This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft
File:                     E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft (raw, json)
Hash identifier:          E8wJOJJNoV7vo/CcDXmVSXAPe1OdKXnirUel5/dMB4Y=
Subject key identifier:   E8:3C:2C:E1:1A:59:22:CA:4A:96:82:59:2A:88:09:C8:45:43:CD:C2
Authority key identifier: E8:9F:91:5D:86:BB:9F:13:D0:F2:29:CA:78:CD:6D:9F:3E:AB:CF:7C
Certificate issuer:       /CN=E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C
Certificate serial:       15647C7007D220DA2DE5BDAF5FC8AE662810625D
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft
Manifest number:          EE
Signing time:             Sat 24 Jan 2026 23:14:44 +0000
Manifest this update:     Sat 24 Jan 2026 23:09:44 +0000
Manifest next update:     Mon 26 Jan 2026 00:19:44 +0000
Files and hashes:         1: E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.crl (hash: YMPX2MvTemG6CXN6d9jHrWPPbWgJMnejLsQTmzc25U0=)
                          2: 326131343a373538313a333936363a3a2f34382d3634203d3e20313939373633.roa (hash: +BDNAKrmKMibTT2xQwMz+K+qOmE3P6UuU3BvjMVQ0iI=)
                          3: 326131343a373538313a333937373a3a2f34382d3634203d3e20313939373633.roa (hash: 6W8xvuJxWbwP3DdLZ6e8Sa+pGsBO2lzU710UJC28MHg=)
                          4: 326131343a373538313a333966663a3a2f34382d3634203d3e20313939373633.roa (hash: aCq/jKA1GGay4DL6ZU284taMNq3/9u17cmIYZEHZP9Y=)
                          5: 326131343a373538313a333936323a3a2f34382d3634203d3e20313939373633.roa (hash: oCjl7TQd0xhHJ9B8MSi48PHfMmMZri62JgNd0y5lz+I=)
                          6: 326131343a373538313a333936313a3a2f34382d3634203d3e20313939373633.roa (hash: V25LiWzxXAuXeQVJTbroIsiNYHCj/akr9IIXebvCE7Q=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 00:19:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:64:7c:70:07:d2:20:da:2d:e5:bd:af:5f:c8:ae:66:28:10:62:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C
        Validity
            Not Before: Jan 24 23:09:44 2026 GMT
            Not After : Jan 26 00:19:44 2026 GMT
        Subject: CN=E83C2CE11A5922CA4A9682592A8809C84543CDC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a2:96:7b:16:2a:0d:28:26:53:16:1a:81:26:
                    42:42:7c:63:ef:de:53:55:a8:c6:c7:72:b9:fb:c7:
                    ab:f0:af:ad:d0:b9:b8:bd:89:08:d2:4f:c9:ab:0c:
                    fb:26:84:81:34:70:a2:40:8d:0d:eb:1d:cd:00:c9:
                    e2:ca:06:53:7b:4e:87:3a:01:e7:54:e6:dc:9f:d9:
                    cf:6a:0e:47:2c:df:16:a0:05:c5:a8:a2:77:c0:3f:
                    75:e2:6a:73:e6:7a:d3:1d:6c:e7:ef:69:4c:0b:41:
                    89:c2:99:35:75:00:db:f1:da:48:d9:04:7e:b2:f3:
                    dd:21:16:44:73:97:db:eb:2d:88:0f:98:5a:8b:9d:
                    f4:a1:7b:8b:d3:65:a0:e9:53:14:bf:f8:ad:8d:e9:
                    2e:d8:e1:24:38:da:b6:13:11:29:66:0d:7f:cc:de:
                    1a:1f:ab:de:42:23:5c:4b:c0:46:f9:a3:83:7d:6f:
                    5f:24:db:8d:73:80:39:b4:45:57:f0:87:64:39:d9:
                    09:1a:d4:26:30:38:b4:12:30:dc:02:10:da:06:16:
                    38:e6:ea:d8:b3:ab:23:16:75:9a:b1:2a:bb:c4:25:
                    e6:66:89:21:4a:64:42:00:9c:dd:a1:63:39:d1:e8:
                    9a:25:50:c6:ac:75:e4:2e:95:97:e4:42:30:d8:b7:
                    fe:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:3C:2C:E1:1A:59:22:CA:4A:96:82:59:2A:88:09:C8:45:43:CD:C2
            X509v3 Authority Key Identifier:
                keyid:E8:9F:91:5D:86:BB:9F:13:D0:F2:29:CA:78:CD:6D:9F:3E:AB:CF:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/1/E89F915D86BB9F13D0F229CA78CD6D9F3EABCF7C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:27:45:e7:d8:7c:ed:1f:2d:54:05:ee:03:9a:75:eb:cf:e2:
         ff:63:ef:06:2c:51:57:eb:51:8b:9c:bf:7a:6d:1a:c5:5c:85:
         3e:3f:89:2c:62:df:fa:b8:14:bf:5d:ba:5e:7e:e6:6f:24:25:
         15:74:25:ec:88:9e:17:8d:b9:c0:bf:21:69:37:2b:f6:74:d1:
         b3:b8:f9:99:12:0e:a6:94:02:59:f2:60:59:ff:3e:c3:25:d6:
         08:30:f3:4e:63:db:dc:35:ee:4b:aa:2a:65:c2:11:e3:ce:fb:
         1e:ae:0e:a0:2d:f6:fa:55:30:de:b6:dc:05:67:07:2b:b7:e1:
         2a:cb:ed:22:38:b8:63:cb:b9:5a:9f:c5:e8:c1:db:46:7d:ce:
         4e:c4:5d:c3:3a:26:f4:b8:fb:9b:8f:5a:95:c2:5c:4d:a4:18:
         24:31:ca:f9:b9:dc:b3:15:93:40:66:a4:14:1f:81:d6:22:8a:
         aa:65:db:e7:33:a8:fc:52:6f:d2:4b:64:2e:11:48:80:5e:49:
         d6:e3:86:f2:73:bc:d0:68:d8:71:46:3f:f0:7b:8a:cd:22:c4:
         84:23:26:5e:9a:54:fa:26:6a:f9:84:31:ed:0f:6c:ba:17:b1:
         3c:5f:0d:46:9d:f0:d9:a1:a8:67:9d:e9:c7:de:b4:b5:63:b6:
         20:aa:fe:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----