This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/2/4B7AFD45B30392C9F4665CE2A7692D56E755DCEA.mft
File:                     4B7AFD45B30392C9F4665CE2A7692D56E755DCEA.mft (raw, json)
Hash identifier:          pQA8g+65isC3ypok2DDsrMhBy+54p3iLuIYNv8rKfc0=
Subject key identifier:   5A:31:6C:BB:A6:82:D8:EC:A0:23:15:6C:C0:4C:46:6C:61:5F:B5:EF
Authority key identifier: 4B:7A:FD:45:B3:03:92:C9:F4:66:5C:E2:A7:69:2D:56:E7:55:DC:EA
Certificate issuer:       /CN=4B7AFD45B30392C9F4665CE2A7692D56E755DCEA
Certificate serial:       62592A96E87C9F60C61A4DBB5D5E2ECE0D257EDF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/4B7AFD45B30392C9F4665CE2A7692D56E755DCEA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/2/4B7AFD45B30392C9F4665CE2A7692D56E755DCEA.mft
Manifest number:          09
Signing time:             Tue 20 Jan 2026 07:20:30 +0000
Manifest this update:     Tue 20 Jan 2026 07:15:30 +0000
Manifest next update:     Wed 21 Jan 2026 11:15:30 +0000
Files and hashes:         1: 326131343a373538363a363030303a3a2f34302d3438203d3e20313531363733.roa (hash: a5s0weSMSVAZOPtcCLRRCAjoiXiAH1m3fzt4R/LeqXA=)
                          2: 4B7AFD45B30392C9F4665CE2A7692D56E755DCEA.crl (hash: pwORQCUOVY1C6h1WwJDmGCqq50EaekgBKFNCWPGgI+U=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/2/4B7AFD45B30392C9F4665CE2A7692D56E755DCEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/2/4B7AFD45B30392C9F4665CE2A7692D56E755DCEA.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/4B7AFD45B30392C9F4665CE2A7692D56E755DCEA.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Jan 2026 09:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:59:2a:96:e8:7c:9f:60:c6:1a:4d:bb:5d:5e:2e:ce:0d:25:7e:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B7AFD45B30392C9F4665CE2A7692D56E755DCEA
        Validity
            Not Before: Jan 20 07:15:30 2026 GMT
            Not After : Jan 21 11:15:30 2026 GMT
        Subject: CN=5A316CBBA682D8ECA023156CC04C466C615FB5EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:35:1d:f8:2e:08:ee:37:d1:74:f0:13:13:7f:
                    6f:54:a2:f7:c5:bc:71:e8:fa:8c:e1:e3:fd:fc:b3:
                    fb:3f:62:a2:33:84:0b:5e:cc:30:bf:8a:99:6b:f6:
                    41:47:9a:11:1b:67:e7:a8:6f:f0:6b:93:3c:da:ac:
                    51:d8:42:ac:75:95:3d:bb:a3:12:8f:2c:ff:d9:da:
                    a0:9a:7b:72:9b:53:6c:0c:2a:89:3c:f0:73:e0:06:
                    9d:c8:b1:60:25:cd:49:72:d6:8f:0b:0f:bb:85:44:
                    20:f2:41:a4:29:24:d6:dc:3d:96:77:82:0a:9c:2a:
                    73:8e:1d:9f:db:f5:2a:b9:a7:9a:84:ee:29:c3:e3:
                    2a:72:07:2e:4a:8e:21:b4:26:c0:ee:eb:4b:5e:5d:
                    ac:69:c6:ba:25:6b:fe:af:40:d3:7e:84:f7:8b:b7:
                    6f:2c:cc:88:e9:8a:a7:33:c3:93:50:f1:3d:86:0f:
                    ae:e7:03:3a:fd:55:72:7c:d9:6d:3d:3c:88:f9:e5:
                    d0:36:d9:37:37:71:37:16:d2:25:05:e9:e1:29:04:
                    68:10:cb:ce:0a:00:cb:f3:1f:de:bd:32:1e:78:6b:
                    f0:8b:e1:0a:71:d2:5c:23:1b:aa:24:e1:6f:f1:8d:
                    70:68:cd:e1:bb:b9:db:2b:37:00:b3:dd:7b:57:f3:
                    17:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:31:6C:BB:A6:82:D8:EC:A0:23:15:6C:C0:4C:46:6C:61:5F:B5:EF
            X509v3 Authority Key Identifier:
                keyid:4B:7A:FD:45:B3:03:92:C9:F4:66:5C:E2:A7:69:2D:56:E7:55:DC:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/2/4B7AFD45B30392C9F4665CE2A7692D56E755DCEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/4B7AFD45B30392C9F4665CE2A7692D56E755DCEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/90821899-77a6-43a7-9a82-0a38ff3b4ad0/2/4B7AFD45B30392C9F4665CE2A7692D56E755DCEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:1f:71:51:b7:9b:2c:8e:62:a1:d7:ff:eb:1c:24:37:ce:de:
         81:2b:69:8a:54:4a:4a:8f:e4:04:95:36:cd:f5:0d:b2:f1:0d:
         0d:9c:83:28:90:1d:3a:ed:85:f1:98:48:ba:2b:b4:87:a4:5e:
         40:c6:b8:29:0e:47:8c:87:d7:61:30:54:37:9f:07:f2:40:26:
         7e:dd:61:5d:7d:cf:01:aa:36:8b:3b:6e:7f:c9:29:2a:ba:3e:
         c3:d2:17:55:db:f5:17:c9:53:d2:62:bf:70:d5:39:18:55:b3:
         41:76:e3:28:b1:d6:2f:b5:cf:6a:0e:bc:4f:4a:f6:a8:13:90:
         57:94:12:1e:f4:a0:27:6e:e9:a5:d6:94:e1:89:07:72:97:f8:
         a4:cd:8d:bc:4a:ac:d6:a3:6f:49:4e:2a:2e:54:67:e9:01:e9:
         e7:ea:bd:4c:b8:fa:91:08:28:24:a8:47:11:c1:86:9c:3c:40:
         4f:ad:b7:8a:82:4f:fc:14:aa:17:e0:30:8f:8e:cd:c2:69:f4:
         b9:77:ac:c1:71:73:96:a5:0d:83:21:45:32:da:b8:cb:5b:c1:
         71:45:ec:9d:57:71:d1:f8:ec:37:b4:ee:7d:52:86:44:24:bb:
         8d:76:b7:45:0e:95:83:0d:2f:fc:9e:fb:5d:b4:6d:e3:e6:86:
         d2:a6:d1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----