This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft
File:                     6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft (raw, json)
Hash identifier:          kgpl7cOwQdVdy22aaQ/QySkbkFJvsSQDXYxYf7jIJiY=
Subject key identifier:   09:B6:E2:A1:F8:D3:F7:70:9D:2C:F9:83:3F:A6:7C:27:3E:BD:3D:F7
Authority key identifier: 6E:F8:DF:8B:74:C5:D8:BB:67:37:EC:42:CE:03:2A:B4:B0:3E:0C:51
Certificate issuer:       /CN=6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51
Certificate serial:       373F689F66C75DF5DB4BB1BE922991948C29ECFC
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft
Manifest number:          0115
Signing time:             Wed 28 Jan 2026 20:13:07 +0000
Manifest this update:     Wed 28 Jan 2026 20:08:07 +0000
Manifest next update:     Fri 30 Jan 2026 00:08:07 +0000
Files and hashes:         1: 326130613a363034303a313130303a3a2f34302d3430203d3e20323033303639.roa (hash: pHFnoNPoWytPyebFL74GP4B+9dNFxdZc97XyE0fhg1o=)
                          2: 326130613a363034303a336638303a3a2f34312d3438203d3e203134363138.roa (hash: aHvhuFqDO1GB7QIZ+LV93NwGnOmb8RZNrGiJRajypMI=)
                          3: 6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.crl (hash: wwLHPBtJk5TywKkNvRGcCX488trXpIXcScmXZhs78Gg=)
                          4: 326130613a363034303a336638303a3a2f34312d3438203d3e203136353039.roa (hash: Wmi4Se034d+qqZcAnERqLlh4fra7054HHLp3mkWO2Ww=)
                          5: 326130613a363034303a336630303a3a2f34302d3438203d3e20323033303639.roa (hash: rHPewLaTkppiYRuEKYbkMC6q0fSzfeWOiDhEN8UQLrI=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Jan 2026 16:18:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:3f:68:9f:66:c7:5d:f5:db:4b:b1:be:92:29:91:94:8c:29:ec:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51
        Validity
            Not Before: Jan 28 20:08:07 2026 GMT
            Not After : Jan 30 00:08:07 2026 GMT
        Subject: CN=09B6E2A1F8D3F7709D2CF9833FA67C273EBD3DF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6e:f7:14:02:c1:51:8c:28:aa:5a:c0:93:c0:
                    5f:e3:58:65:86:f6:4e:b2:2c:6a:e4:d4:73:ce:a3:
                    66:f2:c0:c4:6b:42:f0:ca:fa:41:36:d5:45:4f:8b:
                    43:cf:36:38:6b:38:e5:0c:f6:21:bc:5f:19:ef:f6:
                    75:0b:29:3d:7a:df:58:f5:30:27:51:50:be:4c:d2:
                    14:f6:aa:29:d4:27:5e:2f:a7:fc:ad:d7:07:93:52:
                    83:23:2c:05:a5:58:17:dc:e3:33:e8:3c:5a:b1:06:
                    47:5b:85:1f:e5:dc:2f:fc:6a:a7:75:3d:0f:2f:13:
                    e0:31:f3:8e:82:61:e8:be:79:1f:f9:19:ed:b5:ff:
                    4f:8d:25:c3:3a:9c:aa:ec:d6:e5:cf:ef:dd:25:f9:
                    17:5c:f0:ee:b0:66:19:9f:12:4a:ab:32:b9:f3:ae:
                    cd:6a:8d:81:e7:36:91:c4:3c:23:dd:37:51:2e:2f:
                    13:1c:75:5b:1c:ab:9b:0f:91:15:a6:66:79:bc:da:
                    a1:e3:52:71:a9:2b:93:c3:05:cb:17:08:98:53:a4:
                    1d:04:94:39:2c:aa:50:4e:de:49:f4:52:a3:b0:ac:
                    67:42:7b:4c:11:ac:dd:2d:c7:7f:d8:39:48:e8:21:
                    38:e8:39:b5:dc:c1:63:62:c8:f2:23:0b:de:61:e0:
                    7c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:B6:E2:A1:F8:D3:F7:70:9D:2C:F9:83:3F:A6:7C:27:3E:BD:3D:F7
            X509v3 Authority Key Identifier:
                keyid:6E:F8:DF:8B:74:C5:D8:BB:67:37:EC:42:CE:03:2A:B4:B0:3E:0C:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:81:cb:6b:b2:50:d1:ca:63:0c:68:ed:cc:1e:db:c5:d8:0d:
         f7:c9:52:16:f9:6b:8b:6b:69:77:56:fa:80:fd:05:a1:05:c1:
         8b:b9:0a:4a:ea:11:db:8b:d6:11:62:c1:78:a1:67:0b:05:64:
         f4:1a:a8:32:e4:f2:1b:d7:3b:08:87:f6:73:03:df:cd:d0:7e:
         27:62:f1:3b:b6:47:46:53:61:f2:f4:a4:14:5b:a2:13:dd:2e:
         80:2b:3a:09:44:fa:f4:3f:a2:9c:07:3b:5c:74:19:84:4a:22:
         a0:cf:1f:e4:8b:c5:fc:41:a7:a5:9a:bd:9b:c6:64:d9:3c:62:
         34:b3:b2:f7:82:91:6a:e2:7d:63:35:d0:35:88:e7:00:3f:de:
         ba:99:8e:b7:8e:81:fd:f5:57:17:6a:a6:15:5e:07:ba:aa:0b:
         4b:8f:6c:c4:9d:c4:db:4b:76:97:0e:e3:7e:db:15:79:9a:03:
         f3:d4:8e:be:28:dc:83:4d:81:dc:be:02:3a:de:99:04:85:e9:
         d3:99:64:02:25:95:31:83:08:ad:db:44:d9:a4:61:67:af:3b:
         dd:ba:5e:fc:21:92:62:a9:16:29:26:45:00:56:6c:db:36:e4:
         15:c1:7d:85:54:4d:ad:a5:39:6e:56:57:cf:d1:9a:54:12:dd:
         38:0a:85:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 05:45:17 2026 by rpki-client