This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.mft
File:                     892C2C5990DF4D7045BB55A011F473261F0643F6.mft (raw, json)
Hash identifier:          GaA7rwDju9GgwLd0Exn0X1cJLNJshzMpuyZwx43N/lA=
Subject key identifier:   4F:D0:E8:24:75:2E:61:E5:79:DD:10:CC:F3:D4:87:79:35:B4:EA:C7
Authority key identifier: 89:2C:2C:59:90:DF:4D:70:45:BB:55:A0:11:F4:73:26:1F:06:43:F6
Certificate issuer:       /CN=892C2C5990DF4D7045BB55A011F473261F0643F6
Certificate serial:       0D6BD47FB115EC0134CBE60142DB0D000E53DEE2
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/892C2C5990DF4D7045BB55A011F473261F0643F6.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.mft
Manifest number:          14
Signing time:             Mon 02 Feb 2026 05:50:50 +0000
Manifest this update:     Mon 02 Feb 2026 05:45:50 +0000
Manifest next update:     Tue 03 Feb 2026 05:54:50 +0000
Files and hashes:         1: 326131343a373538313a366665303a3a2f34342d3438203d3e20323134383431.roa (hash: eEYD+/uvxh4zHSJ/ztOoyn4X0s3MJpPiWt8uJufCQxo=)
                          2: 326131343a373538313a366666303a3a2f34342d3438203d3e20323035353932.roa (hash: tJECAkp2L4ouOi5S7tH2woZZkAUIydRlFynQO3qJTRU=)
                          3: 326131343a373538313a366330303a3a2f34302d3438203d3e20313938393534.roa (hash: YStl04IuWDei0D2oH+P/iOh9DAuPICnaprLiyMtF9EQ=)
                          4: 326131343a373538313a366661303a3a2f34342d3438203d3e20323031393433.roa (hash: JBtcFivWNaxAMDtrHXjCq5obdYQeQd+Iuq7/0LpltBs=)
                          5: 326131343a373538313a366630303a3a2f34342d3438203d3e20323035353932.roa (hash: tGdxxPffiEkwkQ8zZYSEAsNxiyZw0E/Szbr/GF6Tp3w=)
                          6: 326131343a373538313a366664303a3a2f34342d3438203d3e20323135393334.roa (hash: qRdEAnTHQewkn5xjFMDkvIHao/PLgA0XfOA580oQ+Wc=)
                          7: 326131343a373538313a366663303a3a2f34342d3438203d3e20323037333839.roa (hash: xJNDYcDRMGL3P/Oo1HJdC8ak3UBswnP71D60lUjKtOU=)
                          8: 892C2C5990DF4D7045BB55A011F473261F0643F6.crl (hash: jPOk3ac6D82vtMCtAFLmNfIy7xTz6VMpAHT8luH5hlQ=)
                          9: 326131343a373538313a366430303a3a2f34302d3438203d3e20323035333239.roa (hash: zvsXrWVsgBSXSyUjh+x5IMf/onv6HLNx12EoyFofF0E=)
                          10: 326131343a373538313a366662303a3a2f34342d3438203d3e20323136343332.roa (hash: zJsseoUx2WfsGKQLt6/5bb4va41JRgL/bMceecvpwjU=)
                          11: 326131343a373538313a363030303a3a2f33362d3438203d3e20323034383434.roa (hash: BopLEf/ZmGSLBYK/WoER81ANZkew9Ua3lUbCSl9Jp8M=)
                          12: 326131343a373538313a366530303a3a2f34302d3438203d3e2039393233.roa (hash: hu2ypRUPAbYRtYy+M6vE/W8hAPWUPIin1Y9THyO12k8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/892C2C5990DF4D7045BB55A011F473261F0643F6.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 05:54:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:6b:d4:7f:b1:15:ec:01:34:cb:e6:01:42:db:0d:00:0e:53:de:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=892C2C5990DF4D7045BB55A011F473261F0643F6
        Validity
            Not Before: Feb  2 05:45:50 2026 GMT
            Not After : Feb  3 05:54:50 2026 GMT
        Subject: CN=4FD0E824752E61E579DD10CCF3D4877935B4EAC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:fd:16:c3:98:ce:ea:c5:8a:d7:17:f8:4f:15:
                    fc:21:78:38:3b:36:32:68:08:e1:dd:ca:ad:7d:5c:
                    29:e4:a0:fa:7e:5d:a4:0c:8d:f3:23:5f:b9:af:1f:
                    24:78:e2:13:b2:2e:a5:88:b3:f9:07:65:de:66:dd:
                    fa:ea:e9:9b:ed:8e:88:13:ae:51:7b:72:2e:e1:53:
                    81:32:63:27:c1:c7:2e:d5:63:af:85:36:68:a9:a0:
                    17:f5:24:91:27:e5:ee:d9:4a:67:91:a1:92:4b:bb:
                    6f:e8:a3:c7:1f:c7:68:a4:2c:a8:0c:3a:fb:f7:3a:
                    21:85:e9:d0:36:db:8e:a3:05:88:fd:db:20:e3:4b:
                    d3:40:a0:32:07:a3:f7:2e:b3:eb:c9:90:cb:dd:a5:
                    7c:d0:a1:68:98:4f:28:1e:74:e0:81:3a:a0:6b:d4:
                    ec:89:9a:6f:89:a5:cf:96:b2:09:69:4a:56:13:a9:
                    1b:e3:0a:af:f9:93:b5:b8:95:51:45:2c:29:d1:f9:
                    b6:ec:c6:1f:72:55:6d:2a:1a:00:f0:25:a8:1f:33:
                    e9:a5:d1:db:b7:af:2c:fc:d1:40:fc:df:f9:fd:a4:
                    60:13:b4:27:27:9c:63:1c:2d:e3:f0:92:c1:90:c4:
                    b1:0c:28:c3:21:42:b8:77:50:0d:89:d4:44:ce:65:
                    ce:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:D0:E8:24:75:2E:61:E5:79:DD:10:CC:F3:D4:87:79:35:B4:EA:C7
            X509v3 Authority Key Identifier:
                keyid:89:2C:2C:59:90:DF:4D:70:45:BB:55:A0:11:F4:73:26:1F:06:43:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/892C2C5990DF4D7045BB55A011F473261F0643F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71bedf6c-cc91-4bf0-9d6e-7e9b3cb9905d/1/892C2C5990DF4D7045BB55A011F473261F0643F6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:fc:b3:f6:a7:3a:f0:61:a7:a2:e2:de:f4:98:fd:02:74:69:
         8e:a8:98:9d:bf:7e:70:06:cb:d9:28:02:4f:00:e6:dc:b7:50:
         7a:a1:bb:a6:ae:bf:2c:ae:d7:a2:dc:f1:d7:78:e5:28:82:42:
         e5:46:bb:6a:04:7c:e6:a3:89:ab:b9:45:b4:f3:54:79:35:1c:
         18:7b:e6:3b:e7:6c:4e:f1:fb:30:80:33:24:c1:c6:af:39:ed:
         33:8b:cb:f2:39:19:d6:3b:04:2c:20:a3:07:51:f5:10:de:46:
         26:ea:81:11:8f:f4:1a:a5:43:79:cb:f0:b0:3f:1a:b0:be:29:
         d8:12:bf:e2:2b:2e:e2:ed:9a:94:2f:b5:2d:a3:3e:71:74:82:
         ef:bb:72:5a:f4:2d:2b:88:27:a6:a0:e5:7c:53:37:4f:e0:ce:
         45:e6:34:5d:45:34:7a:4e:eb:d7:93:bb:6f:f3:db:c4:09:13:
         38:5e:e9:31:60:bc:00:63:1a:cd:36:2f:49:a2:52:9f:59:ff:
         7d:62:8f:2f:58:6f:e8:84:0f:64:fc:8e:cc:2b:ed:c0:2d:a8:
         7c:03:36:d3:be:27:e5:55:ca:12:1f:15:f3:aa:df:67:a7:4c:
         dd:63:4a:d0:6d:ca:cc:54:7d:c3:7c:9c:83:51:c6:8a:02:1a:
         ee:23:aa:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:41:23 2026 by rpki-client