This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft
File:                     E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft (raw, json)
Hash identifier:          ePUPgOMVHlEgGwLD/ArahVGpCQh9Mu9d21Wf63vUN40=
Subject key identifier:   A0:D5:68:A5:C6:F5:2A:A6:4D:A6:6D:25:9C:B8:C7:0E:63:DE:8F:50
Authority key identifier: E1:DB:87:BB:BB:D2:0D:FF:26:19:E6:14:B8:6D:4B:7E:91:FB:B7:3A
Certificate issuer:       /CN=E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A
Certificate serial:       240190C93E413C5AB9D1B165FDFC66A5245E070F
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft
Manifest number:          02
Signing time:             Sat 17 Jan 2026 22:02:07 +0000
Manifest this update:     Sat 17 Jan 2026 21:57:07 +0000
Manifest next update:     Mon 19 Jan 2026 00:04:07 +0000
Files and hashes:         1: 326130663a316363353a326631303a3a2f34342d3438203d3e20323031333836.roa (hash: GrABHnm92+umbLrVFGaFsGRxCk28MTZckUcjsaOY0Ow=)
                          2: 326130663a316363353a313030303a3a2f34382d3438203d3e20323136323939.roa (hash: 6lZvvFWPvSfdQUMPjqUZGcuEJ5oDxzIDckdsgacq+JE=)
                          3: 326130663a316363353a313031303a3a2f34342d3438203d3e20323136323939.roa (hash: alWdZcWOVcqLJ+t8VCXLM/51cMrMQD6vIi6z5Hkb/rM=)
                          4: E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.crl (hash: rm86tOIZTNv1GsErIVltgJLHRwFHyU/BIQShVfNrDCA=)
                          5: 326130663a316363353a313032303a3a2f34342d3438203d3e20323136323939.roa (hash: PhJ22uKOLkIyMB26jpFkBLaf94CPZDjFlKqxP4B3DyA=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 00:04:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:01:90:c9:3e:41:3c:5a:b9:d1:b1:65:fd:fc:66:a5:24:5e:07:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A
        Validity
            Not Before: Jan 17 21:57:07 2026 GMT
            Not After : Jan 19 00:04:07 2026 GMT
        Subject: CN=A0D568A5C6F52AA64DA66D259CB8C70E63DE8F50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:18:94:f7:62:99:f4:91:3c:06:a7:97:5c:c6:
                    76:e7:8b:08:20:b5:6d:98:99:7e:16:c1:b5:49:00:
                    e3:75:ed:82:13:e2:e2:91:57:11:0f:80:d5:cb:ee:
                    26:ab:73:5f:14:2e:b7:09:2e:39:78:3e:0c:c6:38:
                    00:d4:6f:cb:a9:96:2e:b2:8b:58:ec:45:f0:cf:e5:
                    5b:0e:a2:04:83:f6:53:68:0a:46:77:09:ea:d7:f0:
                    1a:12:4d:e6:8e:6e:94:52:49:58:d8:19:a3:d0:53:
                    ca:c8:42:3c:69:c1:82:8f:da:87:19:ba:4f:0e:61:
                    6b:8b:33:fd:17:e9:ae:f8:8b:84:58:c3:0d:cd:2d:
                    63:5b:bb:3e:de:be:bc:d5:1f:7b:a8:61:94:a0:ee:
                    b0:14:5e:a6:70:b6:53:bc:8b:47:8b:60:34:8a:f0:
                    4f:e8:15:8b:72:89:ee:53:61:f2:60:cd:bf:20:d6:
                    28:97:19:f1:6c:da:b6:24:c9:f9:ca:f5:39:3d:e6:
                    78:20:5c:eb:f2:20:e9:0a:6d:d3:1d:2e:d2:08:a8:
                    2b:73:4e:37:8e:c3:74:4b:30:93:3b:91:26:6c:4b:
                    ec:b3:e8:95:7e:5f:ad:fe:39:99:48:96:5a:bd:01:
                    f9:ab:cd:6f:32:fa:24:55:35:c1:49:2e:36:48:74:
                    5f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:D5:68:A5:C6:F5:2A:A6:4D:A6:6D:25:9C:B8:C7:0E:63:DE:8F:50
            X509v3 Authority Key Identifier:
                keyid:E1:DB:87:BB:BB:D2:0D:FF:26:19:E6:14:B8:6D:4B:7E:91:FB:B7:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/3/E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:03:61:b4:fd:bf:2b:d7:05:6d:02:be:4c:68:d5:46:08:b3:
         ef:ee:2b:ae:1e:e8:38:2d:72:ea:7c:39:1d:61:22:01:a4:9f:
         88:34:0c:57:e2:31:c0:06:be:c8:e6:6f:88:67:f2:c1:40:24:
         5e:3f:bf:a5:3b:2f:2f:5d:5a:b1:f2:22:77:91:a1:ae:bc:be:
         2d:37:30:e4:43:bb:05:e4:c0:c9:f1:bd:6d:4c:4c:a1:fe:3c:
         26:b2:85:be:53:29:63:e5:e6:05:c7:16:96:65:ca:bb:9c:f0:
         38:ac:c8:24:19:16:93:22:59:a2:9e:fd:83:09:18:a9:b9:ae:
         57:5c:36:10:a5:fe:54:0c:55:13:be:94:af:eb:6c:43:bd:d2:
         0b:7e:17:3b:8e:9e:ee:ce:71:fb:8e:9d:6f:85:de:65:17:a7:
         fb:9f:c0:66:07:8e:33:65:ac:d7:3f:a1:68:30:ee:1a:5a:b9:
         37:2e:6a:c6:de:e7:1c:52:cd:7c:49:4a:4b:92:66:ea:d8:cb:
         98:00:03:f2:a6:b6:63:18:de:7e:b3:47:9e:af:a5:fc:c3:1c:
         93:cf:dd:da:eb:ad:de:c0:ca:97:38:f9:9c:5b:8b:e8:91:96:
         ca:f9:c7:53:12:38:cf:dd:41:0a:49:4e:32:d0:09:98:f4:ba:
         a0:dd:dd:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----