This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
File:                     4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json)
Hash identifier:          nd8T8XBSfkHnD1RH/iFjmGuS03nWYdHd8yjnSJ6jqFY=
Subject key identifier:   FB:81:BD:E7:91:D4:03:6E:82:E1:26:2C:64:ED:31:64:19:86:61:EA
Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA
Certificate issuer:       /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
Certificate serial:       198D284661993A51E66DAA72C67D821A73729C58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
Manifest number:          043E
Signing time:             Sun 18 Jan 2026 00:06:48 +0000
Manifest this update:     Sun 18 Jan 2026 00:01:48 +0000
Manifest next update:     Mon 19 Jan 2026 00:20:48 +0000
Files and hashes:         1: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: idRPUwrCPZHjiSE/kH24rAzMczemZSkTsfWq1xPwh6Y=)
                          2: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: qJwnVkbZQ0t6fnGyKN6cNCMCxJQWbGimR0QoYNVRTio=)
                          3: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: QKOeJK2sWZOwn3ONUziDLsfn/UIwuJcjEwQlr5pjUqw=)
                          4: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: BhQiMI6zO9PHfTaiSdTfBNSJj12XWNvkgghYnUEJ1YE=)
                          5: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9tY5GTEVxta0324BfaE/zE6amu11uNt5gF70q3lDcAc=)
                          6: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: WY6DP7ISPckKutj05yXj19aC18jEUDqW+vlyBEDzYR4=)
                          7: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: 8NpNc3+Dg1dsLsrdjPPVYWcTafBhsK5m2leiu7R5m5o=)
                          8: 3130392e3130372e33322e302f32302d3230203d3e203531303539.roa (hash: C9UfY9CKQ/OvFhFEQghP2qWXJbHFkU7nZrfnb9KHsRk=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 00:20:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:8d:28:46:61:99:3a:51:e6:6d:aa:72:c6:7d:82:1a:73:72:9c:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea
        Validity
            Not Before: Jan 18 00:01:48 2026 GMT
            Not After : Jan 19 00:20:48 2026 GMT
        Subject: CN=FB81BDE791D4036E82E1262C64ED3164198661EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:56:3e:0d:49:ff:8d:3b:7b:37:13:cb:64:b4:
                    8f:92:4c:57:c0:28:e1:38:45:84:14:43:17:f3:e1:
                    cf:69:02:74:64:d7:47:07:25:26:18:7b:6d:85:c9:
                    a7:33:1c:66:31:23:b6:87:bf:e2:07:f4:23:89:2c:
                    25:1a:cb:c9:6b:7d:5a:61:3a:19:4a:3c:d1:15:16:
                    94:7d:e9:dd:c9:03:23:dc:65:6e:6e:da:b9:b9:f9:
                    65:48:7f:85:e5:74:a7:fb:fa:66:a3:1b:39:04:cf:
                    1f:e7:c8:19:30:25:f1:6a:11:28:68:33:87:6d:40:
                    e1:d8:6d:f9:9d:10:15:69:e3:55:14:e0:2b:fa:00:
                    21:4b:cf:88:d7:67:6e:83:e3:db:02:ba:4f:79:a5:
                    e9:75:85:b8:17:6c:5b:a6:6c:6a:cb:3b:e1:81:f9:
                    4c:3f:d8:d8:6b:46:86:39:c8:63:12:8a:f7:0b:45:
                    51:a1:15:52:67:cb:14:9b:cf:e3:53:78:4d:05:00:
                    30:a8:87:41:f5:65:04:7e:e6:57:b4:41:b6:17:e1:
                    31:7f:0a:30:eb:0c:67:8b:94:05:74:3d:ad:3f:60:
                    31:07:03:d0:64:82:8c:e0:19:2f:13:03:52:ef:05:
                    70:04:22:8e:df:e3:03:f8:65:84:95:6a:74:7b:63:
                    94:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:81:BD:E7:91:D4:03:6E:82:E1:26:2C:64:ED:31:64:19:86:61:EA
            X509v3 Authority Key Identifier:
                keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:ec:9e:f2:93:39:06:30:50:82:b0:77:07:49:5c:85:fa:60:
         a8:91:97:fe:da:c3:14:1c:61:40:c4:2e:26:9d:bb:17:ea:1a:
         ea:ca:80:29:3f:48:4b:15:d5:dd:a4:72:84:8e:ac:2c:ff:e5:
         76:dd:f1:2c:54:4b:d9:27:35:df:ff:69:86:2f:c6:b5:a5:f4:
         d6:97:ae:48:3d:e5:e3:a0:89:2b:c8:ba:86:68:4b:39:0b:47:
         64:32:37:8c:ec:29:da:02:38:35:99:79:f9:3d:48:6c:b6:a2:
         fc:91:77:60:61:72:64:3c:b3:ec:cc:6a:51:dd:28:bc:7b:30:
         ae:57:72:a6:70:f8:0b:80:3b:ac:1b:6e:76:f4:ec:2c:1a:67:
         74:92:83:28:b0:fa:f9:d3:9c:b2:72:db:40:f8:58:5b:ab:71:
         15:72:98:b7:9c:7d:3c:7a:bc:70:b3:5d:dc:82:87:de:10:72:
         d7:b6:c9:3a:4a:86:0a:f5:45:6d:9a:05:a0:0d:3e:73:76:5a:
         cb:e3:dc:a7:ee:35:a8:0b:d5:2b:03:c6:8d:2e:84:ca:54:8c:
         b5:42:87:15:a5:3e:9d:75:c8:ff:26:53:02:cb:fd:f4:77:b5:
         85:45:e5:d6:81:d8:18:75:e7:85:ef:5b:8d:e8:be:7e:29:57:
         ab:c5:6c:f7
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUGY0oRmGZOlHmbapyxn2CGnNynFgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0
N2RjZWVlYTAeFw0yNjAxMTgwMDAxNDhaFw0yNjAxMTkwMDIwNDhaMDMxMTAvBgNV
BAMTKEZCODFCREU3OTFENDAzNkU4MkUxMjYyQzY0RUQzMTY0MTk4NjYxRUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Vj4NSf+NO3s3E8tktI+STFfA
KOE4RYQUQxfz4c9pAnRk10cHJSYYe22FyaczHGYxI7aHv+IH9COJLCUay8lrfVph
OhlKPNEVFpR96d3JAyPcZW5u2rm5+WVIf4XldKf7+majGzkEzx/nyBkwJfFqESho
M4dtQOHYbfmdEBVp41UU4Cv6ACFLz4jXZ26D49sCuk95pel1hbgXbFumbGrLO+GB
+Uw/2NhrRoY5yGMSivcLRVGhFVJnyxSbz+NTeE0FADCoh0H1ZQR+5le0QbYX4TF/
CjDrDGeLlAV0Pa0/YDEHA9BkgozgGS8TA1LvBXAEIo7f4wP4ZYSVanR7Y5TzAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU+4G955HUA26C4SYsZO0xZBmGYeowHwYDVR0j
BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx
MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm
Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03
ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD
Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhOye8pM5BjBQgrB3B0lc
hfpgqJGX/trDFBxhQMQuJp27F+oa6sqAKT9ISxXV3aRyhI6sLP/ldt3xLFRL2Sc1
3/9phi/GtaX01peuSD3l46CJK8i6hmhLOQtHZDI3jOwp2gI4NZl5+T1IbLai/JF3
YGFyZDyz7MxqUd0ovHswrldypnD4C4A7rBtudvTsLBpndJKDKLD6+dOcsnLbQPhY
W6txFXKYt5x9PHq8cLNd3IKH3hBy17bJOkqGCvVFbZoFoA0+c3Zay+Pcp+41qAvV
KwPGjS6EylSMtUKHFaU+nXXI/yZTAsv99He1hUXl1oHYGHXnhe9bjei+filXq8Vs
9w==
-----END CERTIFICATE-----
Generated at Sun Jan 18 09:53:26 2026 by rpki-client