This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
File:                     4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft (raw, json)
Hash identifier:          09k/9pMiJn8HUP9gvQHUVqJ9Y1Z7sYyI81i9lxA9fEQ=
Subject key identifier:   B0:C7:5A:7B:83:F5:9F:DB:CE:BE:AF:10:04:DE:FE:50:A7:5B:17:DF
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Certificate issuer:       /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial:       75245BB1185D13374E16D999B536CF2333355BA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
Manifest number:          93
Signing time:             Sat 17 Jan 2026 14:06:57 +0000
Manifest this update:     Sat 17 Jan 2026 14:01:57 +0000
Manifest next update:     Sun 18 Jan 2026 17:04:57 +0000
Files and hashes:         1: 352e3139392e33362e302f32332d3234203d3e20383334.roa (hash: e6C7uP4SsF+Xwc+yfszvXNHVIvJ/eTTJStryEC703oI=)
                          2: 3231322e37342e33382e302f32342d3234203d3e203235313938.roa (hash: K8Znumtkhpgx8/8zWqU2xEKd95ssp8EE1Utb/XIZytM=)
                          3: 3231322e37342e34352e302f32342d3234203d3e203437333737.roa (hash: Zn3Y7A6Y/crPUFJOMqvQM06o0jPXCanmxrz4b7BfJgg=)
                          4: 3231322e37342e34302e302f32332d3234203d3e20383334.roa (hash: 60Q6kai3DL4OM0He9EQCHNNPJEIcNXfwVlwwfRWChBo=)
                          5: 352e3139392e31342e302f32342d3234203d3e20383334.roa (hash: Y/R322fr3rA/8G1jlm5vYU4HllA9nyOgFjszd7MIowI=)
                          6: 352e3139392e33392e302f32342d3234203d3e20323035383836.roa (hash: G0dHN+CXIo4pUkp/sYtiWtOv7C+87LhSJVHOBYplH2Q=)
                          7: 352e3139392e35322e302f32322d3234203d3e20383334.roa (hash: yOMF9ncpMbXqxqFVgp30gZwEFTJaHtod63YV8FljE7Y=)
                          8: 352e3139392e35382e302f32332d3234203d3e20383334.roa (hash: bYKO5GhxFu4JhtL9IXBT2oKyXXOktgK0B3EYfKoxhHU=)
                          9: 352e3139392e32382e302f32342d3234203d3e20383334.roa (hash: VKO1/Y2P39P54zppO8RILo/fVZmfRKe6TarQjjwDzwo=)
                          10: 3231322e37342e34322e302f32342d3234203d3e203633313939.roa (hash: PVz9YVZusx+1b5fb1K/vFIYrWyV6GgBrvs/6rRp7xss=)
                          11: 352e3139392e31322e302f32332d3234203d3e20383334.roa (hash: w5fYhqiORwySyVzI+lwW/lcap/TpvK9njxSZiAI7jCo=)
                          12: 352e3139392e31352e302f32342d3234203d3e203230343733.roa (hash: oVkiCPiNJRJM/W+z3ndD4pSoOtGs4Qbrd83E+p9HcJU=)
                          13: 3231322e37342e33392e302f32342d3234203d3e20383334.roa (hash: TErNuCdfHQhoAILA4l/UAjn2kTbrQHTLOi04dJ1xl1U=)
                          14: 4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl (hash: WBK9tJ/JnWNB2VozclqSuJ0/JnrX3JVo62CiLC7IlKY=)
                          15: 3231322e37342e33342e302f32332d3234203d3e20383334.roa (hash: ACX+HxN8QMuRZB658dmxQfyn1r1VpG173DoZihn2l6o=)
                          16: 352e3139392e35372e302f32342d3234203d3e20383334.roa (hash: rCo+A1qjsNQbFaYplyy+LHgKA18IbzpEJOpvqgcvHf0=)
                          17: 352e3139392e31382e302f32342d3234203d3e2039333034.roa (hash: 9gSMoUpdN2/ZGyzYVi4Ib3KeLcwk6C4mPYoQBhbeAa0=)
                          18: 352e3139392e34302e302f32312d3234203d3e20383334.roa (hash: RhmwnUF0evkCBGvNW9Pxo1FbNx1Hwmt7OynFlIb8KEI=)
                          19: 3138352e3136392e3132302e302f32332d3234203d3e20383334.roa (hash: g0Lo9rLGrvw5TqCf+JwkggNN5/xusHvbCCJ5lO3yKYM=)
                          20: 352e3139392e32362e302f32332d3234203d3e20383334.roa (hash: 1QXdd6mBmXVNffnrIU1AUy68V+ojS5R+WxPDTzSdhBA=)
                          21: 39312e3234362e32362e302f32342d3234203d3e20323039333336.roa (hash: rEAGLVQ5nYAtmkH/uKeHkUcPnM4QU/FZwu/LTkZBgUo=)
                          22: 352e3139392e31362e302f32332d3234203d3e20383334.roa (hash: Da5zDILo7xWpg3k8NOQbgYfWtG5uUHcM8lvrX6kAPLE=)
                          23: 3231322e37342e34362e302f32342d3234203d3e203235313938.roa (hash: X/g9Ugp09hJDMhPnpSV25WXf3lMYdLhTbT7dlOtuMKI=)
                          24: 352e3139392e32332e302f32342d3234203d3e203230343733.roa (hash: 85emnoFIIZEck9qOCD8+fBhi9DyMDr+qHWMNX3Pl9pc=)
                          25: 352e3139392e33322e302f32322d3234203d3e20383334.roa (hash: wHi/K7jkDZlOgAcLQ2orzAvP6GWa0NTiJ30LAzYTgs0=)
                          26: 3231322e37342e33382e302f32342d3234203d3e203137343937.roa (hash: QYrNyGQJCvPFmJ8ng19O09Yr+0Dt1E4hDvsQNkd0vus=)
                          27: 326130303a313766383a3a2f33322d3634203d3e203439343338.roa (hash: /KtiO33L6se3kHkVpFIPImnjoEV3e3gPcr4HV+lO8sc=)
                          28: 352e3139392e32302e302f32332d3234203d3e20383334.roa (hash: QvTaZHbJDvGa5lY65f690MXZNG767G5Bd2a5bo5+3Bo=)
                          29: 352e3139392e35302e302f32342d3234203d3e20383334.roa (hash: 4pvsvEQB4HPoy2O4fPwwlSKN7/cMm4rlPkc+wfQm4/8=)
                          30: 3231322e37342e34342e302f32342d3234203d3e203437333737.roa (hash: imoswaNbO7vNN7VaKJkmnExgDYaRRjFPdtW0vclnvzc=)
                          31: 3231322e37342e34372e302f32342d3234203d3e20323035383836.roa (hash: w0UpXoKkSl0862d4qInGSxq8jgcZBFr+wgvxyyT4sFI=)
                          32: 352e3139392e32392e302f32342d3234203d3e2039333034.roa (hash: dVIp0oOniH24fYi80VBOjOK9O6B/NHI7Np6C6NeyiWs=)
                          33: 352e3139392e33382e302f32342d3234203d3e20383334.roa (hash: 0362QmgMfp+pm0iSet6T13/ixlJ04OKieIWwibbcZkk=)
                          34: 352e3139392e302e302f32332d3234203d3e2034373636.roa (hash: fkd1HaVNJf7l0mlOvixuLlNIhfpcobvMqSMFW5i9M+k=)
                          35: 352e3139392e32342e302f32342d3234203d3e203230343733.roa (hash: q7+glSxlm2qX+H1QjBKKgOd1wGs12LGnA8QDd8YyJhE=)
                          36: 352e3139392e322e302f32332d3234203d3e20383334.roa (hash: gnLTy+aelnN87gaq5vL9dN7tqzuDTIazJKcdi5/W5cQ=)
                          37: 352e3139392e34382e302f32332d3234203d3e20383334.roa (hash: /HVdA2vkZZoStRv5dnhzR7fIJNnXWIkRrCV86w3ycXA=)
                          38: 3231322e37342e34332e302f32342d3234203d3e203633313939.roa (hash: KhXxXTZ7/JXho34rzUaWRKuxbOLdNAB2TzmyX3erroU=)
                          39: 352e3139392e32352e302f32342d3234203d3e20383334.roa (hash: MVErUVWhLRH809b+QYI+5PK9fhqDeaqu1d6Qy8LzR98=)
                          40: 3231322e37342e33382e302f32342d3234203d3e20323134303235.roa (hash: W4EE9mfeu+ZQcpo7RhcMm/5iUOCnXVX5HMH4scHR++Q=)
                          41: 352e3139392e342e302f32322d3234203d3e20383334.roa (hash: 65MqopLjpyM8Mqlpr5SzIvO2zxNR0Tk0bh69luxGgCk=)
                          42: 352e3139392e31392e302f32342d3234203d3e20383334.roa (hash: YHNMwXkl9GPt+lBnjQQbGk82zfAgvDp4O6qFC4SNsHk=)
                          43: 3231322e37342e33382e302f32342d3234203d3e20393834.roa (hash: i/qaRqcQrH23A2cBmckTcvR2Zo08PDS2giMWYoT9VLs=)
                          44: 352e3139392e35362e302f32342d3234203d3e2039343537.roa (hash: jeFvPrZZlnOXcQ0YYF2wj9rjOfmik7mDuulOexJBPMg=)
                          45: 352e3139392e35312e302f32342d3234203d3e2039333034.roa (hash: t/ZGO4/KAURuZWwGtTAg5kH+hDUCFNvJ9k5GGSwZqPE=)
                          46: 352e3139392e33302e302f32332d3234203d3e20383334.roa (hash: fPqruqouvMuWEJp1QghOeAtZOckYMcszE0YEHA6HLqY=)
                          47: 352e3139392e36302e302f32322d3234203d3e20383334.roa (hash: hRMhnHJPLRMHSKFozgRwma+UtPpTP4ouGJKBgiDHzGw=)
                          48: 352e3139392e32322e302f32342d3234203d3e203230343733.roa (hash: OZli0DwLI2EHYi071cA1eilY9ouwYPaD3LYrqpRrOGo=)
                          49: 3138352e3136392e3132322e302f32332d3234203d3e20383334.roa (hash: aXWqN/HcMi5rwS89QTRH6kRhHZM2kHEpsguc93dpxdA=)
                          50: 352e3139392e382e302f32322d3234203d3e20383334.roa (hash: keIP3e17ZI8LKI6iq06j88qNkNxuQ7A4XRewqaeeLzU=)
                          51: 3231322e37342e33332e302f32342d3234203d3e20323136343035.roa (hash: b5R/eMW2JJAKZgMfOBawHgRL0h+fcttLr9lPC/e/oTc=)
                          52: 3231322e37342e34382e302f32302d3234203d3e20383334.roa (hash: x4Owhy/QYjPThokcJTNyEYJql2jRjZmhc3+Ow1CZvZM=)
                          53: 3231322e37342e33362e302f32332d3234203d3e2034373636.roa (hash: +qRI5JDodbfFjoj/U6c37sePKQA9L/nQjiMHpoPan0k=)
                          54: 3231322e37342e33322e302f32342d3234203d3e20323039333336.roa (hash: FH6FqDXFQ/WAQOta0zaRvwGtWt4jNqdlI61tpxRU34g=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Jan 2026 17:04:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:24:5b:b1:18:5d:13:37:4e:16:d9:99:b5:36:cf:23:33:35:5b:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
        Validity
            Not Before: Jan 17 14:01:57 2026 GMT
            Not After : Jan 18 17:04:57 2026 GMT
        Subject: CN=B0C75A7B83F59FDBCEBEAF1004DEFE50A75B17DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:fd:89:42:c3:b1:9e:08:6d:e9:b0:c2:1c:aa:
                    d9:34:82:8d:38:10:26:c9:70:b7:be:42:bb:dc:82:
                    e0:be:28:d2:91:ef:01:83:16:01:d8:1e:02:34:d8:
                    3a:0c:d7:c9:76:2b:e2:37:43:5a:fa:8b:f4:dd:75:
                    bd:4f:bd:f6:00:57:45:57:46:5b:03:ad:bd:4b:c0:
                    95:2e:44:13:9b:a3:b1:55:48:ab:82:ad:07:8f:cb:
                    6c:b7:41:99:82:9e:09:2a:d5:29:b5:53:6b:db:0b:
                    ad:f3:cc:f6:eb:1c:8a:08:0b:11:9f:54:2e:fa:26:
                    33:83:fe:99:1a:21:c6:af:a0:d2:61:45:27:f2:7f:
                    bb:bf:41:e1:a9:56:24:db:6d:1f:6f:c8:ce:93:ac:
                    28:ef:3d:ad:5d:5a:db:ad:b6:59:8a:fc:da:b9:06:
                    d9:7d:72:69:c4:09:47:17:66:87:db:48:11:ea:c1:
                    c9:82:1c:5a:c1:36:3f:77:42:74:18:dc:10:13:ac:
                    87:2d:ea:d9:d4:5e:b1:85:44:e7:cd:9b:c2:60:0c:
                    5e:81:03:22:32:d9:6a:78:7c:91:26:94:5b:86:72:
                    c3:aa:6f:30:ea:25:83:d8:ef:f3:c8:b6:18:60:72:
                    6c:1a:fc:60:16:79:5a:c0:43:ae:20:69:2f:32:6b:
                    9f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:C7:5A:7B:83:F5:9F:DB:CE:BE:AF:10:04:DE:FE:50:A7:5B:17:DF
            X509v3 Authority Key Identifier:
                keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:13:18:8c:81:8a:49:89:65:c4:35:76:df:a1:15:3e:6f:a5:
         5a:56:1f:98:60:13:87:98:58:07:5a:18:60:12:d0:2b:23:8b:
         80:d7:9b:96:62:43:1c:a3:9e:cd:f4:b6:7b:df:2b:f8:ed:d8:
         c2:87:7f:0a:0c:ca:92:2c:0f:fb:2e:ea:05:59:00:2e:97:4f:
         64:7a:cb:6f:cd:de:ca:6a:4b:ab:5e:0a:9c:fe:d3:8b:76:2e:
         c2:a9:b5:f5:51:df:24:18:d8:a4:d5:52:b7:72:11:ac:2d:4e:
         17:6b:a2:3e:10:63:ae:1f:29:3e:75:18:d1:2f:12:60:7a:ba:
         44:8e:8e:aa:44:b6:0d:0e:74:69:de:6a:fd:2a:c6:21:88:ac:
         bb:0b:90:a6:27:b5:de:2d:7c:78:94:58:e4:ce:9a:74:07:63:
         e1:b3:82:ab:6c:9e:b6:54:b3:a1:53:4b:bf:47:3a:bf:e3:a2:
         71:d9:84:cb:10:d6:92:48:c6:a4:65:65:e5:d4:1a:cf:6a:7d:
         8f:84:bb:c2:b7:ca:3f:00:a9:45:b2:6e:0c:95:c4:f2:48:ea:
         d2:f8:0a:94:2b:a4:d8:33:e9:db:e8:c2:cc:d5:f5:74:03:29:
         88:08:e8:3a:0d:a0:64:ce:cd:a7:41:63:81:0d:31:c3:0c:de:
         c8:e1:19:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 05:39:02 2026 by rpki-client