This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.mft
File:                     5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.mft (raw, json)
Hash identifier:          4t3tJOydj1JefOiwo7liW64AvmCc0KeebyEPxthsD3w=
Subject key identifier:   73:1C:FB:B1:09:F3:1D:DE:B7:52:88:22:88:70:D2:DE:E1:A4:98:0C
Authority key identifier: 5F:BB:D0:F3:D7:B8:1E:8A:FD:99:E5:A3:4B:67:83:4D:D3:CD:13:C9
Certificate issuer:       /CN=5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9
Certificate serial:       28514738645117A5F2EB0F25C1786DCB8B77133A
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.mft
Manifest number:          56
Signing time:             Sun 18 Jan 2026 09:20:39 +0000
Manifest this update:     Sun 18 Jan 2026 09:15:39 +0000
Manifest next update:     Mon 19 Jan 2026 11:36:39 +0000
Files and hashes:         1: 326130363a313238333a383930333a3a2f34382d3438203d3e20323133343133.roa (hash: hfsX7O4ssow2aXydnwN9zYa6SNNgkh4xqDb4M6RjByw=)
                          2: 326130363a313238333a383930663a3a2f34382d3438203d3e20323133343133.roa (hash: vOy3Hoo12y1MaF1xhG57rJd7z5CmXrBfc6rBSzJ2oUE=)
                          3: 326130363a313238333a383930343a3a2f34382d3438203d3e20323134373632.roa (hash: +ucDYfCsKINgleLYp642WIR5LEPN0kWQYDVnDQaA83s=)
                          4: 326130363a313238333a383966303a3a2f34342d3434203d3e20323134303333.roa (hash: uXHhm0ZjjPodrKnjp4qW+YTDv1/Z29fczrFjmi+w+J4=)
                          5: 5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.crl (hash: Nop147JW+5FxBpsLuWxJT3pufIVmb9iNyvyyam28/Fk=)
                          6: 326130363a313238333a383930303a3a2f34302d3430203d3e20323133343133.roa (hash: 0gYE6skrisUrM06D53bvZrZFAv0EfqoV+nCI7G9OKOs=)
                          7: 326130363a313238333a383930633a3a2f34382d3438203d3e20323134373632.roa (hash: 2rCozjaLN+ORp+rF15yl0cLwnMgwxsdIwkSr5DBlLzo=)
                          8: 326130363a313238333a383931313a3a2f34382d3438203d3e20323134333138.roa (hash: nxTxBfayiVQT25dQojMI7kQmseMMilAT7TuM473ASuo=)
                          9: 326130363a313238333a383930313a3a2f34382d3438203d3e20323134323035.roa (hash: cPNCLrbwdymPiqlNCY/iKCMb0/zZMwnLL5M7UNRh5H0=)
                          10: 326130363a313238333a383930643a3a2f34382d3438203d3e20323136333637.roa (hash: FnSpyT9OnuvPM/GugFyozsjtsmrHeVUUgj2NyDK1wuc=)
                          11: 326130363a313238333a383931303a3a2f34382d3438203d3e20323133343133.roa (hash: oeDFQ+FnCiKJbPwAjwpePfvdkd66O/1mSy2s5rHvj9Y=)
                          12: 326130363a313238333a383930613a3a2f34382d3438203d3e20323136333637.roa (hash: HuUH/JYH1vthyPEN3kexTHE/fhKQ1xn353p6qv+mYJg=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 06:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:51:47:38:64:51:17:a5:f2:eb:0f:25:c1:78:6d:cb:8b:77:13:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9
        Validity
            Not Before: Jan 18 09:15:39 2026 GMT
            Not After : Jan 19 11:36:39 2026 GMT
        Subject: CN=731CFBB109F31DDEB75288228870D2DEE1A4980C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9b:a8:b8:fb:cf:1b:d6:f8:a8:0f:f5:3c:7b:
                    cb:a9:c8:96:0d:52:5c:54:bd:51:74:a5:c1:2d:dc:
                    90:94:1a:60:64:f5:e8:b5:e8:54:9d:b4:3c:42:4f:
                    40:75:4b:b6:74:45:8e:18:a7:b6:b7:59:74:e4:98:
                    2b:2d:9d:ba:f4:57:a3:2e:1b:14:ee:90:17:30:8e:
                    56:f6:6f:3d:20:86:08:b4:15:78:f4:fa:a6:64:86:
                    70:e7:3e:e0:5f:e2:73:b2:21:8a:90:aa:58:65:5a:
                    ab:b8:f2:d7:07:55:aa:be:3e:10:2c:db:12:13:18:
                    a9:9b:78:10:aa:d3:c2:2a:94:a1:53:96:65:24:c9:
                    ff:a6:7a:df:31:77:60:df:7d:0f:07:c8:b1:73:e3:
                    7a:92:bb:59:17:de:92:94:43:ca:92:f6:cb:ed:28:
                    3a:36:4a:67:ec:74:8c:38:c6:be:30:e1:60:6e:f2:
                    69:fa:2c:fb:72:fc:21:cf:e5:a6:2e:f5:5f:cf:49:
                    be:aa:de:6a:22:60:c7:06:50:7e:26:0b:4b:2e:c8:
                    1a:39:93:77:0a:d0:3c:0e:4d:37:e9:c6:40:8d:28:
                    d5:a1:44:8a:62:eb:aa:97:a4:9c:ac:d3:1d:3f:65:
                    74:cb:73:23:fb:22:82:1e:b9:9f:b7:5e:bb:aa:22:
                    53:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:1C:FB:B1:09:F3:1D:DE:B7:52:88:22:88:70:D2:DE:E1:A4:98:0C
            X509v3 Authority Key Identifier:
                keyid:5F:BB:D0:F3:D7:B8:1E:8A:FD:99:E5:A3:4B:67:83:4D:D3:CD:13:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:67:3f:33:65:89:2c:06:ac:1a:76:c2:51:95:36:51:db:14:
         cd:73:e0:20:a5:e4:ac:5c:35:1d:43:b7:e9:f1:19:45:c7:00:
         a5:0c:18:ee:42:2c:88:72:28:07:be:c8:63:3c:13:50:02:bb:
         16:a3:a5:40:0a:09:a4:38:cf:00:54:6d:ad:47:6f:0a:8a:14:
         e7:1a:3b:cd:9f:c7:ef:db:0e:bd:35:78:9a:8f:a6:44:55:47:
         79:60:1c:d0:9b:97:c8:e6:0f:b4:26:36:a8:04:07:d2:64:1c:
         72:a3:66:b6:d9:4a:97:47:a2:ec:9e:18:aa:5c:b6:0f:4a:f7:
         27:da:64:56:2f:0b:d0:64:db:0d:a0:08:95:e5:b9:66:f3:cf:
         aa:76:2b:5e:b5:51:41:95:c0:4c:0e:15:dd:c3:02:64:50:b6:
         b2:90:b0:96:b2:e4:96:39:67:78:f1:9b:ef:3a:69:e4:0b:f2:
         ac:b4:fc:93:d0:93:62:da:6c:a0:b9:83:90:a7:06:f1:71:92:
         de:82:60:a0:91:f2:2e:5f:96:aa:7e:e4:9b:ff:97:d8:9f:4c:
         61:79:18:33:b6:36:c5:c3:bd:dd:d5:94:79:9b:a6:49:3b:3c:
         a9:c3:c3:37:ce:fb:01:64:a8:d7:f3:c6:4a:48:b6:34:68:cb:
         2d:3d:38:e8
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUKFFHOGRRF6Xy6w8lwXhty4t3EzowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUZCQkQwRjNEN0I4MUU4QUZEOTlFNUEzNEI2NzgzNERE
M0NEMTNDOTAeFw0yNjAxMTgwOTE1MzlaFw0yNjAxMTkxMTM2MzlaMDMxMTAvBgNV
BAMTKDczMUNGQkIxMDlGMzFEREVCNzUyODgyMjg4NzBEMkRFRTFBNDk4MEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCom6i4+88b1vioD/U8e8upyJYN
UlxUvVF0pcEt3JCUGmBk9ei16FSdtDxCT0B1S7Z0RY4Yp7a3WXTkmCstnbr0V6Mu
GxTukBcwjlb2bz0ghgi0FXj0+qZkhnDnPuBf4nOyIYqQqlhlWqu48tcHVaq+PhAs
2xITGKmbeBCq08IqlKFTlmUkyf+met8xd2DffQ8HyLFz43qSu1kX3pKUQ8qS9svt
KDo2SmfsdIw4xr4w4WBu8mn6LPty/CHP5aYu9V/PSb6q3moiYMcGUH4mC0suyBo5
k3cK0DwOTTfpxkCNKNWhRIpi66qXpJys0x0/ZXTLcyP7IoIeuZ+3XruqIlMVAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUcxz7sQnzHd63UogiiHDS3uGkmAwwHwYDVR0j
BBgwFoAUX7vQ89e4Hor9meWjS2eDTdPNE8kwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzhlNjE2MTEtM2IwYi00MWNlLTg4Y2QtZTU2MDM1M2Y2
OTQyLzEvNUZCQkQwRjNEN0I4MUU4QUZEOTlFNUEzNEI2NzgzNEREM0NEMTNDOS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82OGFiYWJiYi1mMDQ4LTRk
ZTEtOTIwNi04ZDQwZjA3MTgwOGIvNi81RkJCRDBGM0Q3QjgxRThBRkQ5OUU1QTM0
QjY3ODM0REQzQ0QxM0M5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
Lzc4ZTYxNjExLTNiMGItNDFjZS04OGNkLWU1NjAzNTNmNjk0Mi8xLzVGQkJEMEYz
RDdCODFFOEFGRDk5RTVBMzRCNjc4MzRERDNDRDEzQzkubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCfZz8z
ZYksBqwadsJRlTZR2xTNc+AgpeSsXDUdQ7fp8RlFxwClDBjuQiyIcigHvshjPBNQ
ArsWo6VACgmkOM8AVG2tR28KihTnGjvNn8fv2w69NXiaj6ZEVUd5YBzQm5fI5g+0
JjaoBAfSZBxyo2a22UqXR6LsnhiqXLYPSvcn2mRWLwvQZNsNoAiV5blm88+qdite
tVFBlcBMDhXdwwJkULaykLCWsuSWOWd48ZvvOmnkC/KstPyT0JNi2myguYOQpwbx
cZLegmCgkfIuX5aqfuSb/5fYn0xheRgztjbFw73d1ZR5m6ZJOzypw8M3zvsBZKjX
88ZKSLY0aMstPTjo
-----END CERTIFICATE-----
Generated at Sun Jan 18 12:07:48 2026 by rpki-client