This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.mft
File:                     879280A7D9E6DDDDCCB29E9A77819D5CE3823185.mft (raw, json)
Hash identifier:          6EqcbDlqBt9qVyWOTdPFr08meKijcehq45Yjsdiv5SQ=
Subject key identifier:   6C:2F:BA:0F:F0:09:04:F6:67:BC:FE:23:77:E7:CB:DA:F8:F0:22:A5
Authority key identifier: 87:92:80:A7:D9:E6:DD:DD:CC:B2:9E:9A:77:81:9D:5C:E3:82:31:85
Certificate issuer:       /CN=879280A7D9E6DDDDCCB29E9A77819D5CE3823185
Certificate serial:       16A4BD3C9509606DF3C34047F5626DAFF296CC63
Authority info access:    rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.mft
Manifest number:          0C
Signing time:             Sat 17 Jan 2026 04:50:16 +0000
Manifest this update:     Sat 17 Jan 2026 04:45:16 +0000
Manifest next update:     Sun 18 Jan 2026 06:48:16 +0000
Files and hashes:         1: 326130623a346530373a6330303a3a2f33382d3338203d3e203331383938.roa (hash: NzwfYz1RcrTw4DN+eHbiSUaQcCM+wfLgTJxkGWBbKjU=)
                          2: 879280A7D9E6DDDDCCB29E9A77819D5CE3823185.crl (hash: Saa7XS+pTXNb48hOoekjjrqvRgoNR7dwtjPciYPZM1w=)
                          3: 326130623a346530373a6330303a3a2f33382d3438203d3e203136353039.roa (hash: pYwWKSR7kRM0KTnORj3mN0CwUdnav79KeLH8+zaHrio=)
                          4: 326130623a346530373a6330313a3a2f34382d3438203d3e20333936393832.roa (hash: amuSE4i9t9DaOJdYKo1/xaDKOQ7B4vsylmXS8WFFM8U=)
                          5: 326130623a346530373a6330303a3a2f33382d3438203d3e203134363138.roa (hash: iEYO5puyDd3JtuHWApK94siOE8CIhNdp34ccmJr583Q=)
                          6: 326130623a346530373a6330303a3a2f33382d3338203d3e20333936393832.roa (hash: khFQaDJH0Dxp6+y0T5GtiIZzJKeSYsTI8bMAtlaM5bY=)
                          7: 326130623a346530373a6330303a3a2f33382d3438203d3e20323135373630.roa (hash: YPrQ7rMdq3JvlF7MZ9xUnQFGrFDCIgYUVgYATMFPJvs=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.mft
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.cer
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 Jan 2026 23:02:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:a4:bd:3c:95:09:60:6d:f3:c3:40:47:f5:62:6d:af:f2:96:cc:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=879280A7D9E6DDDDCCB29E9A77819D5CE3823185
        Validity
            Not Before: Jan 17 04:45:16 2026 GMT
            Not After : Jan 18 06:48:16 2026 GMT
        Subject: CN=6C2FBA0FF00904F667BCFE2377E7CBDAF8F022A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:db:2c:d7:8e:e4:83:57:20:9d:06:1f:90:29:
                    2c:ae:22:c3:70:13:5a:9c:10:7c:58:d6:0f:75:2e:
                    42:01:eb:44:7c:91:86:de:58:a2:88:d4:ea:9f:f5:
                    da:0c:04:db:a6:70:b8:06:2a:8e:fe:5d:10:33:95:
                    5c:70:95:ad:b4:93:c8:8e:77:ee:97:45:68:f5:ea:
                    11:fd:9c:61:57:e1:f8:bb:a3:29:83:44:4d:7c:bb:
                    38:9b:eb:62:64:b5:d1:6a:21:08:cd:5a:fc:c6:5e:
                    d6:77:05:e1:68:b5:b9:9a:7e:9f:4d:b7:0c:4f:9f:
                    8d:41:e6:79:1e:83:af:e5:af:0c:79:96:9e:0c:13:
                    c9:f4:09:90:53:9b:f1:33:fe:da:f2:6e:e4:3b:47:
                    79:a3:85:28:08:76:e3:40:71:ba:8c:66:47:3b:b9:
                    04:86:0e:06:d6:71:7b:dd:a3:27:34:e1:48:d9:12:
                    da:a4:bb:55:fa:33:0e:08:d3:83:b8:eb:22:bf:e7:
                    ca:54:6b:75:0f:a0:9e:49:ad:cb:c2:3d:3b:c4:c8:
                    eb:09:61:84:0e:ff:31:e5:bd:17:d4:75:58:8b:36:
                    36:58:fd:5c:69:3e:9f:1b:79:d7:2b:17:0b:c1:c2:
                    86:f9:9a:97:97:b7:dc:bc:88:3f:75:11:46:0c:33:
                    06:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:2F:BA:0F:F0:09:04:F6:67:BC:FE:23:77:E7:CB:DA:F8:F0:22:A5
            X509v3 Authority Key Identifier:
                keyid:87:92:80:A7:D9:E6:DD:DD:CC:B2:9E:9A:77:81:9D:5C:E3:82:31:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:53:a3:f8:0a:23:47:ed:45:f2:ef:93:ba:e5:e6:89:5d:89:
         93:7c:b3:b8:72:98:41:d6:f7:86:7a:e7:3f:f4:dd:90:97:3c:
         eb:2e:95:47:28:e0:57:40:a6:80:37:b8:32:1b:57:56:0f:38:
         1d:93:e2:0a:6d:92:23:7b:ed:28:8b:95:ec:52:c6:e2:da:da:
         4f:85:fa:e6:c6:a3:8d:04:3c:f4:0d:65:47:05:3f:e9:6b:8a:
         81:d1:c2:c4:d6:b1:a0:0a:82:e6:53:0e:27:55:a4:76:a7:d0:
         ec:b9:b0:93:89:5c:eb:18:f2:44:14:7c:4b:d3:79:08:2f:a1:
         65:af:82:6f:18:d4:4a:46:ed:20:90:69:b2:43:47:19:72:14:
         2d:6e:bd:c4:45:5d:19:21:a1:29:9b:ff:ab:99:6f:dc:b2:b7:
         8d:a0:ca:70:d4:2e:c2:2d:9a:55:23:d3:f3:13:71:fb:bd:fc:
         69:93:d1:aa:6c:3f:00:a0:28:ad:d6:a6:68:5d:c3:00:02:56:
         ad:53:e6:2c:ca:c9:88:63:0a:1d:71:ff:75:25:df:9e:fa:e1:
         4c:a9:95:8f:80:6c:1e:13:2e:4a:61:4f:be:c1:ec:6b:c0:8b:
         20:ef:07:c5:9d:52:ee:98:ab:e3:31:78:26:09:19:99:c0:2b:
         9e:8c:6f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 17 08:38:25 2026 by rpki-client