This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/188078EA8ABD561E7C13EFCE9131BC671DE29F96.mft
File:                     188078EA8ABD561E7C13EFCE9131BC671DE29F96.mft (raw, json)
Hash identifier:          6hagwh89yTI70ks9qO2aIzV6WVwtpPkSaeYbczJs6gw=
Subject key identifier:   D7:42:55:AA:01:68:7D:69:24:CE:4E:97:B1:71:E8:F8:B4:70:3A:09
Authority key identifier: 18:80:78:EA:8A:BD:56:1E:7C:13:EF:CE:91:31:BC:67:1D:E2:9F:96
Certificate issuer:       /CN=188078EA8ABD561E7C13EFCE9131BC671DE29F96
Certificate serial:       0CECE30D51BE41BA1641D4AB28BB5219671AD4BC
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/188078EA8ABD561E7C13EFCE9131BC671DE29F96.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/188078EA8ABD561E7C13EFCE9131BC671DE29F96.mft
Manifest number:          C0
Signing time:             Sun 25 Jan 2026 06:45:01 +0000
Manifest this update:     Sun 25 Jan 2026 06:40:01 +0000
Manifest next update:     Mon 26 Jan 2026 10:25:01 +0000
Files and hashes:         1: 188078EA8ABD561E7C13EFCE9131BC671DE29F96.crl (hash: GhWSunl/QNFbCmfPCG6WTgzwunmsu+Nl22OjIQfaRSc=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/188078EA8ABD561E7C13EFCE9131BC671DE29F96.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/188078EA8ABD561E7C13EFCE9131BC671DE29F96.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/188078EA8ABD561E7C13EFCE9131BC671DE29F96.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:ec:e3:0d:51:be:41:ba:16:41:d4:ab:28:bb:52:19:67:1a:d4:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=188078EA8ABD561E7C13EFCE9131BC671DE29F96
        Validity
            Not Before: Jan 25 06:40:01 2026 GMT
            Not After : Jan 26 10:25:01 2026 GMT
        Subject: CN=D74255AA01687D6924CE4E97B171E8F8B4703A09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8c:58:0c:8c:8d:02:83:a2:41:19:12:14:9d:
                    d6:5b:30:a4:31:d2:f7:73:3d:8a:d7:ee:45:22:b1:
                    82:c1:56:00:5d:be:be:e0:d6:5f:f7:c3:a5:5b:93:
                    32:31:c4:e7:96:59:e3:fc:69:1f:85:d5:53:b6:40:
                    7c:17:ef:75:5c:73:6a:42:60:08:47:1e:ff:a5:ff:
                    b2:ac:66:68:a1:12:18:14:a1:63:75:aa:3b:d4:04:
                    9b:03:85:e8:e0:d9:0d:0b:3c:76:c3:e8:23:4e:35:
                    04:38:34:b9:97:2c:f2:17:a1:0b:e4:93:1f:8f:e4:
                    a3:66:38:e7:7a:5b:76:a5:52:dc:7f:1e:ed:7d:93:
                    11:c0:18:e0:50:1c:63:5c:20:3f:dc:16:be:af:6e:
                    dc:2b:74:51:d9:4b:20:34:7d:a0:2e:8e:6f:f6:b9:
                    79:10:d6:a0:9a:52:3f:a8:80:46:2b:52:68:ce:68:
                    8b:f9:54:19:53:da:18:3a:6a:6e:3e:fb:0f:4d:03:
                    c7:d8:b6:49:76:92:1e:ba:99:fe:cc:93:3a:ac:42:
                    2f:d3:3b:17:5e:b3:bb:03:cf:1e:7e:f3:41:e6:e0:
                    49:fa:3e:d2:d0:31:11:2b:0a:e4:4d:72:e9:72:98:
                    77:53:c9:4c:af:6a:8b:25:71:8f:ef:b2:61:1e:bc:
                    e1:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:42:55:AA:01:68:7D:69:24:CE:4E:97:B1:71:E8:F8:B4:70:3A:09
            X509v3 Authority Key Identifier:
                keyid:18:80:78:EA:8A:BD:56:1E:7C:13:EF:CE:91:31:BC:67:1D:E2:9F:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/188078EA8ABD561E7C13EFCE9131BC671DE29F96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/188078EA8ABD561E7C13EFCE9131BC671DE29F96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/188078EA8ABD561E7C13EFCE9131BC671DE29F96.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:fa:75:16:f8:db:d8:c8:a2:81:55:eb:5c:ab:d5:af:b9:52:
         2d:a6:a8:7c:24:3c:76:0f:f9:70:20:47:d6:f0:5e:51:59:c2:
         e8:9e:12:00:10:45:df:21:6d:18:1b:7b:cb:e2:af:2e:94:95:
         70:a3:e9:20:60:2c:19:0b:0a:38:48:94:ea:06:f4:40:63:a1:
         33:56:ca:20:e7:d5:df:40:2f:bc:2c:26:f3:3c:3e:5a:b9:28:
         c1:16:4e:ec:12:1a:a0:b9:0c:78:03:92:7d:14:e8:05:0d:39:
         9b:5e:1b:6d:de:f4:57:b2:59:d6:12:36:28:44:09:75:08:82:
         2f:c1:31:77:04:21:ea:03:10:12:2a:58:4a:27:91:2d:6c:9f:
         5f:33:1c:ad:0d:45:b9:ea:ac:c1:35:63:cd:67:ea:db:6c:21:
         9e:54:d0:fe:e3:9c:7e:47:2d:a0:31:f5:bd:87:28:4d:5a:16:
         88:32:aa:b2:c7:0f:9d:ae:2a:02:28:b7:7f:7b:94:4e:23:6c:
         fb:46:8b:5e:12:fd:f4:f3:6c:9d:8a:5e:85:df:b1:db:6f:74:
         9a:32:c8:3f:74:e4:ce:d7:6d:d5:fb:ee:6c:4d:39:db:62:92:
         ce:46:a7:b0:7f:db:9a:8b:cf:a0:b4:a0:0b:6f:b8:13:52:23:
         09:de:5e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:13:56 2026 by rpki-client