This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
File:                     62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft (raw, json)
Hash identifier:          Oa7jRq1w20l4Yjhol9Ezg7kHO+w0++fMgj+xJepYIGM=
Subject key identifier:   54:6E:11:1D:9F:CE:91:40:EE:24:12:7B:8D:74:CD:A4:A1:1C:69:A5
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Certificate issuer:       /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial:       5793170C1F7C6A3A11551A973656DD3B22B06F5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
Manifest number:          0653
Signing time:             Fri 16 Jan 2026 20:26:21 +0000
Manifest this update:     Fri 16 Jan 2026 20:21:21 +0000
Manifest next update:     Sat 17 Jan 2026 22:49:21 +0000
Files and hashes:         1: 3139342e3135302e3231312e302f32342d3234203d3e203630373532.roa (hash: 6yl6mmQHX9JRwHaNA+EixvXVkEfk55xDr3iAP7rq1mc=)
                          2: 34352e36352e3131362e302f32332d3233203d3e20343030393039.roa (hash: fKw1U5Pbcr7KNwdfGbjOMehVygFRjMNJ4Bsi4VNVsdY=)
                          3: 34352e3134382e3134312e302f32342d3234203d3e203530363733.roa (hash: hozDDD12cZmU9uwqtlG3YW2MQMFya58e1DSCYqdV4xM=)
                          4: 62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl (hash: jgeqJfvlm6lAylSH6rHiaClFZtZSeAJCzegtf3Ea4yI=)
                          5: 34352e36352e3131392e302f32342d3234203d3e20383334.roa (hash: 0/4NwfjBJZbjrQ1wV6nTraLnXq0b7mkcdY3WXztYgAA=)
                          6: 34352e36352e3131382e302f32342d3234203d3e2039303837.roa (hash: nyse/97oPTB6RYXcjHsejL9q8oz4QV04fzm+/z+4UtE=)
                          7: 37372e38332e3130352e302f32342d3234203d3e203432383331.roa (hash: G5PlCw5ksoUk7ieeEHXCWXrLXJkbkpEfN03aETxQdg4=)
                          8: 34352e39352e36342e302f32342d3234203d3e20323131333733.roa (hash: t/MYMgzDbaVA94OGDbJcLP85lGX3T66tzpNgs+P9sO4=)
                          9: 3139342e3135302e3230352e302f32342d3234203d3e20333939363431.roa (hash: idJKQPKJUF2hXAonhN1BXEAMnHfj84HnWx7yXLbBRME=)
                          10: 34352e39352e36362e302f32342d3234203d3e20343031383536.roa (hash: tytS9XonD/8h9xuJXEs8o4O8u+smnCe4JIgDUYiezNI=)
                          11: 34352e3135352e3135362e302f32342d3234203d3e20343030303331.roa (hash: EVkA2Jv9qCjOmLzMQBqtVvmK1ApPdoWboKtBwn0hSko=)
                          12: 34352e39352e36352e302f32342d3234203d3e20323130313634.roa (hash: U0yUReXntAhTNEU0c4o7sTqtKzZKyc4u28zd/yh7qD0=)
                          13: 37372e38332e3130372e302f32342d3234203d3e203136353039.roa (hash: dMlcET7DG0/2ASrNVCZkRdYW4GhaPbuzcQLK5J1CNrQ=)
                          14: 34352e38382e31302e302f32342d3234203d3e20323038393035.roa (hash: BHapRYbNju6hwZ6emNPrYuwSQ2OihFm78xu/yDCDgLw=)
                          15: 34352e3135352e3135392e302f32342d3234203d3e203438363738.roa (hash: u1WBAghFeZR2xUdqMEiqWOz/pelKlX54cSNJdRoIvTc=)
                          16: 3139342e35302e3232332e302f32342d3234203d3e203631333137.roa (hash: 1Z4zrEYo8/zD+rJWrObOhUVhxVPxhe8FurgIvn2Ox1c=)
                          17: 37372e38332e3130362e302f32342d3234203d3e203539383935.roa (hash: rKcXYAbD0EzWWrrsYRhqwdMJomkAPyh4fXa29GzNLXk=)
                          18: 37372e38332e3130372e302f32342d3234203d3e203134363138.roa (hash: zhLOS9e+6y7qGt/FKlY1R6hW3sK8JfM9GdZFMIQGZK0=)
                          19: 34352e36352e3131382e302f32342d3234203d3e20343030393039.roa (hash: 9n5NRyTUo8TlgAQfcuMCg+y7JOPeAkm5nm3LNDjjJCY=)
                          20: 34352e3135352e3135392e302f32342d3234203d3e20323134393431.roa (hash: WprLZ0caJLsKKnbXSREMKq6Jq8d42WBIKeez3W9qQzM=)
                          21: 3139342e3135302e3231302e302f32342d3234203d3e203631333137.roa (hash: VxZfu1utzRv0kh5tE9/89O9Iy7ekq1J3YpakQxAgpl4=)
                          22: 34352e38382e382e302f32342d3234203d3e20323031393439.roa (hash: +cn/HoK+oYEcSR5pDXZXsbQ404gHhu7pStUUogb/v/E=)
                          23: 34352e38382e392e302f32342d3234203d3e20323034393134.roa (hash: F//fl6lrN+InFBA9ItZ0AG1Ysqe7rqM4SqcHI/n1O8o=)
                          24: 3139342e35302e3233332e302f32342d3234203d3e203535323836.roa (hash: e8pQ8DIoexv4eSgcmeIca6dPf9eFFltEvNMHVeGxj8g=)
                          25: 3139342e35302e3233332e302f32342d3234203d3e2039303039.roa (hash: xEfuk5AWeAZfj+tZcldJdbXY5vKkWnXcUHGIm6yV4Lg=)
                          26: 3139342e35302e3232342e302f32342d3234203d3e203631333137.roa (hash: WSiHOTFFPuzIwiI2LWhjblg/9Vv6C7o1LCtLb9TLrQc=)
                          27: 34352e3135352e3135372e302f32342d3234203d3e20343030303331.roa (hash: ee9ZCdTZqPdudKM34Tqdt9Z4tCjrQwwkM8QRoW1IKQc=)
                          28: 34352e36352e3131362e302f32332d3234203d3e20323131393336.roa (hash: GXucdSTByrNZf/jA14dQ7LfXdfDVbmCUmr67C4aW9gc=)
                          29: 3139342e3135302e3230342e302f32342d3234203d3e20323132333335.roa (hash: 63C/hNRb0Drc8LY5qjMfJwTosG+OCfPY0R9pguNis8c=)
                          30: 34352e38382e31312e302f32342d3234203d3e20323131343135.roa (hash: 8S+s7zX0/TVUfJYDyhi9uvck98NpcZ10C34g0dxy76g=)
                          31: 34352e3134382e3134332e302f32342d3234203d3e203633303235.roa (hash: thntT1VXjBuiFDqfQZvfwarKn2geKOp4X1FsbBWh2cg=)
                          32: 34352e39352e36372e302f32342d3234203d3e203633303235.roa (hash: Edh9VJemZgxUF9J/JI4hV7WU9Tzu+uNaAwz4b+tj+k4=)
                          33: 34352e39352e36352e302f32342d3234203d3e20323135373130.roa (hash: dF0q35w2KA0neeMPOaebLzzr7a28F6uxnXDW3p12DWE=)
                          34: 34352e3135352e3135382e302f32342d3234203d3e203231383539.roa (hash: XuGO11wVvpuub4HELC4n1jHW4YCQnWV6MaqEEOcxysU=)
                          35: 3139342e35302e3233332e302f32342d3234203d3e203336333532.roa (hash: fMy5Ibcr4i8ojGYObiUnUzKAAI18Gx6q8BkGOjs0huE=)
                          36: 3139342e35302e3234332e302f32342d3234203d3e20333939363431.roa (hash: aRQf3ruVLXzzQ/FAWeCN4tpxuy455EHSMUangP0GVpQ=)
                          37: 34352e3135352e3135392e302f32342d3234203d3e20323038343833.roa (hash: SrUI7p9BkxLbUUoyJaLsvvKn3T5zHjIyvMH7Dv6IUL4=)
                          38: 34352e3134382e3134322e302f32342d3234203d3e2035303635.roa (hash: XxuPnzv2zWfqRmQSBgzn2jkd1LQo9AMYkd0GkBdYieY=)
                          39: 37372e38332e3130342e302f32342d3234203d3e203531303832.roa (hash: f4KVXxUKp4riN8a3EihoRPkWdBINxwO2o5MNyOJ3lyE=)
                          40: 3139342e3135302e3231302e302f32342d3234203d3e203239383032.roa (hash: xnxtrVEJ4jgTieKiLVrLmXgwS+MhKUeM+dBkJGGi38c=)
                          41: 34352e3134382e3134302e302f32342d3234203d3e203230363438.roa (hash: e6tDXaybQW5UmskVtMfDSsYmJ7p9HSw7TaF970AadHw=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 Jan 2026 22:49:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:93:17:0c:1f:7c:6a:3a:11:55:1a:97:36:56:dd:3b:22:b0:6f:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
        Validity
            Not Before: Jan 16 20:21:21 2026 GMT
            Not After : Jan 17 22:49:21 2026 GMT
        Subject: CN=546E111D9FCE9140EE24127B8D74CDA4A11C69A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:10:c4:08:74:07:f0:12:c2:0e:81:13:bc:07:
                    f8:cc:21:00:bc:df:88:21:cb:c0:e9:ac:bd:f5:91:
                    ad:cc:c0:65:f8:e5:12:8b:ee:6f:a8:8c:76:8a:f3:
                    9e:d5:99:03:04:6b:0b:94:01:5e:7b:aa:ef:d6:01:
                    83:00:f1:50:e8:17:b9:d6:4b:46:52:b9:7c:60:52:
                    1c:5d:80:f3:25:0b:69:13:a6:0c:41:d4:07:54:eb:
                    50:89:75:f8:e9:d8:70:13:b1:21:6a:9d:89:75:01:
                    38:6d:d8:5e:5c:f7:eb:7e:eb:dd:1d:61:10:1e:38:
                    7e:71:0b:a1:cf:62:a5:7a:c3:37:ac:8b:23:31:4d:
                    9d:9e:03:2a:95:08:5b:ad:75:17:23:10:14:b1:cd:
                    87:9e:8d:76:d8:2c:72:0c:b1:e0:d6:78:5e:44:e9:
                    d7:df:83:08:57:82:b6:e6:c9:7d:03:1c:aa:8d:d7:
                    5f:3d:5e:16:ec:bb:ae:10:83:d6:42:04:52:3b:d1:
                    68:2f:62:c8:f4:32:5b:a3:f2:7e:d5:b3:71:b9:ae:
                    25:55:84:38:bc:f0:6d:86:44:2e:d3:64:d3:02:4c:
                    85:5a:b1:4d:27:90:3d:31:a0:16:b5:9c:41:ec:eb:
                    43:45:ba:41:38:de:36:f8:a9:26:7e:65:c6:4f:f4:
                    4f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:6E:11:1D:9F:CE:91:40:EE:24:12:7B:8D:74:CD:A4:A1:1C:69:A5
            X509v3 Authority Key Identifier:
                keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:37:c6:5c:e6:3a:e7:7f:71:5d:77:cf:85:a2:b8:47:a5:d7:
         78:4a:20:e0:8a:df:ad:6e:55:08:d3:55:cd:2d:05:fd:8a:51:
         cc:e3:e9:72:f3:3c:f2:6f:e0:46:35:8c:2e:34:80:09:96:98:
         a7:dd:e5:c2:fa:5f:cf:df:58:9e:a3:9e:15:16:5f:3e:56:c4:
         e0:a9:19:96:6f:17:08:d5:e6:63:aa:16:cc:c8:34:7f:46:6e:
         5c:30:4f:9c:aa:cd:57:5e:99:d8:9d:c2:5d:d1:15:ba:f6:e2:
         e8:6e:2b:72:65:b8:19:83:f3:80:d5:4e:31:ec:98:df:9f:1e:
         6a:cc:02:00:3c:2a:d6:b7:df:8b:38:26:59:86:18:2a:d6:18:
         f6:bc:57:dc:6c:f5:b0:45:84:d2:9c:4a:4c:e4:15:65:0a:c3:
         73:c4:6e:08:b9:7a:96:24:f1:d7:f3:4f:7e:b6:06:09:89:f4:
         80:73:7c:0e:70:9c:ec:91:a0:06:fb:34:2e:68:45:6f:5e:94:
         fd:7e:d4:dc:07:c9:05:27:1f:ce:e0:30:83:e1:bb:fa:50:4e:
         90:6f:cc:33:09:e5:0e:eb:45:d8:9b:b9:54:4b:30:f9:c0:7a:
         15:7f:3a:54:31:7e:ec:93:b9:49:e9:90:92:2e:58:10:1f:a6:
         ed:cb:44:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 17 10:44:30 2026 by rpki-client