This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.mft
File:                     851928F740CA1ACAAF05E033E7F4349FE5719EF5.mft (raw, json)
Hash identifier:          KDisG+5P4D6lzLZ0SA5ki8tkP49IKtEEk/SipoCqvw0=
Subject key identifier:   8C:50:F7:37:FC:6C:2D:2F:BF:FF:35:82:08:CB:B6:D7:E3:B1:AB:CF
Authority key identifier: 85:19:28:F7:40:CA:1A:CA:AF:05:E0:33:E7:F4:34:9F:E5:71:9E:F5
Certificate issuer:       /CN=851928f740ca1acaaf05e033e7f4349fe5719ef5
Certificate serial:       43BCFF1D907B20039D050AE611996F58DFB51DC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hRko90DKGsqvBeAz5_Q0n-VxnvU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.mft
Manifest number:          0D
Signing time:             Sun 25 Jan 2026 07:20:56 +0000
Manifest this update:     Sun 25 Jan 2026 07:15:56 +0000
Manifest next update:     Mon 26 Jan 2026 10:48:56 +0000
Files and hashes:         1: 851928F740CA1ACAAF05E033E7F4349FE5719EF5.crl (hash: tWQZUUln8clrf+p83UZtDNVU81H5gWvFPWQIKugC5vU=)
                          2: AS199310.asa (hash: 25JzYDDIlJ0mwy3/bYnCze9Fju0l3kfBOY4vH1sKmnQ=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hRko90DKGsqvBeAz5_Q0n-VxnvU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 10:48:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:bc:ff:1d:90:7b:20:03:9d:05:0a:e6:11:99:6f:58:df:b5:1d:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=851928f740ca1acaaf05e033e7f4349fe5719ef5
        Validity
            Not Before: Jan 25 07:15:56 2026 GMT
            Not After : Jan 26 10:48:56 2026 GMT
        Subject: CN=8C50F737FC6C2D2FBFFF358208CBB6D7E3B1ABCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:7c:ee:80:2c:e6:ee:32:82:6d:9b:ba:ec:37:
                    b3:5d:d2:8b:e2:43:8e:8e:e7:80:a2:0c:38:9d:a8:
                    de:58:8c:ea:43:3d:c1:fd:d9:ae:1a:ed:a2:81:42:
                    55:df:73:3f:a0:4a:db:f5:d4:04:dc:a8:4b:98:7e:
                    a5:c9:4a:e4:a0:34:02:bf:63:a5:29:38:b1:5c:3b:
                    95:f4:28:92:95:71:eb:54:77:17:6a:f1:00:ce:39:
                    62:5c:b9:9d:a9:7b:de:f7:ad:6f:cc:4f:7b:46:09:
                    fa:dc:cc:a0:bd:23:a4:1a:17:b9:6a:49:33:15:80:
                    f0:48:33:b8:1a:15:66:26:50:bd:b5:65:33:fb:fa:
                    00:ae:1b:6f:45:4c:3c:5c:e4:02:d0:a0:30:1f:81:
                    98:1c:8c:47:8e:38:b2:29:41:36:29:ab:9c:ad:59:
                    66:82:aa:4a:e6:3e:42:8a:6c:ca:1d:ba:49:ea:86:
                    9e:82:14:0a:b9:8f:87:43:82:73:b3:4a:f8:be:fa:
                    ff:ea:98:c5:c0:fd:7c:36:3e:d3:06:a7:9f:91:0b:
                    b3:c2:35:7f:96:95:0f:93:97:6c:dd:84:e8:78:04:
                    55:c2:69:0c:52:9a:60:9b:37:c7:17:12:03:ed:14:
                    ff:8d:86:b3:83:c9:9c:63:db:62:10:ea:7c:81:af:
                    a1:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:50:F7:37:FC:6C:2D:2F:BF:FF:35:82:08:CB:B6:D7:E3:B1:AB:CF
            X509v3 Authority Key Identifier:
                keyid:85:19:28:F7:40:CA:1A:CA:AF:05:E0:33:E7:F4:34:9F:E5:71:9E:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hRko90DKGsqvBeAz5_Q0n-VxnvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/4/851928F740CA1ACAAF05E033E7F4349FE5719EF5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:44:34:50:4a:9c:01:e7:46:7d:af:b6:b0:31:58:4e:34:45:
         4f:be:fb:7b:f5:b0:f5:06:15:c5:ca:7f:42:cf:fa:58:c3:fa:
         71:fe:3c:eb:bc:78:6a:22:29:de:3c:8a:05:22:d6:a5:18:e6:
         57:26:84:bb:00:36:ce:26:49:fd:1a:c2:16:a1:fa:f4:6d:84:
         f2:7b:b9:33:a4:fb:ce:e5:2c:d7:fe:b1:7a:71:2d:85:e7:da:
         10:da:fa:f2:bb:85:ad:a5:0c:01:1c:3d:8b:a2:79:e5:2e:0b:
         0b:76:f7:c4:e9:c8:e3:63:57:7d:03:f6:e2:d4:28:1e:2e:be:
         31:fd:32:69:92:c5:23:08:bf:05:41:89:75:2c:08:6a:5b:78:
         9a:e7:4b:1d:fd:eb:ae:71:59:c7:c7:29:48:2f:27:52:42:74:
         97:17:f5:a4:bc:a6:35:f2:a8:68:a6:ec:63:d6:41:d7:1a:2d:
         b0:60:c5:ad:5f:fe:cb:bb:57:01:0c:fe:a9:ac:2f:e8:94:87:
         a0:6a:93:5e:60:7c:03:8a:e7:31:40:29:51:a0:82:6a:ec:8b:
         02:16:4a:c5:97:55:02:95:4c:2d:97:4d:cc:1a:ea:c3:d6:fc:
         3e:e9:53:42:21:cd:92:2f:9c:d5:a3:cd:3e:fe:ee:ac:0b:6d:
         8d:7c:0c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:42:00 2026 by rpki-client