This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.mft
File:                     F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.mft (raw, json)
Hash identifier:          9u6weXnUeMVwfQ2/Benjo4/IT8ytVH3Hie/f5UFfhx4=
Subject key identifier:   4D:B5:42:E8:C0:EF:5C:10:FB:09:28:BF:0A:F2:8F:E6:F0:9D:F5:54
Authority key identifier: F4:00:72:FF:DC:0F:1B:15:A6:9E:5B:C7:9A:2F:58:8C:F9:39:F4:F4
Certificate issuer:       /CN=F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4
Certificate serial:       57CE659079121712325927FF2D04E8EB036ED37C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.mft
Manifest number:          0201
Signing time:             Mon 26 Jan 2026 21:11:39 +0000
Manifest this update:     Mon 26 Jan 2026 21:06:39 +0000
Manifest next update:     Wed 28 Jan 2026 00:38:39 +0000
Files and hashes:         1: 326131343a373538303a663334303a3a2f34342d3438203d3e20323133343238.roa (hash: Z7InVHvKI4/fqGkdwdL0zl1WS4Iyc09xlEsVxaD8p5A=)
                          2: F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.crl (hash: VUlzkOB8PvqCnDALZDA+BfiWbVg9edzFnRFLq5wJcT8=)
                          3: 326131343a373538303a663330303a3a2f34302d3430203d3e20323135343730.roa (hash: NYjufeU5nji5tNLR9669xX3/zAC6IxnZWFE8KHjLm6Y=)
                          4: 326131343a373538303a663330323a3a2f34382d3438203d3e20323135343730.roa (hash: cnH25DZSJN2OBLW6Zt+bGPFETNQaOmZLaMlgHZ7R4qw=)
                          5: 326131343a373538303a663332303a3a2f34342d3434203d3e20323135343730.roa (hash: XgYHMfBb1tBckmqvYy7acYD3hSj36S+vN34vUn5oaD4=)
                          6: 326131343a373538303a343030303a3a2f33362d3336203d3e20323133343238.roa (hash: f38GGJwA8aLs49rknYyp3/ozCmX5eTGnavOZGUBAqUw=)
                          7: 326131343a373538303a663330313a3a2f34382d3438203d3e20323135343730.roa (hash: AE4p/Aixbf8sW/I3bLOtRbnycH5RSiNSfyRxjv0S1Bw=)
                          8: 326131343a373538303a383030303a3a2f33362d3438203d3e20323135343730.roa (hash: eW78302x42s0yWxTWFOWa+EI8gsEah6kU2PGz4oxB3o=)
                          9: 326131343a373538303a663333303a3a2f34342d3438203d3e20323134303330.roa (hash: xT802+pU8TCiwwtqUkMgmyrnKplgnOIvmjCKunR0EEU=)
                          10: 326131343a373538303a363030303a3a2f33362d3438203d3e20323039353534.roa (hash: 7bwiHUB+0vEKFxOfRTRz/zFRAxgK1WxBsECd2SJxocI=)
                          11: 326131343a373538303a663331303a3a2f34342d3438203d3e20323134303834.roa (hash: CM6yYKZbtILEkjFEjxVgY2XszlZITvyYfxEqji4AD0c=)
                          12: 326131343a373538303a663335303a3a2f34342d3438203d3e20323135343730.roa (hash: QilIoQFDy86/kZThJ8L3yMVtIo9IuLOdGRNLTOrhh2s=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 13:23:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:ce:65:90:79:12:17:12:32:59:27:ff:2d:04:e8:eb:03:6e:d3:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4
        Validity
            Not Before: Jan 26 21:06:39 2026 GMT
            Not After : Jan 28 00:38:39 2026 GMT
        Subject: CN=4DB542E8C0EF5C10FB0928BF0AF28FE6F09DF554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ca:ba:07:a5:8d:c4:05:15:af:28:ce:a3:01:
                    ef:16:8f:d7:cf:2e:dc:a0:71:1a:c6:ae:14:5f:02:
                    c3:d9:b0:49:3e:11:68:b2:9f:3b:d4:8d:a6:71:43:
                    3e:91:2f:f4:17:fb:26:3f:fb:6c:6b:72:92:e6:e3:
                    af:1d:be:46:07:4b:13:c0:a2:18:5b:53:56:ff:8e:
                    79:43:9d:63:e6:e3:5a:a4:1a:75:3c:a6:ce:9d:16:
                    e2:c0:bc:72:63:02:4a:b7:5c:60:fb:24:2a:12:1f:
                    ec:2e:17:4d:84:a7:f2:ca:4d:f2:39:e9:88:33:ab:
                    10:dc:7c:77:e4:0b:4e:2e:7f:b6:77:47:e5:64:82:
                    f7:46:d7:b0:7a:e3:dd:08:c8:e4:08:5e:b8:8c:0b:
                    f5:22:ca:35:ed:d0:e2:23:15:a6:c9:96:a7:a4:fc:
                    8c:f8:e7:b3:32:8e:bc:f6:65:e7:48:2b:ab:9a:e5:
                    b7:95:d4:2b:19:2e:00:bc:44:d9:0f:1a:73:84:9e:
                    fa:ad:27:33:cc:b6:0a:56:6e:a1:48:53:f4:11:ca:
                    b0:c3:bd:dc:33:9b:8f:e4:60:65:e3:f4:b5:1a:4d:
                    87:62:ab:ec:f2:df:99:f0:29:75:e6:9e:4f:ce:98:
                    e5:cc:31:98:3f:a0:8d:4a:35:6e:ae:5e:d2:c5:fa:
                    b1:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:B5:42:E8:C0:EF:5C:10:FB:09:28:BF:0A:F2:8F:E6:F0:9D:F5:54
            X509v3 Authority Key Identifier:
                keyid:F4:00:72:FF:DC:0F:1B:15:A6:9E:5B:C7:9A:2F:58:8C:F9:39:F4:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:31:c5:b5:3a:08:a9:16:53:d0:f6:ce:af:eb:db:ee:44:7c:
         ab:69:40:64:74:2f:0d:e6:1a:8c:e0:d2:40:2d:28:e4:a0:c3:
         cd:77:9c:00:57:ea:26:2c:43:39:c8:af:70:72:4f:37:ba:de:
         bf:ec:01:a1:06:0b:d1:f3:71:fe:cc:ca:28:9d:a9:94:80:c6:
         9b:be:c4:94:cc:cc:75:e9:f1:2a:7a:c9:15:3e:8f:bd:8c:82:
         eb:ab:98:61:31:76:0c:73:13:e8:e8:22:ab:86:cb:aa:69:84:
         1e:12:bd:f4:61:88:ef:30:62:06:ed:a8:ae:73:d3:52:13:00:
         81:c8:b7:97:df:6e:f9:c3:13:1f:0b:c1:f6:6b:e8:51:b2:ec:
         6f:cf:b5:45:a2:6d:09:4f:f2:c2:39:46:39:1d:81:5a:1e:0c:
         a7:ae:97:9d:a6:cf:b9:86:84:eb:ee:12:43:49:7b:33:c3:e7:
         8e:84:7e:d7:90:66:20:56:18:00:f3:93:6a:2e:36:5e:5f:82:
         ec:3f:00:79:e5:6b:c6:4f:f3:4d:9a:0d:a3:f6:20:fe:25:26:
         74:59:2e:9d:6b:82:f2:d1:be:f4:1a:71:fb:a6:ca:10:7c:57:
         66:17:39:b9:fd:03:23:84:a2:e7:9b:9b:12:42:14:bb:2b:1b:
         10:63:14:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 00:37:00 2026 by rpki-client