This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
File:                     92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft (raw, json)
Hash identifier:          NaOUEBlqmY/+y12l5+w1KnC68TNtSXjTIPCuha30p8I=
Subject key identifier:   35:76:1B:94:07:01:8F:40:F1:E6:A5:3D:E9:86:2C:7C:32:58:9E:05
Authority key identifier: 92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94
Certificate issuer:       /CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
Certificate serial:       0F6577A39FE5511A95ECFE8CB352A0B005F40DD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
Manifest number:          0185
Signing time:             Mon 26 Jan 2026 14:26:26 +0000
Manifest this update:     Mon 26 Jan 2026 14:21:26 +0000
Manifest next update:     Tue 27 Jan 2026 14:53:26 +0000
Files and hashes:         1: 39352e3231342e3138312e302f32342d3234203d3e20323132323338.roa (hash: P3AXSCPo5qCcqJ/tF9UnDRiSqmNKJoNVWYccPe9dv1w=)
                          2: 39352e3231342e3138322e302f32342d3234203d3e20323131343135.roa (hash: 7RDjli52ea3Y5rIxOBi7CoAOYzObgN76cF1oNhGaH/0=)
                          3: 39352e3231342e3137332e302f32342d3234203d3e203235313938.roa (hash: ZBwA38W5ihOuNN99BklpNu84rXSZQZCwBh8vdc50O64=)
                          4: 34352e3135362e35322e302f32322d3232203d3e2039303039.roa (hash: eK18gsMy8+wzgYZmaz7TkcO08JcfPTkHAWlv0aJXuz0=)
                          5: 34352e3133392e3139382e302f32342d3234203d3e20323134343636.roa (hash: 9KX5zC7UuI47N7heL//vNyLO3x7YEi1CucEhFX8SUR0=)
                          6: 39352e3231342e3137342e302f32342d3234203d3e20323134343636.roa (hash: EnyfxlxrEZoOAQu439Mhaj0MSgN4o3Cr584mhVLUCgw=)
                          7: 34352e3133392e3139392e302f32342d3234203d3e20323134343636.roa (hash: JaeJstE2poR1Rlm8a7RHcBFfHeeu7vNkxKzYr0p4Jc8=)
                          8: 39352e3231342e3138302e302f32342d3234203d3e20323033373538.roa (hash: yeHT2siMw+46e40lrxlb+yyyQe2+Rk/4CH0GwC6laEg=)
                          9: 39352e3231342e3137322e302f32342d3234203d3e20313937343737.roa (hash: y8hcJrulcRceTx871qhtDNBcbMxDEQZoJON7Dc+UpGA=)
                          10: 39352e3231342e3137352e302f32342d3234203d3e20313335333931.roa (hash: dZLABnxKpTxFiKmt1/yK20i3zGqpWgZ6NnQoPD/883U=)
                          11: 39352e3231342e3138322e302f32342d3234203d3e20323132363039.roa (hash: AjgG1gM1OxMVlGFutJS1mpX2Qd4qqtcRZt6UVKIG+j4=)
                          12: 34352e3135362e35322e302f32322d3234203d3e2039303039.roa (hash: Bs9P6MukVIk3Mqg2bASja42eYp9YV11upUqwTKj8Pqc=)
                          13: 39352e3231342e3138322e302f32342d3234203d3e20323132333834.roa (hash: ahvCpQCYKDC5UmCWINUE1+9+R3CEuxDs9xpt+/mHGMc=)
                          14: 3138352e3131352e3230372e302f32342d3234203d3e20323132333336.roa (hash: yFl38PxDDUPllDewnZ7MEFH9Z5qJaOTL0zY/pvxRoUY=)
                          15: 39352e3231342e3138332e302f32342d3234203d3e20383334.roa (hash: CzBxGObaihc6s3aCRLMrX1a39DR5X+mZYtTxwSKF23M=)
                          16: 34352e3135362e35322e302f32342d3234203d3e2039303039.roa (hash: TVTxbW5Hn/uwBDAOJAxsysgEid6g/rYwKpFkj0KhHLI=)
                          17: 92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl (hash: WUymlaKBuO6Wnp0oSWSz66sSfHFij76naoKjIUpePD8=)
                          18: 39352e3231342e3137332e302f32342d3234203d3e20323035383836.roa (hash: hlOWlwYDh27EwXxqncP4qruI2Plo8gnGCk/gZpUDCgY=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 14:53:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:65:77:a3:9f:e5:51:1a:95:ec:fe:8c:b3:52:a0:b0:05:f4:0d:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94
        Validity
            Not Before: Jan 26 14:21:26 2026 GMT
            Not After : Jan 27 14:53:26 2026 GMT
        Subject: CN=35761B9407018F40F1E6A53DE9862C7C32589E05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ee:8f:c9:81:8c:39:53:20:be:67:c5:eb:14:
                    a9:6f:b8:73:5c:83:ea:d8:ce:44:ba:57:f6:30:4b:
                    3a:bc:44:3b:83:8a:91:4a:e0:82:74:53:2c:4d:0f:
                    5d:c3:3f:ae:1d:e9:60:00:4b:a3:36:2e:2f:8a:43:
                    45:71:af:81:92:4d:f1:6e:7d:a9:d7:8c:88:94:7e:
                    6f:34:20:e0:72:7e:4d:1f:41:24:ec:61:d8:55:f5:
                    70:d9:10:a1:da:1f:2b:60:64:66:5a:6d:ff:40:26:
                    e4:73:96:5f:64:69:2a:7d:49:28:68:17:3f:83:42:
                    82:09:53:69:e1:b6:2b:38:f7:61:20:0e:37:70:97:
                    57:44:5f:4d:9f:cc:5a:8f:af:15:45:15:9f:e0:6f:
                    77:ec:02:00:57:5b:e4:fa:57:0d:16:0a:a6:09:a5:
                    55:9c:4e:c6:ce:a9:23:42:b5:f7:12:6c:ed:ed:ec:
                    a2:3c:7b:d5:6a:69:b2:76:90:6f:fe:b9:d8:f3:d7:
                    f8:52:6d:2c:20:76:56:3b:00:d5:97:ac:a0:13:37:
                    72:4b:e8:bb:a3:82:79:b8:41:42:76:f3:e6:2c:dc:
                    25:08:ad:dd:e6:bb:e7:47:97:76:e8:c9:09:9c:0a:
                    ac:9c:be:06:a6:41:26:af:7c:1b:65:d5:79:c3:e4:
                    48:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:76:1B:94:07:01:8F:40:F1:E6:A5:3D:E9:86:2C:7C:32:58:9E:05
            X509v3 Authority Key Identifier:
                keyid:92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:bc:bc:06:c3:48:8b:19:00:b8:f2:87:1d:50:97:19:3c:e7:
         48:62:ea:33:5c:4f:65:93:11:07:b7:92:0e:14:78:37:4e:4a:
         60:8c:9c:7c:88:71:04:9a:3c:70:15:e6:e7:35:dd:75:ff:92:
         71:c8:d4:b0:c4:dc:2e:f0:a7:86:6f:62:fd:a9:28:30:ea:a5:
         a0:d5:82:d6:b3:48:9a:06:2a:f6:f3:43:b2:74:1b:44:0c:42:
         fa:42:db:d6:5b:3f:24:4e:7e:b4:4e:e4:98:86:28:9b:98:0c:
         f2:4d:b1:1c:88:d0:8b:f0:4e:98:f0:2e:b6:61:b1:5f:2a:7b:
         b5:2f:4a:a6:90:8a:62:66:55:8b:43:b5:15:5f:d2:61:93:d4:
         6f:56:66:33:db:b9:91:94:20:d3:ad:1e:85:ad:06:a1:61:dc:
         15:1d:7b:96:23:0b:c3:32:cb:bf:a8:e5:5f:6a:a1:52:ea:38:
         bd:35:b2:e9:07:83:5d:e4:98:a9:5f:ff:98:22:66:27:4d:e6:
         51:45:e3:e4:48:84:09:63:77:9f:8f:11:56:36:32:ea:16:01:
         36:2b:fa:3d:6b:6f:35:a7:85:28:4f:c6:32:e5:b9:9d:d8:86:
         ea:ac:ef:06:25:5a:f4:31:bf:9f:48:d2:9b:95:23:e0:07:66:
         d7:1e:de:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 18:23:39 2026 by rpki-client