This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.mft
File:                     A912092CFA11F378852F52266C793AB678233205.mft (raw, json)
Hash identifier:          8bypbkOUrsZa6j7bgPjAW9bUsxwPpj/+O9audS7hkdM=
Subject key identifier:   93:CF:E4:43:FF:67:BE:AF:73:A3:31:4B:38:99:77:70:77:35:FF:FD
Authority key identifier: A9:12:09:2C:FA:11:F3:78:85:2F:52:26:6C:79:3A:B6:78:23:32:05
Certificate issuer:       /CN=A912092CFA11F378852F52266C793AB678233205
Certificate serial:       280C697E78625A4FAF6911005FCDAB05C17F0EAF
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.mft
Manifest number:          018A
Signing time:             Sun 18 Jan 2026 10:56:05 +0000
Manifest this update:     Sun 18 Jan 2026 10:51:05 +0000
Manifest next update:     Mon 19 Jan 2026 11:30:05 +0000
Files and hashes:         1: 326130393a353463333a393030303a3a2f33362d3336203d3e20323131303636.roa (hash: /KjIFlpbNb1VbdyEsAMlwZ6y7EnP5aEMV+JQt9I/CYU=)
                          2: 326130393a353463333a613130313a3a2f34382d313238203d3e20323135313437.roa (hash: 90FGOeqqLptd8qlXcfjJgcF07gJvM1oxc2QmHLuTM1Y=)
                          3: 326130393a353463333a613130323a3a2f34382d313238203d3e20323135313437.roa (hash: vs9kXuBMMWCplaNsRIcMMGKaCF4FLRTK4Bq5jqpLQYc=)
                          4: A912092CFA11F378852F52266C793AB678233205.crl (hash: /JmqaVTJJfmlXnYoSfJOqSuxs9l+PfflJbwB3K8grXA=)
                          5: 326130393a353463333a613230303a3a2f34302d313238203d3e20323039383734.roa (hash: bwL4xPqc/uz8Pz2knWoJ8zvpAw8HB5XXWez7oPoDaEI=)
                          6: 3131312e3233352e3135312e302f32342d3332203d3e20323135313437.roa (hash: vew4LNWCVofm5qe2BK5sopfMvrn3w6T63/5S4aLPNx0=)
                          7: 326130393a353463333a613130303a3a2f34382d313238203d3e20323135313437.roa (hash: 5vA7kcahmkhnv7Pjx7uA7TrGRG+XVrMF+mKhb2vEG5U=)
                          8: 326130393a353463333a613030303a3a2f34302d313238203d3e20323039383734.roa (hash: ca9GKU5mOXVUfI7Du4XvHpxs7R00F6F4l3yz+1HGWmo=)
                          9: 326130393a353463333a613166303a3a2f34342d313238203d3e20323130373936.roa (hash: m/KS3U1L5fK6/ozUyGVO/HofrXSxDH++GoaQCE6VLqY=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 08:44:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:0c:69:7e:78:62:5a:4f:af:69:11:00:5f:cd:ab:05:c1:7f:0e:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912092CFA11F378852F52266C793AB678233205
        Validity
            Not Before: Jan 18 10:51:05 2026 GMT
            Not After : Jan 19 11:30:05 2026 GMT
        Subject: CN=93CFE443FF67BEAF73A3314B389977707735FFFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:42:b1:4f:76:09:ae:cb:f6:aa:47:c7:36:65:
                    20:18:ac:37:da:93:19:e1:76:a0:74:bf:ca:ca:e6:
                    f0:c7:8b:11:dd:f3:58:d3:84:36:c4:20:9e:43:cd:
                    c5:c1:07:02:28:d9:e0:c6:5f:4c:9b:2d:54:4f:4c:
                    39:6c:f1:39:cf:3e:52:cc:6b:ed:20:07:50:e1:e4:
                    9b:5b:c1:8e:21:a7:02:b3:7f:70:b1:4e:ab:8f:58:
                    7c:6c:bc:ee:56:03:f6:b8:13:13:04:aa:fd:8d:ba:
                    47:06:67:6c:89:1c:1d:9c:56:fd:d4:14:25:d8:07:
                    96:d5:2d:cc:dd:c7:08:bc:94:bc:3c:75:a1:00:74:
                    69:e9:db:3a:65:82:76:75:91:dc:4e:08:78:c1:c4:
                    0e:a7:5b:3a:de:5f:b1:b1:fa:70:ca:2c:ba:a1:e4:
                    29:d8:80:be:98:84:91:b3:90:91:62:8e:3e:dc:17:
                    06:f2:82:11:67:2d:f0:ab:18:74:39:ab:61:a6:4f:
                    a6:53:cd:f9:7e:c0:62:a3:bf:ab:9c:a5:df:aa:ee:
                    aa:67:e9:cb:ce:97:e1:f2:be:71:a8:04:b4:12:a8:
                    6f:df:ac:85:f3:63:92:0c:4e:aa:86:8c:2a:79:78:
                    a1:a9:2f:5e:99:bd:1e:61:45:b0:cc:34:e6:84:19:
                    6a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:CF:E4:43:FF:67:BE:AF:73:A3:31:4B:38:99:77:70:77:35:FF:FD
            X509v3 Authority Key Identifier:
                keyid:A9:12:09:2C:FA:11:F3:78:85:2F:52:26:6C:79:3A:B6:78:23:32:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/A912092CFA11F378852F52266C793AB678233205.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/5/A912092CFA11F378852F52266C793AB678233205.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:c4:b4:6e:bb:e8:2a:ac:a7:7e:d2:5f:df:b6:93:6e:ed:f4:
         b1:c1:b5:99:5d:bf:96:46:c4:fc:85:1f:70:bf:02:d6:f7:43:
         56:57:90:de:2f:d2:bd:db:c3:95:85:59:1a:03:7c:4c:a3:eb:
         a6:59:2c:0c:29:24:30:5d:cc:f0:9b:6e:b5:db:e7:5c:4b:2c:
         02:5a:5a:65:fa:52:fb:03:18:16:60:50:fd:59:24:2f:83:43:
         79:29:c9:87:61:4f:3f:2e:0c:18:53:a9:98:a9:94:92:ef:2c:
         ea:02:84:5c:a4:7e:4f:86:40:78:ca:b5:f0:5d:44:07:bd:89:
         34:de:b7:0b:4a:6e:0b:6c:24:dc:ee:11:0f:ac:fc:bd:ae:ae:
         8f:e5:31:71:69:d1:74:10:c8:28:be:fa:15:0a:0a:aa:15:21:
         79:96:ef:16:4f:c1:04:22:bd:e9:5c:3c:1f:9d:95:63:76:cb:
         d2:78:36:4e:bb:72:64:4c:51:f1:43:7f:28:e2:2a:8f:7e:6f:
         1f:ce:95:aa:5d:b9:30:9e:16:38:c4:db:6e:a6:b9:f3:c6:1e:
         b3:15:33:25:d6:67:21:17:a5:85:e4:0b:63:4a:e2:c9:99:d1:
         7a:ca:eb:43:13:ad:28:0b:96:e0:f5:3d:3b:02:30:ae:6a:10:
         81:79:39:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 17:03:53 2026 by rpki-client