This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
File:                     62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft (raw, json)
Hash identifier:          lU1Yx3BoBa/nIqZKIatB96lSA+Uqjv5vNUS4DI51alQ=
Subject key identifier:   97:C6:68:B2:58:FD:4A:60:E7:97:3E:55:DF:05:BD:F8:EE:68:56:A6
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Certificate issuer:       /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial:       708605AB5DEB737AB2FD74CEFCFA09DAC4291AE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
Manifest number:          0659
Signing time:             Tue 20 Jan 2026 18:25:40 +0000
Manifest this update:     Tue 20 Jan 2026 18:20:40 +0000
Manifest next update:     Wed 21 Jan 2026 22:09:40 +0000
Files and hashes:         1: 3139342e3135302e3231312e302f32342d3234203d3e203630373532.roa (hash: 6yl6mmQHX9JRwHaNA+EixvXVkEfk55xDr3iAP7rq1mc=)
                          2: 37372e38332e3130372e302f32342d3234203d3e203134363138.roa (hash: zhLOS9e+6y7qGt/FKlY1R6hW3sK8JfM9GdZFMIQGZK0=)
                          3: 3139342e35302e3233332e302f32342d3234203d3e203535323836.roa (hash: e8pQ8DIoexv4eSgcmeIca6dPf9eFFltEvNMHVeGxj8g=)
                          4: 37372e38332e3130352e302f32342d3234203d3e203432383331.roa (hash: G5PlCw5ksoUk7ieeEHXCWXrLXJkbkpEfN03aETxQdg4=)
                          5: 34352e39352e36342e302f32342d3234203d3e20323131333733.roa (hash: t/MYMgzDbaVA94OGDbJcLP85lGX3T66tzpNgs+P9sO4=)
                          6: 34352e38382e31312e302f32342d3234203d3e20323131343135.roa (hash: 8S+s7zX0/TVUfJYDyhi9uvck98NpcZ10C34g0dxy76g=)
                          7: 3139342e35302e3232332e302f32342d3234203d3e203631333137.roa (hash: 1Z4zrEYo8/zD+rJWrObOhUVhxVPxhe8FurgIvn2Ox1c=)
                          8: 34352e3134382e3134302e302f32342d3234203d3e203230363438.roa (hash: e6tDXaybQW5UmskVtMfDSsYmJ7p9HSw7TaF970AadHw=)
                          9: 34352e3134382e3134332e302f32342d3234203d3e203633303235.roa (hash: thntT1VXjBuiFDqfQZvfwarKn2geKOp4X1FsbBWh2cg=)
                          10: 34352e39352e36352e302f32342d3234203d3e20323130313634.roa (hash: U0yUReXntAhTNEU0c4o7sTqtKzZKyc4u28zd/yh7qD0=)
                          11: 37372e38332e3130342e302f32342d3234203d3e203531303832.roa (hash: f4KVXxUKp4riN8a3EihoRPkWdBINxwO2o5MNyOJ3lyE=)
                          12: 34352e39352e36352e302f32342d3234203d3e20323135373130.roa (hash: dF0q35w2KA0neeMPOaebLzzr7a28F6uxnXDW3p12DWE=)
                          13: 34352e3135352e3135382e302f32342d3234203d3e203231383539.roa (hash: XuGO11wVvpuub4HELC4n1jHW4YCQnWV6MaqEEOcxysU=)
                          14: 34352e3134382e3134322e302f32342d3234203d3e2035303635.roa (hash: XxuPnzv2zWfqRmQSBgzn2jkd1LQo9AMYkd0GkBdYieY=)
                          15: 34352e38382e382e302f32342d3234203d3e20323031393439.roa (hash: +cn/HoK+oYEcSR5pDXZXsbQ404gHhu7pStUUogb/v/E=)
                          16: 3139342e35302e3233332e302f32342d3234203d3e203336333532.roa (hash: fMy5Ibcr4i8ojGYObiUnUzKAAI18Gx6q8BkGOjs0huE=)
                          17: 34352e3135352e3135362e302f32342d3234203d3e20343030303331.roa (hash: EVkA2Jv9qCjOmLzMQBqtVvmK1ApPdoWboKtBwn0hSko=)
                          18: 37372e38332e3130362e302f32342d3234203d3e203539383935.roa (hash: rKcXYAbD0EzWWrrsYRhqwdMJomkAPyh4fXa29GzNLXk=)
                          19: 34352e3135352e3135372e302f32342d3234203d3e20343030303331.roa (hash: ee9ZCdTZqPdudKM34Tqdt9Z4tCjrQwwkM8QRoW1IKQc=)
                          20: 34352e3134382e3134312e302f32342d3234203d3e203530363733.roa (hash: hozDDD12cZmU9uwqtlG3YW2MQMFya58e1DSCYqdV4xM=)
                          21: 3139342e35302e3233332e302f32342d3234203d3e2039303039.roa (hash: xEfuk5AWeAZfj+tZcldJdbXY5vKkWnXcUHGIm6yV4Lg=)
                          22: 34352e3135352e3135392e302f32342d3234203d3e203438363738.roa (hash: u1WBAghFeZR2xUdqMEiqWOz/pelKlX54cSNJdRoIvTc=)
                          23: 34352e36352e3131362e302f32332d3233203d3e20343030393039.roa (hash: fKw1U5Pbcr7KNwdfGbjOMehVygFRjMNJ4Bsi4VNVsdY=)
                          24: 33312e32342e3235332e302f32342d3234203d3e20313938353834.roa (hash: TKU/vx9Wtm+1ZKy0VI4wdrI1TsFAK1YG+udovTZHhRQ=)
                          25: 3139342e3135302e3230352e302f32342d3234203d3e20333939363431.roa (hash: idJKQPKJUF2hXAonhN1BXEAMnHfj84HnWx7yXLbBRME=)
                          26: 34352e36352e3131392e302f32342d3234203d3e20383334.roa (hash: 0/4NwfjBJZbjrQ1wV6nTraLnXq0b7mkcdY3WXztYgAA=)
                          27: 34352e39352e36362e302f32342d3234203d3e20343031383536.roa (hash: tytS9XonD/8h9xuJXEs8o4O8u+smnCe4JIgDUYiezNI=)
                          28: 3139342e3135302e3230342e302f32342d3234203d3e20323132333335.roa (hash: 63C/hNRb0Drc8LY5qjMfJwTosG+OCfPY0R9pguNis8c=)
                          29: 62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl (hash: 7INm7N90C3BA5UGkbcimpUQQich3g7OJbW/BLTxg5uQ=)
                          30: 3139342e3135302e3231302e302f32342d3234203d3e203239383032.roa (hash: xnxtrVEJ4jgTieKiLVrLmXgwS+MhKUeM+dBkJGGi38c=)
                          31: 34352e39352e36372e302f32342d3234203d3e203633303235.roa (hash: Edh9VJemZgxUF9J/JI4hV7WU9Tzu+uNaAwz4b+tj+k4=)
                          32: 3139342e3135302e3231302e302f32342d3234203d3e203631333137.roa (hash: VxZfu1utzRv0kh5tE9/89O9Iy7ekq1J3YpakQxAgpl4=)
                          33: 34352e3135352e3135392e302f32342d3234203d3e20323038343833.roa (hash: SrUI7p9BkxLbUUoyJaLsvvKn3T5zHjIyvMH7Dv6IUL4=)
                          34: 34352e3135352e3135392e302f32342d3234203d3e20323134393431.roa (hash: WprLZ0caJLsKKnbXSREMKq6Jq8d42WBIKeez3W9qQzM=)
                          35: 37372e38332e3130372e302f32342d3234203d3e203136353039.roa (hash: dMlcET7DG0/2ASrNVCZkRdYW4GhaPbuzcQLK5J1CNrQ=)
                          36: 34352e38382e31302e302f32342d3234203d3e20323038393035.roa (hash: BHapRYbNju6hwZ6emNPrYuwSQ2OihFm78xu/yDCDgLw=)
                          37: 34352e36352e3131362e302f32332d3234203d3e20323131393336.roa (hash: GXucdSTByrNZf/jA14dQ7LfXdfDVbmCUmr67C4aW9gc=)
                          38: 3139342e35302e3234332e302f32342d3234203d3e20333939363431.roa (hash: aRQf3ruVLXzzQ/FAWeCN4tpxuy455EHSMUangP0GVpQ=)
                          39: 34352e36352e3131382e302f32342d3234203d3e2039303837.roa (hash: nyse/97oPTB6RYXcjHsejL9q8oz4QV04fzm+/z+4UtE=)
                          40: 34352e36352e3131382e302f32342d3234203d3e20343030393039.roa (hash: 9n5NRyTUo8TlgAQfcuMCg+y7JOPeAkm5nm3LNDjjJCY=)
                          41: 34352e38382e392e302f32342d3234203d3e20323034393134.roa (hash: F//fl6lrN+InFBA9ItZ0AG1Ysqe7rqM4SqcHI/n1O8o=)
                          42: 3139342e35302e3232342e302f32342d3234203d3e203631333137.roa (hash: WSiHOTFFPuzIwiI2LWhjblg/9Vv6C7o1LCtLb9TLrQc=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Jan 2026 22:09:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:86:05:ab:5d:eb:73:7a:b2:fd:74:ce:fc:fa:09:da:c4:29:1a:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
        Validity
            Not Before: Jan 20 18:20:40 2026 GMT
            Not After : Jan 21 22:09:40 2026 GMT
        Subject: CN=97C668B258FD4A60E7973E55DF05BDF8EE6856A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ef:fd:83:4d:9e:c7:7d:ed:1a:33:4e:af:d3:
                    cb:de:03:b6:23:80:4e:fc:1b:9f:0d:64:87:0a:e9:
                    35:44:ba:69:71:33:23:b2:5c:da:f9:e6:59:a4:e0:
                    40:9f:5f:f1:15:d7:82:cc:b4:e2:75:90:cf:85:19:
                    e7:f0:ce:6d:c7:3e:2d:b1:cf:98:3d:35:3f:a4:0f:
                    ee:1e:b2:0c:ed:5a:54:7b:1d:78:9a:6a:1e:5f:32:
                    80:4e:28:20:b1:cf:49:0c:c2:ba:73:19:50:9c:e2:
                    f7:7f:61:67:e8:aa:06:04:05:f2:1f:32:a7:b5:66:
                    b1:25:fd:70:97:b9:ad:b5:ed:fd:df:17:30:57:7b:
                    dd:c0:8c:cb:a5:82:b1:b1:c9:a9:38:60:24:95:32:
                    7a:fd:db:01:7d:f1:8a:3c:d3:d9:25:41:a0:64:13:
                    7d:1d:18:d1:3c:61:4c:37:3d:54:c1:6a:47:47:c1:
                    42:72:01:6a:f6:b1:4e:0b:8e:64:6f:83:17:2b:3d:
                    58:f6:8f:ff:dd:36:c6:1c:b7:fd:e1:3e:84:ae:6f:
                    92:32:dc:da:8c:b5:02:48:88:3b:8a:57:7a:5d:ee:
                    c8:75:3a:96:88:51:4f:cf:1f:60:f6:ff:17:ff:ce:
                    d9:40:98:fb:3d:a1:65:37:10:b1:0f:79:66:69:31:
                    be:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:C6:68:B2:58:FD:4A:60:E7:97:3E:55:DF:05:BD:F8:EE:68:56:A6
            X509v3 Authority Key Identifier:
                keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:a6:c5:6c:aa:bc:23:cd:6b:f3:ed:9a:1e:f1:c1:58:6d:7f:
         2c:8f:7d:23:4d:65:b5:3e:72:fd:dd:2e:f2:79:ea:a8:38:b2:
         71:55:79:2f:a3:cf:b2:be:a0:04:82:6f:fe:6b:11:bc:bc:a4:
         8f:7c:6e:1d:e0:21:c3:b1:dd:97:61:a2:cd:d1:4e:e0:21:71:
         93:0a:a1:37:91:2f:a3:71:70:3e:f8:ec:51:dc:fe:78:29:af:
         a3:88:89:4f:62:05:79:9b:e3:4e:f2:24:04:93:34:dc:9b:32:
         6d:cf:53:4d:0d:d3:18:c4:9c:a5:ec:ff:e0:a0:f2:e7:86:e3:
         9a:50:75:6f:fe:d3:8a:bc:53:bc:10:c9:af:07:55:ab:bd:90:
         ff:4e:0e:ae:8b:26:65:d0:3d:8c:5b:a2:52:e0:2d:45:10:0b:
         65:49:af:14:67:7d:6b:c9:46:bf:12:dd:71:2b:4b:a8:4e:02:
         60:20:74:68:ea:9e:67:87:0f:87:b4:cb:c0:b8:fe:d4:34:22:
         7e:20:58:24:a9:d8:d0:1d:15:ef:eb:9a:9d:48:8b:03:e0:04:
         20:1d:b3:ed:3a:7e:f8:31:4b:dd:44:56:59:64:00:2c:73:d8:
         d8:10:c5:e8:05:6b:a1:c6:a9:e9:a2:67:bf:9c:75:2a:b2:5d:
         d2:93:d7:69
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUcIYFq13rc3qy/XTO/PoJ2sQpGukwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjJmYmQyY2MwMDEyZmIyZjg2ZGI0MGI1ODliZDFhYzRl
OTczMjY2ZDAeFw0yNjAxMjAxODIwNDBaFw0yNjAxMjEyMjA5NDBaMDMxMTAvBgNV
BAMTKDk3QzY2OEIyNThGRDRBNjBFNzk3M0U1NURGMDVCREY4RUU2ODU2QTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy7/2DTZ7Hfe0aM06v08veA7Yj
gE78G58NZIcK6TVEumlxMyOyXNr55lmk4ECfX/EV14LMtOJ1kM+FGefwzm3HPi2x
z5g9NT+kD+4esgztWlR7HXiaah5fMoBOKCCxz0kMwrpzGVCc4vd/YWfoqgYEBfIf
Mqe1ZrEl/XCXua217f3fFzBXe93AjMulgrGxyak4YCSVMnr92wF98Yo809klQaBk
E30dGNE8YUw3PVTBakdHwUJyAWr2sU4LjmRvgxcrPVj2j//dNsYct/3hPoSub5Iy
3NqMtQJIiDuKV3pd7sh1OpaIUU/PH2D2/xf/ztlAmPs9oWU3ELEPeWZpMb77AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUl8Zoslj9SmDnlz5V3wW9+O5oVqYwHwYDVR0j
BBgwFoAUYvvSzAAS+y+G20C1ib0axOlzJm0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDZiOTNkZjAtYWM4ZC00ZGE4LWFmYjgtZGNiN2YyODg4
MzYyLzAvNjJGQkQyQ0MwMDEyRkIyRjg2REI0MEI1ODlCRDFBQzRFOTczMjY2RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1l2dlN6QUFTLXktRzIwQzFpYjBheE9s
ekptMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS80NmI5M2RmMC1h
YzhkLTRkYTgtYWZiOC1kY2I3ZjI4ODgzNjIvMC82MkZCRDJDQzAwMTJGQjJGODZE
QjQwQjU4OUJEMUFDNEU5NzMyNjZELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEabFbKq8I81r8+2aHvHB
WG1/LI99I01ltT5y/d0u8nnqqDiycVV5L6PPsr6gBIJv/msRvLykj3xuHeAhw7Hd
l2GizdFO4CFxkwqhN5Evo3FwPvjsUdz+eCmvo4iJT2IFeZvjTvIkBJM03Jsybc9T
TQ3TGMScpez/4KDy54bjmlB1b/7TirxTvBDJrwdVq72Q/04OrosmZdA9jFuiUuAt
RRALZUmvFGd9a8lGvxLdcStLqE4CYCB0aOqeZ4cPh7TLwLj+1DQifiBYJKnY0B0V
7+uanUiLA+AEIB2z7Tp++DFL3URWWWQALHPY2BDF6AVrocap6aJnv5x1KrJd0pPX
aQ==
-----END CERTIFICATE-----