This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
File:                     A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft (raw, json)
Hash identifier:          X4jzWSSZfx+SFh+9A50UcIWLGC14P4jU5sFEuddHB7M=
Subject key identifier:   B2:3E:D9:D3:70:6D:F1:03:54:E4:7D:91:DF:56:2B:01:32:5A:A7:1B
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Certificate issuer:       /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial:       338D91EF172075CAA73118E341BE826BEC8CE173
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
Manifest number:          0668
Signing time:             Fri 16 Jan 2026 07:00:13 +0000
Manifest this update:     Fri 16 Jan 2026 06:55:13 +0000
Manifest next update:     Sat 17 Jan 2026 07:35:13 +0000
Files and hashes:         1: 34352e39352e3231342e302f32342d3234203d3e203434353437.roa (hash: 4mA1gqLsHB6B1P8mI+JnCzpqXJzdsvy8YAE1F7eD96c=)
                          2: 352e3138312e3138352e302f32342d3234203d3e20323131333733.roa (hash: 2IzUCrtAIyuz9E3rWXqOgG5uo4suNn7bGWeOLhfOKvg=)
                          3: 3134362e31392e3136372e302f32342d3234203d3e20313432313131.roa (hash: 1cwuvx0f/bXZ/DwexRmaaQu0tTmkULuIbOfrQVnX4ao=)
                          4: 322e35392e36332e302f32342d3234203d3e20383334.roa (hash: 8DqvUUgTHwg4fnhfYD2q3DFHCSCucv2RToLFRdMK/4s=)
                          5: 34352e39352e3231352e302f32342d3234203d3e203239383032.roa (hash: Q1OlQJwADffmDxnZKj7bvhSo1kOL5aXrHpMtVtZFtuQ=)
                          6: 322e35392e36322e302f32342d3234203d3e20313432313131.roa (hash: c23s9WCLyWR8C29b7voS/R0hWodZcVrxRN5kAioljng=)
                          7: 34352e39352e3231342e302f32342d3234203d3e20323136303939.roa (hash: D/Nmap/PxRG4O5COkUTsliUnadwaB6xsHT4TvPGKFlQ=)
                          8: 38352e3230392e3233302e302f32342d3234203d3e203138313836.roa (hash: +OSq4m/6RpxEZih63506Gv6cOkBhW+YglqTPEKg/ZcM=)
                          9: 352e3138312e3138372e302f32342d3234203d3e20323135373033.roa (hash: EJ6RmJBNoUg0c9WoYw2Ja1OnADVswQoLG/EoG0ZGnFE=)
                          10: 38352e3230392e3232392e302f32342d3234203d3e203432383331.roa (hash: vjpMNqLq25F9up6mT05GhHQJMJ0KbktUxvDSn9v6kBA=)
                          11: 38352e3230392e3232382e302f32342d3234203d3e203230343733.roa (hash: LvALS0QzJUIn2y2aM1WJBNeefzd38B8yBzedKpN4nB8=)
                          12: 352e3138312e3138342e302f32342d3234203d3e20323131333733.roa (hash: HxZ7OQY4wmmok4f1jyMFC6WkeyQaBhCRYtiYzwz8qYg=)
                          13: 3139342e33312e3139362e302f32342d3234203d3e20313939373337.roa (hash: kk3tkqt3pEQIayEC5akWsEQ7ftglPpO+Tt2YC9Lk7HM=)
                          14: 34352e382e3231362e302f32342d3234203d3e20323132333834.roa (hash: A1j+LbNuBb8MeFvlQDvvVkVer3lHzQ8b3CPtY22jros=)
                          15: 3139342e33312e3139372e302f32342d3234203d3e203432383331.roa (hash: KMAsq44hIBrFB+eRrhhDssa2B+eAZmGDL1feRYL/R5o=)
                          16: 322e35392e36312e302f32342d3234203d3e203438323636.roa (hash: 6dfl8lI1/2dWL8ffIUYhSFUUS7mSu5VjjS42Z8HkW7c=)
                          17: 3134362e31392e3136372e302f32342d3234203d3e20313532363732.roa (hash: 1EdzND/a/KltqRlIJaQnMPD7XH7CVfxCNY9eyK9ocYU=)
                          18: 34352e39352e3231322e302f32322d3232203d3e2037303239.roa (hash: b3HfoeSSJnwEFBW/P8/Hh1DNPoifdQtxChWclKR01cY=)
                          19: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl (hash: ExtHD/R7KeTYD+/ar7C+YHyjPPadUMfD+Nxyi4Dx9KQ=)
                          20: 352e3138312e3138352e302f32342d3234203d3e20323132333834.roa (hash: erSH6Mf15T5HOlDb5lpbU/Ku2eMK+cc/6OxLysGJmP4=)
                          21: 352e3138312e3138342e302f32342d3234203d3e20323132333335.roa (hash: UCQA4MebhnFRuGzYIjyz+Oaxw3thh569/39f5fjzuDM=)
                          22: 3139342e33312e3139362e302f32342d3234203d3e20323030303137.roa (hash: +5av7/JwxJ2GdszhVyEajY1bsnLhd2JhS01B+/f5cdU=)
                          23: 34352e382e3231382e302f32342d3234203d3e20323132333834.roa (hash: tj3yrp12EwOeT1ZEKtZIphksitaxnh11pc39cLh8XvY=)
                          24: 3139342e33312e3139342e302f32342d3234203d3e203339333638.roa (hash: qMisc8M9fAgiB1zw7/Tn0y61M2FDJt3sqCMkzKcplhA=)
                          25: 34352e39352e3231352e302f32342d3234203d3e203631333137.roa (hash: jtw5h4s7N892mHMRX7q1v9D/8tuL7heVW+cms9i1OJM=)
                          26: 34352e39352e3231332e302f32342d3234203d3e20343030303339.roa (hash: XrIv1BWbF+to8I3saogND52oHBVFoDY38lWpbUFLA6o=)
                          27: 3134362e31392e33382e302f32342d3234203d3e20313939363534.roa (hash: KCPy6uAOav6R+jmrUTgTpbZkeje3mnKOXa6FXDMEhhE=)
                          28: 322e35392e36302e302f32342d3234203d3e20323132323338.roa (hash: hZ11O4/GfIQ3ZyUgAuxIn+0GkFLCBYYNN1OfZIqVDJk=)
                          29: 322e35392e36322e302f32342d3234203d3e203633303233.roa (hash: /Ku1phd3ouPkx4ZDyzwkq+GI0U8NGNl14wVu1lc6q1k=)
                          30: 34352e382e3231372e302f32342d3234203d3e20323136303232.roa (hash: 8eRvRykZqahsRM0VQoPLCYYNfC1yyS358fE8muRhEDA=)
                          31: 322e35392e36302e302f32342d3234203d3e203631333137.roa (hash: BBdnQvjsMGsAKdV0CMmUgkUx9rKK17g08iyDVXfqF5c=)
                          32: 38352e3230392e3233302e302f32342d3234203d3e20313430323234.roa (hash: X9S/vAQJZJ3+zexclWqp51kmLLKozc6jAta0ZYx43Ns=)
                          33: 38352e3230392e3233302e302f32342d3234203d3e203633393032.roa (hash: P3VDMMBoXLUjrVK3m58S6qhassJbF7wO/iSY6p4T2ZU=)
                          34: 38352e3230392e3233312e302f32342d3234203d3e203135343430.roa (hash: 5P7OofszcYzyRXLoqtlNETBM0YQubML8godGGz1Zc2U=)
                          35: 36322e332e32302e302f32342d3234203d3e20323135313532.roa (hash: K3GEYfrcdLJt/Pv1pZTdwz6yJZqY0yfvXEhbrZ66rqc=)
                          36: 3139342e33312e3139352e302f32342d3234203d3e20323133363638.roa (hash: tD4GyhGOomU4ZODP9QGqyOztFfw1vKOkCjucViT/SZg=)
                          37: 3139342e33312e3139352e302f32342d3234203d3e203132383236.roa (hash: dZ5pA0FTXTMIyebmvvTrXa2pwRmRVDj8qy5ZN+EkpPo=)
                          38: 36322e332e32302e302f32342d3234203d3e203231383539.roa (hash: Rro+Gx/ym8oazWi/ZTJ2dg2MGKpj7/78mNky+1y7VfU=)
                          39: 352e3138312e3138362e302f32342d3234203d3e20323036313530.roa (hash: QGg1o/UsEXwX7QWOmnciGR0lfU5zaV2UWyNlVxa/Ka8=)
                          40: 3139342e33312e3139352e302f32342d3234203d3e203334393933.roa (hash: /RrqrRO8J+Vsp3FaP0KZwFzXiRmxrRbyseKOqWdHYpY=)
                          41: 34352e39352e3231322e302f32342d3234203d3e20323039353534.roa (hash: 9IsmuufWVjFLEbYLLcJg7Yp7+j5DqB4kK41/uY19nMQ=)
                          42: 3134362e31392e33382e302f32342d3234203d3e203136323736.roa (hash: norYvgZGO2Imho4UnQcnY8UITUyuaQwpwpHqXsoPDao=)
                          43: 34352e382e3231392e302f32342d3234203d3e2039303039.roa (hash: 0zn1M6udTfOcCIE/Cifu6WDNTkQzSgcujlgX6HE4/sQ=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 Jan 2026 07:35:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:8d:91:ef:17:20:75:ca:a7:31:18:e3:41:be:82:6b:ec:8c:e1:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
        Validity
            Not Before: Jan 16 06:55:13 2026 GMT
            Not After : Jan 17 07:35:13 2026 GMT
        Subject: CN=B23ED9D3706DF10354E47D91DF562B01325AA71B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:5e:83:18:44:bc:fb:81:b7:dd:26:07:d8:72:
                    17:f7:b1:f9:2a:5a:1c:44:8c:28:84:e4:1b:9c:56:
                    d4:32:23:72:3e:78:bd:58:28:65:2f:9b:e0:5e:42:
                    db:30:5c:a3:ef:0b:0d:f2:57:60:4a:00:71:2a:7c:
                    93:d9:03:e3:e1:c6:96:cb:76:2a:97:0f:19:40:be:
                    19:5b:03:6d:89:8b:a9:d5:08:1b:c9:d7:b4:05:8c:
                    6e:3e:0a:95:df:bc:2a:91:15:b2:b8:d6:3e:46:8f:
                    4e:55:2c:b2:4b:9b:07:96:0e:b0:6b:80:d7:67:3a:
                    97:b5:01:ca:20:47:d6:4f:20:3e:db:f0:fc:1d:1a:
                    b3:d8:21:9d:98:c6:f0:92:04:70:09:66:65:f9:89:
                    2b:38:80:a9:6c:30:82:a7:09:e9:b0:b7:a1:6a:14:
                    eb:3a:4a:b9:24:a3:a3:55:08:39:a7:4b:90:b7:32:
                    c9:3f:ff:8d:90:99:b3:2e:ec:44:63:b9:a4:af:c0:
                    4b:ad:63:24:35:b9:36:a1:e3:92:1e:7b:89:92:20:
                    7e:fb:9a:09:7a:32:f3:d0:ae:df:2b:a5:3c:bf:61:
                    5f:07:f5:86:7d:d9:76:ef:11:33:0b:6e:85:76:3c:
                    46:b1:14:88:0b:0f:8e:11:13:de:e0:2b:bb:b2:a5:
                    ce:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:3E:D9:D3:70:6D:F1:03:54:E4:7D:91:DF:56:2B:01:32:5A:A7:1B
            X509v3 Authority Key Identifier:
                keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:0f:84:20:ec:00:c2:20:5e:5e:fc:34:6f:13:8e:77:78:a3:
         b6:0e:33:9b:31:21:41:76:98:6b:41:e2:b0:bf:01:1b:eb:49:
         2a:fc:36:8b:24:a5:f3:22:95:53:a5:39:13:be:2b:5c:96:53:
         f6:9b:93:c0:f5:8b:37:39:02:b3:db:a2:03:c1:f6:3c:fd:02:
         43:b1:f5:1f:5e:0d:96:03:af:c9:76:c0:b1:ea:3b:2a:74:bf:
         b8:8b:9c:23:e7:2f:ab:86:57:4b:e3:ee:d8:d5:37:b7:45:0e:
         76:70:41:51:cd:18:f6:1f:54:f0:2e:59:42:22:eb:bb:46:62:
         1c:10:f6:b4:8d:a8:86:12:9b:c6:93:9d:e3:93:5f:55:ae:36:
         0e:66:8e:19:9f:f6:39:c7:5b:41:69:51:f3:1a:1e:5a:80:57:
         3a:fa:db:c4:6b:a1:45:91:dc:47:f4:f9:71:b2:5b:e2:71:cf:
         17:f8:96:e0:3d:ac:d7:81:d9:b5:69:81:bc:31:f4:01:f4:3c:
         9e:80:87:c1:b6:a7:3f:07:7a:d7:04:55:50:d2:5b:23:2f:75:
         7a:81:e3:56:70:64:cf:cb:fe:53:c7:00:47:3e:5e:54:06:5a:
         16:02:30:f8:8c:fa:02:a5:53:f1:5a:d1:40:fb:59:92:90:80:
         80:48:1f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 16 17:12:55 2026 by rpki-client