This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft
File:                     3134EE987E08D8B5583FEEF621A03150C4F35434.mft (raw, json)
Hash identifier:          V2EMtjm3Dhumy2Zz7qeZ7oK/vs7A3MMtE2CSvsOfTQA=
Subject key identifier:   17:3E:CE:94:A7:2F:33:A6:09:51:6E:7F:06:21:C8:5F:1C:9D:2E:B8
Authority key identifier: 31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
Certificate issuer:       /CN=3134ee987e08d8b5583feef621a03150c4f35434
Certificate serial:       4CB7EBDE506E22D687241E9B97BA85C1FCFEA350
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft
Manifest number:          03C4
Signing time:             Wed 21 Jan 2026 07:32:33 +0000
Manifest this update:     Wed 21 Jan 2026 07:27:33 +0000
Manifest next update:     Thu 22 Jan 2026 10:27:33 +0000
Files and hashes:         1: 326131343a316563323a3a2f34302d3434203d3e20323135333138.roa (hash: 1f8XyNlehbCOnOttGzyrDosIHnqaI9sKAvrNf1ADCiI=)
                          2: 326131343a316563373a666666633a3a2f34382d3438203d3e20323136333339.roa (hash: Xpu7YHsE9Uu/Z34+AM32q6wFmIndeEkcOzm4kV29gZU=)
                          3: 1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer (hash: BF/TWOjb2Ii4r0osOdYS/rUG+zOQPpS2tAXbzEo5Wzo=)
                          4: 326131343a316563373a666330303a3a2f34302d3438203d3e20323130363435.roa (hash: D0UhxJixjH/6ED4b7asHdvZhN16xQRz9JstOKq1KOMc=)
                          5: 326131343a316563373a663830303a3a2f34382d3438203d3e20323131303139.roa (hash: IUL9dWtw0Umsxfs7xwdo1JVZ6ulAsKal+ROC0kpiHgM=)
                          6: AS215318.asa (hash: Cq1YNeZujV2DCB3+fofzEgyWvtRNnETlVqcvQ1iCKVE=)
                          7: 326131343a316563373a663732303a3a2f34342d3438203d3e203139333138.roa (hash: 354DUYTmwYIpJ7s6pAfElMpcSbsG0UySE6atyDydlaw=)
                          8: 326131343a316563373a313130303a3a2f34302d3438203d3e20323135343337.roa (hash: LSZWA34YwCO9D6JtWEG8LpUQ1o3Anb+MGXWPU43gT4A=)
                          9: 326131343a316563373a666666643a3a2f34382d3438203d3e20323038343533.roa (hash: cQGzH58GG/5AlClFkvMjXXZFAsalmfdZS0xTjTmJx5Q=)
                          10: 326131343a316563373a666666663a3a2f34382d3438203d3e20323030313739.roa (hash: XuQKj6LnTQvpgGqSnWZyBkgZgiMu2bqG4KDi3+Nxn60=)
                          11: 326131343a316563373a666130303a3a2f34302d3438203d3e20323134333635.roa (hash: D7vq42LlJ1JkjKrlS8EXaLer6htaFFui19vj1Iz46+0=)
                          12: 326131343a316563373a666230303a3a2f34302d3438203d3e20323134373435.roa (hash: 6hKao63oIzBdls8N02e3UeaWWtVa56Xgit+XQJDfjec=)
                          13: 326131343a316563373a666661303a3a2f34382d3438203d3e20323133353135.roa (hash: uw8e5+V55rs+wlENeJdGRICWtffz7xQmePuL+3U/nIU=)
                          14: 326131343a316563373a663330303a3a2f34302d3438203d3e20323132303835.roa (hash: /N5wUQJdysICqY/mrt3+ONpnXUY6EQuvRkeb07T1NVw=)
                          15: 39312e3139362e362e302f32342d3234203d3e20323135333138.roa (hash: j1BjBA5NyrZGkTgGio3bSgpZw6QFV9sBz2jgQ+DhB30=)
                          16: 326131343a316563373a663530303a3a2f34302d3430203d3e20323038343533.roa (hash: 26SEXU3Pd+BR8SHx6kufhwY94Io89XBTIVQPTTPnVB8=)
                          17: 326131343a316563373a663730303a3a2f34342d3438203d3e20333937343233.roa (hash: 3NaEQ7JEzM4oESWmvkMu3mTAfj7phWpZMjjU4RHfTkQ=)
                          18: 326131343a316563373a666430303a3a2f34302d3438203d3e20323136323034.roa (hash: s/Nou3yfPszN+70d0fh1KxFGk9lHz9YF1rBNojiEJcI=)
                          19: 326131343a316563373a663630303a3a2f34302d3438203d3e20323133393938.roa (hash: jfvc4Qyrnftgf9GYsuLUox0bHp6mia0CtR4lMdTVrZY=)
                          20: 2AFACA7F316DBE0CFF394F9D5952E52992F185F1.cer (hash: TzD6pGlBEMmZI/OlLFvK4Q5nKNXovDA7wOkDjfwohQo=)
                          21: 326131343a316563373a663830313a3a2f34382d3438203d3e20323131303139.roa (hash: q5taedROXWkWDrb/6D/rTI85VzK640g7YzLTCK454po=)
                          22: 326131343a316563343a3a2f33322d3430203d3e203535323031.roa (hash: J7TluaWBMRkzmoR+yQUgqy6TY9pp5e+qFllmxawGaBk=)
                          23: 3134EE987E08D8B5583FEEF621A03150C4F35434.crl (hash: ZgnDeq8CJoCneAAFK4JaV4wuEJ3Upo/FTZDNWDWNeOc=)
                          24: 326131343a316563373a666666653a3a2f34382d3438203d3e20323135343733.roa (hash: tXMEYMrTa38uR0L+SQ9LimzmDrpxo8zhMIaTp0PKkR0=)
                          25: 326131343a316563373a663730303a3a2f34302d3438203d3e20323033363632.roa (hash: TXZSGetReOdbEu0rJcDlVY8E6EFEIEHEr5rTFcqv3xU=)
                          26: 326131343a316563373a666530303a3a2f34302d3438203d3e20323135343637.roa (hash: 8asU86WRYRMPRuHXiCGWb31YsN6wlyGCHOUyjPq08QE=)
                          27: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer (hash: jLV89odZdgTYzYRcumFoTReP+gmmk+raXpcoYf0+wxA=)
                          28: 326131343a316563373a663731303a3a2f34342d3438203d3e20323030303838.roa (hash: AEg6jBnmgaUb2x64BLtcycaY+zMRMacIwLXjCKOp0Kc=)
                          29: 326131343a316563373a663130303a3a2f34302d3438203d3e20323134313838.roa (hash: l6K8Ipuv+LpAjKBvLV7xS+N25xPDi1Q5md9XNlMDt3o=)
                          30: 326131343a316563373a663230303a3a2f34302d3438203d3e20323036353430.roa (hash: qSdNZRVsblfNLTN5jWJzdVW0nG7dD+fw8GdvqXWqzCg=)
                          31: 326131343a316563373a663830303a3a2f34302d3438203d3e20323131303139.roa (hash: AGI7e/F2Snd3LJvhDdI7M6IquMMB8CwXmbzdMBVWefQ=)
                          32: 326131343a316563373a313030303a3a2f33362d3438203d3e20323134343831.roa (hash: mAC3tE41nQDojIaT/TKY9BuNdhC77RQ6VPm5O+XWCIE=)
                          33: 326131343a316563373a663733303a3a2f34342d3438203d3e20313431343039.roa (hash: TPn5Qje9HW3EcfDEdBb6Zdaos4imk6wTDX53NehQb3o=)
                          34: 326131343a316563373a663930303a3a2f34302d3438203d3e20323131363733.roa (hash: eFx1IPRipEBged0ZijUlxcw0OO6jOfnGP3TjandnEEA=)
                          35: 326131343a316563373a323030303a3a2f34302d3438203d3e20323133353135.roa (hash: ei7uKbr21cStunIFD4/+QnxpXX+lUv4yRtUBnFqqQIw=)
                          36: 326131343a316563373a663733303a3a2f34342d3438203d3e20313336353537.roa (hash: EjYVXtoGI4pKSiTLS0VJX0KMS0fHh7kyk5vR1WUohgI=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 09:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:b7:eb:de:50:6e:22:d6:87:24:1e:9b:97:ba:85:c1:fc:fe:a3:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3134ee987e08d8b5583feef621a03150c4f35434
        Validity
            Not Before: Jan 21 07:27:33 2026 GMT
            Not After : Jan 22 10:27:33 2026 GMT
        Subject: CN=173ECE94A72F33A609516E7F0621C85F1C9D2EB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:16:61:2e:92:26:2a:c8:0e:5b:e1:b9:62:91:
                    9f:67:11:82:dc:16:5b:8f:11:db:d0:79:39:9d:1c:
                    b5:4d:35:2c:fa:95:14:e4:14:71:60:e3:3a:d2:e8:
                    07:9b:c9:da:01:69:da:38:51:59:42:4f:6f:b4:ee:
                    40:b9:5d:ce:65:c2:88:8f:03:92:b2:0f:3c:cd:d8:
                    d0:46:ff:86:7c:3d:5c:c0:c0:80:b6:56:1a:08:81:
                    cf:71:36:6f:3c:e0:4b:4e:b4:5a:95:53:5d:cf:22:
                    a4:bd:3d:f8:79:7a:de:e2:d4:c4:e2:37:5a:15:89:
                    c0:d0:84:fb:a6:be:23:d2:f1:a1:75:78:db:62:19:
                    96:9b:91:86:1a:a8:d0:d2:76:50:0d:f8:24:81:e5:
                    59:cb:3c:f5:ee:cf:f5:3c:88:00:f4:eb:8b:50:64:
                    63:96:70:47:60:9a:db:6e:af:ae:17:47:33:64:f2:
                    e9:9b:36:c1:c0:5f:54:e0:54:00:55:90:de:6e:24:
                    6f:d3:3f:b1:5e:0d:09:fa:6b:23:ae:7e:47:54:28:
                    9d:4e:37:6e:86:2b:be:f9:01:2d:df:a2:77:de:9e:
                    f3:95:c8:53:d4:57:9d:b5:0a:59:d0:a5:95:18:a4:
                    0b:92:24:cb:8b:c1:80:43:7d:9a:04:db:11:52:8d:
                    db:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:3E:CE:94:A7:2F:33:A6:09:51:6E:7F:06:21:C8:5F:1C:9D:2E:B8
            X509v3 Authority Key Identifier:
                keyid:31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:64:f9:3a:e1:4c:30:64:bc:64:5c:cc:70:7e:b9:80:b7:8f:
         b6:88:6b:05:8e:31:c2:6c:f9:ef:9d:3f:7b:04:38:86:79:25:
         c6:8d:53:dd:ef:c6:42:32:1c:c6:67:2a:24:1d:c0:a5:62:3d:
         ce:a2:90:66:e8:cb:c8:e3:7b:d4:5d:cb:c9:fe:a6:5b:79:06:
         b4:08:70:b5:42:91:53:54:60:eb:01:7e:a9:fd:17:7a:9c:51:
         e4:00:a2:68:60:47:df:79:41:a4:db:f4:1e:b7:cf:60:06:a7:
         99:ad:03:f9:3a:2e:f5:75:f4:11:b5:23:b8:b3:6c:2b:a0:6d:
         09:ac:35:d3:1c:54:e2:5f:bd:19:28:f0:06:71:20:ba:1c:8a:
         dc:ec:ba:e8:dd:45:6b:d2:a8:86:bb:6d:e1:a1:ca:30:e2:c3:
         06:14:b2:ad:5f:19:95:07:13:11:5e:74:2f:cd:08:b2:c7:f4:
         19:0c:a7:42:c1:3e:79:50:e8:e0:29:1e:31:67:9b:9d:bd:14:
         37:ea:70:70:fb:c9:d8:0c:46:fb:ea:f6:f3:f6:d8:e7:1b:70:
         7f:36:9e:19:e9:5d:ef:72:9b:98:f2:57:e7:17:20:6b:6a:8b:
         0b:71:66:11:17:fc:c0:3b:24:28:e1:3a:e8:8b:ca:20:ab:a1:
         83:9f:6e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 12:48:37 2026 by rpki-client