This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
File:                     A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft (raw, json)
Hash identifier:          T+dWi0Wg0H91h8izngi5kZDUNNt8h9+S68EHVzHUd2g=
Subject key identifier:   B2:71:F2:E9:9F:0B:70:06:67:40:39:B0:C7:6D:EC:3F:61:74:72:07
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Certificate issuer:       /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial:       7B4BE323395034E6C0102A1E58945238822FBB47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
Manifest number:          0687
Signing time:             Sun 08 Feb 2026 19:16:06 +0000
Manifest this update:     Sun 08 Feb 2026 19:11:06 +0000
Manifest next update:     Mon 09 Feb 2026 20:59:06 +0000
Files and hashes:         1: 36322e332e32302e302f32342d3234203d3e203231383539.roa (hash: Rro+Gx/ym8oazWi/ZTJ2dg2MGKpj7/78mNky+1y7VfU=)
                          2: 3134362e31392e33382e302f32342d3234203d3e203136323736.roa (hash: norYvgZGO2Imho4UnQcnY8UITUyuaQwpwpHqXsoPDao=)
                          3: 3134362e31392e3136372e302f32342d3234203d3e20313532363732.roa (hash: 1EdzND/a/KltqRlIJaQnMPD7XH7CVfxCNY9eyK9ocYU=)
                          4: 352e3138312e3138352e302f32342d3234203d3e20323131333733.roa (hash: 2IzUCrtAIyuz9E3rWXqOgG5uo4suNn7bGWeOLhfOKvg=)
                          5: 34352e39352e3231342e302f32342d3234203d3e20323136303939.roa (hash: D/Nmap/PxRG4O5COkUTsliUnadwaB6xsHT4TvPGKFlQ=)
                          6: 34352e382e3231372e302f32342d3234203d3e20323136303232.roa (hash: 8eRvRykZqahsRM0VQoPLCYYNfC1yyS358fE8muRhEDA=)
                          7: 322e35392e36302e302f32342d3234203d3e203631333137.roa (hash: BBdnQvjsMGsAKdV0CMmUgkUx9rKK17g08iyDVXfqF5c=)
                          8: 3139342e33312e3139352e302f32342d3234203d3e20323133363638.roa (hash: tD4GyhGOomU4ZODP9QGqyOztFfw1vKOkCjucViT/SZg=)
                          9: 36322e332e32302e302f32342d3234203d3e20323135313532.roa (hash: K3GEYfrcdLJt/Pv1pZTdwz6yJZqY0yfvXEhbrZ66rqc=)
                          10: 38352e3230392e3232382e302f32342d3234203d3e203230343733.roa (hash: LvALS0QzJUIn2y2aM1WJBNeefzd38B8yBzedKpN4nB8=)
                          11: 34352e382e3231362e302f32342d3234203d3e20323132333834.roa (hash: A1j+LbNuBb8MeFvlQDvvVkVer3lHzQ8b3CPtY22jros=)
                          12: 3139342e33312e3139372e302f32342d3234203d3e203432383331.roa (hash: KMAsq44hIBrFB+eRrhhDssa2B+eAZmGDL1feRYL/R5o=)
                          13: 3139342e33312e3139362e302f32342d3234203d3e20323030303137.roa (hash: +5av7/JwxJ2GdszhVyEajY1bsnLhd2JhS01B+/f5cdU=)
                          14: 352e3138312e3138342e302f32342d3234203d3e20323131333733.roa (hash: HxZ7OQY4wmmok4f1jyMFC6WkeyQaBhCRYtiYzwz8qYg=)
                          15: 38352e3230392e3233302e302f32342d3234203d3e203138313836.roa (hash: +OSq4m/6RpxEZih63506Gv6cOkBhW+YglqTPEKg/ZcM=)
                          16: 322e35392e36302e302f32342d3234203d3e20323132323338.roa (hash: hZ11O4/GfIQ3ZyUgAuxIn+0GkFLCBYYNN1OfZIqVDJk=)
                          17: 352e3138312e3138342e302f32342d3234203d3e20323132333335.roa (hash: UCQA4MebhnFRuGzYIjyz+Oaxw3thh569/39f5fjzuDM=)
                          18: 34352e39352e3231352e302f32342d3234203d3e203239383032.roa (hash: Q1OlQJwADffmDxnZKj7bvhSo1kOL5aXrHpMtVtZFtuQ=)
                          19: 38352e3230392e3233302e302f32342d3234203d3e20313430323234.roa (hash: X9S/vAQJZJ3+zexclWqp51kmLLKozc6jAta0ZYx43Ns=)
                          20: 34352e39352e3231342e302f32342d3234203d3e203434353437.roa (hash: 4mA1gqLsHB6B1P8mI+JnCzpqXJzdsvy8YAE1F7eD96c=)
                          21: 3139342e33312e3139362e302f32342d3234203d3e20313939373337.roa (hash: kk3tkqt3pEQIayEC5akWsEQ7ftglPpO+Tt2YC9Lk7HM=)
                          22: 352e3138312e3138372e302f32342d3234203d3e20323135373033.roa (hash: EJ6RmJBNoUg0c9WoYw2Ja1OnADVswQoLG/EoG0ZGnFE=)
                          23: 3134362e31392e3136372e302f32342d3234203d3e20313432313131.roa (hash: 1cwuvx0f/bXZ/DwexRmaaQu0tTmkULuIbOfrQVnX4ao=)
                          24: 322e35392e36322e302f32342d3234203d3e203633303233.roa (hash: /Ku1phd3ouPkx4ZDyzwkq+GI0U8NGNl14wVu1lc6q1k=)
                          25: 34352e39352e3231352e302f32342d3234203d3e203631333137.roa (hash: jtw5h4s7N892mHMRX7q1v9D/8tuL7heVW+cms9i1OJM=)
                          26: 322e35392e36322e302f32342d3234203d3e20313432313131.roa (hash: c23s9WCLyWR8C29b7voS/R0hWodZcVrxRN5kAioljng=)
                          27: 34352e382e3231382e302f32342d3234203d3e20323132333834.roa (hash: tj3yrp12EwOeT1ZEKtZIphksitaxnh11pc39cLh8XvY=)
                          28: 34352e39352e3231322e302f32322d3232203d3e2037303239.roa (hash: b3HfoeSSJnwEFBW/P8/Hh1DNPoifdQtxChWclKR01cY=)
                          29: 322e35392e36332e302f32342d3234203d3e20383334.roa (hash: 8DqvUUgTHwg4fnhfYD2q3DFHCSCucv2RToLFRdMK/4s=)
                          30: 38352e3230392e3232392e302f32342d3234203d3e203432383331.roa (hash: vjpMNqLq25F9up6mT05GhHQJMJ0KbktUxvDSn9v6kBA=)
                          31: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl (hash: K5JMCfQUdlR1+zjztbO63461bITwv5eJN0bIlq+Kduw=)
                          32: 34352e39352e3231332e302f32342d3234203d3e20343030303339.roa (hash: XrIv1BWbF+to8I3saogND52oHBVFoDY38lWpbUFLA6o=)
                          33: 34352e39352e3231322e302f32342d3234203d3e20323039353534.roa (hash: 9IsmuufWVjFLEbYLLcJg7Yp7+j5DqB4kK41/uY19nMQ=)
                          34: 352e3138312e3138362e302f32342d3234203d3e20323036313530.roa (hash: QGg1o/UsEXwX7QWOmnciGR0lfU5zaV2UWyNlVxa/Ka8=)
                          35: 38352e3230392e3233312e302f32342d3234203d3e203135343430.roa (hash: 5P7OofszcYzyRXLoqtlNETBM0YQubML8godGGz1Zc2U=)
                          36: 352e3138312e3138352e302f32342d3234203d3e20323132333834.roa (hash: erSH6Mf15T5HOlDb5lpbU/Ku2eMK+cc/6OxLysGJmP4=)
                          37: 3139342e33312e3139352e302f32342d3234203d3e203334393933.roa (hash: /RrqrRO8J+Vsp3FaP0KZwFzXiRmxrRbyseKOqWdHYpY=)
                          38: 38352e3230392e3233302e302f32342d3234203d3e203633393032.roa (hash: P3VDMMBoXLUjrVK3m58S6qhassJbF7wO/iSY6p4T2ZU=)
                          39: 3139342e33312e3139352e302f32342d3234203d3e203132383236.roa (hash: dZ5pA0FTXTMIyebmvvTrXa2pwRmRVDj8qy5ZN+EkpPo=)
                          40: 34352e382e3231392e302f32342d3234203d3e2039303039.roa (hash: 0zn1M6udTfOcCIE/Cifu6WDNTkQzSgcujlgX6HE4/sQ=)
                          41: 3134362e31392e33382e302f32342d3234203d3e20313939363534.roa (hash: KCPy6uAOav6R+jmrUTgTpbZkeje3mnKOXa6FXDMEhhE=)
                          42: 322e35392e36312e302f32342d3234203d3e203438323636.roa (hash: 6dfl8lI1/2dWL8ffIUYhSFUUS7mSu5VjjS42Z8HkW7c=)
                          43: 3139342e33312e3139342e302f32342d3234203d3e203339333638.roa (hash: qMisc8M9fAgiB1zw7/Tn0y61M2FDJt3sqCMkzKcplhA=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Feb 2026 20:59:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:4b:e3:23:39:50:34:e6:c0:10:2a:1e:58:94:52:38:82:2f:bb:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
        Validity
            Not Before: Feb  8 19:11:06 2026 GMT
            Not After : Feb  9 20:59:06 2026 GMT
        Subject: CN=B271F2E99F0B7006674039B0C76DEC3F61747207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:bf:d8:6f:39:3f:d8:2c:b7:77:f5:6d:91:b3:
                    9f:a9:38:c5:b0:eb:9e:4b:da:19:3c:39:be:66:0f:
                    04:a2:bd:a7:18:8c:b3:c7:f8:47:a2:4e:15:42:f4:
                    99:1e:d0:36:63:a7:0d:dd:b7:a5:4f:c3:78:2d:9e:
                    1e:fb:0b:9e:66:2a:24:2c:4b:f8:7a:a1:75:6d:77:
                    99:a7:6b:8b:7d:5d:7a:60:f3:43:5e:d2:9b:06:55:
                    7c:ed:28:75:aa:75:87:46:55:8e:a7:fa:d4:5d:25:
                    c5:7f:b0:1b:b8:3f:85:cb:9f:6a:51:57:6a:1f:25:
                    48:26:ad:9f:8c:e9:68:9b:7a:5e:82:ba:0c:49:0a:
                    f6:36:13:cc:a1:11:f5:c4:e6:d1:ea:c0:a3:56:3c:
                    4e:9e:f2:40:18:d9:fb:a7:61:d6:1e:85:98:f5:69:
                    0e:fc:7a:74:a5:03:52:46:09:74:50:49:fa:70:bb:
                    d5:bf:f3:98:2d:bf:9a:e1:57:ca:d1:6d:8f:90:38:
                    2f:e4:85:18:6b:87:43:e3:e3:cf:16:d5:18:dd:99:
                    a8:33:3e:71:0e:a1:54:9b:9a:58:5c:c4:c6:1f:5c:
                    fa:f2:b0:ea:a9:6c:10:77:74:60:a0:b3:a5:02:3f:
                    85:08:f4:03:db:1e:57:c0:52:3d:35:28:a0:71:60:
                    c0:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:71:F2:E9:9F:0B:70:06:67:40:39:B0:C7:6D:EC:3F:61:74:72:07
            X509v3 Authority Key Identifier:
                keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:94:08:d9:d0:b0:b9:5d:58:a8:48:cf:8b:a8:12:a2:24:c0:
         74:81:69:ec:8f:e4:b0:00:9b:4c:e9:ad:e7:45:9f:c5:22:c4:
         1e:b1:f1:0d:ec:0f:36:ee:a3:b6:bd:99:64:3f:61:c8:04:d6:
         1a:42:1f:d1:c3:b2:d4:3f:4f:c4:80:ac:92:9b:91:8f:64:80:
         e9:f1:da:ca:b9:18:d8:17:a2:f6:64:23:d9:9a:66:fc:8d:e0:
         f0:18:b9:15:57:92:f1:17:99:3c:cb:a5:09:5e:62:ac:eb:12:
         e0:dc:fa:9a:d1:be:6d:1d:71:ab:03:4d:38:ef:31:67:61:e0:
         fb:df:e8:b1:56:a4:62:68:54:41:eb:fd:e1:30:c2:e7:da:5b:
         ea:27:c0:18:32:6c:99:53:ae:ec:ec:51:4d:14:ca:03:56:fd:
         8e:51:f9:cf:26:12:a7:d4:ea:e4:fb:de:ea:a6:7e:2f:8b:41:
         a3:57:f8:25:9a:2b:ac:ba:2a:a7:03:17:85:cf:da:fd:05:ef:
         ff:0c:76:e9:f9:1a:11:ce:f4:4f:db:d2:98:ed:9f:aa:17:7a:
         e4:c5:cb:15:9c:4e:02:10:eb:a7:2d:66:3c:d4:1a:d3:2f:19:
         c3:3e:0f:52:21:a0:a9:95:30:f0:97:3e:3a:0c:89:8f:ee:84:
         90:2c:22:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 06:47:44 2026 by rpki-client