This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft
File:                     B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft (raw, json)
Hash identifier:          gMapwO/6xEujOtr2ICaf0dnU0dTfX6EayQl/hOyXlVk=
Subject key identifier:   D1:41:60:05:27:8C:85:93:D8:2C:20:FA:61:2D:B5:D4:CB:73:FE:35
Authority key identifier: B5:F5:EC:5C:56:7F:D4:89:BE:73:90:28:62:EB:EE:81:CC:DE:E3:5C
Certificate issuer:       /CN=B5F5EC5C567FD489BE73902862EBEE81CCDEE35C
Certificate serial:       7AB579E5997372617773599F02C82112DA2BF539
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft
Manifest number:          DE
Signing time:             Sun 25 Jan 2026 00:28:50 +0000
Manifest this update:     Sun 25 Jan 2026 00:23:50 +0000
Manifest next update:     Mon 26 Jan 2026 04:19:50 +0000
Files and hashes:         1: 326130623a396534373a666666663a3a2f34382d3438203d3e20323132333936.roa (hash: 75MQYcrJ2fBMIggMxPD0oPJNZ5TBWMJfZ5gCQQu+izk=)
                          2: B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.crl (hash: qmfBHnYWAxERtpGFdoDA9l+2rB7Op4TSGAoASwxZXBY=)
                          3: 326130623a396534303a3a2f33322d3332203d3e20323134343531.roa (hash: GwXhJxTPfppTl2To2mF3GpvFgaV+3IGFSczXonJ1+q0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 04:19:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:b5:79:e5:99:73:72:61:77:73:59:9f:02:c8:21:12:da:2b:f5:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5F5EC5C567FD489BE73902862EBEE81CCDEE35C
        Validity
            Not Before: Jan 25 00:23:50 2026 GMT
            Not After : Jan 26 04:19:50 2026 GMT
        Subject: CN=D1416005278C8593D82C20FA612DB5D4CB73FE35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b4:04:af:80:e6:cb:0c:46:db:c4:53:57:7a:
                    b5:90:df:a0:20:c6:0c:79:38:8e:23:4a:4b:de:81:
                    dc:2b:48:e9:d7:81:62:9a:39:23:0f:7b:52:e2:77:
                    76:32:98:f9:ea:72:0d:e3:da:eb:69:83:81:dc:d1:
                    3f:07:63:fc:a8:4b:a6:9d:54:da:fd:ed:51:3f:f7:
                    4b:ab:12:bb:e0:a1:cb:15:d2:45:64:e1:12:c8:68:
                    8c:7f:49:99:a3:95:19:54:e4:e7:3e:0c:3e:f7:a1:
                    b4:c0:a2:69:ec:2a:a9:03:e6:9a:2d:45:d5:0c:9b:
                    95:65:1e:82:da:c2:41:ba:5b:25:53:e7:13:bb:76:
                    dc:dd:d1:39:e6:0b:36:aa:fd:96:8b:fe:fb:dd:37:
                    04:14:bb:8d:36:67:12:46:32:77:a3:0b:07:9f:4f:
                    b9:ad:22:b1:0c:f9:75:69:b0:e0:11:af:69:78:5a:
                    fd:e0:0e:fc:03:22:d3:e6:33:9d:54:c6:8a:1a:2f:
                    9b:5d:45:f6:8b:25:5d:68:20:e5:62:da:a0:1e:15:
                    79:93:f7:f4:c0:17:0a:fb:61:98:58:77:e2:a6:41:
                    aa:dd:70:ab:19:c6:c4:4d:07:9e:46:59:7b:45:27:
                    1a:19:8f:80:75:c0:83:e7:04:ff:92:70:cf:2f:b2:
                    d8:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:41:60:05:27:8C:85:93:D8:2C:20:FA:61:2D:B5:D4:CB:73:FE:35
            X509v3 Authority Key Identifier:
                keyid:B5:F5:EC:5C:56:7F:D4:89:BE:73:90:28:62:EB:EE:81:CC:DE:E3:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/5/B5F5EC5C567FD489BE73902862EBEE81CCDEE35C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:26:d4:e6:80:8d:c3:e4:04:d5:47:f0:fd:9b:bb:05:e7:13:
         f3:ac:58:f8:da:59:c1:64:a7:0c:9f:75:fc:9a:a0:66:fa:12:
         4f:88:00:26:e9:ed:14:21:fa:01:ec:fe:9e:81:79:e1:64:9d:
         1a:8f:ef:43:d4:50:84:76:bf:f7:80:d1:1f:5b:48:58:1d:35:
         12:f2:80:73:20:99:e3:c1:45:9c:63:31:61:69:c4:90:fb:d4:
         4a:30:7a:63:77:da:c5:a2:08:33:ad:99:ba:76:40:19:42:35:
         9f:42:68:a2:3c:2b:2a:b6:c4:b6:aa:8c:d6:b4:05:ed:38:3b:
         e7:bf:ee:3c:fd:c4:44:10:05:0f:65:bd:04:6b:8e:e9:30:ad:
         28:3d:c6:78:2a:03:3b:df:ea:4a:5e:6d:d1:57:0e:ae:43:91:
         f0:ba:78:a9:b0:b0:10:6a:92:88:60:b0:55:c1:a3:32:e4:b5:
         d6:2a:d5:81:0e:fc:02:3c:ae:ae:bf:86:8a:f3:df:ac:c5:10:
         f8:46:b9:98:99:93:a5:f6:36:5a:bf:03:c0:04:51:c8:23:74:
         e0:26:d2:8d:10:0b:8d:d8:e3:43:ed:fc:e9:d7:0d:af:7f:f0:
         e8:5d:7f:35:bd:7d:ee:d5:d4:0a:9d:64:48:56:52:a7:7c:3a:
         e0:73:4a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:50:20 2026 by rpki-client