This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft
File:                     637FD1BA3FED44454D6D7030247709D28DB3491A.mft (raw, json)
Hash identifier:          Npa4WJzdhKxZyxoUq+asbk5ieaYnJELYMbrtjRJB4qw=
Subject key identifier:   85:F6:AC:86:4A:CE:9D:3C:60:32:A2:AA:FA:3B:E8:0C:0B:E2:6D:12
Authority key identifier: 63:7F:D1:BA:3F:ED:44:45:4D:6D:70:30:24:77:09:D2:8D:B3:49:1A
Certificate issuer:       /CN=637fd1ba3fed44454d6d7030247709d28db3491a
Certificate serial:       114C944B5C6BDD939FCA45327093A3A025B14843
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft
Manifest number:          045F
Signing time:             Mon 09 Feb 2026 14:31:43 +0000
Manifest this update:     Mon 09 Feb 2026 14:26:43 +0000
Manifest next update:     Tue 10 Feb 2026 16:04:43 +0000
Files and hashes:         1: 3133392e32382e32362e302f32342d3234203d3e20313337343039.roa (hash: 4dsufrRZZT3ng/M0mUxRioQsmJP0ZwUerMNQTCdj11A=)
                          2: 3133392e32382e32352e302f32342d3234203d3e20323030303137.roa (hash: KTt7IBC5OKuP6muE0/6zCxuIwEkqcnypdMUhBFAyx18=)
                          3: 3133392e32382e32342e302f32342d3234203d3e20323131343430.roa (hash: eR+xyo+zY+fM9l50cFs0swlGeIX2NljYGKvE5SQX83U=)
                          4: 3133392e32382e32342e302f32342d3234203d3e20323132363039.roa (hash: Zbml066pXi3G2h7cDhaY/zBOXtPP1DXZek0hCHsXFhc=)
                          5: 637FD1BA3FED44454D6D7030247709D28DB3491A.crl (hash: tGlLw/qJ3nOYFM4fbbYdvTvnm+fYDGceiDc0dv/NrjM=)
                          6: 3133392e32382e32372e302f32342d3234203d3e20323036313530.roa (hash: spk6NtqPTGXoBo4XJMsULHBo1PCje3tyvN9b3jHB/pA=)
                          7: 3133392e32382e32352e302f32342d3234203d3e20323131343135.roa (hash: kj5wXeF4AQFWN9fpmE1MKtBmtMRLs1TA1rGuGr1+5eA=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:4c:94:4b:5c:6b:dd:93:9f:ca:45:32:70:93:a3:a0:25:b1:48:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=637fd1ba3fed44454d6d7030247709d28db3491a
        Validity
            Not Before: Feb  9 14:26:43 2026 GMT
            Not After : Feb 10 16:04:43 2026 GMT
        Subject: CN=85F6AC864ACE9D3C6032A2AAFA3BE80C0BE26D12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:31:ae:54:3c:94:c9:83:3b:f1:a0:35:a9:9d:
                    51:69:61:7e:83:56:da:b4:36:0e:01:0a:bb:f8:77:
                    7f:01:ad:17:a8:f8:ba:1e:6c:24:2b:02:f7:74:87:
                    e4:45:ec:d1:4d:54:cb:48:9a:36:85:45:ac:83:dc:
                    80:c1:3d:d4:3b:0a:0e:f8:39:4d:a0:85:43:40:28:
                    d0:c1:3e:15:ac:17:8e:81:5d:9c:be:4c:06:48:03:
                    b9:89:e1:d1:c1:08:cd:6a:e9:58:75:6a:03:8e:01:
                    b1:d7:4b:f9:d7:8a:b1:66:7a:3c:90:5a:fe:49:e4:
                    16:09:56:a3:fd:84:ff:cb:ba:26:21:6b:1f:18:72:
                    ee:63:24:3a:54:88:ff:a4:09:1d:bb:b7:49:fb:8e:
                    de:d0:e8:d4:0d:63:59:b7:f4:94:3e:78:ce:c1:a9:
                    32:12:f5:08:0d:cf:32:c9:38:6f:00:8a:9f:34:e0:
                    48:6b:60:21:db:28:33:cc:2d:24:3b:e6:a6:3d:44:
                    7e:23:d8:56:c1:e6:ef:e9:7c:22:dc:5b:ff:12:1d:
                    0b:71:aa:c7:e9:28:8b:0f:b0:9a:92:e5:71:18:28:
                    f2:12:49:1f:12:29:c5:fa:39:70:b6:df:77:b3:3c:
                    73:56:61:84:09:e1:b2:fc:19:1f:d8:e4:7c:d7:81:
                    2e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:F6:AC:86:4A:CE:9D:3C:60:32:A2:AA:FA:3B:E8:0C:0B:E2:6D:12
            X509v3 Authority Key Identifier:
                keyid:63:7F:D1:BA:3F:ED:44:45:4D:6D:70:30:24:77:09:D2:8D:B3:49:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3_Ruj_tREVNbXAwJHcJ0o2zSRo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a94df714-d37d-4942-8e94-91dd853ef7e3/0/637FD1BA3FED44454D6D7030247709D28DB3491A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:eb:3b:5d:cd:c6:d6:49:ca:df:f1:e1:7c:7d:3c:c9:2c:6a:
         1f:25:0e:0b:53:0c:33:4a:b0:de:14:58:5b:63:97:7f:64:34:
         67:9e:7f:ab:b6:1b:59:f6:9e:09:79:36:a2:a6:1d:12:ee:46:
         8d:95:64:ae:61:ed:e6:eb:60:4f:54:f4:86:75:f4:0d:55:86:
         b4:56:c5:3e:13:d4:d0:08:58:7f:02:e8:01:fe:9c:ef:f4:c4:
         74:b8:3b:f2:8c:b8:4d:0d:18:26:a0:e2:ea:4d:a0:dc:1f:ce:
         f7:d0:2d:33:29:63:24:f5:aa:ae:3d:59:87:f0:dd:2a:6d:da:
         30:01:1d:8f:c7:f8:f9:6e:6b:9f:6f:60:d1:9b:e6:28:fc:29:
         c7:0a:8e:a7:82:d1:7e:55:84:7e:66:6a:3a:33:96:7d:32:32:
         1f:b3:a2:c0:87:8e:8f:50:9c:d5:6d:c1:b5:81:e8:43:bd:3b:
         20:7f:fe:06:0e:1c:56:46:ee:41:9e:19:30:43:cd:cd:bb:27:
         4b:12:a8:f0:53:d3:87:af:94:91:1c:f0:49:7a:fe:ae:80:91:
         49:dc:c6:c5:72:09:b6:9f:c1:88:4f:d2:ba:25:89:78:09:67:
         93:db:a6:36:b1:b4:16:ec:32:97:46:b6:01:4c:a3:ec:db:92:
         fb:bb:e6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:31:29 2026 by rpki-client