This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft
File:                     1498141819112B8446C2D4A3111F53038F05DBE9.mft (raw, json)
Hash identifier:          ymvbAwCy7eXryt4aJ6UcEykbFWABlTm3OFLIKrs2V3E=
Subject key identifier:   46:91:A2:E1:24:F3:2A:C6:E8:26:62:1F:7F:DA:FF:5A:62:FC:1C:CD
Authority key identifier: 14:98:14:18:19:11:2B:84:46:C2:D4:A3:11:1F:53:03:8F:05:DB:E9
Certificate issuer:       /CN=1498141819112b8446c2d4a3111f53038f05dbe9
Certificate serial:       6DF02AAA9C47992AA122D436D3A35EC602A89BF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft
Manifest number:          015B
Signing time:             Tue 03 Feb 2026 21:12:26 +0000
Manifest this update:     Tue 03 Feb 2026 21:07:26 +0000
Manifest next update:     Wed 04 Feb 2026 22:25:26 +0000
Files and hashes:         1: 3138352e39312e3131332e302f32342d3234203d3e20323134323038.roa (hash: qSSu/jTa9CtmAhgZlrJ1s4QldXeKp0EqfLu29FuP5Zs=)
                          2: 1498141819112B8446C2D4A3111F53038F05DBE9.crl (hash: IZ4nVk3AMC88Pn+0cY3gRZWnpNcIx4PxnsoA2uMMPZ8=)
                          3: 3138352e39312e3131342e302f32342d3234203d3e20323132323338.roa (hash: O3+fkuGYHEGuJgzobwksf3BrAnxvmElLOiQKqynfHQQ=)
                          4: 3138352e39312e3131322e302f32342d3234203d3e203230343733.roa (hash: uQR2ZEBSc/gm5nc4UWXss03+GuSFprtiONvs7ml01aQ=)
                          5: 3138352e39312e3131352e302f32342d3234203d3e2034363337.roa (hash: ck91ILJJRhGrU5dcx7s2t1suhnGyLbRTekoZlADPXPE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Feb 2026 19:43:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:f0:2a:aa:9c:47:99:2a:a1:22:d4:36:d3:a3:5e:c6:02:a8:9b:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1498141819112b8446c2d4a3111f53038f05dbe9
        Validity
            Not Before: Feb  3 21:07:26 2026 GMT
            Not After : Feb  4 22:25:26 2026 GMT
        Subject: CN=4691A2E124F32AC6E826621F7FDAFF5A62FC1CCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:a3:2f:1e:fc:74:f3:55:a8:8f:40:86:f8:78:
                    49:d0:23:69:17:fd:98:d8:d2:ea:3d:64:ad:66:be:
                    60:41:26:3b:36:c1:8a:69:d9:c8:da:04:14:48:9f:
                    2f:7a:9e:26:be:e5:44:4c:30:34:4f:e0:d2:2a:60:
                    43:c6:00:6d:87:f0:a0:82:02:00:95:12:3e:24:49:
                    73:c3:74:f9:0e:bb:90:5b:f0:39:85:0f:0f:9f:13:
                    48:7a:28:d6:3b:67:16:ea:27:35:ff:3f:97:9c:1a:
                    f2:52:1f:77:01:8a:28:e5:70:11:34:63:f6:0b:d9:
                    cb:22:bd:f6:20:2c:ed:b5:37:da:da:12:18:12:9f:
                    2e:c3:a4:84:23:1b:69:3c:6a:4f:c3:e2:7d:d9:c3:
                    32:af:3d:28:9c:cd:0a:2b:2d:7e:ed:93:52:ec:0a:
                    25:6b:e4:eb:77:14:37:dc:7f:c6:b4:b4:00:68:53:
                    54:1f:72:62:d9:4d:b5:d5:34:fd:19:c8:a9:48:18:
                    82:cb:0c:3b:97:d3:be:1c:a1:90:2e:5b:6a:c9:0d:
                    4e:a3:85:5a:e8:b5:50:76:e3:ab:af:62:71:55:a0:
                    f3:84:9a:b3:9d:1a:59:68:ba:27:c7:d1:fa:c9:17:
                    07:39:72:26:9c:02:76:be:30:30:e6:db:54:81:21:
                    f5:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:91:A2:E1:24:F3:2A:C6:E8:26:62:1F:7F:DA:FF:5A:62:FC:1C:CD
            X509v3 Authority Key Identifier:
                keyid:14:98:14:18:19:11:2B:84:46:C2:D4:A3:11:1F:53:03:8F:05:DB:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:2b:a3:24:0a:ca:d2:a5:db:1e:c5:60:a7:9d:87:57:f8:78:
         f7:07:f5:a2:67:2e:30:4b:eb:51:90:7f:27:95:9a:84:e5:a3:
         a0:e9:63:bb:df:98:00:85:5f:07:17:a3:27:64:1b:fc:eb:54:
         7f:c6:48:36:2b:c1:24:d7:18:d1:c0:7e:7b:f8:75:6a:08:47:
         63:9a:52:d3:e6:6f:2f:e1:c4:40:01:7c:be:7c:f6:2f:d6:b1:
         df:21:21:f8:b1:f6:47:d3:39:c0:8a:a5:62:a0:41:7d:d6:35:
         36:8e:e2:9e:f6:a7:b9:e4:61:b9:c8:5a:be:12:d8:cc:bf:7f:
         42:d5:bd:99:43:e8:26:65:dd:3a:e5:25:84:c6:92:73:d9:84:
         85:b8:cb:c7:2c:11:d9:8d:cb:23:60:41:65:3a:59:d4:27:97:
         97:af:4f:d8:95:d1:f9:11:73:06:83:99:fd:ee:ba:0c:c6:16:
         b8:f1:fd:da:73:42:82:38:c0:ab:b7:a2:7f:18:45:af:3d:1a:
         22:bb:08:0e:80:38:2b:30:2f:06:64:1b:ef:5b:0f:71:1c:9e:
         10:7b:a5:74:1c:af:5b:4c:c2:d7:ac:df:60:52:8a:13:27:97:
         02:e6:4a:bc:db:d8:33:11:6c:90:cc:8b:b6:7e:e8:67:c0:99:
         1c:ae:cd:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 02:16:47 2026 by rpki-client