This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
File:                     A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft (raw, json)
Hash identifier:          ommy35l+Pp+Wsn7oMILEqb42VgtNF1YaX7YxUEFkNPo=
Subject key identifier:   58:FB:10:2B:A9:74:8C:0D:81:12:89:4C:BC:CA:FE:A5:BC:E2:1A:F9
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Certificate issuer:       /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial:       702F7D124DC82D118472A7D7EC15C79FC55F92F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
Manifest number:          068A
Signing time:             Wed 11 Feb 2026 04:48:10 +0000
Manifest this update:     Wed 11 Feb 2026 04:43:10 +0000
Manifest next update:     Thu 12 Feb 2026 07:32:10 +0000
Files and hashes:         1: 322e35392e36312e302f32342d3234203d3e203438323636.roa (hash: 6dfl8lI1/2dWL8ffIUYhSFUUS7mSu5VjjS42Z8HkW7c=)
                          2: 34352e39352e3231322e302f32342d3234203d3e20323039353534.roa (hash: 9IsmuufWVjFLEbYLLcJg7Yp7+j5DqB4kK41/uY19nMQ=)
                          3: 3139342e33312e3139362e302f32342d3234203d3e20313939373337.roa (hash: kk3tkqt3pEQIayEC5akWsEQ7ftglPpO+Tt2YC9Lk7HM=)
                          4: 38352e3230392e3233312e302f32342d3234203d3e203135343430.roa (hash: 5P7OofszcYzyRXLoqtlNETBM0YQubML8godGGz1Zc2U=)
                          5: 3139342e33312e3139372e302f32342d3234203d3e203432383331.roa (hash: KMAsq44hIBrFB+eRrhhDssa2B+eAZmGDL1feRYL/R5o=)
                          6: 352e3138312e3138342e302f32342d3234203d3e20323131333733.roa (hash: HxZ7OQY4wmmok4f1jyMFC6WkeyQaBhCRYtiYzwz8qYg=)
                          7: 34352e382e3231392e302f32342d3234203d3e2039303039.roa (hash: 0zn1M6udTfOcCIE/Cifu6WDNTkQzSgcujlgX6HE4/sQ=)
                          8: 352e3138312e3138352e302f32342d3234203d3e20323132333834.roa (hash: erSH6Mf15T5HOlDb5lpbU/Ku2eMK+cc/6OxLysGJmP4=)
                          9: 3134362e31392e33382e302f32342d3234203d3e203136323736.roa (hash: norYvgZGO2Imho4UnQcnY8UITUyuaQwpwpHqXsoPDao=)
                          10: 322e35392e36332e302f32342d3234203d3e20383334.roa (hash: 8DqvUUgTHwg4fnhfYD2q3DFHCSCucv2RToLFRdMK/4s=)
                          11: 322e35392e36302e302f32342d3234203d3e203631333137.roa (hash: BBdnQvjsMGsAKdV0CMmUgkUx9rKK17g08iyDVXfqF5c=)
                          12: 38352e3230392e3232382e302f32342d3234203d3e203230343733.roa (hash: LvALS0QzJUIn2y2aM1WJBNeefzd38B8yBzedKpN4nB8=)
                          13: 352e3138312e3138342e302f32342d3234203d3e20323132333335.roa (hash: UCQA4MebhnFRuGzYIjyz+Oaxw3thh569/39f5fjzuDM=)
                          14: 34352e39352e3231342e302f32342d3234203d3e203434353437.roa (hash: 4mA1gqLsHB6B1P8mI+JnCzpqXJzdsvy8YAE1F7eD96c=)
                          15: 3139342e33312e3139352e302f32342d3234203d3e203132383236.roa (hash: dZ5pA0FTXTMIyebmvvTrXa2pwRmRVDj8qy5ZN+EkpPo=)
                          16: 322e35392e36302e302f32342d3234203d3e20323132323338.roa (hash: hZ11O4/GfIQ3ZyUgAuxIn+0GkFLCBYYNN1OfZIqVDJk=)
                          17: 34352e382e3231372e302f32342d3234203d3e20323136303232.roa (hash: 8eRvRykZqahsRM0VQoPLCYYNfC1yyS358fE8muRhEDA=)
                          18: 3134362e31392e3136372e302f32342d3234203d3e20313532363732.roa (hash: 1EdzND/a/KltqRlIJaQnMPD7XH7CVfxCNY9eyK9ocYU=)
                          19: 38352e3230392e3232392e302f32342d3234203d3e203432383331.roa (hash: vjpMNqLq25F9up6mT05GhHQJMJ0KbktUxvDSn9v6kBA=)
                          20: 352e3138312e3138372e302f32342d3234203d3e20323135373033.roa (hash: EJ6RmJBNoUg0c9WoYw2Ja1OnADVswQoLG/EoG0ZGnFE=)
                          21: A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl (hash: WbR1oGm9/ElmXyrIO9F2XFhg0mg8lgzBlBp0mB9Zfjk=)
                          22: 322e35392e36322e302f32342d3234203d3e203633303233.roa (hash: /Ku1phd3ouPkx4ZDyzwkq+GI0U8NGNl14wVu1lc6q1k=)
                          23: 36322e332e32302e302f32342d3234203d3e203231383539.roa (hash: Rro+Gx/ym8oazWi/ZTJ2dg2MGKpj7/78mNky+1y7VfU=)
                          24: 34352e39352e3231322e302f32322d3232203d3e2037303239.roa (hash: b3HfoeSSJnwEFBW/P8/Hh1DNPoifdQtxChWclKR01cY=)
                          25: 34352e39352e3231332e302f32342d3234203d3e20343030303339.roa (hash: XrIv1BWbF+to8I3saogND52oHBVFoDY38lWpbUFLA6o=)
                          26: 3139342e33312e3139352e302f32342d3234203d3e203334393933.roa (hash: /RrqrRO8J+Vsp3FaP0KZwFzXiRmxrRbyseKOqWdHYpY=)
                          27: 34352e382e3231382e302f32342d3234203d3e20323132333834.roa (hash: tj3yrp12EwOeT1ZEKtZIphksitaxnh11pc39cLh8XvY=)
                          28: 352e3138312e3138362e302f32342d3234203d3e20323036313530.roa (hash: QGg1o/UsEXwX7QWOmnciGR0lfU5zaV2UWyNlVxa/Ka8=)
                          29: 3134362e31392e3136372e302f32342d3234203d3e20313432313131.roa (hash: 1cwuvx0f/bXZ/DwexRmaaQu0tTmkULuIbOfrQVnX4ao=)
                          30: 36322e332e32302e302f32342d3234203d3e20323135313532.roa (hash: K3GEYfrcdLJt/Pv1pZTdwz6yJZqY0yfvXEhbrZ66rqc=)
                          31: 3139342e33312e3139342e302f32342d3234203d3e203339333638.roa (hash: qMisc8M9fAgiB1zw7/Tn0y61M2FDJt3sqCMkzKcplhA=)
                          32: 34352e382e3231362e302f32342d3234203d3e20323132333834.roa (hash: A1j+LbNuBb8MeFvlQDvvVkVer3lHzQ8b3CPtY22jros=)
                          33: 34352e39352e3231352e302f32342d3234203d3e203631333137.roa (hash: jtw5h4s7N892mHMRX7q1v9D/8tuL7heVW+cms9i1OJM=)
                          34: 3139342e33312e3139352e302f32342d3234203d3e20323133363638.roa (hash: tD4GyhGOomU4ZODP9QGqyOztFfw1vKOkCjucViT/SZg=)
                          35: 38352e3230392e3233302e302f32342d3234203d3e203138313836.roa (hash: +OSq4m/6RpxEZih63506Gv6cOkBhW+YglqTPEKg/ZcM=)
                          36: 34352e39352e3231352e302f32342d3234203d3e203239383032.roa (hash: Q1OlQJwADffmDxnZKj7bvhSo1kOL5aXrHpMtVtZFtuQ=)
                          37: 352e3138312e3138352e302f32342d3234203d3e20323131333733.roa (hash: 2IzUCrtAIyuz9E3rWXqOgG5uo4suNn7bGWeOLhfOKvg=)
                          38: 3134362e31392e33382e302f32342d3234203d3e20313939363534.roa (hash: KCPy6uAOav6R+jmrUTgTpbZkeje3mnKOXa6FXDMEhhE=)
                          39: 34352e39352e3231342e302f32342d3234203d3e20323136303939.roa (hash: D/Nmap/PxRG4O5COkUTsliUnadwaB6xsHT4TvPGKFlQ=)
                          40: 38352e3230392e3233302e302f32342d3234203d3e20313430323234.roa (hash: X9S/vAQJZJ3+zexclWqp51kmLLKozc6jAta0ZYx43Ns=)
                          41: 38352e3230392e3233302e302f32342d3234203d3e203633393032.roa (hash: P3VDMMBoXLUjrVK3m58S6qhassJbF7wO/iSY6p4T2ZU=)
                          42: 3139342e33312e3139362e302f32342d3234203d3e20323030303137.roa (hash: +5av7/JwxJ2GdszhVyEajY1bsnLhd2JhS01B+/f5cdU=)
                          43: 322e35392e36322e302f32342d3234203d3e20313432313131.roa (hash: c23s9WCLyWR8C29b7voS/R0hWodZcVrxRN5kAioljng=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Feb 2026 22:59:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:2f:7d:12:4d:c8:2d:11:84:72:a7:d7:ec:15:c7:9f:c5:5f:92:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
        Validity
            Not Before: Feb 11 04:43:10 2026 GMT
            Not After : Feb 12 07:32:10 2026 GMT
        Subject: CN=58FB102BA9748C0D8112894CBCCAFEA5BCE21AF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:7b:9b:e2:6c:7c:b7:be:02:06:ce:cd:ff:08:
                    e7:94:c9:3b:60:77:b1:97:87:56:5a:ba:40:fe:16:
                    50:a4:97:1d:b7:bb:3e:c2:ed:8f:ce:2b:e9:bd:14:
                    fb:d5:94:34:35:0e:ce:65:e7:55:0a:1c:60:5c:c8:
                    13:7c:3e:b9:31:09:ea:b0:98:8a:0c:9b:56:cd:6d:
                    5a:9a:f3:57:98:9e:f2:cb:2f:5d:f3:73:59:18:4f:
                    25:10:1d:71:4f:9e:52:5e:3c:ab:9d:cd:d4:c2:d6:
                    93:ae:8e:9e:b6:ff:ec:5b:44:38:ee:7c:e6:f8:37:
                    cc:a0:f2:78:e9:43:f5:ef:e4:fe:f0:09:26:8f:8c:
                    56:e7:3c:70:ea:1d:3b:0b:62:ac:73:e5:7d:41:d8:
                    49:f4:40:c3:4e:cf:39:77:26:13:5b:6c:e3:9e:e9:
                    4a:d5:ed:e3:8e:57:50:3d:9d:31:e5:f1:61:7d:ee:
                    8d:62:a4:6d:71:c9:29:c4:e6:c4:46:6a:c6:8e:a6:
                    6c:66:6a:96:ef:b0:5f:df:31:e9:2d:68:b7:65:5e:
                    b3:5a:b9:d1:c8:a3:9d:b9:92:cd:48:ab:0b:21:77:
                    78:d2:d8:d7:f8:6b:27:9d:3b:99:41:3c:a0:e5:31:
                    05:82:37:2a:59:34:5e:96:c6:96:a5:15:78:94:58:
                    35:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:FB:10:2B:A9:74:8C:0D:81:12:89:4C:BC:CA:FE:A5:BC:E2:1A:F9
            X509v3 Authority Key Identifier:
                keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:8c:49:d6:e4:ef:49:0b:2a:05:30:13:2d:0d:11:01:2a:bd:
         a1:9f:97:df:24:19:f5:a4:c8:85:c7:10:5b:54:d5:df:81:db:
         f9:0b:94:c6:f8:9d:c7:20:0c:75:e3:b0:a6:6b:0e:6c:4a:4d:
         6b:c7:13:63:6a:bd:69:b5:c2:51:69:a6:77:86:87:08:bd:5a:
         39:96:a1:04:c3:9e:06:90:50:00:6d:f4:4a:ac:6c:76:91:ef:
         f7:f9:82:bf:1d:50:49:11:35:d1:92:ef:49:c0:65:3f:a3:da:
         f7:e5:65:4c:31:97:bd:4f:d9:35:2b:08:47:cd:0a:6b:ee:26:
         78:5f:8c:99:76:2a:9c:bb:49:72:01:7a:3c:79:ae:e6:ab:d9:
         6f:ca:00:a9:4c:39:6a:92:87:26:1d:6e:a6:ad:1c:e5:28:c4:
         75:16:85:59:50:fd:a9:0a:ad:82:25:8c:8b:c5:31:42:05:fa:
         1e:90:0c:50:e4:ef:aa:2b:2a:24:93:bb:fe:19:0b:ec:f8:9b:
         6b:aa:de:50:f4:5b:8d:8e:b7:de:b9:08:18:a4:4a:dd:5b:bb:
         3b:29:fc:c6:46:3b:e1:64:ab:ec:6f:e7:04:4f:4f:88:4d:15:
         30:f9:0a:13:9b:da:71:a8:2d:ea:25:10:f0:c5:3e:27:fb:31:
         3b:1a:2f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 11 07:41:40 2026 by rpki-client