This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft
File:                     FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft (raw, json)
Hash identifier:          sGTVQs4yk7pHpeSmE1IR+vLaLLQfktWrL7th3hPsuus=
Subject key identifier:   3A:BE:7D:8C:B1:C7:60:A7:24:E7:2A:E7:AA:53:DA:E4:26:3D:00:AF
Authority key identifier: FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
Certificate issuer:       /CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
Certificate serial:       22AB1481B59BB66B0C2811F360858EF764817DAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft
Manifest number:          01C3
Signing time:             Sun 18 Jan 2026 08:42:29 +0000
Manifest this update:     Sun 18 Jan 2026 08:37:29 +0000
Manifest next update:     Mon 19 Jan 2026 11:23:29 +0000
Files and hashes:         1: 36322e3230342e33372e302f32342d3234203d3e20313938323331.roa (hash: I6eMklUSFiAulRI2b++yFtpDHfGf+yyRunITvHHP3rY=)
                          2: 326131333a646130303a3a2f33322d3332203d3e203530353830.roa (hash: OHKDfo5l5/jEy46ijNWjc2QXFRSDD6WocUfsgvZEdnk=)
                          3: 3138352e3235312e31392e302f32342d3234203d3e20323036303932.roa (hash: wE97ifCwuCsHZoyv+UtvDLCrOhOpwPEVh3JX3wVqIpE=)
                          4: 3231332e3233322e3235322e302f32342d3234203d3e2033333230.roa (hash: /Kq4VkHWPBjYK33PPSBMXdIWaIDemEZf9s/0PNOi978=)
                          5: 326131333a646130333a3a2f33322d3332203d3e20323135343632.roa (hash: +zJlwocjllLnsQbU3Pz9rSlrsgFZqIsBvJ2vFa1jc64=)
                          6: 326131333a653430303a3a2f33322d3332203d3e203530353830.roa (hash: rFtvfsVQHKCdQAqKZM/z0xrzFdBj+H8lvhfwWrdW4dw=)
                          7: 36322e3132322e3138382e302f32342d3234203d3e2035363530.roa (hash: 6OwCLICEQXAEg/tDtW6A/oDneiVaxu+1cpVQR9TCH00=)
                          8: 326131333a653430343a3a2f33322d3332203d3e20323135333130.roa (hash: uyzQxNfCQuPRUilhbFb9igirZqWyG0ghryABccswsyE=)
                          9: 326131333a653430353a3a2f33322d3332203d3e20323134393430.roa (hash: HZ1FcP6uKIG0ErisyoB210/El4Tl/fdKRO4f//GIOhY=)
                          10: 37372e3234362e3234302e302f32342d3234203d3e2035363530.roa (hash: yxk4TFt/ObXReJM9hZWCrSiaxkBBnmZ/PajmEhPrCIU=)
                          11: 326131333a623930303a3a2f33322d3332203d3e2035363530.roa (hash: O/uOtyjfl4MlQDYp72kf544XXXljSkWM6HF13huBkEM=)
                          12: 326131333a646130313a3a2f33322d3332203d3e20323134393637.roa (hash: zj1ARbGG0KKWVGhyBIQnR9Ua0u7oCe2HCtyMecubnF8=)
                          13: 37372e3234362e3234302e302f32342d3234203d3e203133333437.roa (hash: 8dmyIVl1xfWSQlImAzdtHKnEErtwf9VZhG0c0l+lwWM=)
                          14: 326131333a653430333a3a2f33322d3332203d3e20323135343632.roa (hash: 0f4WAabP3xZvH36q2OTX1i3if9moXyHYYV6+CfUNtlk=)
                          15: 326131333a623930343a3a2f33322d3332203d3e2035363530.roa (hash: NxII85muRlkPy6Ue9rBPty6Qe2NOTHZ5aybygZpMWdo=)
                          16: 326131333a623930323a3a2f33322d3332203d3e2035363530.roa (hash: fgX7JOs0CLQUJu45+RMzl8sB0KWTVxumN6S/L327z0k=)
                          17: FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl (hash: Kc2qBQ/8xBhsL2T+g2rKe7ctT6zvsetZwJyTDzf4vxg=)
                          18: 33372e3134302e3232332e302f32342d3234203d3e20323036303932.roa (hash: GO8jazaT07yHqE0/NadQwAelqQjPVTo+2xINwt+os7M=)
                          19: 326131333a646130323a3a2f33322d3332203d3e20323135343230.roa (hash: /XIIDyQLovgvuWo+FMAvONj9QZYopmDAHKNtoUoPi4w=)
                          20: 36322e3132322e3138382e302f32342d3234203d3e203133333437.roa (hash: r1huf6kbJmsHFssAQxCRNN3d80N61L6+aVoF7yxiSko=)
                          21: 39312e3234372e3137382e302f32342d3234203d3e20333938343635.roa (hash: DmLW24LZ1vnZeM7Yk9oInpGtra92p8B8+f/VK3l3ndo=)
                          22: 326131333a653430323a3a2f33322d3332203d3e20323135343230.roa (hash: 4kV2/I3YxBchjG3IOXi1hr0lRxiFuT7fxsWyAbTDWfo=)
                          23: 38342e3234362e3131312e302f32342d3234203d3e2033333230.roa (hash: C4YEp8j4LdYsTYvi6G+irz5U3tTH6rayAYxhSvLGLbo=)
                          24: 3137362e39372e3231332e302f32342d3234203d3e20323136303330.roa (hash: x+RYo6wjWwk6+BVxPpNh5bRjqAt+Gok7rpn9qho5bkg=)
                          25: 39342e3132342e37322e302f32342d3234203d3e20343030303339.roa (hash: uDISVLlw/nJy4wy96JtWj7K3NXKh8ecGghWlBzzixw0=)
                          26: 3138382e3234342e3131332e302f32342d3234203d3e20323131343339.roa (hash: gBowB4M9spFJyhtGeGBV6pXmZemrPQZEhgmMEW2ghgQ=)
                          27: 326131333a646130353a3a2f33322d3332203d3e20323134393430.roa (hash: 4U+lv5fdVNtShdj/snUUKz+UGwwRicG7k/GaBlfpAoA=)
                          28: 326131333a653430313a3a2f33322d3332203d3e20323134393637.roa (hash: H3nzZLDuD+hMyo0VXetwr0aEFusgjbaL4Ptg0xbrpOA=)
                          29: 3139342e32362e3232332e302f32342d3234203d3e20343030313735.roa (hash: yzlstLnidlbzwukvV9D/QvVE7rWc67Q28lja1LYs6xM=)
                          30: 3231332e352e3132392e302f32342d3234203d3e20323132323338.roa (hash: y+MccKPhc/2KhhvHGoqYvoNRkkUTzEwbJt4GOMeUfuU=)
                          31: 3137382e32332e3138382e302f32342d3234203d3e2033333230.roa (hash: GKO1xHzUJGinckXhhCthyQ7yu4eOcaWTxHAnYAzelTo=)
                          32: 326131333a646130343a3a2f33322d3332203d3e20323135333130.roa (hash: +nnxoDraZp1GnJqnPBkJVf2tvjIfmjIdjzZ1kJJ3DOg=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 06:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:ab:14:81:b5:9b:b6:6b:0c:28:11:f3:60:85:8e:f7:64:81:7d:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
        Validity
            Not Before: Jan 18 08:37:29 2026 GMT
            Not After : Jan 19 11:23:29 2026 GMT
        Subject: CN=3ABE7D8CB1C760A724E72AE7AA53DAE4263D00AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e8:a7:38:8c:e9:93:59:ef:b7:5d:fd:8a:23:
                    83:b8:cb:05:22:c9:93:23:a4:64:c7:78:2a:b5:ed:
                    80:b4:d6:f0:b9:7d:20:0e:1b:57:4e:c0:3b:22:89:
                    24:b1:fd:01:21:b9:79:4d:2f:52:a7:82:77:26:a5:
                    19:e9:b9:0b:45:26:26:5a:64:f8:3b:4a:b7:ff:5c:
                    73:91:ba:f6:5c:e7:bc:0b:47:16:a7:9f:84:d4:be:
                    71:75:be:2c:a4:26:b5:b7:3c:4a:e7:64:2a:08:8d:
                    71:08:de:c8:6d:49:7a:04:8a:0a:e2:1a:af:dc:cd:
                    76:44:4c:c3:a5:c2:c5:4a:27:03:21:79:ec:26:44:
                    c0:71:67:5c:a1:19:88:da:94:08:ba:ab:83:51:68:
                    ad:53:2a:c6:29:c7:fd:b4:72:00:ca:82:d3:73:2c:
                    75:ab:72:3d:d3:27:ee:bc:b5:76:0e:3b:50:32:4d:
                    74:4c:6e:98:df:c2:79:0e:64:4a:a0:43:21:93:19:
                    20:4c:1d:d1:aa:94:f3:a2:1d:e6:1d:14:ab:ac:43:
                    cc:6e:41:c9:50:b4:74:df:4f:85:f8:be:c1:bd:2d:
                    33:40:9a:d2:ae:c0:69:8b:d2:15:89:e6:8e:25:f8:
                    6f:68:18:93:50:68:c2:ac:59:98:a4:ce:d6:cc:6c:
                    41:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:BE:7D:8C:B1:C7:60:A7:24:E7:2A:E7:AA:53:DA:E4:26:3D:00:AF
            X509v3 Authority Key Identifier:
                keyid:FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:54:df:88:85:17:99:f1:85:e2:a0:e8:5f:f2:5c:d1:1f:1e:
         ae:30:6a:0d:7a:a7:d6:d3:0c:53:ca:2c:00:5e:69:20:8e:15:
         d5:4f:62:a6:7a:ec:f4:e2:3f:39:06:5b:8c:1a:34:a2:ec:99:
         06:cc:d7:5f:56:d0:40:cc:01:96:7b:f7:d3:9e:d2:22:39:2d:
         3b:21:97:de:08:43:7f:36:8c:1e:7f:89:1a:48:64:c3:e5:2c:
         5e:99:c5:1e:43:80:d1:11:d0:56:00:a2:a5:85:ce:de:30:0e:
         34:1a:40:f5:0e:1d:87:a3:05:e0:96:ac:47:a3:ec:82:c2:bb:
         ed:71:cb:50:ac:e6:95:6f:04:fe:84:0d:7d:93:58:9b:5e:1f:
         64:22:9c:7a:4a:ad:b0:5e:74:5d:b0:77:65:0c:42:3f:33:e2:
         53:ab:68:29:89:af:49:00:d9:6f:b7:3e:98:0d:68:d4:75:6b:
         5a:6b:11:a5:fb:2c:31:15:6a:aa:66:9a:ec:e1:86:6f:8d:20:
         78:68:76:5e:b0:68:69:5d:d5:24:f7:37:92:f9:26:43:39:c3:
         11:ec:e8:25:b2:ef:f7:d0:ac:5f:a3:e9:36:7a:f5:f7:d4:23:
         88:75:93:db:38:07:ca:28:51:5e:62:ce:1a:6b:2e:91:ab:ac:
         c7:2c:ca:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 12:00:48 2026 by rpki-client