This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft
File:                     8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft (raw, json)
Hash identifier:          aKnx52y+ZP578xNESnlGLq2aNCZHF7dxPI0MpcF8JT4=
Subject key identifier:   02:8E:40:0C:F2:8C:A0:68:A3:A2:A7:DE:1E:B6:E1:82:DA:2D:7D:51
Authority key identifier: 8F:BA:B1:3D:B1:23:C5:D6:3D:BB:C5:50:D2:14:B3:E1:0C:09:19:98
Certificate issuer:       /CN=8fbab13db123c5d63dbbc550d214b3e10c091998
Certificate serial:       7D1B667B7B2C6E53429ABFC21009FF2C1B00006E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j7qxPbEjxdY9u8VQ0hSz4QwJGZg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft
Manifest number:          0189
Signing time:             Tue 13 Jan 2026 01:27:15 +0000
Manifest this update:     Tue 13 Jan 2026 01:22:15 +0000
Manifest next update:     Wed 14 Jan 2026 01:50:15 +0000
Files and hashes:         1: 8FBAB13DB123C5D63DBBC550D214B3E10C091998.crl (hash: MhnrLRhHWHDMwJzoLszOEwnvbNr5AlCuoFLAVxneV3s=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j7qxPbEjxdY9u8VQ0hSz4QwJGZg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Jan 2026 21:26:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:1b:66:7b:7b:2c:6e:53:42:9a:bf:c2:10:09:ff:2c:1b:00:00:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fbab13db123c5d63dbbc550d214b3e10c091998
        Validity
            Not Before: Jan 13 01:22:15 2026 GMT
            Not After : Jan 14 01:50:15 2026 GMT
        Subject: CN=028E400CF28CA068A3A2A7DE1EB6E182DA2D7D51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:50:12:07:0b:87:bf:31:92:ab:ea:65:92:07:
                    3e:7c:5a:1c:ca:18:68:d6:dc:99:cd:b4:ad:f9:e4:
                    d5:7f:93:e9:fc:51:4d:69:b0:27:26:f8:89:d5:48:
                    43:6b:53:10:1c:3b:70:fc:3d:c8:f8:64:20:20:d0:
                    0a:76:be:00:44:30:07:d0:90:f1:5a:4c:78:8d:ab:
                    f1:61:5c:fc:b1:45:0f:d2:b7:d6:f5:0e:5a:a8:17:
                    fa:53:db:ae:7f:34:5e:c9:fd:48:9e:c8:d6:6f:f6:
                    84:73:02:08:9b:50:70:64:dd:a2:4c:93:fb:63:21:
                    26:3f:61:3a:fb:a1:30:00:e4:78:83:0d:a2:3c:ea:
                    03:f1:0f:29:a4:f2:5b:26:30:f5:6e:0f:5a:d5:bd:
                    f5:aa:4c:0d:0b:7e:e3:5a:95:d5:b5:a5:1b:3a:0b:
                    05:8f:44:bb:8e:cb:01:52:db:7d:5a:eb:c1:75:b7:
                    4b:7f:3a:b1:fe:36:fc:91:ab:ff:0b:1c:c1:5b:b7:
                    ea:48:3d:70:f6:21:07:f6:37:0f:a3:d3:c4:37:ed:
                    6b:46:fe:73:c9:c3:69:bb:33:61:88:98:55:13:63:
                    cd:38:83:0c:2c:83:d2:bd:08:3e:e6:ea:43:b0:74:
                    4c:2c:ba:8f:3f:9e:ec:80:09:96:7a:e6:6d:7b:86:
                    6a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:8E:40:0C:F2:8C:A0:68:A3:A2:A7:DE:1E:B6:E1:82:DA:2D:7D:51
            X509v3 Authority Key Identifier:
                keyid:8F:BA:B1:3D:B1:23:C5:D6:3D:BB:C5:50:D2:14:B3:E1:0C:09:19:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7qxPbEjxdY9u8VQ0hSz4QwJGZg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b54fd736-bbc0-4882-84e9-44cc86795dad/0/8FBAB13DB123C5D63DBBC550D214B3E10C091998.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:4e:72:74:ae:56:76:dc:7c:af:bb:7f:bc:5c:96:61:e4:d9:
         bd:8e:5d:73:81:27:39:04:22:88:14:1b:77:49:54:49:53:42:
         60:1b:6d:34:f4:dd:c7:20:ad:be:78:a5:0e:9d:92:82:1c:60:
         bb:66:a1:87:67:f5:8a:d9:25:12:a3:5e:fb:c2:f7:d0:7b:a0:
         f8:80:95:a0:8e:ab:4e:ed:96:6b:04:b9:c5:b6:46:11:a7:ba:
         03:7a:12:fc:e6:46:3f:7b:9b:4c:cb:63:37:e6:52:74:c7:cc:
         79:4c:d8:10:1d:54:bb:d1:63:e0:89:27:67:ad:4d:d2:79:fa:
         c7:8c:47:c2:c1:f1:29:ba:37:14:50:98:9e:96:12:62:01:26:
         1e:b3:0f:68:0e:3b:d0:aa:76:9c:15:e6:59:9d:68:17:54:50:
         8a:04:ed:93:6e:6c:23:01:b5:ac:3f:07:21:43:cc:34:1b:55:
         89:39:3f:2d:c0:0e:9c:14:b6:f3:fc:58:76:74:27:f7:ec:20:
         cb:9e:74:7d:99:08:7a:bc:f8:1b:5e:17:b1:e0:a1:bc:58:a8:
         c7:23:86:fc:67:18:4d:81:54:25:a4:84:a8:c2:ad:e0:d7:70:
         9e:5a:ad:eb:17:eb:4e:13:2a:1b:bf:33:f7:53:76:ed:f0:07:
         34:e9:7c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 05:08:57 2026 by rpki-client