This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.mft
File:                     B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.mft (raw, json)
Hash identifier:          utPOG9M+1Ppv12/TN5iiTrbKQiJPuxR+pQb8gEAtLHY=
Subject key identifier:   CA:DD:B2:F9:4C:AB:0B:AE:1A:C4:9B:4A:45:4B:D1:1C:C1:A1:D7:AB
Authority key identifier: B5:23:00:C5:AE:62:78:B6:08:E2:31:E4:31:C3:DD:0E:AF:6A:6B:C2
Certificate issuer:       /CN=B52300C5AE6278B608E231E431C3DD0EAF6A6BC2
Certificate serial:       696492D49F3577D506A17DF6C730B3316DAEA2B0
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.mft
Manifest number:          3C
Signing time:             Sun 25 Jan 2026 03:35:02 +0000
Manifest this update:     Sun 25 Jan 2026 03:30:02 +0000
Manifest next update:     Mon 26 Jan 2026 06:06:02 +0000
Files and hashes:         1: B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.crl (hash: 0x5+3NYNCOw2SlPF7lb1sKekdPXd1Tk+YgzKjGP3VSk=)
                          2: 326131343a373538313a393930343a3a2f34382d3438203d3e20323134333434.roa (hash: JSmiAu7ed33+J2eg2ZQ/ocsiovRypTOUdvXbpKPSbI8=)
                          3: 326131343a373538313a393966353a3a2f34382d3438203d3e20323134333434.roa (hash: HcA7KRdnBWzY7hEKVhGFuUdyfwcYU7b6FuC/duUcRFU=)
                          4: 326131343a373538313a393930313a3a2f34382d3438203d3e20323134333434.roa (hash: a3vn+r3Xd1ZweP+VfXPkybQsxnlpFwKhPGkq1Aja1ws=)
                          5: 326131343a373538313a393966323a3a2f34382d3438203d3e20323134333434.roa (hash: Oe9b7D8DtLCyHfTEelgxQzMm3GoJ4G9/0gwwATaJfro=)
                          6: 326131343a373538313a393930323a3a2f34382d3438203d3e20323134333434.roa (hash: TyFBqgR7vYeMd4/BuVueO5zwkcDAg7G5uk0/d+OPki0=)
                          7: 326131343a373538313a393966313a3a2f34382d3438203d3e20323134333434.roa (hash: uczfpozVS217kWRATgpEenuL/t1nbJiCmQMwvAEpV8o=)
                          8: 326131343a373538313a393966333a3a2f34382d3438203d3e20323134333434.roa (hash: J6emFQdlETu7H0STfMe+srRexcrGlCk0y+BgTI9eJls=)
                          9: 326131343a373538313a393966343a3a2f34382d3438203d3e20323134333434.roa (hash: spTh8DstCVqtG/UUp5lMqUt7m9/HXGTEzcFQEa7vRbE=)
                          10: 326131343a373538313a393930333a3a2f34382d3438203d3e20323134333434.roa (hash: odpWIoGfrHyjA/EqLrY/tj6kKgasd1C7YcR9JizUkBA=)
                          11: 326131343a373538313a393938383a3a2f34382d3438203d3e20323134333434.roa (hash: dhPIT0Huo/8bMcCCD9CENzV8Oc7GRGv2lkOyyJSz4lY=)
                          12: 326131343a373538313a393930353a3a2f34382d3438203d3e20323134333434.roa (hash: WvJ+nlXPCuTRZnP7e6XF03QrjAocsMrvYbQ3ZQ/eNBY=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 01:36:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:64:92:d4:9f:35:77:d5:06:a1:7d:f6:c7:30:b3:31:6d:ae:a2:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B52300C5AE6278B608E231E431C3DD0EAF6A6BC2
        Validity
            Not Before: Jan 25 03:30:02 2026 GMT
            Not After : Jan 26 06:06:02 2026 GMT
        Subject: CN=CADDB2F94CAB0BAE1AC49B4A454BD11CC1A1D7AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6e:ec:82:12:a1:bb:65:68:f0:0b:86:bd:97:
                    3d:e9:10:d7:df:f5:08:41:96:d9:30:5a:2d:75:b8:
                    2d:97:a9:89:f3:09:4d:d5:da:7d:22:38:c2:a7:7a:
                    27:f3:ea:64:52:6e:ce:1f:8d:9d:8e:e2:3d:58:b6:
                    67:97:3b:82:dd:f0:15:72:c7:17:e4:70:13:af:5c:
                    0b:99:ab:fd:89:6e:c0:f6:95:d4:f1:a2:42:4f:00:
                    ec:bf:72:6a:93:c3:21:5f:8b:40:4c:ab:b7:74:dd:
                    de:ce:4b:4c:fd:f6:46:65:3b:3d:f7:0d:7e:61:de:
                    40:5f:b9:51:a4:58:eb:52:1a:8a:45:a3:66:eb:e2:
                    6d:ca:91:b7:6a:02:f3:8c:93:e0:d0:0a:40:2e:1d:
                    96:08:57:a4:d2:1c:69:8a:93:a9:88:09:9c:f0:80:
                    37:2c:51:04:88:4f:55:dc:cc:72:71:7c:56:07:e5:
                    3b:0b:ad:e2:b5:bb:66:da:35:34:2f:b4:ed:74:c9:
                    3f:39:b1:85:6d:61:b3:86:0b:b8:48:7d:6d:70:69:
                    a8:c3:4d:ab:ce:fa:14:34:59:ad:c4:9a:fe:bf:a0:
                    1a:65:d2:8f:ce:1f:f8:97:ca:0f:2d:5d:ae:6e:c0:
                    f8:bf:21:e0:cd:e5:d6:02:34:54:5f:7e:5a:90:46:
                    00:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:DD:B2:F9:4C:AB:0B:AE:1A:C4:9B:4A:45:4B:D1:1C:C1:A1:D7:AB
            X509v3 Authority Key Identifier:
                keyid:B5:23:00:C5:AE:62:78:B6:08:E2:31:E4:31:C3:DD:0E:AF:6A:6B:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:b2:b5:6f:85:13:85:56:b3:18:33:5a:fb:2e:f1:44:e9:a7:
         d7:c8:92:41:1f:10:67:4d:bb:02:27:4e:ac:f1:59:5a:de:b6:
         51:6e:73:9a:41:90:45:f6:0e:aa:52:de:9b:00:47:06:ce:33:
         49:f3:d5:ef:d2:fe:25:e3:60:7f:a8:b3:60:50:55:0d:e8:f6:
         b9:be:9c:35:60:15:c2:f9:f4:4f:d3:95:6f:fb:bd:80:aa:cc:
         d6:6b:ee:17:e1:cb:6d:9a:0f:23:39:75:ff:a2:91:38:f0:90:
         c8:e2:c6:e2:73:4e:17:28:1f:f2:2c:ef:76:ef:8a:89:45:11:
         c7:ab:02:54:2d:85:3f:66:3f:20:38:2b:db:58:29:4f:eb:e1:
         2d:4f:5f:bd:67:ae:bf:9a:65:01:cd:2b:a4:08:b5:55:b4:b4:
         a4:29:98:7c:08:54:c4:c2:12:67:a8:7a:d2:04:41:31:80:63:
         f6:f7:17:8c:a2:46:ca:20:f0:b6:8e:90:fb:c7:c5:98:69:46:
         12:0f:64:fe:37:61:f0:77:5a:d9:57:13:07:5a:3a:6e:72:a3:
         bb:72:fb:25:c6:8a:9b:d8:13:46:0a:27:60:ec:5a:ed:29:77:
         f0:a7:f3:01:c8:c2:7b:08:2f:2d:4e:ec:0b:db:dd:54:bd:9a:
         61:38:b9:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:17:15 2026 by rpki-client