This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft
File:                     24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft (raw, json)
Hash identifier:          pMFyhodRdgBHXocKR6Z4cIVCfGdbQpwH7IPPY5zi6MA=
Subject key identifier:   89:1C:E3:C5:48:17:5F:0B:95:62:61:4D:B6:28:9F:2E:4A:95:60:1C
Authority key identifier: 24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00
Certificate issuer:       /CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00
Certificate serial:       713AFEAC74947E11EB265D5E696EE3CE781C2AF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft
Manifest number:          0548
Signing time:             Thu 29 Jan 2026 10:57:36 +0000
Manifest this update:     Thu 29 Jan 2026 10:52:36 +0000
Manifest next update:     Fri 30 Jan 2026 14:47:36 +0000
Files and hashes:         1: 34362e3138332e33302e302f32342d3234203d3e203631333137.roa (hash: pxnqedD3kuwz1m+9x0q4e9R46P3xXGAP6tM7JZr4zqQ=)
                          2: 34362e3138332e33312e302f32342d3234203d3e20313734.roa (hash: 3Z7e+5TwzBef1b9VYHjpmL+5jzamN8gXYO/wLKWP7lA=)
                          3: 24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl (hash: LtQyYtBG4Bj6ldG6mEQXamGohSuJJ589z/2blnumBfs=)
                          4: 34362e3138332e32382e302f32342d3234203d3e203239383032.roa (hash: kUcJYnZDGTlKIzzpmv1f5LvT/3qyw3JDmGespkIKDl8=)
                          5: 34362e3138332e32372e302f32342d3234203d3e20323132323338.roa (hash: MBTQi0HOcbTwY/4fQl+vTOHLOQ2FmR/EhBIZ6Dj3u14=)
                          6: 34362e3138332e32352e302f32342d3234203d3e203633303233.roa (hash: 4jq0qwMJqWtfRUuzz3vPyKHtua4FM5/8Y3cvVGfTKBM=)
                          7: 34362e3138332e32352e302f32342d3234203d3e20323132323338.roa (hash: lxi2m0tJ4IwcIv1Qu/mxuwgzf8BGdtHdxfKNM9mKZEQ=)
                          8: 34362e3138332e32382e302f32342d3234203d3e203631333137.roa (hash: EQc8ZSWRYu3w3yABE1KT+uLZnchUtUDhUBMKc9gsz8U=)
                          9: 34362e3138332e32342e302f32342d3234203d3e20313432313436.roa (hash: U6sIE1tc5XNg8Vw7jnbxLLCNANnB9wH3voxb1FhuZwc=)
                          10: 34362e3138332e33302e302f32342d3234203d3e203239383032.roa (hash: 72nHdO4b4bTlOVAl3qEYnqrejyz7ta1anmrlcAXdAWw=)
                          11: 34362e3138332e32362e302f32342d3234203d3e2039303039.roa (hash: ckwThy9Ftd6Jb/nTbj53dd12b3F3RSR9Etp8JSW5svM=)
                          12: 34362e3138332e32392e302f32342d3234203d3e20383334.roa (hash: cCNMl/j8O4+QWokqGu7uLfEk807f860f4W6iD80yDww=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 30 Jan 2026 12:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:3a:fe:ac:74:94:7e:11:eb:26:5d:5e:69:6e:e3:ce:78:1c:2a:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00
        Validity
            Not Before: Jan 29 10:52:36 2026 GMT
            Not After : Jan 30 14:47:36 2026 GMT
        Subject: CN=891CE3C548175F0B9562614DB6289F2E4A95601C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:03:4c:e7:35:7b:b9:c1:0e:b9:6a:e9:db:b6:
                    97:08:a4:5c:d4:51:74:2e:b9:3a:98:c7:c2:8c:7f:
                    52:43:91:fb:0f:b7:55:f4:de:80:dd:dc:7c:37:4c:
                    5a:a0:e5:46:44:72:51:f1:1d:5c:d2:c7:47:81:15:
                    a1:2f:a1:dc:a3:d0:18:60:e5:7e:eb:0f:a9:be:67:
                    17:a3:f2:bb:79:a6:e4:b3:e8:34:e7:4a:dd:b1:a7:
                    23:be:6a:94:db:2d:f0:23:eb:5e:df:80:9e:34:85:
                    b6:36:e8:5e:cf:9d:8c:62:00:7c:c2:97:22:8d:1a:
                    f0:7d:80:1d:6a:a0:53:83:82:e2:80:94:3e:09:e9:
                    01:9e:be:ce:b4:43:f5:f7:46:09:0a:9d:6a:13:63:
                    39:02:a0:58:38:fd:c1:70:f6:8f:8e:e3:4c:33:ec:
                    6e:28:db:79:15:46:d6:2a:d8:27:f7:97:86:0d:eb:
                    d0:8b:64:ef:f6:ab:ff:75:67:a8:fa:e1:1c:0e:cd:
                    16:f3:6c:0d:f8:0f:26:93:9d:f7:8e:fc:51:5c:8e:
                    87:90:3e:d3:c9:91:7f:e5:1c:cc:ca:75:fd:2e:a6:
                    24:8e:6d:81:00:71:d1:b8:fa:ba:de:a4:8a:fa:7e:
                    d6:8d:44:6e:5f:7c:05:a0:70:3d:45:88:e2:f4:e9:
                    e3:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:1C:E3:C5:48:17:5F:0B:95:62:61:4D:B6:28:9F:2E:4A:95:60:1C
            X509v3 Authority Key Identifier:
                keyid:24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:8f:6f:97:96:44:4d:dd:6a:2b:19:87:8b:f4:76:85:46:3d:
         66:32:0c:91:95:39:6c:7f:a3:87:40:f8:0a:0c:d5:77:29:f6:
         6b:c1:1b:50:e5:b5:0f:20:e3:48:0e:2a:29:47:37:f6:d7:cd:
         8d:f2:56:1f:56:0e:97:a8:1c:07:a3:02:03:bb:d9:09:47:4d:
         31:1c:23:93:02:66:cc:a0:b9:fd:96:0a:62:5a:06:b7:06:34:
         6f:9b:2b:35:cb:9f:16:b6:a1:39:fe:30:65:e8:b1:ce:98:bf:
         b2:2e:66:96:48:d2:87:7b:33:cd:8b:5f:3d:0e:75:a6:24:ab:
         a1:6e:6f:79:0d:83:ae:ae:cb:51:ab:03:ce:dc:e0:03:d0:2f:
         ea:74:7c:23:5e:09:76:44:27:92:a7:8d:61:75:a6:09:fe:c1:
         f1:26:be:99:da:9a:84:7a:bb:f8:73:e3:13:6b:61:c8:f4:e5:
         4e:ec:e0:af:dd:83:ba:c4:ea:0a:05:a6:d4:f3:3d:3b:0e:22:
         bb:ab:a3:5a:dc:aa:95:f2:3f:ad:4a:19:78:08:1c:a2:b9:17:
         c2:a2:79:4a:97:bd:c3:13:e9:63:c3:7c:e1:fa:73:2b:fb:34:
         5c:44:3e:18:37:33:82:e7:7f:7b:b9:28:c8:b2:e5:1f:51:ee:
         d8:78:72:77
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUcTr+rHSUfhHrJl1eaW7jzngcKvEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjRlNTM3ODhiZDRlZmEyM2IxYTgyMDdiN2U3NGE4ZTFj
YzY3N2IwMDAeFw0yNjAxMjkxMDUyMzZaFw0yNjAxMzAxNDQ3MzZaMDMxMTAvBgNV
BAMTKDg5MUNFM0M1NDgxNzVGMEI5NTYyNjE0REI2Mjg5RjJFNEE5NTYwMUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/A0znNXu5wQ65aunbtpcIpFzU
UXQuuTqYx8KMf1JDkfsPt1X03oDd3Hw3TFqg5UZEclHxHVzSx0eBFaEvodyj0Bhg
5X7rD6m+Zxej8rt5puSz6DTnSt2xpyO+apTbLfAj617fgJ40hbY26F7PnYxiAHzC
lyKNGvB9gB1qoFODguKAlD4J6QGevs60Q/X3RgkKnWoTYzkCoFg4/cFw9o+O40wz
7G4o23kVRtYq2Cf3l4YN69CLZO/2q/91Z6j64RwOzRbzbA34DyaTnfeO/FFcjoeQ
PtPJkX/lHMzKdf0upiSObYEAcdG4+rrepIr6ftaNRG5ffAWgcD1FiOL06eNDAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUiRzjxUgXXwuVYmFNtiifLkqVYBwwHwYDVR0j
BBgwFoAUJOU3iL1O+iOxqCB7fnSo4cxnewAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMTZhY2I5YTAtNmQxZS00YWU0LTkxNzctZDkzOGU5ODA0
Mzk1LzAvMjRFNTM3ODhCRDRFRkEyM0IxQTgyMDdCN0U3NEE4RTFDQzY3N0IwMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0pPVTNpTDFPLWlPeHFDQjdmblNvNGN4
bmV3QS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xNmFjYjlhMC02
ZDFlLTRhZTQtOTE3Ny1kOTM4ZTk4MDQzOTUvMC8yNEU1Mzc4OEJENEVGQTIzQjFB
ODIwN0I3RTc0QThFMUNDNjc3QjAwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk49vl5ZETd1qKxmHi/R2
hUY9ZjIMkZU5bH+jh0D4CgzVdyn2a8EbUOW1DyDjSA4qKUc39tfNjfJWH1YOl6gc
B6MCA7vZCUdNMRwjkwJmzKC5/ZYKYloGtwY0b5srNcufFrahOf4wZeixzpi/si5m
lkjSh3szzYtfPQ51piSroW5veQ2Drq7LUasDztzgA9Av6nR8I14JdkQnkqeNYXWm
Cf7B8Sa+mdqahHq7+HPjE2thyPTlTuzgr92DusTqCgWm1PM9Ow4iu6ujWtyqlfI/
rUoZeAgcorkXwqJ5Spe9wxPpY8N84fpzK/s0XEQ+GDczgud/e7koyLLlH1Hu2Hhy
dw==
-----END CERTIFICATE-----
Generated at Thu Jan 29 19:24:42 2026 by rpki-client