This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft
File:                     06DB699D191D4B0289910C88E99CF94A671142F5.mft (raw, json)
Hash identifier:          v5Ld4+KYUltA5oYaSpzPSjsIZcGM0ebSv+eG4DKsUzY=
Subject key identifier:   29:93:5D:48:D1:08:C3:7F:D4:28:E3:D5:56:5F:A8:B3:B8:FA:6B:AD
Authority key identifier: 06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5
Certificate issuer:       /CN=06DB699D191D4B0289910C88E99CF94A671142F5
Certificate serial:       0D699482691EE5D6A8C12CD49D3D32F318FAA421
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft
Manifest number:          0114
Signing time:             Sun 18 Jan 2026 09:54:38 +0000
Manifest this update:     Sun 18 Jan 2026 09:49:38 +0000
Manifest next update:     Mon 19 Jan 2026 13:01:38 +0000
Files and hashes:         1: 5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer (hash: vr0IDnvMrQlAIKTPbmc9XgADtBREMeozkPpGVjOFGr4=)
                          2: 326130363a396634313a3230303a3a2f34302d3438203d3e20323134393239.roa (hash: QtN9SLO6BSjzyIiwoZRqiVH48LS9HyuRs3lqnsdDiKs=)
                          3: 326130363a396634313a313030303a3a2f34342d3438203d3e20323035383338.roa (hash: AZY42IY279tP8q55kCb+OP1wLi+9ejrODI15M2jhRhg=)
                          4: 06DB699D191D4B0289910C88E99CF94A671142F5.crl (hash: XLmHSL8BZUlnF5902C1+0cZwnjWek2Sh7+lhYkYPk3Q=)
                          5: 326130363a396634313a3a2f33322d3332203d3e20323135303835.roa (hash: oQiFmCDOiC8wMUPyhseeYgHp6yjZLGbjApAcNJ0LBoc=)
                          6: 326130363a396634313a613930313a3a2f34382d3438203d3e20323035383338.roa (hash: TZFInP0XSpkR7gzjfw2R3ov4SaV+J0Kzbqc0lAbOzbM=)
                          7: 326130363a396634313a363936393a3a2f34382d3438203d3e20323132323432.roa (hash: oZMKPe8zIqKXDWE+ceP6ZovC366mkj//dk5ag6RqSYo=)
                          8: 326130363a396634313a613930303a3a2f34382d3438203d3e20323037363832.roa (hash: UqjWSUv2XiZdDsdQ0uOndREGc/szQ2JnxQlbZ2ADckI=)
                          9: 38332e3134322e33312e302f32342d3234203d3e20323135303835.roa (hash: K8xHXu8PBNylpSXaMswB01W3KM9JQNKdf8F+yOiMZUQ=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 06:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:69:94:82:69:1e:e5:d6:a8:c1:2c:d4:9d:3d:32:f3:18:fa:a4:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06DB699D191D4B0289910C88E99CF94A671142F5
        Validity
            Not Before: Jan 18 09:49:38 2026 GMT
            Not After : Jan 19 13:01:38 2026 GMT
        Subject: CN=29935D48D108C37FD428E3D5565FA8B3B8FA6BAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:5a:aa:52:b9:6a:21:47:4a:19:4c:fd:59:54:
                    ca:fc:1b:5c:9a:86:9f:ef:8c:25:73:61:65:48:62:
                    15:bc:db:a2:41:28:68:c9:eb:1a:04:c4:28:dd:4f:
                    84:ba:b8:31:8f:b6:23:2e:b4:c1:b6:7d:99:62:c7:
                    8e:ce:cc:1d:66:8a:fd:ff:a5:8e:67:a3:44:e9:f4:
                    11:08:d4:c2:f5:0d:3b:bc:99:27:8f:0e:a9:a2:7c:
                    f2:87:58:3f:3a:56:92:fe:36:48:3a:46:55:01:6c:
                    54:17:f7:fe:56:ee:c5:08:4f:07:4c:d9:4e:10:10:
                    39:40:31:c9:0c:e4:1c:0d:97:a4:52:e2:76:94:e6:
                    ef:a4:73:88:ff:58:5f:74:aa:42:85:ce:9d:fc:d5:
                    c8:e3:ab:29:b6:f3:66:f3:b1:e1:8d:e4:01:c3:a9:
                    44:d9:26:92:dc:7d:b2:48:41:3e:3b:f0:71:b7:12:
                    b6:14:16:5f:bc:3d:7a:5f:d0:b3:7e:3e:88:31:4a:
                    83:17:be:87:8d:05:cf:d6:d9:21:e3:5b:7d:c7:fe:
                    6e:d7:ca:66:19:de:ea:e3:69:dc:71:de:38:48:1a:
                    2b:99:66:2d:11:58:24:cf:fe:98:9a:db:05:18:66:
                    71:9f:58:de:d9:30:cf:aa:ce:c8:f1:10:bb:0e:1f:
                    9c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:93:5D:48:D1:08:C3:7F:D4:28:E3:D5:56:5F:A8:B3:B8:FA:6B:AD
            X509v3 Authority Key Identifier:
                keyid:06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:af:5d:b5:5b:51:bb:d8:9f:30:40:93:c5:9c:c0:4a:14:83:
         66:2e:72:df:ab:34:20:a3:e5:5a:71:66:e8:c2:ee:cc:73:1b:
         db:35:68:12:73:12:e5:2f:f2:e9:cd:1c:ad:ba:0c:80:d5:dc:
         9e:3c:57:df:fe:de:61:7d:9b:84:22:38:eb:28:bc:3a:51:1c:
         58:7b:e1:71:cc:a5:46:45:a8:bf:9a:49:93:b6:99:5a:30:e7:
         ad:c9:3f:bc:11:bd:fb:8e:90:5c:60:95:01:a2:ce:c7:33:4c:
         86:51:41:9e:28:4c:5a:70:73:9a:19:89:39:4c:d8:0a:61:32:
         76:3f:48:2c:28:6a:ae:db:68:a6:7c:31:30:c5:4e:9f:e4:17:
         71:e0:a3:f9:ac:42:82:9d:4a:62:d5:e1:68:dc:59:aa:71:a4:
         d3:2d:0d:48:f5:bc:83:f0:24:40:a1:bc:c7:65:d1:36:17:8e:
         6c:ec:80:23:43:56:ec:b6:20:2f:78:59:f7:5a:6d:61:40:2d:
         d3:cc:40:7c:dc:0e:d9:d5:d7:9b:bd:db:1e:66:d4:e8:e6:c5:
         dd:28:ab:7a:63:73:46:85:d5:de:72:11:28:fc:ce:26:e7:ac:
         8c:22:28:97:b7:ce:78:af:ce:91:a1:d3:fe:e8:c8:db:82:14:
         f9:ed:08:41
-----BEGIN CERTIFICATE-----
MIIFbTCCBFWgAwIBAgIUDWmUgmke5daowSzUnT0y8xj6pCEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDZEQjY5OUQxOTFENEIwMjg5OTEwQzg4RTk5Q0Y5NEE2
NzExNDJGNTAeFw0yNjAxMTgwOTQ5MzhaFw0yNjAxMTkxMzAxMzhaMDMxMTAvBgNV
BAMTKDI5OTM1RDQ4RDEwOEMzN0ZENDI4RTNENTU2NUZBOEIzQjhGQTZCQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZWqpSuWohR0oZTP1ZVMr8G1ya
hp/vjCVzYWVIYhW826JBKGjJ6xoExCjdT4S6uDGPtiMutMG2fZlix47OzB1miv3/
pY5no0Tp9BEI1ML1DTu8mSePDqmifPKHWD86VpL+Nkg6RlUBbFQX9/5W7sUITwdM
2U4QEDlAMckM5BwNl6RS4naU5u+kc4j/WF90qkKFzp381cjjqym282bzseGN5AHD
qUTZJpLcfbJIQT478HG3ErYUFl+8PXpf0LN+PogxSoMXvoeNBc/W2SHjW33H/m7X
ymYZ3urjadxx3jhIGiuZZi0RWCTP/pia2wUYZnGfWN7ZMM+qzsjxELsOH5zvAgMB
AAGjggJ3MIICczAdBgNVHQ4EFgQUKZNdSNEIw3/UKOPVVl+os7j6a60wHwYDVR0j
BBgwFoAUBttpnRkdSwKJkQyI6Zz5SmcRQvUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzAxMTk0NGQtN2ViMy00ZjYzLWExNTktY2ZmMDJjMDI2
YWJmLzIvMDZEQjY5OUQxOTFENEIwMjg5OTEwQzg4RTk5Q0Y5NEE2NzExNDJGNS5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzcvMDZEQjY5OUQxOTFENEIwMjg5OTEwQzg4RTk5Q0Y5NEE2NzEx
NDJGNS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMDExOTQ0ZC03
ZWIzLTRmNjMtYTE1OS1jZmYwMmMwMjZhYmYvMi8wNkRCNjk5RDE5MUQ0QjAyODk5
MTBDODhFOTlDRjk0QTY3MTE0MkY1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeq9dtVtRu9ifMECTxZzA
ShSDZi5y36s0IKPlWnFm6MLuzHMb2zVoEnMS5S/y6c0crboMgNXcnjxX3/7eYX2b
hCI46yi8OlEcWHvhccylRkWov5pJk7aZWjDnrck/vBG9+46QXGCVAaLOxzNMhlFB
nihMWnBzmhmJOUzYCmEydj9ILChqrttopnwxMMVOn+QXceCj+axCgp1KYtXhaNxZ
qnGk0y0NSPW8g/AkQKG8x2XRNheObOyAI0NW7LYgL3hZ91ptYUAt08xAfNwO2dXX
m73bHmbU6ObF3SiremNzRoXV3nIRKPzOJuesjCIol7fOeK/OkaHT/ujI24IU+e0I
QQ==
-----END CERTIFICATE-----
Generated at Sun Jan 18 12:43:02 2026 by rpki-client