This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/B113B31E9F01A2F41870E8C77492B18EBA830E07.mft
File:                     B113B31E9F01A2F41870E8C77492B18EBA830E07.mft (raw, json)
Hash identifier:          i2q4hjIasODb4oxwDF+bAueXqCjTIk2YzXJFO1CVu9Q=
Subject key identifier:   3A:0D:D8:0B:C2:DF:CA:F5:1A:7B:A3:45:5C:16:E1:4C:20:03:10:54
Authority key identifier: B1:13:B3:1E:9F:01:A2:F4:18:70:E8:C7:74:92:B1:8E:BA:83:0E:07
Certificate issuer:       /CN=B113B31E9F01A2F41870E8C77492B18EBA830E07
Certificate serial:       3144790F480482561935EDADA5E5711D7E0EAE0E
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/B113B31E9F01A2F41870E8C77492B18EBA830E07.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/B113B31E9F01A2F41870E8C77492B18EBA830E07.mft
Manifest number:          2A
Signing time:             Sun 18 Jan 2026 11:54:00 +0000
Manifest this update:     Sun 18 Jan 2026 11:49:00 +0000
Manifest next update:     Mon 19 Jan 2026 12:12:00 +0000
Files and hashes:         1: 326130363a313238333a386230353a3a2f34382d313238203d3e20323133343133.roa (hash: Wt4+SHGel50fivTQIJe+tjpPeJOC1stVwneM507pM6g=)
                          2: 326130363a313238333a386230373a3a2f34382d313238203d3e20323133343133.roa (hash: 2ZRr8P46aQdhffeARATpl1yqRF51/qnaR4jAZ89gf1o=)
                          3: 326130363a313238333a386236303a3a2f34342d313238203d3e20323135383238.roa (hash: JEGOyork1CD6PyX/dcggzjEUo1ywEimHVZdScBD0AY8=)
                          4: 326130363a313238333a386130303a3a2f34302d313238203d3e20323131303636.roa (hash: vndd0KGTiH9fH/CBomMfV9uAFtyFdoQpFIHzYupiN3I=)
                          5: B113B31E9F01A2F41870E8C77492B18EBA830E07.crl (hash: gHRaEQfPO6lXvhJarbXu7OnyOAcrawz/M7GL8XeDGdM=)
                          6: 326130363a313238333a386230363a3a2f34382d313238203d3e20323133343133.roa (hash: gRKpmudkFkSrltLZsM+IwD/diKhNPkIItOO8mrSG5pc=)
                          7: 326130363a313238333a386230333a3a2f34382d313238203d3e20323133343133.roa (hash: g2JaARICcdVaYvyij9SmmkyPLgvRR4V9rNFT0pTtWpc=)
                          8: 326130363a313238333a386530303a3a2f34302d3438203d3e20323131303636.roa (hash: y2C2PE2VzzWjtfBSYeoO827Ztbr00w94udrHp9qef2I=)
                          9: 326130363a313238333a386430303a3a2f34302d3438203d3e20323131303636.roa (hash: 1H3ZmelRouO89r9hr+yAmSPC+EHIB/3lnuzzFMg7TiQ=)
                          10: 326130363a313238333a386430303a3a2f34302d313238203d3e20323135313336.roa (hash: DU5XJZZfuYF5t2A+W3Qtsr2Q9Wd3qV77FcaqffUq0h8=)
                          11: 326130363a313238333a386330303a3a2f34302d3438203d3e20323131303636.roa (hash: 5XOj9W72PSs85DWWAAQ69jxAtdtoQxJXzr2Puyza/OM=)
                          12: 326130363a313238333a386236303a3a2f34342d313238203d3e203131393637.roa (hash: WRoSZEYTQIxSRLQGq0/upYxyDMHhIPGlWdhsG56BZ7E=)
                          13: 326130363a313238333a386233303a3a2f34342d313238203d3e20323036363034.roa (hash: M/SQEEsPSJ7sSYSht5AIvT1euf4dtT9kGvx4dHdKEGM=)
                          14: 326130363a313238333a386230343a3a2f34382d313238203d3e20323133343133.roa (hash: +YocXVGFM+/G4vZ1QLa7+o/NtxTxe7MnjlKJWyihhM0=)
                          15: 326130363a313238333a386630303a3a2f34302d313238203d3e20323131303636.roa (hash: hGhonvYWM23gQrcaxDOxLSBFb009+nzQklVht9IR8Dw=)
                          16: 326130363a313238333a386230303a3a2f34302d313238203d3e20323131303636.roa (hash: TfN875yS1dVd1sNFVDnun9CV4QX7+4l9FQUegg/mi8c=)
                          17: 326130363a313238333a386234303a3a2f34342d313238203d3e20323036363034.roa (hash: ixF3BKDkMY6UOBRHgy9gWNtjPO/9f7O6lPh5Ib2ZN3g=)
                          18: 326130363a313238333a386235303a3a2f34342d313238203d3e203131393637.roa (hash: KmdkgkPQWg2ByMZ/wwgZwxyOrz5ru3f7FLKxWW9RsDE=)
                          19: 326130363a313238333a386235303a3a2f34342d313238203d3e20323135383238.roa (hash: NkIHr5m7R+YWRxdAVNoXloGFkanF8yYXzQIAONC6t9Y=)
                          20: 326130363a313238333a386232303a3a2f34342d313238203d3e20323036363034.roa (hash: eWC+f6vnNtg7OzrFJRh5ci3djJRSDcTzOg39vsz0//E=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/B113B31E9F01A2F41870E8C77492B18EBA830E07.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/B113B31E9F01A2F41870E8C77492B18EBA830E07.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/B113B31E9F01A2F41870E8C77492B18EBA830E07.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 06:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:44:79:0f:48:04:82:56:19:35:ed:ad:a5:e5:71:1d:7e:0e:ae:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B113B31E9F01A2F41870E8C77492B18EBA830E07
        Validity
            Not Before: Jan 18 11:49:00 2026 GMT
            Not After : Jan 19 12:12:00 2026 GMT
        Subject: CN=3A0DD80BC2DFCAF51A7BA3455C16E14C20031054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:54:0e:14:9a:ec:3c:87:51:7c:5f:ac:fc:b9:
                    2e:b3:95:80:fc:b2:90:2a:6e:72:91:1a:93:b2:a8:
                    42:77:33:e9:d3:d1:71:e5:6d:75:1d:1f:98:0b:43:
                    f4:a0:f5:97:9e:34:31:12:a3:95:48:8b:77:a4:50:
                    35:96:35:4a:3b:16:e4:6f:1b:5f:f9:01:38:a6:a9:
                    9e:90:37:be:b1:48:99:f1:47:c4:32:66:26:42:c9:
                    88:b1:72:5c:e9:dc:1c:e7:79:b4:1b:df:67:b5:70:
                    65:e3:08:63:a9:b0:e5:be:74:fa:27:84:69:3e:cd:
                    c2:74:66:fb:95:f5:3a:79:15:eb:af:08:ef:ab:c8:
                    e2:65:d4:bb:7f:2b:69:96:2c:7f:7f:d4:0d:ac:14:
                    15:b0:6e:97:37:8b:49:8b:79:fb:b5:fb:25:f8:70:
                    9c:b3:88:50:f8:46:2d:43:de:32:d2:96:45:55:de:
                    e9:a1:78:3f:ec:a7:b6:66:7e:8e:0e:d7:13:c6:80:
                    1d:e2:1b:cc:99:94:c2:c2:41:29:52:87:f2:5a:9b:
                    13:b8:5e:72:93:0a:9f:95:20:9e:a3:19:46:2e:87:
                    15:39:bc:66:a7:0e:3f:88:6d:81:74:b0:f8:ab:78:
                    a9:3f:b6:9b:be:84:28:ab:37:40:ff:f2:51:9b:06:
                    72:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:0D:D8:0B:C2:DF:CA:F5:1A:7B:A3:45:5C:16:E1:4C:20:03:10:54
            X509v3 Authority Key Identifier:
                keyid:B1:13:B3:1E:9F:01:A2:F4:18:70:E8:C7:74:92:B1:8E:BA:83:0E:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/B113B31E9F01A2F41870E8C77492B18EBA830E07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/B113B31E9F01A2F41870E8C77492B18EBA830E07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/2/B113B31E9F01A2F41870E8C77492B18EBA830E07.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:96:78:43:b7:e6:58:71:7a:d2:ac:c9:99:28:24:3d:b2:cd:
         cc:4b:37:ea:6c:8a:26:9e:5f:45:80:12:13:e0:57:97:d3:a1:
         5a:99:81:63:10:0a:66:c0:3b:be:ac:1b:50:52:2d:d2:4c:69:
         d7:f3:0e:e7:93:99:f0:2b:52:f5:96:06:f3:c4:ff:25:15:d8:
         0b:4e:6a:c8:4f:43:03:d9:d7:07:ae:69:f1:ba:78:ff:bb:cb:
         49:dd:30:20:ba:bb:d4:0b:7e:c6:9a:ba:2f:0e:2b:05:f7:b8:
         f1:3c:4e:71:21:f2:e4:85:36:64:3a:ba:41:9e:eb:78:f1:06:
         e2:f4:ad:93:e4:7f:f3:a7:bd:e7:52:eb:f5:23:5e:49:71:e7:
         19:a2:6f:11:fa:0a:5c:70:14:68:36:4d:bf:94:73:35:98:60:
         53:ea:e2:ff:45:ee:07:c4:33:c3:bc:a5:c1:2e:3b:e9:b8:1d:
         96:30:d1:e2:3c:8c:94:82:44:d6:0b:5f:f8:65:44:01:82:68:
         82:f3:bb:a8:38:d9:00:f3:42:6e:78:4e:60:e7:0e:93:78:f7:
         0b:48:ae:d9:da:cf:4c:65:83:e4:7e:92:31:11:f8:95:0c:84:
         52:0e:85:22:34:8b:6a:13:14:48:de:17:0a:76:8b:8c:76:e7:
         c6:4d:c6:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 14:12:52 2026 by rpki-client