This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/1/AD51B4FA37D423844399722D5240A94674496236.mft
File:                     AD51B4FA37D423844399722D5240A94674496236.mft (raw, json)
Hash identifier:          1s6J8/6oVl8uj3ySrq1As9g0+ygHs6tH4ptXpXR7BYc=
Subject key identifier:   AB:0C:30:B9:5C:07:23:75:E0:28:E2:B2:6D:5D:AC:F3:CD:F2:41:D6
Authority key identifier: AD:51:B4:FA:37:D4:23:84:43:99:72:2D:52:40:A9:46:74:49:62:36
Certificate issuer:       /CN=AD51B4FA37D423844399722D5240A94674496236
Certificate serial:       22CD3BC52A360ED6C1213118B2AF368D42F3E6ED
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AD51B4FA37D423844399722D5240A94674496236.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/1/AD51B4FA37D423844399722D5240A94674496236.mft
Manifest number:          50
Signing time:             Sun 25 Jan 2026 11:33:44 +0000
Manifest this update:     Sun 25 Jan 2026 11:28:44 +0000
Manifest next update:     Mon 26 Jan 2026 12:30:44 +0000
Files and hashes:         1: AD51B4FA37D423844399722D5240A94674496236.crl (hash: b2LjDHOYef42+lJN2DuRNOD2s8Vq/H4Cn8J1dRHQVX8=)
                          2: 326131343a373538333a333030303a3a2f33362d3438203d3e20323034353335.roa (hash: wa3x+YdBz4iMqCjU1AX+bNH8GFDW/LR3zugaLxxd1vE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/1/AD51B4FA37D423844399722D5240A94674496236.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/1/AD51B4FA37D423844399722D5240A94674496236.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AD51B4FA37D423844399722D5240A94674496236.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 01:36:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:cd:3b:c5:2a:36:0e:d6:c1:21:31:18:b2:af:36:8d:42:f3:e6:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD51B4FA37D423844399722D5240A94674496236
        Validity
            Not Before: Jan 25 11:28:44 2026 GMT
            Not After : Jan 26 12:30:44 2026 GMT
        Subject: CN=AB0C30B95C072375E028E2B26D5DACF3CDF241D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:4c:8c:7d:79:2f:ea:14:db:59:8b:5e:75:04:
                    58:15:d5:d6:19:7b:c3:11:9a:30:65:47:38:92:f5:
                    84:7f:fe:b2:ae:ba:c2:e8:44:69:05:50:07:ab:3d:
                    fe:eb:d4:3a:41:33:8a:32:97:3b:41:73:49:d7:93:
                    26:d1:05:7b:00:2b:fa:68:63:1c:d0:2a:c7:30:31:
                    a8:dd:38:d6:dc:68:2f:db:09:3b:ab:df:ff:a7:98:
                    f8:c8:38:02:6a:d3:ce:cd:fb:3f:26:35:c6:a2:11:
                    db:ef:f3:34:7b:08:c2:8f:01:7d:91:59:a3:62:45:
                    6f:b2:3a:b9:3a:e1:0d:21:69:ae:75:4b:e9:15:40:
                    1f:ae:f0:61:88:52:e9:48:d2:a2:e0:63:af:8b:b6:
                    69:46:4b:32:7f:dd:a6:3c:5c:e9:6e:57:6b:ed:3e:
                    fe:4f:52:2d:75:d7:d2:72:ad:28:84:07:8f:ce:56:
                    3e:c8:61:ee:03:d7:cf:52:c1:27:b0:90:3a:80:6b:
                    e1:aa:d1:58:d0:30:c0:34:ab:b5:4f:f1:93:78:e3:
                    1f:fe:19:35:75:45:d6:93:cc:7a:c3:65:34:f2:a4:
                    14:af:18:0b:ed:46:28:84:a8:ca:be:7b:8d:f5:e8:
                    63:e9:19:10:bb:1b:dd:24:d2:84:e2:98:fe:8d:ec:
                    7b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:0C:30:B9:5C:07:23:75:E0:28:E2:B2:6D:5D:AC:F3:CD:F2:41:D6
            X509v3 Authority Key Identifier:
                keyid:AD:51:B4:FA:37:D4:23:84:43:99:72:2D:52:40:A9:46:74:49:62:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/1/AD51B4FA37D423844399722D5240A94674496236.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AD51B4FA37D423844399722D5240A94674496236.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9bb77c8a-2d69-4325-b4fa-603388c96bb3/1/AD51B4FA37D423844399722D5240A94674496236.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:01:91:ef:b2:0e:57:9d:ca:1e:e1:46:c9:25:99:7f:fd:54:
         7d:95:56:12:58:c8:d1:3b:41:14:11:d7:7c:ff:43:eb:b9:44:
         29:7b:ee:43:a9:54:7e:f8:6a:85:4e:ff:6e:81:f6:8f:3b:bc:
         32:77:d0:bb:4a:e3:3e:76:14:1b:f5:ce:0d:e6:65:39:21:70:
         6a:35:11:94:a6:5f:80:8f:87:2b:2a:d8:ac:2f:d7:68:24:2d:
         00:6d:16:79:db:af:98:a8:e6:a1:7d:bc:e7:62:2b:f8:e1:2b:
         4a:ac:9c:59:91:72:89:87:63:24:b1:99:0f:64:2c:dd:4c:a2:
         68:78:54:88:28:f4:a1:ce:dd:e3:ee:4f:e5:01:b4:2c:96:7d:
         1f:0b:bb:d1:65:94:e1:53:7d:60:bf:17:bf:f1:be:91:c4:69:
         f6:46:b5:73:92:3a:11:81:78:94:44:f7:6e:6a:4a:d5:cc:65:
         7e:3b:ae:e9:92:5c:20:10:4b:36:a3:61:4f:b6:e9:dc:cd:45:
         51:52:7c:4f:bd:8e:22:da:1c:00:39:b2:01:5b:d3:66:99:4f:
         da:31:b1:89:36:ce:a6:f1:f9:f5:2d:68:35:78:62:de:b2:b3:
         ea:b7:5b:36:ab:4e:59:a9:7b:83:ee:80:b0:65:dc:c9:20:12:
         d6:35:a5:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:54:55 2026 by rpki-client