This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
File:                     A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft (raw, json)
Hash identifier:          kbAwWCpLGuz7YX75LOnaLKTXlbZIXLyy648vcNs7tzs=
Subject key identifier:   D2:79:A8:94:F5:71:1D:3F:F2:DE:EA:D9:67:1D:12:B4:D7:DB:5F:13
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Certificate issuer:       /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial:       25B5F723BF7D53EBDD2DDC4A35A71696551742AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
Manifest number:          067B
Signing time:             Fri 30 Jan 2026 22:09:44 +0000
Manifest this update:     Fri 30 Jan 2026 22:04:44 +0000
Manifest next update:     Sat 31 Jan 2026 22:59:44 +0000
Files and hashes:         1: 322e35392e36302e302f32342d3234203d3e20323132323338.roa (hash: hZ11O4/GfIQ3ZyUgAuxIn+0GkFLCBYYNN1OfZIqVDJk=)
                          2: 322e35392e36322e302f32342d3234203d3e203633303233.roa (hash: /Ku1phd3ouPkx4ZDyzwkq+GI0U8NGNl14wVu1lc6q1k=)
                          3: 352e3138312e3138342e302f32342d3234203d3e20323132333335.roa (hash: UCQA4MebhnFRuGzYIjyz+Oaxw3thh569/39f5fjzuDM=)
                          4: 3139342e33312e3139362e302f32342d3234203d3e20313939373337.roa (hash: kk3tkqt3pEQIayEC5akWsEQ7ftglPpO+Tt2YC9Lk7HM=)
                          5: 3134362e31392e3136372e302f32342d3234203d3e20313532363732.roa (hash: 1EdzND/a/KltqRlIJaQnMPD7XH7CVfxCNY9eyK9ocYU=)
                          6: 34352e39352e3231332e302f32342d3234203d3e20343030303339.roa (hash: XrIv1BWbF+to8I3saogND52oHBVFoDY38lWpbUFLA6o=)
                          7: 36322e332e32302e302f32342d3234203d3e20323135313532.roa (hash: K3GEYfrcdLJt/Pv1pZTdwz6yJZqY0yfvXEhbrZ66rqc=)
                          8: 3134362e31392e3136372e302f32342d3234203d3e20313432313131.roa (hash: 1cwuvx0f/bXZ/DwexRmaaQu0tTmkULuIbOfrQVnX4ao=)
                          9: 3139342e33312e3139352e302f32342d3234203d3e203132383236.roa (hash: dZ5pA0FTXTMIyebmvvTrXa2pwRmRVDj8qy5ZN+EkpPo=)
                          10: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl (hash: Pi00+eF22ukQKPspogtwEpTuRvwcIRjtSIS9mgxRKwo=)
                          11: 322e35392e36312e302f32342d3234203d3e203438323636.roa (hash: 6dfl8lI1/2dWL8ffIUYhSFUUS7mSu5VjjS42Z8HkW7c=)
                          12: 322e35392e36302e302f32342d3234203d3e203631333137.roa (hash: BBdnQvjsMGsAKdV0CMmUgkUx9rKK17g08iyDVXfqF5c=)
                          13: 34352e39352e3231322e302f32342d3234203d3e20323039353534.roa (hash: 9IsmuufWVjFLEbYLLcJg7Yp7+j5DqB4kK41/uY19nMQ=)
                          14: 36322e332e32302e302f32342d3234203d3e203231383539.roa (hash: Rro+Gx/ym8oazWi/ZTJ2dg2MGKpj7/78mNky+1y7VfU=)
                          15: 3139342e33312e3139352e302f32342d3234203d3e20323133363638.roa (hash: tD4GyhGOomU4ZODP9QGqyOztFfw1vKOkCjucViT/SZg=)
                          16: 3134362e31392e33382e302f32342d3234203d3e20313939363534.roa (hash: KCPy6uAOav6R+jmrUTgTpbZkeje3mnKOXa6FXDMEhhE=)
                          17: 38352e3230392e3233312e302f32342d3234203d3e203135343430.roa (hash: 5P7OofszcYzyRXLoqtlNETBM0YQubML8godGGz1Zc2U=)
                          18: 3139342e33312e3139352e302f32342d3234203d3e203334393933.roa (hash: /RrqrRO8J+Vsp3FaP0KZwFzXiRmxrRbyseKOqWdHYpY=)
                          19: 34352e382e3231392e302f32342d3234203d3e2039303039.roa (hash: 0zn1M6udTfOcCIE/Cifu6WDNTkQzSgcujlgX6HE4/sQ=)
                          20: 34352e39352e3231342e302f32342d3234203d3e20323136303939.roa (hash: D/Nmap/PxRG4O5COkUTsliUnadwaB6xsHT4TvPGKFlQ=)
                          21: 34352e39352e3231352e302f32342d3234203d3e203239383032.roa (hash: Q1OlQJwADffmDxnZKj7bvhSo1kOL5aXrHpMtVtZFtuQ=)
                          22: 352e3138312e3138352e302f32342d3234203d3e20323132333834.roa (hash: erSH6Mf15T5HOlDb5lpbU/Ku2eMK+cc/6OxLysGJmP4=)
                          23: 34352e39352e3231342e302f32342d3234203d3e203434353437.roa (hash: 4mA1gqLsHB6B1P8mI+JnCzpqXJzdsvy8YAE1F7eD96c=)
                          24: 34352e39352e3231352e302f32342d3234203d3e203631333137.roa (hash: jtw5h4s7N892mHMRX7q1v9D/8tuL7heVW+cms9i1OJM=)
                          25: 352e3138312e3138342e302f32342d3234203d3e20323131333733.roa (hash: HxZ7OQY4wmmok4f1jyMFC6WkeyQaBhCRYtiYzwz8qYg=)
                          26: 38352e3230392e3233302e302f32342d3234203d3e20313430323234.roa (hash: X9S/vAQJZJ3+zexclWqp51kmLLKozc6jAta0ZYx43Ns=)
                          27: 322e35392e36322e302f32342d3234203d3e20313432313131.roa (hash: c23s9WCLyWR8C29b7voS/R0hWodZcVrxRN5kAioljng=)
                          28: 38352e3230392e3233302e302f32342d3234203d3e203633393032.roa (hash: P3VDMMBoXLUjrVK3m58S6qhassJbF7wO/iSY6p4T2ZU=)
                          29: 352e3138312e3138372e302f32342d3234203d3e20323135373033.roa (hash: EJ6RmJBNoUg0c9WoYw2Ja1OnADVswQoLG/EoG0ZGnFE=)
                          30: 322e35392e36332e302f32342d3234203d3e20383334.roa (hash: 8DqvUUgTHwg4fnhfYD2q3DFHCSCucv2RToLFRdMK/4s=)
                          31: 352e3138312e3138362e302f32342d3234203d3e20323036313530.roa (hash: QGg1o/UsEXwX7QWOmnciGR0lfU5zaV2UWyNlVxa/Ka8=)
                          32: 38352e3230392e3232392e302f32342d3234203d3e203432383331.roa (hash: vjpMNqLq25F9up6mT05GhHQJMJ0KbktUxvDSn9v6kBA=)
                          33: 3139342e33312e3139372e302f32342d3234203d3e203432383331.roa (hash: KMAsq44hIBrFB+eRrhhDssa2B+eAZmGDL1feRYL/R5o=)
                          34: 352e3138312e3138352e302f32342d3234203d3e20323131333733.roa (hash: 2IzUCrtAIyuz9E3rWXqOgG5uo4suNn7bGWeOLhfOKvg=)
                          35: 38352e3230392e3233302e302f32342d3234203d3e203138313836.roa (hash: +OSq4m/6RpxEZih63506Gv6cOkBhW+YglqTPEKg/ZcM=)
                          36: 3134362e31392e33382e302f32342d3234203d3e203136323736.roa (hash: norYvgZGO2Imho4UnQcnY8UITUyuaQwpwpHqXsoPDao=)
                          37: 34352e382e3231372e302f32342d3234203d3e20323136303232.roa (hash: 8eRvRykZqahsRM0VQoPLCYYNfC1yyS358fE8muRhEDA=)
                          38: 34352e39352e3231322e302f32322d3232203d3e2037303239.roa (hash: b3HfoeSSJnwEFBW/P8/Hh1DNPoifdQtxChWclKR01cY=)
                          39: 38352e3230392e3232382e302f32342d3234203d3e203230343733.roa (hash: LvALS0QzJUIn2y2aM1WJBNeefzd38B8yBzedKpN4nB8=)
                          40: 3139342e33312e3139362e302f32342d3234203d3e20323030303137.roa (hash: +5av7/JwxJ2GdszhVyEajY1bsnLhd2JhS01B+/f5cdU=)
                          41: 34352e382e3231382e302f32342d3234203d3e20323132333834.roa (hash: tj3yrp12EwOeT1ZEKtZIphksitaxnh11pc39cLh8XvY=)
                          42: 34352e382e3231362e302f32342d3234203d3e20323132333834.roa (hash: A1j+LbNuBb8MeFvlQDvvVkVer3lHzQ8b3CPtY22jros=)
                          43: 3139342e33312e3139342e302f32342d3234203d3e203339333638.roa (hash: qMisc8M9fAgiB1zw7/Tn0y61M2FDJt3sqCMkzKcplhA=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Jan 2026 15:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:b5:f7:23:bf:7d:53:eb:dd:2d:dc:4a:35:a7:16:96:55:17:42:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
        Validity
            Not Before: Jan 30 22:04:44 2026 GMT
            Not After : Jan 31 22:59:44 2026 GMT
        Subject: CN=D279A894F5711D3FF2DEEAD9671D12B4D7DB5F13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f3:64:71:78:1f:a1:a7:89:60:ec:9e:5e:cf:
                    5f:ef:3c:b3:67:bf:09:88:17:d9:f1:7c:b1:3e:c5:
                    a4:d8:9b:af:ad:51:d4:33:fb:c4:15:2e:e9:fd:b4:
                    1a:d0:0d:6c:84:d9:b8:8d:b0:75:82:3f:ef:a2:a1:
                    6b:b1:7b:a5:e6:d6:ab:63:d6:f5:19:5f:20:9a:9c:
                    ae:af:3e:80:5e:65:86:26:00:c9:35:ed:2f:41:73:
                    cd:7e:5b:49:fa:7f:3b:59:21:e9:13:56:58:4f:b9:
                    81:d4:d9:b5:9a:be:f7:e2:a2:ee:ce:3b:77:92:43:
                    46:d8:6e:fd:13:42:fd:60:8e:c7:b3:06:06:64:c8:
                    0b:f9:f8:d7:52:3a:04:72:51:94:03:fb:c9:36:e1:
                    07:04:1a:16:8f:e8:a5:e5:83:ba:7f:14:e8:d4:a0:
                    07:82:aa:ca:78:f3:30:a9:e4:e2:b0:43:7b:6e:99:
                    33:be:d1:8f:c3:30:0a:f0:e6:ad:b9:92:ab:75:ba:
                    5b:36:21:61:a2:df:2a:b2:98:58:bd:e4:18:87:81:
                    2c:4f:b1:f4:54:76:e8:fb:53:85:6f:c0:11:b3:ab:
                    1e:7d:b8:ac:62:fb:dd:ae:51:8b:cc:37:29:b6:3c:
                    fe:e4:60:f8:4c:50:93:9b:aa:9c:08:ec:b0:25:1b:
                    bf:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:79:A8:94:F5:71:1D:3F:F2:DE:EA:D9:67:1D:12:B4:D7:DB:5F:13
            X509v3 Authority Key Identifier:
                keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:4a:40:b5:52:c1:9a:f6:e5:5a:b8:88:13:da:59:40:fc:f5:
         4f:04:a1:53:2c:a0:e6:8b:65:7f:34:c3:75:50:fc:97:c1:b7:
         c3:d1:67:9d:1a:0a:3c:63:03:04:d8:59:29:7c:36:56:91:83:
         86:6b:4f:32:74:20:b2:86:95:c1:a8:ca:72:eb:14:d6:4b:6f:
         67:6e:33:7e:06:06:ce:36:c4:5e:b8:9c:36:a0:ba:f1:fa:90:
         79:94:25:0c:50:2b:3d:7c:0e:e3:3b:d1:39:84:5a:99:95:6e:
         46:68:71:cd:81:15:f7:76:a0:69:65:b3:11:09:13:ce:44:cc:
         7b:85:cd:fd:5a:f3:27:c2:b9:be:6d:ca:ee:1d:b5:be:51:04:
         29:38:d0:41:59:86:e9:5a:31:e6:f4:ed:5b:82:4c:65:de:1c:
         9a:e7:d6:d0:5c:e5:81:09:6a:e0:9e:e9:32:2e:dc:42:c6:a1:
         4f:d2:22:b2:34:87:1e:4c:95:c4:a8:41:c8:e3:d8:b8:84:38:
         b3:de:9a:ac:9c:f5:d2:fc:ee:ac:12:ae:57:e3:da:8c:46:6c:
         2f:f8:c5:ba:9d:ea:c7:c7:c4:01:8b:54:c6:6f:f9:e0:21:ef:
         86:7f:b5:47:79:77:32:c8:2d:0e:71:ca:54:31:70:7d:14:a3:
         bd:c3:e2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 31 00:27:16 2026 by rpki-client