This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft
File:                     9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft (raw, json)
Hash identifier:          gXfPRql9DXzN+NbefKbVxPIrZ31sFxfAXvQjvEGpLJU=
Subject key identifier:   9D:0D:FC:E1:2F:40:9A:58:F8:F0:7C:20:13:CD:F4:62:4C:DD:B8:3D
Authority key identifier: 9B:1E:88:63:08:F3:BC:A3:22:BD:4E:EC:EA:88:26:77:13:C5:CE:AC
Certificate issuer:       /CN=9b1e886308f3bca322bd4eecea88267713c5ceac
Certificate serial:       1D8C9DDD89FB5DB852A10661BE4A31A44C590871
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mx6IYwjzvKMivU7s6ogmdxPFzqw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft
Manifest number:          FD
Signing time:             Sun 25 Jan 2026 15:59:37 +0000
Manifest this update:     Sun 25 Jan 2026 15:54:37 +0000
Manifest next update:     Mon 26 Jan 2026 19:20:37 +0000
Files and hashes:         1: 9B1E886308F3BCA322BD4EECEA88267713C5CEAC.crl (hash: Eb3qTCGXjBmvlVymWQXb69EU/kFuZMK6X643VCdE3y4=)
                          2: AS214809.asa (hash: twDSgOmLlkZzcvx0mDRRIi71WRXYCfTsSol/H2pUsYI=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mx6IYwjzvKMivU7s6ogmdxPFzqw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:8c:9d:dd:89:fb:5d:b8:52:a1:06:61:be:4a:31:a4:4c:59:08:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b1e886308f3bca322bd4eecea88267713c5ceac
        Validity
            Not Before: Jan 25 15:54:37 2026 GMT
            Not After : Jan 26 19:20:37 2026 GMT
        Subject: CN=9D0DFCE12F409A58F8F07C2013CDF4624CDDB83D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fa:3a:db:17:17:ad:e5:54:e0:23:0a:62:44:
                    c3:46:c1:ba:49:d1:01:2f:53:1e:91:cd:75:d1:09:
                    9e:23:bd:10:c0:6b:da:9a:d6:70:fd:18:d8:89:9d:
                    16:03:c7:4d:3a:b3:77:aa:7f:37:c6:fe:cb:5b:8d:
                    96:b4:f8:fb:06:e4:2b:95:7c:14:32:32:23:9d:ec:
                    84:03:c0:dc:b4:98:e8:53:5e:ec:75:15:9c:cd:12:
                    e7:30:95:a6:d7:24:09:6e:bb:cd:56:5c:d8:ff:4d:
                    b9:cd:f3:e7:7f:50:7a:3c:5a:5f:08:ab:90:13:fa:
                    64:f0:36:7b:7d:17:6a:fd:f4:6a:93:6f:2a:c2:7d:
                    95:6c:0b:38:26:c1:61:ec:84:6d:f9:22:9f:e1:12:
                    68:bb:8c:ad:34:26:e2:f9:e4:36:d9:4f:f3:4c:a8:
                    96:94:dc:c9:26:54:50:09:bc:5b:cd:82:8a:21:8d:
                    ce:61:d6:24:9c:c6:b9:ec:25:03:40:bf:41:5e:c3:
                    ed:e3:c6:32:01:11:ab:bf:89:f6:a8:1a:28:7e:fc:
                    71:72:4d:8e:d0:75:47:6e:1e:bd:67:1e:2d:49:17:
                    cc:2e:3f:76:68:9a:9b:42:c5:ff:d6:ab:ba:53:59:
                    41:ec:d3:d3:67:82:7a:93:3e:31:7e:fa:7b:67:99:
                    5d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:0D:FC:E1:2F:40:9A:58:F8:F0:7C:20:13:CD:F4:62:4C:DD:B8:3D
            X509v3 Authority Key Identifier:
                keyid:9B:1E:88:63:08:F3:BC:A3:22:BD:4E:EC:EA:88:26:77:13:C5:CE:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mx6IYwjzvKMivU7s6ogmdxPFzqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:26:cc:0f:5e:c7:36:6f:97:ac:a1:72:2f:7e:5e:c4:63:24:
         da:26:70:3b:23:89:5b:2a:f0:1f:eb:a8:73:01:46:b3:39:22:
         c9:ea:14:a2:9c:1c:a8:e4:6b:69:e4:98:d4:08:b8:af:f6:47:
         bd:2f:0c:a3:eb:d6:8c:64:03:87:29:7e:e5:b2:88:bc:61:1d:
         5a:e4:5d:1c:44:33:c5:31:87:b3:b7:ec:5c:15:c3:ac:de:ad:
         f9:23:41:61:33:fb:50:2e:ca:d5:84:25:42:f7:0f:97:0c:c1:
         c5:a2:63:f6:bf:ff:5f:bf:17:76:3a:69:d0:7d:42:7d:f8:5a:
         be:00:bf:b8:40:2f:db:38:97:fd:fb:21:98:85:59:b9:56:56:
         0c:1e:d1:d9:6b:26:dc:fe:91:79:fe:e7:29:c9:c2:b3:cf:42:
         0e:48:c2:90:2d:03:85:2f:36:0f:47:5f:f5:93:f4:61:49:af:
         ff:ab:c8:59:a8:3e:e5:12:d3:ae:fc:9c:07:c9:49:72:aa:18:
         fe:73:50:ba:60:94:5f:a6:41:c0:bf:14:41:db:30:c6:95:db:
         b0:d9:d3:ec:40:ca:0d:c5:48:ef:cd:1d:31:0a:24:f7:c0:16:
         48:e4:cb:45:75:1b:fb:14:60:68:0c:0a:1a:ea:c0:e1:ca:e9:
         82:36:df:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:09:40 2026 by rpki-client