This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft
File:                     411E2D411D687BCB4449C3DF45BEEDC041007D94.mft (raw, json)
Hash identifier:          o4BO/WEkw9Y/Sq0JFtvscqsoY922aZNld2KUWGuE6G8=
Subject key identifier:   44:D8:B1:62:61:34:3A:65:AF:D0:AA:25:F0:99:10:37:A7:5B:F2:72
Authority key identifier: 41:1E:2D:41:1D:68:7B:CB:44:49:C3:DF:45:BE:ED:C0:41:00:7D:94
Certificate issuer:       /CN=411e2d411d687bcb4449c3df45beedc041007d94
Certificate serial:       7C6C0F68D5A8FAD040031BDBF64CFE3E8971A64C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft
Manifest number:          55
Signing time:             Sun 18 Jan 2026 07:35:18 +0000
Manifest this update:     Sun 18 Jan 2026 07:30:18 +0000
Manifest next update:     Mon 19 Jan 2026 10:35:18 +0000
Files and hashes:         1: 326130663a316363353a31303a3a2f34342d3438203d3e20313533333736.roa (hash: HGaLio0Jo6U3+NxUmzAYGoR9w/tlCge/EFE0NkxzeVQ=)
                          2: 326130663a316363353a6130303a3a2f34302d3438203d3e20313938323636.roa (hash: cu3myeTajLRffV1p90jDI0TXRI0bh3Dv5VJAXzLfnts=)
                          3: 326130663a316363353a3930303a3a2f34302d3438203d3e20323134383939.roa (hash: /phJ7IvkIJjQqedc+6zIS2gYoqHi+Ocf/hRYSoER9/g=)
                          4: 326130663a316363353a6430303a3a2f34302d3438203d3e20323034323434.roa (hash: 8U6uSk7tsPccVTskG2OLsMSqghKHOmq5AIh1lYBYbH4=)
                          5: 326130663a316363353a3130303a3a2f34302d3438203d3e20323033333039.roa (hash: KPdxYweyaoN6aJ1WDQcAbIzYbTq2UWw3eNhM2zo446w=)
                          6: 326130663a316363353a3230303a3a2f34302d3438203d3e20323135313732.roa (hash: KBjHfA9kjqW8OLDitF/Wf34xfbXVf7rNOb2IaI6UkFY=)
                          7: DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.cer (hash: Y59Iau9nin7BF25bY/G3aQb/k2UfFjDTb0NVecR9cTA=)
                          8: 326130663a316363353a3530303a3a2f34302d3438203d3e20323037333137.roa (hash: IlSzSHDNIZ6+6aFd92vwII4f0I4UgOAOOCbXoAxD+t0=)
                          9: 326130663a316363353a323930303a3a2f34302d3438203d3e20323030303738.roa (hash: glctOSn6s4Xj9+H9ebH8OBXBfYfFT2hJPUufn2SZLJY=)
                          10: 326130663a316363353a313430303a3a2f34302d3438203d3e20323133383738.roa (hash: zOwHDjdhedqSqEGyWds4coIp7+ut0lW+Oo9tUWToG3g=)
                          11: 326130663a316363313a3a2f33322d3438203d3e20323134303236.roa (hash: 0Mmksrtruh7fbUKALb2tK8xrOixD39y8EOgMrAELKKs=)
                          12: AS214720.asa (hash: +U4auO/V8nlV4camGgHaMOAhD4vWi6ijODldNL0Ba0k=)
                          13: 326130663a316363303a3a2f33322d3438203d3e203434333234.roa (hash: 2itISUuyiq2kJ3p6MrMIH40PF2ksGE3/FGvvEXcIVOY=)
                          14: 326130663a316363353a323630303a3a2f34302d3438203d3e20323032333335.roa (hash: rra7K6FfnmdhsuCKYcUdQImHwFvo7h9/pjiSjqvVfjg=)
                          15: 326130663a316363353a3730303a3a2f34302d3438203d3e20323034303731.roa (hash: a9VTadKi3X1qXhii/AdM18H2c+kqhz05BGXKnS6Oxrw=)
                          16: AS44324.asa (hash: tgcGt6L9P1xGHanSZBtdBsLfGpUeuqaqrlfCZKm/qc4=)
                          17: 326130663a316363353a313530303a3a2f34302d3438203d3e20313938303235.roa (hash: 41VnGMIsMh3o9pctowqTD26wfCcnjcgLC79guvJR91I=)
                          18: 326130663a316363353a326330303a3a2f34302d3438203d3e20323132343235.roa (hash: FHO6yQdE9pVoMQZDbmdnV97e+QL5O1Qj0xNfbrOZSso=)
                          19: 326130663a316363353a3430303a3a2f34302d3438203d3e20323033393233.roa (hash: 8bqKwz8sj3sbN6VTB3pi6s7mX6CCSGrFYbUBfIR2kCw=)
                          20: 326130663a316363313a3a2f33322d3438203d3e20323033333134.roa (hash: 3CbPZlZdBv1wijTy1xiC/sWOE+eNUnisRKG/PEqX4Ls=)
                          21: 326130663a316363353a313130303a3a2f34302d3438203d3e20323135363139.roa (hash: 3ieELc5m08pyqFMvyZGwvLU4zxh5CWdP2r+xgmPYVZ0=)
                          22: 326130663a316363353a316530303a3a2f34302d3438203d3e20323134393638.roa (hash: URwclaYoVILE99k3dHkDkNvZg1XOMo4nTmtLuMv/9so=)
                          23: E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.cer (hash: mXOWkVI+O5dfAGsBgGASZf8zQGRkapL7Yid77qUV13A=)
                          24: 326130663a316363353a6230303a3a2f34302d3438203d3e20323134353735.roa (hash: /wBjERMVRUk3eATx7xB8KQMRotjHS8Dx8tee6UNFQoc=)
                          25: 411E2D411D687BCB4449C3DF45BEEDC041007D94.crl (hash: JEa2frgGxJ3xZP2zR99wSZwp493xsIvhYstcChl9zgg=)
                          26: 326130663a316363353a326530303a3a2f34302d3438203d3e20323131373231.roa (hash: BkW1C05jo1OHjmQfgh6BSthITjhcqgr7WoujWuOO764=)
                          27: 326130663a316363353a316130303a3a2f34302d3438203d3e20323030343535.roa (hash: caS1uw+tIHonGiirp27ihWFLNvPI3Lqgcb7cJY/5URU=)
                          28: 326130663a316363353a326230303a3a2f34302d3438203d3e20323131373239.roa (hash: g8hKj91W7Xvro//u0J6C0VC1r489GP2/wMZRbU9A2RM=)
                          29: 326130663a316363353a3330303a3a2f34302d3438203d3e20313939303138.roa (hash: RUR4g5rbDAp6ciVfkAyWU6prG9LPyX+46qC6E1BXuuI=)
                          30: 326130663a316363353a316230303a3a2f34302d3438203d3e20323033313638.roa (hash: bo1SBRM8XSA6XMG/cECAtn9xvjXWplHBDXvg2PuT6oE=)
                          31: 326130663a316363353a6630303a3a2f34302d3438203d3e20323130333532.roa (hash: PJthaD3Dqq1MsFvHVoT7SFWUfWl9HRqCSrg1Gh5Hnbs=)
                          32: 326130663a316363323a3a2f33322d3430203d3e203535323031.roa (hash: GoVxMbuxvRYAhL8X1ylPrO2LPPd0V08hTTxPYE/XoV8=)
                          33: 326130663a316363353a3630303a3a2f34302d3438203d3e20323134393333.roa (hash: QAVw3nto63ezajf647rQJV/gJ9ugJ4OboWETYueKwa0=)
                          34: 326130663a316363353a32303a3a2f34342d3434203d3e20323034353138.roa (hash: uTnixv9hxV4t+/MNYIl3JI/v2d7u+7nTSEPq/Xubyao=)
                          35: 326130663a316363353a323530303a3a2f34302d3438203d3e20313533333736.roa (hash: 6Namxrf43YQyS33tbhmcxyljur2zp+JmJmQQBoRyqdg=)
                          36: 326130663a316363353a313630303a3a2f34302d3438203d3e20313939333130.roa (hash: iz1tU+n1QM8JuIsf3A3u8SxRanJcAgiwVHnAaQQiyLs=)
                          37: 326130663a316363353a316630303a3a2f34302d3438203d3e20323132353332.roa (hash: OkA7mE2By1tX1d9l2TmDX/6EpIF8txUZN6tihggXGTs=)
                          38: 326130663a316363353a6530303a3a2f34302d3438203d3e20323034353339.roa (hash: 8Lg12+qS457Clceh7CRKK2dYQVdupidFacGSjFmqeRY=)
                          39: D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.cer (hash: X7BtIqYuY9CGfqbBF9famZoZLIlZWc4+DDZ02mC1ZUY=)
                          40: 326130663a316363353a34303a3a2f34342d3438203d3e20323131353735.roa (hash: 6w5bQISM5/f3Xx7fnLIHrjymZJmICgp/4YLl/tppTc4=)
                          41: 326130663a316363353a3830303a3a2f34302d3438203d3e20313530323839.roa (hash: 8+UeIsdjHRsho3hm72Zq62QcdYxLHdat1mG4wxsTodU=)
                          42: 8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.cer (hash: df3V4eZXFVQc+HpxZGBS00l3BQpdrMDVHgT2odxVtiY=)
                          43: 326130663a316363353a313830303a3a2f34302d3438203d3e20323132343833.roa (hash: LD1kZoESri8SSiT70G4BwNPurj1h2Z8rsheZy9D25wQ=)
                          44: 326130663a316363353a316330303a3a2f34302d3438203d3e20323037333033.roa (hash: ALGIA29NNbeFSJiSIRW+cPqzoSQbByDZ7Tc3zl5bUzE=)
                          45: 326130663a316363353a313230303a3a2f34302d3438203d3e20323032373334.roa (hash: JjNm5rDvtwoxVpKuyNODbWvZAo/OVdErv9yLLiqZwbQ=)
                          46: 326130663a316363353a316430303a3a2f34302d3438203d3e20323134323037.roa (hash: NiIvuZazmDP3kGdz61QEI+q94NtgxG3Gr/oHjOzpBtE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 06:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:6c:0f:68:d5:a8:fa:d0:40:03:1b:db:f6:4c:fe:3e:89:71:a6:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=411e2d411d687bcb4449c3df45beedc041007d94
        Validity
            Not Before: Jan 18 07:30:18 2026 GMT
            Not After : Jan 19 10:35:18 2026 GMT
        Subject: CN=44D8B16261343A65AFD0AA25F0991037A75BF272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ba:ee:b4:e0:4f:ea:2c:f5:0d:16:6f:19:d9:
                    2f:f8:6a:70:fd:7f:09:0c:4a:0c:2c:a8:7b:33:54:
                    27:e3:36:84:49:4f:77:4b:b1:29:d4:ca:6a:bc:f5:
                    57:e6:7c:82:a9:5b:f7:66:e6:70:06:14:fa:d7:ea:
                    86:56:f0:2b:b5:49:93:cc:4c:19:cc:05:55:9e:f7:
                    66:0d:36:ba:1c:00:9b:08:ad:e6:41:f4:80:18:02:
                    5b:e1:41:00:35:0a:33:df:43:13:73:95:3d:25:57:
                    20:9e:88:fd:b2:2d:3c:1c:04:42:40:95:b7:b6:09:
                    19:9f:b5:4f:1a:32:31:01:79:16:7d:20:10:1b:2a:
                    ed:e0:7e:cb:fc:06:3f:46:f6:ac:6c:2c:93:41:df:
                    2a:e4:a5:79:48:35:bd:4d:66:90:82:4b:b6:8f:f5:
                    bb:14:83:17:38:f2:34:0b:e3:35:d8:5f:ed:95:de:
                    23:42:8d:9a:84:53:c8:6b:30:b4:b9:ce:b8:37:f3:
                    6a:d6:91:81:4f:1e:ae:36:7a:3c:e9:b5:fc:76:68:
                    06:a8:54:5f:0e:f0:eb:47:fa:3f:0c:b2:c0:89:7f:
                    c9:db:53:50:90:21:ed:38:53:ba:79:33:4d:8a:41:
                    11:ab:23:8c:b6:e7:48:15:6e:d9:a5:66:6c:1b:1d:
                    81:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:D8:B1:62:61:34:3A:65:AF:D0:AA:25:F0:99:10:37:A7:5B:F2:72
            X509v3 Authority Key Identifier:
                keyid:41:1E:2D:41:1D:68:7B:CB:44:49:C3:DF:45:BE:ED:C0:41:00:7D:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:b0:9e:91:d2:02:4b:03:2f:b6:96:d2:76:a8:3c:d3:f5:c1:
         e0:27:b7:c8:75:d2:67:f9:ec:46:10:0a:45:be:78:42:05:e0:
         ea:53:a5:38:98:cc:df:0c:45:95:e9:f7:3f:30:0f:3a:b5:ce:
         5b:4d:d4:36:5e:d6:e2:f4:7e:a0:a6:1f:4b:da:ea:a8:ff:57:
         bb:4f:fb:c6:fa:cb:7c:2e:d5:d7:c2:d9:86:37:d1:f3:f7:6f:
         32:c3:bf:7f:75:39:95:95:ad:94:3d:6a:75:0d:dc:0e:4f:60:
         99:ee:b6:27:0e:8d:1a:b6:9e:5b:d5:77:51:f4:c4:55:92:6e:
         d7:b6:ec:0a:a9:64:99:bf:99:0b:6d:2e:60:25:4f:cd:3d:0f:
         28:01:07:1e:66:dd:0f:0d:c1:96:9a:08:b3:df:cc:ca:ee:7b:
         65:f9:a3:a6:27:31:d5:b3:b5:74:89:7c:3e:05:04:07:2f:5c:
         66:f7:3b:89:11:0a:a7:00:e0:a2:20:ee:81:b4:12:08:74:4e:
         df:44:53:b6:52:d7:47:e8:59:fb:5b:fd:3d:29:36:19:cb:85:
         86:88:4c:68:d6:0c:24:9c:64:3b:d4:6b:51:9d:84:f0:13:02:
         a5:27:c4:0c:82:93:d7:3a:9e:12:6b:b3:84:49:6f:67:7f:97:
         86:28:b2:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 11:57:08 2026 by rpki-client