This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/0/827A5BDF8ACAA1E616F6213D1CDCBE187BFE0605.mft
File:                     827A5BDF8ACAA1E616F6213D1CDCBE187BFE0605.mft (raw, json)
Hash identifier:          1Bwdl931WGHM/sT0U8oh35A0rQ1LZo7gLo7AJ2FPc50=
Subject key identifier:   A7:E0:02:DD:BA:BF:27:0D:7B:CE:23:9D:B9:45:DA:FF:1B:11:F2:CB
Authority key identifier: 82:7A:5B:DF:8A:CA:A1:E6:16:F6:21:3D:1C:DC:BE:18:7B:FE:06:05
Certificate issuer:       /CN=827a5bdf8acaa1e616f6213d1cdcbe187bfe0605
Certificate serial:       702191AD7FF17BB012C0EF64E356ADA9883BD86D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gnpb34rKoeYW9iE9HNy-GHv-BgU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/0/827A5BDF8ACAA1E616F6213D1CDCBE187BFE0605.mft
Manifest number:          1A
Signing time:             Sun 25 Jan 2026 08:55:30 +0000
Manifest this update:     Sun 25 Jan 2026 08:50:30 +0000
Manifest next update:     Mon 26 Jan 2026 12:24:30 +0000
Files and hashes:         1: 827A5BDF8ACAA1E616F6213D1CDCBE187BFE0605.crl (hash: WoNmsxFCbrjsBsBdn+eXy9oGw8DJlZKiq96h64Kw9Ss=)
                          2: 323030313a3637633a3563303a3a2f34382d3438203d3e20323135373630.roa (hash: kIRA//Sw9bWgaot2FQ6UbnKhzjLroyGFy2eWLT662TU=)
                          3: 323030313a3637633a3563303a3a2f34382d3438203d3e203331383938.roa (hash: h30Dg7Gto1CP4CxRRR4O2MZbtOznQz3YpLb+FDGoD+A=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/0/827A5BDF8ACAA1E616F6213D1CDCBE187BFE0605.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/0/827A5BDF8ACAA1E616F6213D1CDCBE187BFE0605.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gnpb34rKoeYW9iE9HNy-GHv-BgU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:21:91:ad:7f:f1:7b:b0:12:c0:ef:64:e3:56:ad:a9:88:3b:d8:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=827a5bdf8acaa1e616f6213d1cdcbe187bfe0605
        Validity
            Not Before: Jan 25 08:50:30 2026 GMT
            Not After : Jan 26 12:24:30 2026 GMT
        Subject: CN=A7E002DDBABF270D7BCE239DB945DAFF1B11F2CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6c:8a:47:6c:29:46:b9:81:ca:99:22:55:ed:
                    b4:c1:6a:e7:08:43:11:93:17:df:13:e4:79:eb:bd:
                    87:a9:6d:b5:69:db:95:74:98:a8:cc:01:49:a6:33:
                    78:e9:47:24:22:3b:a4:bf:c7:46:75:2f:62:19:3e:
                    79:d5:6e:37:93:94:fe:6c:ec:7a:bf:d1:b1:b1:03:
                    da:16:a7:ee:aa:20:f3:df:1f:b8:9b:69:ba:78:07:
                    97:4e:01:b7:dd:39:93:87:02:16:e3:0a:71:0f:ea:
                    11:d0:35:ce:b6:f0:f5:5f:79:33:15:11:27:4d:da:
                    e3:84:45:d2:1e:c4:9f:37:eb:8f:9c:a8:fd:59:02:
                    a5:fc:19:c3:90:2c:9c:04:f1:47:d9:80:ce:9f:f9:
                    c6:5b:50:6c:63:72:56:4a:1a:8f:af:02:9b:fb:83:
                    dd:8d:47:48:70:c3:dc:66:57:29:0d:55:12:12:03:
                    95:8f:14:65:0a:51:7c:17:82:4d:a9:d6:20:8a:5c:
                    52:ad:a7:7c:c4:fd:20:5f:25:07:87:42:78:3c:18:
                    a4:12:ef:81:ed:9b:9d:32:50:3c:90:ca:5b:38:d8:
                    52:7b:6c:d5:21:73:97:40:1a:9b:0d:98:fc:c0:af:
                    6a:9f:04:6a:d4:b0:5c:15:9c:e2:52:6f:d3:ed:1a:
                    54:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:E0:02:DD:BA:BF:27:0D:7B:CE:23:9D:B9:45:DA:FF:1B:11:F2:CB
            X509v3 Authority Key Identifier:
                keyid:82:7A:5B:DF:8A:CA:A1:E6:16:F6:21:3D:1C:DC:BE:18:7B:FE:06:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/0/827A5BDF8ACAA1E616F6213D1CDCBE187BFE0605.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnpb34rKoeYW9iE9HNy-GHv-BgU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/0/827A5BDF8ACAA1E616F6213D1CDCBE187BFE0605.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:03:be:f6:62:c0:05:ca:0c:1b:51:19:ac:e0:0d:82:32:e4:
         67:9a:39:64:c8:fb:24:d0:5b:37:ed:04:a4:80:a6:5d:83:db:
         64:d3:25:4b:5c:c5:bb:20:e2:75:cc:93:ed:85:42:b8:66:ba:
         dd:7e:63:72:84:e4:38:29:7c:ef:d9:58:d3:51:c7:74:e3:11:
         6b:51:0e:17:4c:c8:88:68:c5:e0:9e:ab:d2:45:0c:fa:7f:52:
         81:df:52:f1:a4:8e:e5:5b:7d:df:ab:fd:c9:33:2d:bf:46:75:
         c1:a3:66:67:dd:8b:2a:41:0c:3c:c3:2e:af:cc:c1:c0:be:f6:
         5d:93:ad:4d:03:fd:4a:f9:85:c9:c0:fd:bd:09:05:22:af:fe:
         ee:49:91:0b:74:f4:2c:e2:8f:b1:d3:6a:08:a1:73:bd:d5:0b:
         c2:8a:b5:0c:05:8d:f0:3f:16:ab:3d:f4:67:71:1d:a4:ac:cd:
         ed:0e:30:db:e2:f0:28:1e:f1:af:86:ce:59:fa:1c:e4:e6:a8:
         b6:8f:cb:1c:0b:b5:20:41:f0:04:93:9c:53:25:b2:82:60:f1:
         b3:96:5d:23:33:6b:05:2f:c9:a8:f8:9f:cb:de:15:60:97:4b:
         d5:c1:2d:c7:53:61:8c:19:11:dd:d5:b3:7b:68:52:85:79:c2:
         30:21:87:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:13:25 2026 by rpki-client