4:be:38:c8:15:
         ca:58:92:bb:27:f9:57:4b:a1:c9:34:7b:9d:84:73:be:cd:e0:
         71:ef:d1:a9:87:bd:12:39:15:1c:70:39:9f:b4:64:b5:6c:c1:
         64:85:03:39:f9:07:cb:be:24:98:34:cd:36:64:b0:92:b5:e4:
         e5:f6:a2:46:82:00:9a:95:76:0b:88:8d:b7:24:bd:d6:13:a5:
         13:9f:93:82:2f:e5:e9:40:a0:0d:3e:c8:f0:8c:66:5d:4c:cd:
         e9:47:33:c8:c7:7e:8a:05:93:8e:ab:5e:14:0f:ff:89:c9:03:
         3c:84:13:7e:c7:0e:3b:c4:16:7e:24:ad:b5:f8:b6:7e:45:cb:
         38:9f:22:33:12:10:ea:5b:f8:7c:c1:96:34:6c:b4:6a:95:9b:
         19:a5:0a:52:6a:80:17:d9:d5:79:29:7c:63:0a:4d:2c:f1:8e:
         1c:04:63:89:e2:d8:38:e4:a5:0e:e3:43:64:05:1f:64:79:e2:
         43:fc:9c:1e:1e:41:0a:dc:6f:5e:4e:e9:74:22:4a:7e:42:b2:
         60:2c:c0:17:c1:a7:7a:c4:c5:f4:e7:b9:85:e1:a8:75:2c:36:
         97:24:bc:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:59:19 2026 by rpki-client