This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.mft
File:                     9B848163C7049122702E8D37941241ED5ADD94D9.mft (raw, json)
Hash identifier:          MMu3Alv3FAXdo7vd1pSec6hvD94ILNHIHZZHFu1Lobk=
Subject key identifier:   BF:B2:48:BB:A0:26:C5:6F:15:F3:FA:1C:C1:B3:FA:F5:AC:56:50:C6
Authority key identifier: 9B:84:81:63:C7:04:91:22:70:2E:8D:37:94:12:41:ED:5A:DD:94:D9
Certificate issuer:       /CN=9B848163C7049122702E8D37941241ED5ADD94D9
Certificate serial:       5F5B439258C133E8E23B9D165BC12E8BE49708BB
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9B848163C7049122702E8D37941241ED5ADD94D9.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.mft
Manifest number:          24
Signing time:             Tue 20 Jan 2026 17:53:01 +0000
Manifest this update:     Tue 20 Jan 2026 17:48:01 +0000
Manifest next update:     Wed 21 Jan 2026 18:01:01 +0000
Files and hashes:         1: 326131343a373538333a3730303a3a2f34302d3430203d3e20323130343634.roa (hash: txMtmYCSrCjAQUsz3jwIOMVv2WDfMNs3rFGjXdQ1uHI=)
                          2: 9B848163C7049122702E8D37941241ED5ADD94D9.crl (hash: /PRbbVjNlf65zjVJnlr/DH8EKEqdXbHyVY2UtGPTxgY=)
                          3: 326131343a373538333a3830303a3a2f34302d3430203d3e20323130343634.roa (hash: 6HRIzRgoHlrwDg0x+dQ+QTPqwbR2buVOX5nau8igN3A=)
                          4: 326131343a373538333a6230303a3a2f34302d3430203d3e20323130343634.roa (hash: SkZGavhoTJC5ic0mJF3ZGqoq5jWXKF9H+0oYVlFuDaQ=)
                          5: 326131343a373538333a6430303a3a2f34302d3430203d3e20323130343634.roa (hash: 966xfzbp7XI2tIIl6RtKV8fWr+EKvskhBHx3zk5WK2Y=)
                          6: 326131343a373538333a3230303a3a2f33392d3438203d3e20323130343634.roa (hash: xKU1YO819a7VQTTpF+nB40wFij16/Jgq+O6qShtQ1sQ=)
                          7: 326131343a373538333a6530303a3a2f34302d3430203d3e20323130343634.roa (hash: lZqMqZa8igc4AoCDRmP6SzhiPgp0yN3qUzgnbipm9bo=)
                          8: 326131343a373538333a3930303a3a2f34302d3430203d3e20323130343634.roa (hash: QxJbzcNlut2XGQpfjiGDY/VAY9MqONp8dnDCfca/jtE=)
                          9: 326131343a373538333a3a2f33392d3438203d3e20323130343634.roa (hash: vW1fGYMrYSYz3dMO9eci0Q6WugN6uOArURnsJ7uQq7I=)
                          10: 326131343a373538333a6630303a3a2f34302d3430203d3e20323130343634.roa (hash: mmfp1swzQs8+dv25AiJSqWincq1kV1e/VcrkZp1tcVY=)
                          11: 326131343a373538333a6130303a3a2f34302d3430203d3e20323130343634.roa (hash: aFhwRSDU+t/TQvGHJmF4CgULB5DA6EuNIybmGsacNPY=)
                          12: 326131343a373538333a6330303a3a2f34302d3430203d3e20323130343634.roa (hash: u9LwYErQUKmq8o1Cp9FlrT7DQfjHnm37GLoiMAQKUWk=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9B848163C7049122702E8D37941241ED5ADD94D9.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Jan 2026 15:30:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:5b:43:92:58:c1:33:e8:e2:3b:9d:16:5b:c1:2e:8b:e4:97:08:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B848163C7049122702E8D37941241ED5ADD94D9
        Validity
            Not Before: Jan 20 17:48:01 2026 GMT
            Not After : Jan 21 18:01:01 2026 GMT
        Subject: CN=BFB248BBA026C56F15F3FA1CC1B3FAF5AC5650C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5c:bb:70:e7:ac:ec:27:6b:1e:81:ac:3e:99:
                    e1:9b:be:1e:89:30:f7:34:6a:a9:e7:f9:2a:41:ae:
                    25:fd:88:11:4c:8f:5f:f3:fa:a9:7d:4d:13:a7:d7:
                    af:01:e3:3f:ca:90:3d:6a:06:33:f1:2e:da:68:9a:
                    b4:9c:86:ff:5a:c7:36:55:98:0b:6d:a8:5e:0a:01:
                    4d:55:00:40:8a:53:fd:35:96:ed:03:58:b0:89:80:
                    d4:4b:c0:b5:22:2b:a9:39:cd:f5:74:bb:7b:d1:bd:
                    70:b6:c8:3f:e2:cb:5d:2e:fb:2e:c7:ef:9d:b8:c2:
                    41:9c:f0:81:15:47:dc:25:82:97:cb:d5:1d:38:a8:
                    16:53:da:5f:75:89:ea:19:ca:6e:09:ee:63:6a:5a:
                    61:0c:86:3d:bc:e3:da:ba:38:bc:ae:38:ab:bd:d7:
                    36:59:5a:4c:0a:f0:65:27:43:24:49:50:0f:37:d0:
                    40:72:9d:6c:8a:44:58:f6:72:db:88:11:58:38:b9:
                    74:ea:78:8b:ff:41:53:e8:54:a1:0f:66:eb:13:b2:
                    4d:9b:a4:3e:c5:a7:46:a4:ba:b1:73:02:48:17:57:
                    f9:e9:e8:aa:cc:d0:d5:31:bc:bd:8b:a1:e7:3b:9b:
                    d7:a7:fd:50:52:c4:0e:9e:79:cc:8a:1f:9f:f4:2c:
                    30:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:B2:48:BB:A0:26:C5:6F:15:F3:FA:1C:C1:B3:FA:F5:AC:56:50:C6
            X509v3 Authority Key Identifier:
                keyid:9B:84:81:63:C7:04:91:22:70:2E:8D:37:94:12:41:ED:5A:DD:94:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/9B848163C7049122702E8D37941241ED5ADD94D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c43d3a6-7d13-4895-959d-419b9a6eb34b/3/9B848163C7049122702E8D37941241ED5ADD94D9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:ac:1e:ff:e8:b7:b0:af:57:81:f3:7e:d7:fb:85:4b:b9:cc:
         87:c5:45:ed:59:0f:16:80:9f:88:f1:11:76:64:69:50:4d:2a:
         84:9a:bd:4b:5e:fb:75:81:d0:f2:73:7a:98:f1:a7:84:d2:f8:
         4b:6f:1d:d0:48:88:12:55:91:c8:49:e3:f2:24:de:37:66:b3:
         93:e3:44:ee:39:af:1a:09:ec:85:f4:87:9e:8c:1e:44:59:47:
         c7:87:62:59:a3:8e:21:6f:ae:22:05:c5:35:21:da:f4:98:f7:
         c8:df:a7:6e:06:72:5f:ca:50:87:e9:0c:01:0a:bc:ff:19:3d:
         ac:96:d4:f0:e9:3c:10:60:15:e4:52:9b:a5:8f:97:c8:c1:36:
         e6:4c:93:fc:0c:ae:3f:28:09:56:8c:c6:4c:bd:43:96:a1:98:
         bf:7d:30:2d:5d:c3:ce:e2:2b:a2:b6:c0:89:77:fd:40:9f:0d:
         c6:e1:f9:a2:60:05:f0:0a:db:81:ad:a0:1f:a4:3e:c6:6e:d4:
         79:fb:82:29:ed:49:2c:b7:47:ff:dc:bb:81:91:94:ea:a6:f1:
         0d:50:f3:06:f9:9c:54:f1:b1:47:2c:b7:38:26:f6:d2:cc:c3:
         b8:0a:dc:90:df:a9:11:a5:ac:1f:0d:34:2e:f6:c6:f9:e7:0e:
         97:77:e2:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 23:49:50 2026 by rpki-client