This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
File:                     62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft (raw, json)
Hash identifier:          lslpovrmaj/UgyNlMNMlf3kP/gYDc9Xoe+xPXlvVd5M=
Subject key identifier:   E1:24:EE:06:F0:EE:A0:9B:B2:3B:C0:F4:00:D1:53:24:7B:2F:A9:41
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Certificate issuer:       /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial:       18F2A13D12E5B75C7708E73D1DCA6D40E5DAED7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
Manifest number:          0644
Signing time:             Mon 05 Jan 2026 09:55:33 +0000
Manifest this update:     Mon 05 Jan 2026 09:50:33 +0000
Manifest next update:     Tue 06 Jan 2026 13:53:33 +0000
Files and hashes:         1: 34352e39352e36372e302f32342d3234203d3e203633303235.roa (hash: Edh9VJemZgxUF9J/JI4hV7WU9Tzu+uNaAwz4b+tj+k4=)
                          2: 3139342e35302e3232342e302f32342d3234203d3e203631333137.roa (hash: WSiHOTFFPuzIwiI2LWhjblg/9Vv6C7o1LCtLb9TLrQc=)
                          3: 34352e36352e3131362e302f32332d3233203d3e20343030393039.roa (hash: fKw1U5Pbcr7KNwdfGbjOMehVygFRjMNJ4Bsi4VNVsdY=)
                          4: 3139342e35302e3232332e302f32342d3234203d3e203631333137.roa (hash: 1Z4zrEYo8/zD+rJWrObOhUVhxVPxhe8FurgIvn2Ox1c=)
                          5: 34352e38382e31312e302f32342d3234203d3e20323131343135.roa (hash: 8S+s7zX0/TVUfJYDyhi9uvck98NpcZ10C34g0dxy76g=)
                          6: 37372e38332e3130342e302f32342d3234203d3e203531303832.roa (hash: f4KVXxUKp4riN8a3EihoRPkWdBINxwO2o5MNyOJ3lyE=)
                          7: 34352e3135352e3135372e302f32342d3234203d3e20343030303331.roa (hash: ee9ZCdTZqPdudKM34Tqdt9Z4tCjrQwwkM8QRoW1IKQc=)
                          8: 34352e3135352e3135362e302f32342d3234203d3e20343030303331.roa (hash: EVkA2Jv9qCjOmLzMQBqtVvmK1ApPdoWboKtBwn0hSko=)
                          9: 3139342e35302e3234332e302f32342d3234203d3e20333939363431.roa (hash: aRQf3ruVLXzzQ/FAWeCN4tpxuy455EHSMUangP0GVpQ=)
                          10: 3139342e35302e3233332e302f32342d3234203d3e203336333532.roa (hash: fMy5Ibcr4i8ojGYObiUnUzKAAI18Gx6q8BkGOjs0huE=)
                          11: 37372e38332e3130352e302f32342d3234203d3e203432383331.roa (hash: G5PlCw5ksoUk7ieeEHXCWXrLXJkbkpEfN03aETxQdg4=)
                          12: 34352e3134382e3134332e302f32342d3234203d3e203633303235.roa (hash: thntT1VXjBuiFDqfQZvfwarKn2geKOp4X1FsbBWh2cg=)
                          13: 3139342e3135302e3230342e302f32342d3234203d3e20323132333335.roa (hash: 63C/hNRb0Drc8LY5qjMfJwTosG+OCfPY0R9pguNis8c=)
                          14: 34352e3135352e3135382e302f32342d3234203d3e203231383539.roa (hash: XuGO11wVvpuub4HELC4n1jHW4YCQnWV6MaqEEOcxysU=)
                          15: 34352e3134382e3134322e302f32342d3234203d3e2035303635.roa (hash: XxuPnzv2zWfqRmQSBgzn2jkd1LQo9AMYkd0GkBdYieY=)
                          16: 3139342e3135302e3231302e302f32342d3234203d3e203631333137.roa (hash: VxZfu1utzRv0kh5tE9/89O9Iy7ekq1J3YpakQxAgpl4=)
                          17: 34352e3135352e3135392e302f32342d3234203d3e20323038343833.roa (hash: SrUI7p9BkxLbUUoyJaLsvvKn3T5zHjIyvMH7Dv6IUL4=)
                          18: 3139342e3135302e3231312e302f32342d3234203d3e203630373532.roa (hash: 6yl6mmQHX9JRwHaNA+EixvXVkEfk55xDr3iAP7rq1mc=)
                          19: 37372e38332e3130372e302f32342d3234203d3e203136353039.roa (hash: dMlcET7DG0/2ASrNVCZkRdYW4GhaPbuzcQLK5J1CNrQ=)
                          20: 34352e3134382e3134302e302f32342d3234203d3e203230363438.roa (hash: e6tDXaybQW5UmskVtMfDSsYmJ7p9HSw7TaF970AadHw=)
                          21: 3139342e35302e3233332e302f32342d3234203d3e203535323836.roa (hash: e8pQ8DIoexv4eSgcmeIca6dPf9eFFltEvNMHVeGxj8g=)
                          22: 34352e39352e36352e302f32342d3234203d3e20323135373130.roa (hash: dF0q35w2KA0neeMPOaebLzzr7a28F6uxnXDW3p12DWE=)
                          23: 3139342e3135302e3231302e302f32342d3234203d3e203239383032.roa (hash: xnxtrVEJ4jgTieKiLVrLmXgwS+MhKUeM+dBkJGGi38c=)
                          24: 34352e36352e3131382e302f32342d3234203d3e20343030393039.roa (hash: 9n5NRyTUo8TlgAQfcuMCg+y7JOPeAkm5nm3LNDjjJCY=)
                          25: 62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl (hash: 1AFbHoC/rE5m0nTTQmnJQq9TwlU3xylZ92UyySzMu9Q=)
                          26: 34352e3135352e3135392e302f32342d3234203d3e203438363738.roa (hash: u1WBAghFeZR2xUdqMEiqWOz/pelKlX54cSNJdRoIvTc=)
                          27: 34352e38382e382e302f32342d3234203d3e20323031393439.roa (hash: +cn/HoK+oYEcSR5pDXZXsbQ404gHhu7pStUUogb/v/E=)
                          28: 3139342e3135302e3230352e302f32342d3234203d3e20333939363431.roa (hash: idJKQPKJUF2hXAonhN1BXEAMnHfj84HnWx7yXLbBRME=)
                          29: 34352e39352e36352e302f32342d3234203d3e20323130313634.roa (hash: U0yUReXntAhTNEU0c4o7sTqtKzZKyc4u28zd/yh7qD0=)
                          30: 3139342e35302e3233332e302f32342d3234203d3e2039303039.roa (hash: xEfuk5AWeAZfj+tZcldJdbXY5vKkWnXcUHGIm6yV4Lg=)
                          31: 34352e36352e3131382e302f32342d3234203d3e2039303837.roa (hash: nyse/97oPTB6RYXcjHsejL9q8oz4QV04fzm+/z+4UtE=)
                          32: 34352e38382e392e302f32342d3234203d3e20323034393134.roa (hash: F//fl6lrN+InFBA9ItZ0AG1Ysqe7rqM4SqcHI/n1O8o=)
                          33: 34352e36352e3131392e302f32342d3234203d3e20383334.roa (hash: 0/4NwfjBJZbjrQ1wV6nTraLnXq0b7mkcdY3WXztYgAA=)
                          34: 34352e38382e31302e302f32342d3234203d3e20323038393035.roa (hash: BHapRYbNju6hwZ6emNPrYuwSQ2OihFm78xu/yDCDgLw=)
                          35: 37372e38332e3130362e302f32342d3234203d3e203539383935.roa (hash: rKcXYAbD0EzWWrrsYRhqwdMJomkAPyh4fXa29GzNLXk=)
                          36: 34352e3134382e3134312e302f32342d3234203d3e203530363733.roa (hash: hozDDD12cZmU9uwqtlG3YW2MQMFya58e1DSCYqdV4xM=)
                          37: 37372e38332e3130372e302f32342d3234203d3e203134363138.roa (hash: zhLOS9e+6y7qGt/FKlY1R6hW3sK8JfM9GdZFMIQGZK0=)
                          38: 34352e36352e3131362e302f32332d3234203d3e20323131393336.roa (hash: GXucdSTByrNZf/jA14dQ7LfXdfDVbmCUmr67C4aW9gc=)
                          39: 34352e39352e36362e302f32342d3234203d3e20383334.roa (hash: FMoD7Lw2WwKLLMJCbTA45RhWGZcomhDdl55vPp/Hgf8=)
                          40: 34352e3135352e3135392e302f32342d3234203d3e20323134393431.roa (hash: WprLZ0caJLsKKnbXSREMKq6Jq8d42WBIKeez3W9qQzM=)
                          41: 34352e39352e36342e302f32342d3234203d3e20323131333733.roa (hash: t/MYMgzDbaVA94OGDbJcLP85lGX3T66tzpNgs+P9sO4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 Jan 2026 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:f2:a1:3d:12:e5:b7:5c:77:08:e7:3d:1d:ca:6d:40:e5:da:ed:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
        Validity
            Not Before: Jan  5 09:50:33 2026 GMT
            Not After : Jan  6 13:53:33 2026 GMT
        Subject: CN=E124EE06F0EEA09BB23BC0F400D153247B2FA941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:48:ff:84:75:79:1b:bf:c2:92:74:8c:c9:4e:
                    5a:f7:03:a0:00:2f:f2:cf:61:d6:b6:b2:8e:7a:29:
                    85:62:bc:85:79:cb:58:4a:2d:d3:61:bb:5b:0d:7c:
                    d5:c0:59:2e:4e:7f:b9:81:73:6a:2b:7d:61:32:01:
                    95:2e:6c:ca:80:3e:3b:d0:ff:ce:22:e1:a7:7b:c0:
                    b4:fd:6c:1f:65:a4:a5:a6:41:af:e3:4b:ba:56:ce:
                    8a:1f:3e:99:f6:24:54:d4:b9:55:e5:eb:36:80:2c:
                    22:c8:3a:8f:d3:18:b2:1b:14:23:bd:dd:45:b3:47:
                    62:46:1f:94:d5:fb:27:0e:70:f9:53:87:d0:fd:1f:
                    3e:6e:d9:25:53:f6:2d:0c:35:b9:40:fb:a7:c2:21:
                    44:cd:19:27:99:da:46:f0:86:15:d7:f2:bb:0b:8b:
                    33:2d:51:f7:03:ba:f2:f2:07:f0:87:6c:c3:93:1a:
                    b8:ce:ab:e0:81:18:c0:c5:ec:a7:4d:10:d6:72:b3:
                    7c:59:9d:a9:ab:84:57:31:66:9a:fa:c2:35:2d:47:
                    4c:09:4b:7c:59:fa:e2:41:e7:9b:dd:a5:cf:64:d0:
                    8a:3c:f7:c1:b9:f5:9f:cb:89:85:c9:99:d2:35:4d:
                    66:8f:ca:ec:d3:4d:ad:06:91:bd:04:15:99:0f:50:
                    d8:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:24:EE:06:F0:EE:A0:9B:B2:3B:C0:F4:00:D1:53:24:7B:2F:A9:41
            X509v3 Authority Key Identifier:
                keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:27:fd:8f:85:23:5b:12:82:ba:39:10:2d:e9:dd:c3:be:c4:
         86:9d:34:b4:be:ae:f8:72:88:41:4d:7f:c7:cc:c5:6b:cb:27:
         92:fa:e3:01:f4:66:02:97:af:dd:2a:30:b9:9d:fe:4c:37:ad:
         af:86:09:bf:6b:6f:da:ec:8f:29:30:9c:1c:3b:81:7d:75:e9:
         1c:c6:04:9b:b9:4c:2e:2f:0e:25:ef:10:af:1b:34:37:71:11:
         25:e0:7d:5f:67:95:cf:56:86:a4:2d:c2:c2:03:51:79:85:1e:
         01:c8:60:fb:f3:17:e9:58:c2:65:50:27:71:07:9e:d7:8f:52:
         1d:47:f7:8e:c9:60:96:69:bf:6e:9f:3c:3c:eb:9d:ba:52:80:
         55:28:fa:f5:17:12:e3:9f:16:38:27:5a:ad:20:48:2e:86:41:
         2f:7a:df:c5:b6:25:b8:4a:fe:a1:c8:0c:fd:de:d6:ad:fa:14:
         a2:79:c6:8c:a0:db:e4:c1:21:75:c4:c4:a7:7c:29:f8:ec:d4:
         2d:b9:6a:2b:5b:18:e2:4c:33:d3:30:7e:14:24:70:85:d0:5d:
         3b:65:11:3a:d2:c0:36:ba:1f:5b:84:b4:a6:f0:02:43:50:e8:
         db:35:b5:b4:35:67:0c:82:db:c4:e8:8e:4c:85:51:8e:2a:eb:
         16:76:ea:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 5 11:42:24 2026 by rpki-client