This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.mft
File:                     7C4E2571D39535EB83B4BDD4E4668A2D2C177631.mft (raw, json)
Hash identifier:          tEuons+QiYitlZOMJ63N9Jdtnl4IV5rvqsujOaLntck=
Subject key identifier:   CA:0F:7D:24:AE:BB:58:25:25:66:0E:E2:32:AA:A9:58:3C:89:F7:75
Authority key identifier: 7C:4E:25:71:D3:95:35:EB:83:B4:BD:D4:E4:66:8A:2D:2C:17:76:31
Certificate issuer:       /CN=7C4E2571D39535EB83B4BDD4E4668A2D2C177631
Certificate serial:       17EB0B385D83778D1E52DECC737D59D2E9EBE5
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.mft
Manifest number:          C0
Signing time:             Sun 25 Jan 2026 05:49:35 +0000
Manifest this update:     Sun 25 Jan 2026 05:44:35 +0000
Manifest next update:     Mon 26 Jan 2026 06:16:35 +0000
Files and hashes:         1: 7C4E2571D39535EB83B4BDD4E4668A2D2C177631.crl (hash: C00p112dC4n7f5ffDaM8wDzk46WjlVHxa7R0UP+yAuI=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 06:16:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:eb:0b:38:5d:83:77:8d:1e:52:de:cc:73:7d:59:d2:e9:eb:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C4E2571D39535EB83B4BDD4E4668A2D2C177631
        Validity
            Not Before: Jan 25 05:44:35 2026 GMT
            Not After : Jan 26 06:16:35 2026 GMT
        Subject: CN=CA0F7D24AEBB582525660EE232AAA9583C89F775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d5:da:ae:7d:6d:ec:c9:6c:8a:38:ad:73:9d:
                    b7:d2:04:1c:14:ff:af:0c:50:8d:f3:9b:c0:ac:07:
                    53:18:0c:b3:ee:9d:4c:fa:5c:3a:c2:aa:ed:3c:41:
                    7c:3c:93:66:8c:b3:84:5e:21:6f:c9:4b:e6:a2:b8:
                    35:3f:34:85:23:a4:c2:4a:28:cc:28:a3:2a:7a:af:
                    99:72:a3:5d:9e:2a:82:ec:22:1a:35:55:39:0a:28:
                    d9:9d:98:24:41:43:10:fa:6f:a5:84:48:c4:37:95:
                    86:86:54:6b:40:0f:50:8c:f9:5a:13:35:51:73:51:
                    e3:b6:b4:8c:f1:02:32:29:fc:50:67:83:a9:78:e4:
                    38:48:65:9b:39:be:3f:d1:be:dc:88:a1:21:4b:f8:
                    99:fb:6e:8e:f5:80:93:b7:f5:7f:5e:b9:22:01:16:
                    d9:df:fe:09:b8:5f:33:cb:a4:ef:a9:f6:bb:e6:c2:
                    8e:05:29:94:47:0f:57:7a:b7:ff:e4:a6:f3:b9:7f:
                    23:10:f4:23:1f:e6:5d:2a:c2:19:06:4a:2b:50:b2:
                    d8:f5:55:e9:8b:5b:9a:de:5e:9a:e4:3d:d2:93:42:
                    07:73:22:3f:70:3f:b6:53:be:1d:60:9b:9d:4c:e6:
                    69:d4:36:54:17:9f:25:04:03:e3:f5:56:6a:6e:81:
                    d5:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:0F:7D:24:AE:BB:58:25:25:66:0E:E2:32:AA:A9:58:3C:89:F7:75
            X509v3 Authority Key Identifier:
                keyid:7C:4E:25:71:D3:95:35:EB:83:B4:BD:D4:E4:66:8A:2D:2C:17:76:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:6e:11:85:ea:e4:56:0d:1f:c5:6f:49:26:72:dc:c0:fb:dd:
         89:22:13:7c:cd:06:9e:b0:f7:3f:65:63:1d:15:a1:f7:de:f0:
         ca:af:52:06:b8:77:ce:6c:0f:a0:13:e7:02:50:c9:53:33:24:
         8d:f2:47:40:96:d2:64:88:76:0e:80:3f:6c:40:30:b2:31:9a:
         09:2b:8c:dd:5f:1e:fb:c3:75:87:f2:d6:33:f9:84:d9:01:ca:
         0c:5c:f8:46:ab:66:ec:4d:76:dc:bf:67:88:3f:e6:e7:e3:2e:
         2f:50:d8:03:71:93:fb:f9:29:29:62:03:85:ea:60:73:76:aa:
         d2:b1:1d:ac:71:bf:ee:5d:b7:ad:4a:0e:7f:01:6c:9c:30:21:
         03:6f:f4:82:9b:14:04:0a:c6:85:a0:01:99:9e:91:37:df:df:
         af:f9:8f:d7:e4:33:72:d1:98:31:2c:51:41:43:78:93:9d:bb:
         4e:46:b9:73:e8:22:df:1f:19:e5:b4:5e:9a:de:4e:8a:70:77:
         e0:da:b5:ae:42:e9:4c:54:8a:6b:52:07:45:d7:ae:c2:bd:ed:
         f2:c1:da:5a:fc:13:f7:1b:50:5a:97:5b:31:65:85:17:5f:d9:
         7a:33:f6:64:b3:9f:87:00:b2:b7:25:2a:fb:bb:fe:59:e7:ad:
         5b:aa:a4:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:24:05 2026 by rpki-client