This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft
File:                     B3C078E149D9741434FD8877AB4CED46DC2720DA.mft (raw, json)
Hash identifier:          QRqVeA9hQa/VjktJyjZntYSFyNxWQrfTh0nZAxbp9as=
Subject key identifier:   F8:4A:24:63:33:42:94:C8:43:9D:88:43:FD:AB:55:7A:D3:3F:0F:CC
Authority key identifier: B3:C0:78:E1:49:D9:74:14:34:FD:88:77:AB:4C:ED:46:DC:27:20:DA
Certificate issuer:       /CN=b3c078e149d9741434fd8877ab4ced46dc2720da
Certificate serial:       505B18DE5629FCF022BA7E8F22C78A62F541E14E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft
Manifest number:          03EE
Signing time:             Mon 26 Jan 2026 00:03:35 +0000
Manifest this update:     Sun 25 Jan 2026 23:58:35 +0000
Manifest next update:     Tue 27 Jan 2026 01:22:35 +0000
Files and hashes:         1: B3C078E149D9741434FD8877AB4CED46DC2720DA.crl (hash: 9LixkmaX1H3sPXEtO7fvnes9HVDmmxDvcYXVentDtVA=)
                          2: AS215147.asa (hash: GjsvLtdFoDUTAXomZoavpdPPd8CJuRsD46c0/yYhSME=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:5b:18:de:56:29:fc:f0:22:ba:7e:8f:22:c7:8a:62:f5:41:e1:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3c078e149d9741434fd8877ab4ced46dc2720da
        Validity
            Not Before: Jan 25 23:58:35 2026 GMT
            Not After : Jan 27 01:22:35 2026 GMT
        Subject: CN=F84A2463334294C8439D8843FDAB557AD33F0FCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c4:bf:95:a4:ea:55:65:2f:ae:bd:f1:90:86:
                    ae:ce:80:1b:7a:1e:62:66:d5:43:dd:29:92:e4:10:
                    88:03:af:17:62:5f:eb:25:03:9a:06:06:18:2f:44:
                    cc:6b:df:fa:d1:c0:84:f9:ca:38:64:e0:c0:b0:5c:
                    15:7c:33:2f:b8:28:86:c5:48:4f:a7:37:46:0b:49:
                    6f:8e:13:12:2c:ab:7e:97:64:e1:e8:ae:42:e8:f7:
                    cf:6d:9d:2c:15:78:ad:a1:23:b0:de:4f:01:9f:8c:
                    e5:7b:5b:98:23:e6:b3:30:b2:1e:b6:b4:1b:15:87:
                    5d:e0:3d:b7:ab:b0:49:d7:65:9a:c3:d2:46:d6:77:
                    d7:d3:c6:eb:cd:50:cc:c9:7f:e4:48:b5:74:2c:0f:
                    2e:b6:6a:85:b6:a8:c4:4f:77:b4:57:73:af:96:33:
                    12:29:b5:ba:8b:15:68:48:42:fa:9b:6c:f6:ee:9b:
                    90:bb:93:9f:99:94:a8:1e:be:67:df:72:cc:fd:ac:
                    77:4c:96:39:12:19:e4:38:06:47:b7:c7:35:4b:0a:
                    23:d3:23:f9:47:4a:ac:65:5c:16:1c:53:ef:c5:47:
                    a1:4d:19:a5:39:3d:51:8a:cb:31:de:15:61:ed:3c:
                    1a:87:ed:75:08:a2:a1:46:90:8e:f3:ba:95:d3:33:
                    1b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:4A:24:63:33:42:94:C8:43:9D:88:43:FD:AB:55:7A:D3:3F:0F:CC
            X509v3 Authority Key Identifier:
                keyid:B3:C0:78:E1:49:D9:74:14:34:FD:88:77:AB:4C:ED:46:DC:27:20:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:51:53:d4:9e:ff:ad:1a:b5:d2:a8:1b:d0:38:84:8e:90:c8:
         f5:b0:6e:27:be:93:a9:fc:1b:d9:16:df:fc:5e:76:bb:49:ca:
         e2:29:b2:4a:cc:74:01:cc:cd:3a:ba:7e:49:fa:4c:14:dd:a5:
         40:57:a6:f4:9c:7d:57:69:12:3c:b3:24:29:70:e7:80:e7:1b:
         97:18:ee:fa:fe:d0:6f:8b:4d:a6:8d:68:16:4b:03:3e:62:aa:
         ec:a4:97:ae:fe:22:47:92:47:c0:50:c1:39:88:fd:a7:7b:41:
         b2:05:bd:47:0e:6d:11:c9:53:15:68:45:8c:30:46:40:28:4f:
         ca:47:2a:68:a1:b5:c8:39:e8:ec:33:89:6a:2b:e6:9e:43:19:
         1e:3e:50:59:01:f0:a8:b9:2a:3f:4c:73:1f:ef:60:34:92:7f:
         fd:f0:16:3c:28:40:36:f8:d3:c0:e6:24:d3:5a:60:30:3b:d9:
         7f:7c:4e:83:e4:04:8e:87:cf:c2:cd:4a:d4:f1:70:66:a7:7e:
         3a:1c:b8:55:e0:b6:66:81:bb:c1:19:e6:24:a7:32:b8:54:78:
         94:80:2f:a7:07:15:6b:02:ea:3d:5c:2a:32:52:0b:31:40:26:
         4d:6d:34:cd:f9:a0:5e:22:4d:8f:21:2f:de:ed:f5:35:01:36:
         07:b9:4e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:12:09 2026 by rpki-client