This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft
File:                     8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft (raw, json)
Hash identifier:          T/cmEDa1+M5aDgFc9r74muoqJaaby9cqeYeYnvr6tZs=
Subject key identifier:   E3:82:73:93:9A:DC:FF:A2:30:2A:9D:FB:DE:3F:6F:64:E7:3E:B5:37
Authority key identifier: 8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA
Certificate issuer:       /CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca
Certificate serial:       352777B0688228A70FD1BC09776F2D8C9F341288
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft
Manifest number:          0548
Signing time:             Sun 25 Jan 2026 02:04:58 +0000
Manifest this update:     Sun 25 Jan 2026 01:59:58 +0000
Manifest next update:     Mon 26 Jan 2026 05:08:58 +0000
Files and hashes:         1: 3138382e3136342e3135322e302f32342d3234203d3e203631333137.roa (hash: PjHq1CK+fSk+5WuONiKJilG5oXTFh0dZnkKMEZVNP8E=)
                          2: 8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl (hash: /+XLFCvp2yrWhRrHbBnINaNYKUr3lLO7I1OxR6JO2u8=)
                          3: 3138382e3136342e3135362e302f32342d3234203d3e20383334.roa (hash: 8mF+PQeUzaqKEgfJbIXSTk7hxbEJf0BXKYW39kTGsrg=)
                          4: 3138382e3136342e3135342e302f32342d3234203d3e20383334.roa (hash: vvTevjxETDa595QBqFXtPC5dkfNklcd1MuoPmql9OGw=)
                          5: 3138382e3136342e3135352e302f32342d3234203d3e203631333137.roa (hash: W1I8woHaqJ6kU4xjFwKm1g6uV7UZ51m6Dv8R/7Dp0Oc=)
                          6: 3138382e3136342e3135332e302f32342d3234203d3e203631333137.roa (hash: pkJz5L9iLZRF+OIvLDh3t2xUInq31L6An4us+3j1eD0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 05:08:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:27:77:b0:68:82:28:a7:0f:d1:bc:09:77:6f:2d:8c:9f:34:12:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca
        Validity
            Not Before: Jan 25 01:59:58 2026 GMT
            Not After : Jan 26 05:08:58 2026 GMT
        Subject: CN=E38273939ADCFFA2302A9DFBDE3F6F64E73EB537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5c:bf:12:af:3a:21:09:a0:e8:ec:8a:4d:0c:
                    7d:cb:bf:27:07:72:bd:0c:5a:67:48:0c:15:2b:65:
                    ec:e8:a4:85:48:59:a3:2c:ab:6b:3b:bc:e2:38:81:
                    7e:dc:07:10:7c:b4:db:47:42:a6:42:e8:e7:d1:6c:
                    75:fb:99:99:28:97:ce:ac:de:d7:e2:bc:82:6f:91:
                    2b:c4:7a:a0:78:18:b4:ac:ae:11:79:82:46:32:33:
                    da:d8:51:6f:7f:12:57:74:0d:e1:cd:06:22:de:fc:
                    cf:a9:c9:e3:9c:50:25:5c:f2:34:f9:3a:da:ea:17:
                    23:38:b9:e5:59:f5:d9:61:7e:12:dd:6c:59:53:3e:
                    b0:b3:c4:e2:c9:c1:f8:62:bb:38:ac:d8:04:0c:cb:
                    13:b2:65:ef:55:f5:5c:4d:9c:13:06:46:44:9b:7a:
                    b1:e2:15:95:93:43:2a:b7:5d:60:27:31:ec:2a:71:
                    4e:cc:32:e0:d9:54:33:ee:8a:bf:4c:2b:b8:2a:a3:
                    94:4c:52:d3:11:d9:d6:ae:41:1b:59:1c:6f:f3:42:
                    e3:cc:1e:80:c7:a3:f2:66:64:d6:9c:4c:7f:c2:f3:
                    c6:20:f7:33:b5:4e:e7:d4:7a:21:dc:d6:27:a0:37:
                    89:2d:6e:0b:94:96:72:60:43:b8:24:5a:f7:0f:a9:
                    f8:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:82:73:93:9A:DC:FF:A2:30:2A:9D:FB:DE:3F:6F:64:E7:3E:B5:37
            X509v3 Authority Key Identifier:
                keyid:8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:03:d5:e6:c9:97:28:a3:88:af:f8:06:7f:0d:e9:02:2c:d9:
         59:60:6b:72:46:94:08:67:90:07:0e:53:83:96:a7:cb:f4:30:
         e4:11:1e:28:65:2b:e3:2f:e7:38:1b:3e:8c:96:13:78:fd:69:
         24:2e:91:66:e0:53:c3:16:d4:2e:01:6a:77:44:fa:0d:7f:24:
         74:97:fa:d5:36:b1:24:7d:0f:3a:b7:b8:ab:38:b4:4a:59:ba:
         18:c8:09:94:59:36:88:37:aa:8d:5b:15:18:5a:79:1c:1b:90:
         88:48:b0:b4:6f:ac:d3:45:00:cc:3a:ef:b7:7d:e9:7c:6b:8a:
         2d:25:d2:65:28:88:cb:9f:d2:0f:53:0c:32:79:9b:ff:6d:51:
         8d:43:fc:df:b6:25:06:78:cb:52:89:7b:62:d8:be:8b:d4:dc:
         20:49:99:d5:ed:28:b5:17:74:ea:5b:3a:84:4b:bc:c1:cd:68:
         9a:16:3b:f0:a2:6e:e9:8e:a6:96:cd:3d:3c:12:36:83:e7:aa:
         65:a1:eb:b5:2f:56:88:c4:de:2c:95:3f:b3:30:e6:4c:93:56:
         db:55:e6:ea:c6:20:04:a0:75:c2:97:02:bb:33:34:43:75:06:
         f2:89:db:9e:b4:f1:a0:39:3f:43:c9:4c:f5:ca:b4:15:c6:79:
         6d:13:cf:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:29:20 2026 by rpki-client