This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
File:                     A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft (raw, json)
Hash identifier:          Og9bMmx+hXQQC17kz8Yl8B1/Di0SXkpy6xSm+EOKJWg=
Subject key identifier:   B1:09:23:CB:C1:75:59:57:F4:80:7E:94:69:75:C6:2B:B6:96:B0:CB
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Certificate issuer:       /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial:       5BE378405FE15695876880C0874868E7DAD1D4CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
Manifest number:          0686
Signing time:             Sun 08 Feb 2026 03:05:40 +0000
Manifest this update:     Sun 08 Feb 2026 03:00:40 +0000
Manifest next update:     Mon 09 Feb 2026 03:13:40 +0000
Files and hashes:         1: 34352e39352e3231322e302f32342d3234203d3e20323039353534.roa (hash: 9IsmuufWVjFLEbYLLcJg7Yp7+j5DqB4kK41/uY19nMQ=)
                          2: 34352e382e3231392e302f32342d3234203d3e2039303039.roa (hash: 0zn1M6udTfOcCIE/Cifu6WDNTkQzSgcujlgX6HE4/sQ=)
                          3: 352e3138312e3138342e302f32342d3234203d3e20323132333335.roa (hash: UCQA4MebhnFRuGzYIjyz+Oaxw3thh569/39f5fjzuDM=)
                          4: 3139342e33312e3139372e302f32342d3234203d3e203432383331.roa (hash: KMAsq44hIBrFB+eRrhhDssa2B+eAZmGDL1feRYL/R5o=)
                          5: 38352e3230392e3233302e302f32342d3234203d3e203138313836.roa (hash: +OSq4m/6RpxEZih63506Gv6cOkBhW+YglqTPEKg/ZcM=)
                          6: 36322e332e32302e302f32342d3234203d3e203231383539.roa (hash: Rro+Gx/ym8oazWi/ZTJ2dg2MGKpj7/78mNky+1y7VfU=)
                          7: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl (hash: F5UzCD1Vn3rzCJkQDfy6+tpJmLwPTNu3UF4N1eSQpiY=)
                          8: 34352e39352e3231332e302f32342d3234203d3e20343030303339.roa (hash: XrIv1BWbF+to8I3saogND52oHBVFoDY38lWpbUFLA6o=)
                          9: 34352e39352e3231342e302f32342d3234203d3e20323136303939.roa (hash: D/Nmap/PxRG4O5COkUTsliUnadwaB6xsHT4TvPGKFlQ=)
                          10: 3134362e31392e33382e302f32342d3234203d3e20313939363534.roa (hash: KCPy6uAOav6R+jmrUTgTpbZkeje3mnKOXa6FXDMEhhE=)
                          11: 34352e39352e3231352e302f32342d3234203d3e203239383032.roa (hash: Q1OlQJwADffmDxnZKj7bvhSo1kOL5aXrHpMtVtZFtuQ=)
                          12: 322e35392e36332e302f32342d3234203d3e20383334.roa (hash: 8DqvUUgTHwg4fnhfYD2q3DFHCSCucv2RToLFRdMK/4s=)
                          13: 34352e39352e3231342e302f32342d3234203d3e203434353437.roa (hash: 4mA1gqLsHB6B1P8mI+JnCzpqXJzdsvy8YAE1F7eD96c=)
                          14: 34352e382e3231382e302f32342d3234203d3e20323132333834.roa (hash: tj3yrp12EwOeT1ZEKtZIphksitaxnh11pc39cLh8XvY=)
                          15: 38352e3230392e3233302e302f32342d3234203d3e20313430323234.roa (hash: X9S/vAQJZJ3+zexclWqp51kmLLKozc6jAta0ZYx43Ns=)
                          16: 352e3138312e3138352e302f32342d3234203d3e20323132333834.roa (hash: erSH6Mf15T5HOlDb5lpbU/Ku2eMK+cc/6OxLysGJmP4=)
                          17: 3139342e33312e3139342e302f32342d3234203d3e203339333638.roa (hash: qMisc8M9fAgiB1zw7/Tn0y61M2FDJt3sqCMkzKcplhA=)
                          18: 36322e332e32302e302f32342d3234203d3e20323135313532.roa (hash: K3GEYfrcdLJt/Pv1pZTdwz6yJZqY0yfvXEhbrZ66rqc=)
                          19: 3139342e33312e3139352e302f32342d3234203d3e20323133363638.roa (hash: tD4GyhGOomU4ZODP9QGqyOztFfw1vKOkCjucViT/SZg=)
                          20: 3134362e31392e33382e302f32342d3234203d3e203136323736.roa (hash: norYvgZGO2Imho4UnQcnY8UITUyuaQwpwpHqXsoPDao=)
                          21: 34352e382e3231362e302f32342d3234203d3e20323132333834.roa (hash: A1j+LbNuBb8MeFvlQDvvVkVer3lHzQ8b3CPtY22jros=)
                          22: 38352e3230392e3232382e302f32342d3234203d3e203230343733.roa (hash: LvALS0QzJUIn2y2aM1WJBNeefzd38B8yBzedKpN4nB8=)
                          23: 38352e3230392e3232392e302f32342d3234203d3e203432383331.roa (hash: vjpMNqLq25F9up6mT05GhHQJMJ0KbktUxvDSn9v6kBA=)
                          24: 34352e39352e3231322e302f32322d3232203d3e2037303239.roa (hash: b3HfoeSSJnwEFBW/P8/Hh1DNPoifdQtxChWclKR01cY=)
                          25: 3134362e31392e3136372e302f32342d3234203d3e20313432313131.roa (hash: 1cwuvx0f/bXZ/DwexRmaaQu0tTmkULuIbOfrQVnX4ao=)
                          26: 352e3138312e3138372e302f32342d3234203d3e20323135373033.roa (hash: EJ6RmJBNoUg0c9WoYw2Ja1OnADVswQoLG/EoG0ZGnFE=)
                          27: 352e3138312e3138362e302f32342d3234203d3e20323036313530.roa (hash: QGg1o/UsEXwX7QWOmnciGR0lfU5zaV2UWyNlVxa/Ka8=)
                          28: 3139342e33312e3139352e302f32342d3234203d3e203334393933.roa (hash: /RrqrRO8J+Vsp3FaP0KZwFzXiRmxrRbyseKOqWdHYpY=)
                          29: 322e35392e36302e302f32342d3234203d3e203631333137.roa (hash: BBdnQvjsMGsAKdV0CMmUgkUx9rKK17g08iyDVXfqF5c=)
                          30: 3139342e33312e3139362e302f32342d3234203d3e20313939373337.roa (hash: kk3tkqt3pEQIayEC5akWsEQ7ftglPpO+Tt2YC9Lk7HM=)
                          31: 352e3138312e3138342e302f32342d3234203d3e20323131333733.roa (hash: HxZ7OQY4wmmok4f1jyMFC6WkeyQaBhCRYtiYzwz8qYg=)
                          32: 322e35392e36312e302f32342d3234203d3e203438323636.roa (hash: 6dfl8lI1/2dWL8ffIUYhSFUUS7mSu5VjjS42Z8HkW7c=)
                          33: 3139342e33312e3139352e302f32342d3234203d3e203132383236.roa (hash: dZ5pA0FTXTMIyebmvvTrXa2pwRmRVDj8qy5ZN+EkpPo=)
                          34: 38352e3230392e3233302e302f32342d3234203d3e203633393032.roa (hash: P3VDMMBoXLUjrVK3m58S6qhassJbF7wO/iSY6p4T2ZU=)
                          35: 322e35392e36322e302f32342d3234203d3e203633303233.roa (hash: /Ku1phd3ouPkx4ZDyzwkq+GI0U8NGNl14wVu1lc6q1k=)
                          36: 3134362e31392e3136372e302f32342d3234203d3e20313532363732.roa (hash: 1EdzND/a/KltqRlIJaQnMPD7XH7CVfxCNY9eyK9ocYU=)
                          37: 38352e3230392e3233312e302f32342d3234203d3e203135343430.roa (hash: 5P7OofszcYzyRXLoqtlNETBM0YQubML8godGGz1Zc2U=)
                          38: 34352e382e3231372e302f32342d3234203d3e20323136303232.roa (hash: 8eRvRykZqahsRM0VQoPLCYYNfC1yyS358fE8muRhEDA=)
                          39: 352e3138312e3138352e302f32342d3234203d3e20323131333733.roa (hash: 2IzUCrtAIyuz9E3rWXqOgG5uo4suNn7bGWeOLhfOKvg=)
                          40: 322e35392e36302e302f32342d3234203d3e20323132323338.roa (hash: hZ11O4/GfIQ3ZyUgAuxIn+0GkFLCBYYNN1OfZIqVDJk=)
                          41: 322e35392e36322e302f32342d3234203d3e20313432313131.roa (hash: c23s9WCLyWR8C29b7voS/R0hWodZcVrxRN5kAioljng=)
                          42: 3139342e33312e3139362e302f32342d3234203d3e20323030303137.roa (hash: +5av7/JwxJ2GdszhVyEajY1bsnLhd2JhS01B+/f5cdU=)
                          43: 34352e39352e3231352e302f32342d3234203d3e203631333137.roa (hash: jtw5h4s7N892mHMRX7q1v9D/8tuL7heVW+cms9i1OJM=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Feb 2026 03:13:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:e3:78:40:5f:e1:56:95:87:68:80:c0:87:48:68:e7:da:d1:d4:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
        Validity
            Not Before: Feb  8 03:00:40 2026 GMT
            Not After : Feb  9 03:13:40 2026 GMT
        Subject: CN=B10923CBC1755957F4807E946975C62BB696B0CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a1:de:e8:41:c8:70:ae:0a:38:86:90:ef:98:
                    56:df:f0:bf:9f:be:a2:94:1c:ee:eb:cd:be:13:26:
                    af:eb:c2:ea:c1:88:60:c2:5e:59:0f:17:30:eb:7a:
                    96:b5:c1:20:36:67:1e:19:01:6f:15:4a:4a:67:79:
                    9a:9f:62:32:68:eb:67:85:66:02:4d:cb:80:18:a2:
                    55:43:0a:2c:f5:30:e6:94:fb:26:1a:a3:8c:33:db:
                    e3:4a:a4:7c:69:16:d0:fa:d3:a7:cc:39:7b:d1:97:
                    7b:63:95:88:5a:f9:eb:c4:d8:54:8e:81:60:ab:3d:
                    c3:80:d0:75:e2:de:2b:9b:e2:c9:6b:fb:ab:1c:b5:
                    d1:67:4b:42:da:b9:d5:62:9f:01:46:37:8b:23:78:
                    95:80:a1:3d:07:bf:fc:28:9b:3e:75:45:71:48:38:
                    53:52:60:7e:df:af:0e:2a:2e:e0:4c:5d:e1:df:41:
                    41:5a:70:38:45:79:a7:cf:e7:af:f1:35:90:1b:86:
                    a1:c3:3d:b1:8a:ae:36:8b:40:f3:42:71:71:35:f4:
                    96:23:0b:55:fa:97:64:73:a1:c9:34:11:da:a8:c5:
                    2a:8c:2f:1c:0c:07:58:4c:e1:99:e5:03:45:2a:4b:
                    b2:d2:19:0b:cc:9d:19:29:d1:37:9c:88:d5:fd:31:
                    c3:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:09:23:CB:C1:75:59:57:F4:80:7E:94:69:75:C6:2B:B6:96:B0:CB
            X509v3 Authority Key Identifier:
                keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:ea:71:c7:e8:8e:06:c5:97:c9:25:f7:df:90:b7:1d:a4:93:
         12:10:aa:40:2b:ff:d7:2a:cb:6f:09:8e:b7:f4:9c:a7:34:77:
         1c:7a:d0:3e:6d:f0:3e:80:da:45:3a:98:74:b2:f2:8b:96:d8:
         e9:42:22:7e:5c:e5:aa:0b:0b:27:03:96:d9:18:a2:38:7a:55:
         54:83:83:7d:4f:30:a2:df:d3:2b:4a:f4:a6:31:33:76:9a:20:
         5d:03:e0:f4:9a:f2:c4:33:b7:c6:30:79:52:90:46:7c:a3:5b:
         fc:9e:2a:16:ac:b5:af:ae:7f:cd:c8:41:d6:2d:1d:41:61:f0:
         a8:92:6f:71:05:b5:3a:5e:05:d3:77:d8:3c:06:27:29:ea:4c:
         52:f7:73:35:ee:6b:cd:54:cc:cf:f9:41:62:30:26:46:b0:06:
         f0:a5:4e:ee:97:b8:eb:5c:ea:d8:42:93:d9:1b:7e:62:f8:fc:
         4e:df:5f:81:23:fb:3d:97:48:00:a2:6c:6e:77:a4:42:d9:48:
         6d:d1:70:e2:74:5f:63:d6:6a:5a:a4:b0:5c:ba:a1:61:28:a0:
         f9:19:43:71:b9:b1:79:65:61:32:07:e2:03:bd:34:44:db:4a:
         03:d0:58:46:f1:ac:f4:ff:06:c1:54:97:d0:36:ba:ee:03:a1:
         5c:c4:8e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 8 18:49:37 2026 by rpki-client