This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.mft
File:                     258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.mft (raw, json)
Hash identifier:          fgK8wmXVM7fZEGgD0jNYS8Ftd/AEAPEdXZi/OLbA3/U=
Subject key identifier:   6C:D0:19:94:A8:32:4D:31:96:64:77:49:BA:18:A1:32:51:D0:4C:FC
Authority key identifier: 25:8D:1C:E0:CB:76:A9:86:E5:6C:7A:90:A6:6B:A7:DC:72:F5:95:2A
Certificate issuer:       /CN=258D1CE0CB76A986E56C7A90A66BA7DC72F5952A
Certificate serial:       0B2223836B06D06A21863A522A9E6639BEED3A05
Authority info access:    rsync://rpki.axivora.net/repo/Axivora-Net/2/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.mft
Manifest number:          95
Signing time:             Tue 10 Feb 2026 20:03:40 +0000
Manifest this update:     Tue 10 Feb 2026 19:58:40 +0000
Manifest next update:     Wed 11 Feb 2026 20:55:40 +0000
Files and hashes:         1: 326131343a373538303a3737303a3a2f34342d3438203d3e20323133383931.roa (hash: woLwL0VEJzWnepdsx0zvpMFwwJXef1WYeYkaz1KcaHg=)
                          2: 326131343a373538303a3737353a3a2f34382d3438203d3e203136353039.roa (hash: LbzBckLICgXq7UKYaeP/CXL1PXD0JCr+a84omRC/7VY=)
                          3: 326131343a373538303a3737373a3a2f34382d3438203d3e203134363138.roa (hash: RTK2m9QZnNSKC5ZVcuz7+tdRZKTs7/hzcAu/hXd2ZTc=)
                          4: 326131343a373538303a3737373a3a2f34382d3438203d3e203136353039.roa (hash: xvnqSl1qLoVMIEzXN9sXRb87iGsN7N/pVeZWynFQufE=)
                          5: 258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.crl (hash: TTDkPZCAiW5F9/Jh5i8T8NvFS+ispweS37YCxz3x+Ko=)
                          6: 326131343a373538303a3737353a3a2f34382d3438203d3e203134363138.roa (hash: MfUF2laHihcgibdMapv7JAFGkNEIH6JIdDfIW/lhqFE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.mft
                          rsync://rpki.axivora.net/repo/Axivora-Net/2/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.cer
                          rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.crl
                          rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Feb 2026 17:43:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:22:23:83:6b:06:d0:6a:21:86:3a:52:2a:9e:66:39:be:ed:3a:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=258D1CE0CB76A986E56C7A90A66BA7DC72F5952A
        Validity
            Not Before: Feb 10 19:58:40 2026 GMT
            Not After : Feb 11 20:55:40 2026 GMT
        Subject: CN=6CD01994A8324D3196647749BA18A13251D04CFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:87:cb:eb:ac:ab:be:7d:11:f0:41:02:91:a9:
                    f0:0f:92:49:19:d0:c1:9d:c2:78:9d:50:4d:0e:18:
                    d5:f1:8d:cc:07:2b:3c:e8:6b:da:42:b6:2c:86:22:
                    d4:8f:38:b7:8d:57:96:12:b0:2e:d7:6e:b5:7c:de:
                    ad:71:73:4f:ab:39:71:e5:c6:29:6b:fb:82:33:8e:
                    7b:cc:78:9c:01:0f:16:9e:46:33:53:92:18:f6:a1:
                    aa:8f:22:8b:12:ef:f4:c7:b0:14:cf:7c:6d:df:30:
                    a5:22:a0:87:a0:60:12:3b:4e:df:b7:a1:37:8d:49:
                    54:5e:db:fd:94:63:6b:29:9d:a8:c1:05:a6:30:6c:
                    9b:dc:59:a6:a8:c6:aa:b8:20:17:07:db:35:14:d7:
                    3e:20:56:09:47:25:75:7b:a3:20:9c:64:40:4f:de:
                    94:05:68:00:1a:22:7e:35:d7:0a:be:d7:70:ff:ea:
                    36:f5:db:f1:4c:39:59:8d:bf:fa:60:4d:6d:ab:d7:
                    88:1c:e5:d6:35:00:d7:5c:5c:9d:67:1f:52:1b:00:
                    31:68:01:a3:e5:95:3b:3d:d2:37:73:c0:51:9f:bc:
                    0e:67:d4:38:e9:80:cf:82:61:6a:31:5f:9f:c2:d3:
                    b4:7e:7e:e9:50:d1:10:55:76:fe:4e:9c:f2:1f:8a:
                    9e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:D0:19:94:A8:32:4D:31:96:64:77:49:BA:18:A1:32:51:D0:4C:FC
            X509v3 Authority Key Identifier:
                keyid:25:8D:1C:E0:CB:76:A9:86:E5:6C:7A:90:A6:6B:A7:DC:72:F5:95:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.axivora.net/repo/Axivora-Net/2/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03fd0b76-7243-4b26-9760-cc07b94bfe23/1/258D1CE0CB76A986E56C7A90A66BA7DC72F5952A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:3f:b1:75:b4:3f:fc:af:ff:ba:ee:93:7d:20:fc:46:a6:08:
         10:51:27:7e:f0:c3:81:7b:6b:ac:dd:04:25:c5:3a:5e:19:16:
         e7:a4:5f:b2:14:97:11:ab:b1:9a:bd:86:e4:b8:b3:51:bc:68:
         5a:51:1c:c9:6c:30:d5:8f:f1:44:d1:a9:05:52:fd:63:d8:94:
         4d:8a:22:94:de:08:68:7f:17:4a:f4:a1:51:24:68:2d:2e:07:
         5b:42:cf:c9:d8:8f:5b:d2:1e:f1:08:58:3c:40:f6:88:7d:ac:
         21:bc:05:eb:d7:ed:32:f9:74:56:54:47:ba:67:75:7f:49:f6:
         fd:45:55:c2:f7:44:86:bc:bd:a0:26:31:e2:6f:39:f6:a6:23:
         79:d0:81:70:69:ea:f0:0a:9a:c4:06:4c:d7:40:27:5c:a3:51:
         17:cb:a9:2c:18:a0:f4:0c:43:08:11:e4:77:72:b2:74:ce:ef:
         3a:4c:60:8b:ed:3b:5f:6f:e5:0a:54:3d:35:4d:76:3f:7b:fa:
         3c:09:1e:2d:cf:a0:b4:1c:4d:b7:12:e3:73:96:05:44:88:50:
         c1:2a:3b:87:bf:db:0f:e2:fa:4e:41:09:5f:e3:7a:74:fe:ce:
         95:63:48:00:57:76:37:11:91:08:13:5e:5e:45:06:e2:69:4c:
         2d:59:44:95
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgIUCyIjg2sG0GohhjpSKp5mOb7tOgUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjU4RDFDRTBDQjc2QTk4NkU1NkM3QTkwQTY2QkE3REM3
MkY1OTUyQTAeFw0yNjAyMTAxOTU4NDBaFw0yNjAyMTEyMDU1NDBaMDMxMTAvBgNV
BAMTKDZDRDAxOTk0QTgzMjREMzE5NjY0Nzc0OUJBMThBMTMyNTFEMDRDRkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzh8vrrKu+fRHwQQKRqfAPkkkZ
0MGdwnidUE0OGNXxjcwHKzzoa9pCtiyGItSPOLeNV5YSsC7XbrV83q1xc0+rOXHl
xilr+4IzjnvMeJwBDxaeRjNTkhj2oaqPIosS7/THsBTPfG3fMKUioIegYBI7Tt+3
oTeNSVRe2/2UY2spnajBBaYwbJvcWaaoxqq4IBcH2zUU1z4gVglHJXV7oyCcZEBP
3pQFaAAaIn411wq+13D/6jb12/FMOVmNv/pgTW2r14gc5dY1ANdcXJ1nH1IbADFo
AaPllTs90jdzwFGfvA5n1DjpgM+CYWoxX5/C07R+fulQ0RBVdv5OnPIfip7VAgMB
AAGjggJXMIICUzAdBgNVHQ4EFgQUbNAZlKgyTTGWZHdJuhihMlHQTPwwHwYDVR0j
BBgwFoAUJY0c4Mt2qYblbHqQpmun3HL1lSowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDNmZDBiNzYtNzI0My00YjI2LTk3NjAtY2MwN2I5NGJm
ZTIzLzEvMjU4RDFDRTBDQjc2QTk4NkU1NkM3QTkwQTY2QkE3REM3MkY1OTUyQS5j
cmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3luYzovL3Jwa2kuYXhp
dm9yYS5uZXQvcmVwby9BeGl2b3JhLU5ldC8yLzI1OEQxQ0UwQ0I3NkE5ODZFNTZD
N0E5MEE2NkJBN0RDNzJGNTk1MkEuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI
KwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9z
aXRvcnkvMDNmZDBiNzYtNzI0My00YjI2LTk3NjAtY2MwN2I5NGJmZTIzLzEvMjU4
RDFDRTBDQjc2QTk4NkU1NkM3QTkwQTY2QkE3REM3MkY1OTUyQS5tZnQwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEB
AHs/sXW0P/yv/7ruk30g/EamCBBRJ37ww4F7a6zdBCXFOl4ZFuekX7IUlxGrsZq9
huS4s1G8aFpRHMlsMNWP8UTRqQVS/WPYlE2KIpTeCGh/F0r0oVEkaC0uB1tCz8nY
j1vSHvEIWDxA9oh9rCG8BevX7TL5dFZUR7pndX9J9v1FVcL3RIa8vaAmMeJvOfam
I3nQgXBp6vAKmsQGTNdAJ1yjURfLqSwYoPQMQwgR5HdysnTO7zpMYIvtO19v5QpU
PTVNdj97+jwJHi3PoLQcTbcS43OWBUSIUMEqO4e/2w/i+k5BCV/jenT+zpVjSABX
djcRkQgTXl5FBuJpTC1ZRJU=
-----END CERTIFICATE-----
Generated at Wed Feb 11 05:14:34 2026 by rpki-client