This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft
File:                     20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft (raw, json)
Hash identifier:          kOK+joQ+N7EijATKzy5pCRx/Knp4GgRA97yoodW3u7I=
Subject key identifier:   7B:36:97:8F:18:F3:E7:FF:60:74:5E:6B:85:92:69:77:7D:FE:0B:E9
Authority key identifier: 20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6
Certificate issuer:       /CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6
Certificate serial:       0B6894B196B3A15E5FA2B816DF72AC396F32E886
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft
Manifest number:          0397
Signing time:             Mon 02 Feb 2026 05:21:38 +0000
Manifest this update:     Mon 02 Feb 2026 05:16:38 +0000
Manifest next update:     Tue 03 Feb 2026 08:53:38 +0000
Files and hashes:         1: 326131343a316563313a376232303a3a2f34342d3438203d3e20323135303933.roa (hash: dVnYLOP17LHBFloAhm1YIONwpYCVs6bwv8Qels/37Kg=)
                          2: 326131343a316563313a376233303a3a2f34342d3438203d3e20323134393036.roa (hash: YRMori7doYSmuYrHuDGxvFWUqZxa6EqhEvjhhQlS2vI=)
                          3: 326131343a316563313a3a2f33322d3438203d3e203438373030.roa (hash: rD1drMlhgCHEm0vlVi8DONqmz75yH/sypTpIzdkNP6c=)
                          4: 326131343a316563373a633030303a3a2f33362d3438203d3e203438373030.roa (hash: NDSS2hHdj8htIMoCQNzuGfJRE+FjfS7resxOlAoGNDM=)
                          5: 326131343a316563313a376231303a3a2f34342d3438203d3e20323135363636.roa (hash: pZyYX9vqAixKUDIqsxujnSVA6UfFKeJc5iZ4yNtLX48=)
                          6: 326131343a316563303a3a2f33312d3438203d3e203438373030.roa (hash: NfdCiPZo2V7z2IR8DOEcP9s1WlT0wPdEK10WCc6hh18=)
                          7: 326131343a316563303a3a2f33312d3438203d3e203134363138.roa (hash: TNC4zrNVSYq6rg1HfzOLsFNL5cW5pcjjIopBseDA51Y=)
                          8: 326131343a316563313a376230303a3a2f34342d3438203d3e20323037313936.roa (hash: U8fXRRyT8emRE+fVUuy2ekIUYzd/0os3T2/COS8ejYg=)
                          9: 326131343a316563373a633430303a3a2f34302d3438203d3e203438373030.roa (hash: LZc2AksEahD5rzoxMFxve6nJwmwqwYYZ+BLhaadaDDA=)
                          10: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl (hash: VRJFjC/CDy94JC4t+TqeIZSq2Rm9OwgoMca3qjfhxEM=)
                          11: 326131343a316563303a3a2f33312d3438203d3e203136353039.roa (hash: DO5U+zbxAW9dCHHkG8v0O5pLZTi9rHV+80EYsqI00GY=)
                          12: 326131343a316563373a633031303a3a2f34342d3434203d3e2030.roa (hash: SsdW0YpcJfef7CtWvRhhfCUEgjAhSHqFG1h0ACBR214=)
                          13: 326131343a316563313a3a2f33322d3332203d3e20323037323532.roa (hash: ZnCFtDlyKKIKHxL+mnWSwMiKEny7fbonjbSjngpcz7c=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 02:07:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:68:94:b1:96:b3:a1:5e:5f:a2:b8:16:df:72:ac:39:6f:32:e8:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6
        Validity
            Not Before: Feb  2 05:16:38 2026 GMT
            Not After : Feb  3 08:53:38 2026 GMT
        Subject: CN=7B36978F18F3E7FF60745E6B859269777DFE0BE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ea:84:b7:04:b0:21:52:58:86:d9:7e:ef:3f:
                    58:19:05:8a:df:cb:98:35:11:50:a6:bd:77:35:eb:
                    f7:1e:ee:bc:3c:fa:90:82:8c:ae:ba:43:d2:11:17:
                    69:3d:aa:d0:a0:42:8e:89:54:52:20:bb:5c:67:02:
                    43:d4:01:11:8f:2e:ff:d3:87:f6:d8:58:0c:35:b9:
                    13:7f:1c:2b:fd:73:d6:f1:11:f0:a5:f6:da:13:06:
                    dd:1c:2c:62:5f:ae:d1:59:4d:7b:fd:ce:5e:60:f6:
                    1a:32:4b:6a:00:78:a4:5a:b7:50:d6:1e:c5:f6:9d:
                    e4:77:8b:9b:3b:f9:92:65:7f:e3:92:e2:87:59:4a:
                    0b:39:4c:7a:77:4f:12:c3:d4:e6:34:64:0d:3b:1b:
                    21:39:73:75:b2:c7:40:4b:ab:ff:35:9d:98:20:a1:
                    a7:79:d0:63:0d:6e:ec:03:b5:5a:a4:c3:4c:46:41:
                    bd:1d:db:ae:6c:11:89:73:f5:f7:d8:08:57:58:fb:
                    87:22:78:49:97:6c:2a:ce:4f:0d:34:58:86:f6:d4:
                    6b:e2:da:ae:11:0c:74:f3:1a:46:54:c8:80:ee:5f:
                    98:74:6d:96:9b:e5:be:d0:a7:f0:4f:4e:bb:5f:88:
                    6f:d3:db:cf:bc:03:39:f0:c4:32:08:b8:af:b1:a2:
                    c0:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:36:97:8F:18:F3:E7:FF:60:74:5E:6B:85:92:69:77:7D:FE:0B:E9
            X509v3 Authority Key Identifier:
                keyid:20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:3f:5c:2f:d3:2c:30:49:9e:ca:ce:98:3b:f5:40:a3:51:aa:
         20:93:fa:a5:6c:f7:5a:c0:64:c6:fb:8c:4d:ee:bd:3f:ac:99:
         41:9e:03:d3:61:47:07:f4:83:fb:bf:6c:ac:54:76:9a:30:c9:
         a4:0b:70:88:55:6a:ad:3f:f6:16:4c:61:3f:25:17:6b:ed:3c:
         57:81:77:23:9d:af:35:51:ce:0d:42:9c:dd:f6:ac:e3:31:29:
         15:fd:91:46:86:77:46:d3:ac:88:54:e0:76:4d:4d:99:da:a6:
         0d:02:49:b9:09:49:40:98:1f:73:75:c0:b1:73:2e:90:42:83:
         02:fc:2d:e6:d9:e2:1e:b6:b9:ab:0a:f8:0c:90:c7:c7:d1:7c:
         1b:a6:78:ca:dc:05:2c:44:14:14:e3:a1:27:36:48:05:12:18:
         2f:23:77:2d:5a:e5:11:ec:bc:3c:51:e1:9b:ab:8d:0f:03:1d:
         6f:d4:32:cf:25:f3:1e:d4:30:be:9e:a5:e3:3a:65:76:f9:51:
         33:fb:ee:a3:fd:e8:ce:66:ea:ff:33:35:08:73:24:05:9d:f7:
         d3:b2:df:30:38:69:b6:4b:92:c4:54:7c:72:c7:f4:c7:b7:d2:
         a5:62:82:31:3e:89:6f:8b:04:2b:04:40:9c:40:16:ee:f8:3e:
         4c:04:ab:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:13 2026 by rpki-client