This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
File:                     A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft (raw, json)
Hash identifier:          WViB31gbdAi/xLIIo86/cOn8YpABkx99CCC0KJMEKVY=
Subject key identifier:   EF:94:B6:F2:FA:F9:5B:C7:77:99:20:98:ED:2E:CD:E2:1B:6A:C5:F3
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Certificate issuer:       /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial:       3CC9695F000F3C4E8AC6853CBFD4E4F55AEEABD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
Manifest number:          0688
Signing time:             Mon 09 Feb 2026 13:01:40 +0000
Manifest this update:     Mon 09 Feb 2026 12:56:40 +0000
Manifest next update:     Tue 10 Feb 2026 16:48:40 +0000
Files and hashes:         1: 352e3138312e3138352e302f32342d3234203d3e20323131333733.roa (hash: 2IzUCrtAIyuz9E3rWXqOgG5uo4suNn7bGWeOLhfOKvg=)
                          2: 34352e382e3231362e302f32342d3234203d3e20323132333834.roa (hash: A1j+LbNuBb8MeFvlQDvvVkVer3lHzQ8b3CPtY22jros=)
                          3: 352e3138312e3138352e302f32342d3234203d3e20323132333834.roa (hash: erSH6Mf15T5HOlDb5lpbU/Ku2eMK+cc/6OxLysGJmP4=)
                          4: 34352e382e3231392e302f32342d3234203d3e2039303039.roa (hash: 0zn1M6udTfOcCIE/Cifu6WDNTkQzSgcujlgX6HE4/sQ=)
                          5: 322e35392e36322e302f32342d3234203d3e203633303233.roa (hash: /Ku1phd3ouPkx4ZDyzwkq+GI0U8NGNl14wVu1lc6q1k=)
                          6: 36322e332e32302e302f32342d3234203d3e20323135313532.roa (hash: K3GEYfrcdLJt/Pv1pZTdwz6yJZqY0yfvXEhbrZ66rqc=)
                          7: 352e3138312e3138342e302f32342d3234203d3e20323132333335.roa (hash: UCQA4MebhnFRuGzYIjyz+Oaxw3thh569/39f5fjzuDM=)
                          8: 34352e39352e3231342e302f32342d3234203d3e203434353437.roa (hash: 4mA1gqLsHB6B1P8mI+JnCzpqXJzdsvy8YAE1F7eD96c=)
                          9: 38352e3230392e3233302e302f32342d3234203d3e20313430323234.roa (hash: X9S/vAQJZJ3+zexclWqp51kmLLKozc6jAta0ZYx43Ns=)
                          10: 352e3138312e3138372e302f32342d3234203d3e20323135373033.roa (hash: EJ6RmJBNoUg0c9WoYw2Ja1OnADVswQoLG/EoG0ZGnFE=)
                          11: 3139342e33312e3139362e302f32342d3234203d3e20323030303137.roa (hash: +5av7/JwxJ2GdszhVyEajY1bsnLhd2JhS01B+/f5cdU=)
                          12: 34352e382e3231372e302f32342d3234203d3e20323136303232.roa (hash: 8eRvRykZqahsRM0VQoPLCYYNfC1yyS358fE8muRhEDA=)
                          13: 352e3138312e3138342e302f32342d3234203d3e20323131333733.roa (hash: HxZ7OQY4wmmok4f1jyMFC6WkeyQaBhCRYtiYzwz8qYg=)
                          14: 322e35392e36312e302f32342d3234203d3e203438323636.roa (hash: 6dfl8lI1/2dWL8ffIUYhSFUUS7mSu5VjjS42Z8HkW7c=)
                          15: 322e35392e36322e302f32342d3234203d3e20313432313131.roa (hash: c23s9WCLyWR8C29b7voS/R0hWodZcVrxRN5kAioljng=)
                          16: 34352e39352e3231322e302f32342d3234203d3e20323039353534.roa (hash: 9IsmuufWVjFLEbYLLcJg7Yp7+j5DqB4kK41/uY19nMQ=)
                          17: 322e35392e36302e302f32342d3234203d3e20323132323338.roa (hash: hZ11O4/GfIQ3ZyUgAuxIn+0GkFLCBYYNN1OfZIqVDJk=)
                          18: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl (hash: n/G6BCwYQBDX/0hjMnGwqGbg8gJo5B0ghdUhtKcMD6s=)
                          19: 36322e332e32302e302f32342d3234203d3e203231383539.roa (hash: Rro+Gx/ym8oazWi/ZTJ2dg2MGKpj7/78mNky+1y7VfU=)
                          20: 3134362e31392e33382e302f32342d3234203d3e203136323736.roa (hash: norYvgZGO2Imho4UnQcnY8UITUyuaQwpwpHqXsoPDao=)
                          21: 322e35392e36332e302f32342d3234203d3e20383334.roa (hash: 8DqvUUgTHwg4fnhfYD2q3DFHCSCucv2RToLFRdMK/4s=)
                          22: 34352e39352e3231352e302f32342d3234203d3e203631333137.roa (hash: jtw5h4s7N892mHMRX7q1v9D/8tuL7heVW+cms9i1OJM=)
                          23: 3139342e33312e3139352e302f32342d3234203d3e20323133363638.roa (hash: tD4GyhGOomU4ZODP9QGqyOztFfw1vKOkCjucViT/SZg=)
                          24: 34352e39352e3231342e302f32342d3234203d3e20323136303939.roa (hash: D/Nmap/PxRG4O5COkUTsliUnadwaB6xsHT4TvPGKFlQ=)
                          25: 3139342e33312e3139352e302f32342d3234203d3e203132383236.roa (hash: dZ5pA0FTXTMIyebmvvTrXa2pwRmRVDj8qy5ZN+EkpPo=)
                          26: 3139342e33312e3139342e302f32342d3234203d3e203339333638.roa (hash: qMisc8M9fAgiB1zw7/Tn0y61M2FDJt3sqCMkzKcplhA=)
                          27: 352e3138312e3138362e302f32342d3234203d3e20323036313530.roa (hash: QGg1o/UsEXwX7QWOmnciGR0lfU5zaV2UWyNlVxa/Ka8=)
                          28: 34352e39352e3231332e302f32342d3234203d3e20343030303339.roa (hash: XrIv1BWbF+to8I3saogND52oHBVFoDY38lWpbUFLA6o=)
                          29: 34352e39352e3231322e302f32322d3232203d3e2037303239.roa (hash: b3HfoeSSJnwEFBW/P8/Hh1DNPoifdQtxChWclKR01cY=)
                          30: 3139342e33312e3139352e302f32342d3234203d3e203334393933.roa (hash: /RrqrRO8J+Vsp3FaP0KZwFzXiRmxrRbyseKOqWdHYpY=)
                          31: 3139342e33312e3139372e302f32342d3234203d3e203432383331.roa (hash: KMAsq44hIBrFB+eRrhhDssa2B+eAZmGDL1feRYL/R5o=)
                          32: 3134362e31392e3136372e302f32342d3234203d3e20313532363732.roa (hash: 1EdzND/a/KltqRlIJaQnMPD7XH7CVfxCNY9eyK9ocYU=)
                          33: 3139342e33312e3139362e302f32342d3234203d3e20313939373337.roa (hash: kk3tkqt3pEQIayEC5akWsEQ7ftglPpO+Tt2YC9Lk7HM=)
                          34: 322e35392e36302e302f32342d3234203d3e203631333137.roa (hash: BBdnQvjsMGsAKdV0CMmUgkUx9rKK17g08iyDVXfqF5c=)
                          35: 38352e3230392e3233312e302f32342d3234203d3e203135343430.roa (hash: 5P7OofszcYzyRXLoqtlNETBM0YQubML8godGGz1Zc2U=)
                          36: 3134362e31392e3136372e302f32342d3234203d3e20313432313131.roa (hash: 1cwuvx0f/bXZ/DwexRmaaQu0tTmkULuIbOfrQVnX4ao=)
                          37: 34352e39352e3231352e302f32342d3234203d3e203239383032.roa (hash: Q1OlQJwADffmDxnZKj7bvhSo1kOL5aXrHpMtVtZFtuQ=)
                          38: 38352e3230392e3233302e302f32342d3234203d3e203138313836.roa (hash: +OSq4m/6RpxEZih63506Gv6cOkBhW+YglqTPEKg/ZcM=)
                          39: 3134362e31392e33382e302f32342d3234203d3e20313939363534.roa (hash: KCPy6uAOav6R+jmrUTgTpbZkeje3mnKOXa6FXDMEhhE=)
                          40: 38352e3230392e3232382e302f32342d3234203d3e203230343733.roa (hash: LvALS0QzJUIn2y2aM1WJBNeefzd38B8yBzedKpN4nB8=)
                          41: 38352e3230392e3232392e302f32342d3234203d3e203432383331.roa (hash: vjpMNqLq25F9up6mT05GhHQJMJ0KbktUxvDSn9v6kBA=)
                          42: 34352e382e3231382e302f32342d3234203d3e20323132333834.roa (hash: tj3yrp12EwOeT1ZEKtZIphksitaxnh11pc39cLh8XvY=)
                          43: 38352e3230392e3233302e302f32342d3234203d3e203633393032.roa (hash: P3VDMMBoXLUjrVK3m58S6qhassJbF7wO/iSY6p4T2ZU=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 16:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:c9:69:5f:00:0f:3c:4e:8a:c6:85:3c:bf:d4:e4:f5:5a:ee:ab:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
        Validity
            Not Before: Feb  9 12:56:40 2026 GMT
            Not After : Feb 10 16:48:40 2026 GMT
        Subject: CN=EF94B6F2FAF95BC777992098ED2ECDE21B6AC5F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:eb:ed:84:30:7b:78:7e:b7:92:5b:da:4a:65:
                    1a:ef:7d:83:9f:4f:bf:98:fd:85:6e:8f:de:6d:d7:
                    69:f0:2c:0e:03:85:64:6b:c8:3e:fb:ac:d0:66:cd:
                    83:eb:f8:b3:b3:68:1e:be:c3:b7:87:58:c7:09:74:
                    08:1f:9c:a8:02:1e:36:cf:d9:55:e0:63:56:27:31:
                    f2:41:4a:1e:82:71:85:76:3a:f9:a7:00:6c:b0:1f:
                    7a:42:12:a4:f8:2b:55:6a:70:db:8c:cd:8f:57:4c:
                    e9:6b:86:7f:82:18:8b:63:84:b0:11:95:41:36:d1:
                    a2:9d:b8:9b:5b:94:41:39:02:00:2a:37:ba:2d:82:
                    34:4c:65:27:43:b3:69:82:7d:05:a2:05:a4:c2:c0:
                    b1:38:84:48:3a:e9:25:f8:c2:0e:98:1c:ca:10:37:
                    38:cd:3e:b6:9e:ac:af:33:26:4e:35:be:a8:cb:33:
                    1d:43:93:e8:3a:25:3a:af:e4:7a:d9:5e:19:2a:a2:
                    9b:bc:78:e4:13:c9:d6:92:90:df:50:a0:c2:6d:f6:
                    2c:3e:48:8d:84:cc:73:85:ef:ad:81:85:97:c4:46:
                    55:91:a3:e5:dd:88:bc:b0:22:5e:80:ad:5e:78:0c:
                    2d:78:63:30:f0:af:8c:fb:c7:47:71:59:89:70:24:
                    d1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:94:B6:F2:FA:F9:5B:C7:77:99:20:98:ED:2E:CD:E2:1B:6A:C5:F3
            X509v3 Authority Key Identifier:
                keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:67:b8:91:94:db:33:df:93:32:43:0c:0d:93:eb:55:73:33:
         32:9a:72:9b:b8:ec:d9:4c:48:5f:ea:cc:68:2e:61:2c:ad:0c:
         d8:16:ca:50:68:27:db:f3:e2:1f:14:0c:df:89:12:97:1f:b5:
         b0:df:00:67:18:ff:e3:f7:76:9a:0b:22:1b:23:fc:2e:b1:80:
         ce:b7:59:8c:e4:c7:27:c5:f2:ed:9c:2a:21:a1:a7:a3:7f:aa:
         56:5a:bd:7d:21:24:68:63:8a:a7:ea:67:7a:6c:db:9b:2e:69:
         c2:4b:60:2f:e4:70:d7:aa:33:f9:3a:78:4a:0a:37:1b:bf:0b:
         f3:56:7d:e5:b0:f0:15:9f:98:4a:9e:8e:83:2f:53:70:e1:4a:
         fe:8c:5b:70:77:91:f8:c8:21:c5:2b:2c:12:fd:c0:10:32:c5:
         4c:66:1c:05:4e:ca:f1:19:e4:69:76:d9:c5:1a:8b:96:15:0d:
         f5:76:f3:b3:d7:ce:7e:72:2e:72:71:97:8f:d9:5c:4f:3a:1d:
         3b:8b:f7:2c:df:f5:9b:ee:d2:64:dc:40:75:f7:69:27:30:d6:
         d4:2c:69:1f:ac:c3:22:6a:56:ce:e4:50:ca:58:d9:a8:3d:e1:
         1f:ec:73:92:5e:1e:32:a9:98:2b:2d:fc:4f:8a:93:60:d2:bc:
         a1:8b:08:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 06:39:54 2026 by rpki-client