This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.mft
File:                     B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.mft (raw, json)
Hash identifier:          /Mofn38qPWP75OmxtsXajZFS9Gmwaf6Gl2+2gi3zMik=
Subject key identifier:   5B:01:40:91:0E:37:AA:A0:72:36:FF:26:15:5F:B4:03:C7:F5:8F:6B
Authority key identifier: B5:23:00:C5:AE:62:78:B6:08:E2:31:E4:31:C3:DD:0E:AF:6A:6B:C2
Certificate issuer:       /CN=B52300C5AE6278B608E231E431C3DD0EAF6A6BC2
Certificate serial:       1007E2EF921D66679227DB00BA54119A9C203268
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.mft
Manifest number:          36
Signing time:             Tue 20 Jan 2026 15:05:02 +0000
Manifest this update:     Tue 20 Jan 2026 15:00:02 +0000
Manifest next update:     Wed 21 Jan 2026 16:48:02 +0000
Files and hashes:         1: 326131343a373538313a393966323a3a2f34382d3438203d3e20323134333434.roa (hash: Oe9b7D8DtLCyHfTEelgxQzMm3GoJ4G9/0gwwATaJfro=)
                          2: 326131343a373538313a393966333a3a2f34382d3438203d3e20323134333434.roa (hash: J6emFQdlETu7H0STfMe+srRexcrGlCk0y+BgTI9eJls=)
                          3: 326131343a373538313a393966313a3a2f34382d3438203d3e20323134333434.roa (hash: uczfpozVS217kWRATgpEenuL/t1nbJiCmQMwvAEpV8o=)
                          4: B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.crl (hash: xuW+UEZ3G/CTdK0lIuWv1Ku28Cu/Gy4Nk9r+GBDPxwg=)
                          5: 326131343a373538313a393930333a3a2f34382d3438203d3e20323134333434.roa (hash: odpWIoGfrHyjA/EqLrY/tj6kKgasd1C7YcR9JizUkBA=)
                          6: 326131343a373538313a393966353a3a2f34382d3438203d3e20323134333434.roa (hash: HcA7KRdnBWzY7hEKVhGFuUdyfwcYU7b6FuC/duUcRFU=)
                          7: 326131343a373538313a393930323a3a2f34382d3438203d3e20323134333434.roa (hash: TyFBqgR7vYeMd4/BuVueO5zwkcDAg7G5uk0/d+OPki0=)
                          8: 326131343a373538313a393930313a3a2f34382d3438203d3e20323134333434.roa (hash: a3vn+r3Xd1ZweP+VfXPkybQsxnlpFwKhPGkq1Aja1ws=)
                          9: 326131343a373538313a393938383a3a2f34382d3438203d3e20323134333434.roa (hash: dhPIT0Huo/8bMcCCD9CENzV8Oc7GRGv2lkOyyJSz4lY=)
                          10: 326131343a373538313a393930343a3a2f34382d3438203d3e20323134333434.roa (hash: JSmiAu7ed33+J2eg2ZQ/ocsiovRypTOUdvXbpKPSbI8=)
                          11: 326131343a373538313a393930353a3a2f34382d3438203d3e20323134333434.roa (hash: WvJ+nlXPCuTRZnP7e6XF03QrjAocsMrvYbQ3ZQ/eNBY=)
                          12: 326131343a373538313a393966343a3a2f34382d3438203d3e20323134333434.roa (hash: spTh8DstCVqtG/UUp5lMqUt7m9/HXGTEzcFQEa7vRbE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Jan 2026 15:30:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:07:e2:ef:92:1d:66:67:92:27:db:00:ba:54:11:9a:9c:20:32:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B52300C5AE6278B608E231E431C3DD0EAF6A6BC2
        Validity
            Not Before: Jan 20 15:00:02 2026 GMT
            Not After : Jan 21 16:48:02 2026 GMT
        Subject: CN=5B0140910E37AAA07236FF26155FB403C7F58F6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b8:bb:00:45:60:42:ff:81:a6:b4:bd:02:0f:
                    d9:a7:74:94:b1:ea:a6:2d:0f:d9:5c:98:68:16:13:
                    ff:f1:37:73:3d:4c:08:24:6b:ba:1b:05:34:31:71:
                    10:08:cc:31:60:a6:cc:cb:2f:3c:67:94:a9:79:e8:
                    da:2b:51:94:6d:ad:0a:b3:77:3f:24:e8:13:5f:70:
                    30:7f:f2:b6:dc:48:bb:20:9c:55:b8:d2:6c:39:ab:
                    38:0f:4b:be:db:b2:b8:52:83:37:7d:d8:b9:80:3a:
                    8f:bf:ac:e1:49:e2:4f:5b:22:38:c9:89:c4:5e:92:
                    b4:fa:ea:f5:a0:eb:8e:f6:c9:86:cd:e5:4d:fb:8b:
                    fe:36:77:d2:b5:a8:76:94:84:88:20:df:0c:1e:da:
                    ce:3e:57:5e:4a:ed:c8:85:a2:4a:db:04:37:e3:a9:
                    54:bf:67:5b:22:f9:3f:38:b2:da:4a:3b:8f:d7:85:
                    18:b9:eb:87:ec:e0:5c:5e:cf:40:26:19:80:65:ef:
                    4e:92:85:98:2c:c2:3c:42:d5:34:19:3d:ee:27:1a:
                    23:13:47:f7:55:19:bd:fe:29:2b:8b:9a:3e:54:94:
                    78:47:a5:f8:4d:29:6f:ce:ae:09:be:40:96:e1:7e:
                    c3:6a:bf:1d:da:a9:82:fb:c3:62:75:da:3a:a3:47:
                    41:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:01:40:91:0E:37:AA:A0:72:36:FF:26:15:5F:B4:03:C7:F5:8F:6B
            X509v3 Authority Key Identifier:
                keyid:B5:23:00:C5:AE:62:78:B6:08:E2:31:E4:31:C3:DD:0E:AF:6A:6B:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09718f08-bb39-4a09-a4c0-1f40248a6d15/3/B52300C5AE6278B608E231E431C3DD0EAF6A6BC2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:5f:16:d5:a9:03:a1:78:6a:74:e3:0d:19:31:ff:33:1c:ce:
         40:fb:f3:c4:83:2a:8b:b0:f0:cd:b1:82:94:76:32:d8:20:3a:
         d8:c3:c9:ec:cc:f7:40:f3:76:d6:d2:75:1e:4c:32:0b:3c:2d:
         72:01:87:51:ee:c1:f6:08:5e:e1:e8:52:07:dd:bd:75:47:58:
         49:5b:24:c1:45:a3:cb:c4:c1:67:ab:cc:33:ef:54:08:5f:b7:
         24:d2:d2:3c:72:79:75:47:0f:f4:95:d4:32:ff:00:e2:32:5c:
         12:30:31:00:c6:bf:07:02:bf:c6:f0:ff:04:2b:44:90:94:d9:
         38:1a:6f:df:80:14:eb:95:f6:48:33:0a:7e:7d:ec:71:50:35:
         79:1c:ad:5d:d4:10:0b:ba:62:7a:52:d4:c2:28:f4:b5:66:bb:
         39:4a:5a:2c:ae:84:73:e0:70:c7:5c:80:02:ea:06:5d:00:1c:
         d8:e2:42:c8:0b:74:79:b6:bf:09:39:4b:01:db:64:48:c6:0e:
         2d:11:5d:2c:94:99:4e:a5:da:95:65:a8:c0:1c:dd:04:6e:06:
         71:10:f3:a6:1e:66:5b:e6:e1:1a:ae:d1:09:94:3a:87:32:a4:
         c5:1e:36:37:92:a0:35:7b:52:84:41:4e:65:65:3b:36:6a:af:
         58:51:d6:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 23:49:50 2026 by rpki-client