This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft
File:                     9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft (raw, json)
Hash identifier:          097gnnGm9eTnkAT4yuL1GAYIgLGUi6hvckqjajFgrk8=
Subject key identifier:   16:ED:56:2D:AA:FB:3F:91:93:C2:C4:F7:5A:22:62:A8:E9:30:38:50
Authority key identifier: 9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D
Certificate issuer:       /CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d
Certificate serial:       201BC3FF93BCEF4B611385CA28562E2D8E5D9755
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft
Manifest number:          051D
Signing time:             Wed 21 Jan 2026 11:06:34 +0000
Manifest this update:     Wed 21 Jan 2026 11:01:34 +0000
Manifest next update:     Thu 22 Jan 2026 12:32:34 +0000
Files and hashes:         1: 36322e3131322e3132382e302f32302d3234203d3e20313532313739.roa (hash: GCjCQc0vdu8E+NZi5emgx2vW0PKbTzGL5UYc+2R4voE=)
                          2: 9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl (hash: t+N+z7vnfpcymAzceWRwB8nbaM1y2YC5pevCbUemCy4=)
                          3: 326130303a316466303a3a2f33322d3332203d3e2035343634.roa (hash: hY/iIpaGanxmxatebFYi3ijTkZjHjUc/Iwjsijc0S+E=)
                          4: 3138352e322e3136322e302f32332d3234203d3e203531383437.roa (hash: breC5Ek41qDRBKS2wQZurpJCqHLgY68sHvSK/et8bfI=)
                          5: 3139352e3138342e39322e302f32332d3234203d3e203631333137.roa (hash: qGNft1uCzkGwuPJH7iDQ4xUhWrhNnduWexIhT+DgvI8=)
                          6: 3138352e322e3136322e302f32332d3234203d3e20323135323639.roa (hash: sEO5Q+LtE+juFIMx1yqrmSkIjuvpVFxY8R1aiQqtGzs=)
                          7: 3138352e322e3136322e302f32332d3234203d3e20323136303433.roa (hash: GiYpmPsNeJIM+tOFpoqBAp0iPcUDNpER8nLACmla4d4=)
                          8: 3139332e33372e3233362e302f32342d3234203d3e203631333137.roa (hash: qxlkfW/nLMV9I5WoI6HQ89q00naILT20Rguml63Zf0A=)
                          9: 36322e3131322e3134342e302f32302d3234203d3e203230333236.roa (hash: PvFG9BZ+YdbKPRfUC/0dM3w7V209DRWmI/bk8VoBnFU=)
                          10: 36322e3131322e3132382e302f32302d3234203d3e20313338393937.roa (hash: X+PLwzsRRQMgaM/TWKrSkseThdECGWKV7QbjrMlPn80=)
                          11: 3139352e3138342e39322e302f32332d3233203d3e2035343634.roa (hash: OKc3uZvr3kmY38TGv/j5cCd/d8TD6IBU2hGWJY9u+K0=)
                          12: 3139332e33372e3233362e302f32342d3234203d3e203239383032.roa (hash: NPxcG44HSvUhEjS0S2kkms3rMNVlot0JsRdIfylKbjg=)
                          13: 323030313a3637633a3333633a3a2f34382d3438203d3e2035343634.roa (hash: DuCHe81tO8TVOKBTNFQCS5fRuYDjbGZfxshPpJZXNzc=)
                          14: 36322e3131322e3134342e302f32302d3230203d3e203539363432.roa (hash: hNXCqst3dZC+Dp3skkO26cOwh1zWEwx2n+JeuoU1IgU=)
                          15: 3139342e302e3232392e302f32342d3234203d3e2035343634.roa (hash: oQj2no095+LyjZGzWOfw+sSJOW/7fRxpgUOPswu5nqM=)
                          16: 36322e3131322e3132382e302f32302d3234203d3e20323130353432.roa (hash: W95e9h2ypKBcN51G9gRI82wozQL8rXCLvGb2mHpv6bk=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 12:32:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:1b:c3:ff:93:bc:ef:4b:61:13:85:ca:28:56:2e:2d:8e:5d:97:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d
        Validity
            Not Before: Jan 21 11:01:34 2026 GMT
            Not After : Jan 22 12:32:34 2026 GMT
        Subject: CN=16ED562DAAFB3F9193C2C4F75A2262A8E9303850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:82:86:09:6b:1c:cd:cb:ef:34:3f:45:71:8d:
                    32:44:aa:c6:3b:6c:6a:be:24:cf:4d:8a:d9:49:0f:
                    ff:d7:07:d2:cb:48:33:aa:d6:2a:d1:0e:d7:e2:f6:
                    a4:42:a4:40:1a:38:e9:6b:c4:0b:90:4e:93:e8:c8:
                    85:b7:4f:db:3c:3c:51:8f:70:bb:94:51:3d:90:16:
                    bd:c0:d1:6e:98:0d:67:bf:a9:ff:57:33:37:4b:60:
                    ae:fe:b2:c6:df:df:63:b0:7f:58:ec:55:2a:a4:dd:
                    d5:d6:c6:65:9c:6c:ef:49:8e:7c:ad:37:73:f5:6f:
                    36:66:39:50:f8:f4:ee:e3:50:cb:34:85:84:c4:b7:
                    51:4e:5a:e1:91:df:af:b7:81:2a:fc:73:7b:e0:34:
                    52:f5:56:86:cb:0f:39:34:d4:6d:72:74:e8:6c:3a:
                    eb:77:a5:b7:fd:8a:91:24:3c:2e:21:47:14:07:93:
                    d6:ee:84:7f:ac:6e:cb:5f:23:ab:15:ba:8d:dc:28:
                    ce:57:f0:3b:f5:9b:d5:4e:3e:61:08:41:15:55:80:
                    f9:82:75:e1:56:24:e4:30:ab:87:c0:0e:f3:23:6f:
                    b1:05:1f:98:8b:57:80:ea:fa:65:a5:9c:23:84:35:
                    df:3e:c0:5f:c5:f2:20:64:68:b8:b0:9b:6f:41:39:
                    7b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:ED:56:2D:AA:FB:3F:91:93:C2:C4:F7:5A:22:62:A8:E9:30:38:50
            X509v3 Authority Key Identifier:
                keyid:9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:2e:e2:b8:6d:85:3e:a2:08:69:c7:13:5e:81:86:ed:2c:ae:
         66:21:ea:84:eb:fd:71:ab:18:7b:8f:60:0d:43:91:33:a0:8c:
         09:6c:92:2b:8f:ae:1d:1f:e1:e7:e7:64:9e:71:f3:bd:37:29:
         81:9e:c2:ed:12:8c:c4:4a:0f:61:c6:bd:17:5d:9f:e6:6e:23:
         dd:15:00:61:d2:5a:28:25:ef:95:3b:fd:66:95:93:77:f4:13:
         17:2f:7a:df:20:ae:cf:85:24:d1:70:20:1e:7c:66:f0:42:4b:
         e0:fd:8d:53:17:4a:28:c0:f1:ee:84:24:46:7e:62:1c:20:7c:
         64:14:fc:f9:9b:60:ec:6f:56:46:a6:57:c3:dd:e7:eb:df:d1:
         c1:2b:3b:e2:c8:ce:01:67:8d:cc:08:80:3f:9a:c0:56:16:60:
         2a:b4:39:f7:c3:df:dd:b3:64:9e:e7:55:ee:6e:25:1a:cc:0d:
         31:93:9c:73:ff:89:f0:2f:5a:ca:23:63:03:49:ff:bf:96:c4:
         ca:02:7f:44:27:25:50:c5:68:23:f2:70:64:e4:d7:87:8f:ef:
         8e:3f:2d:8c:79:a1:2c:74:ad:07:27:9f:41:8e:60:ad:c1:30:
         d9:3f:0e:bb:ae:ce:57:6f:b3:83:83:76:37:34:68:74:aa:45:
         c9:41:4e:fd
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUIBvD/5O870thE4XKKFYuLY5dl1UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWYwZDI0Yzg1NWVlZTAwZmU0YWJmMzkwM2M2ZThmY2M3
MDgzZWQ0ZDAeFw0yNjAxMjExMTAxMzRaFw0yNjAxMjIxMjMyMzRaMDMxMTAvBgNV
BAMTKDE2RUQ1NjJEQUFGQjNGOTE5M0MyQzRGNzVBMjI2MkE4RTkzMDM4NTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtgoYJaxzNy+80P0VxjTJEqsY7
bGq+JM9NitlJD//XB9LLSDOq1irRDtfi9qRCpEAaOOlrxAuQTpPoyIW3T9s8PFGP
cLuUUT2QFr3A0W6YDWe/qf9XMzdLYK7+ssbf32Owf1jsVSqk3dXWxmWcbO9Jjnyt
N3P1bzZmOVD49O7jUMs0hYTEt1FOWuGR36+3gSr8c3vgNFL1VobLDzk01G1ydOhs
Out3pbf9ipEkPC4hRxQHk9buhH+sbstfI6sVuo3cKM5X8Dv1m9VOPmEIQRVVgPmC
deFWJOQwq4fADvMjb7EFH5iLV4Dq+mWlnCOENd8+wF/F8iBkaLiwm29BOXtZAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUFu1WLar7P5GTwsT3WiJiqOkwOFAwHwYDVR0j
BBgwFoAUnw0kyFXu4A/kq/OQPG6PzHCD7U0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWYzMTc2OGQtNDJiMS00ZTkyLWI4M2YtYmVmN2VlMDE3
ODEzLzAvOUYwRDI0Qzg1NUVFRTAwRkU0QUJGMzkwM0M2RThGQ0M3MDgzRUQ0RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL253MGt5Rlh1NEFfa3FfT1FQRzZQekhD
RDdVMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hZjMxNzY4ZC00
MmIxLTRlOTItYjgzZi1iZWY3ZWUwMTc4MTMvMC85RjBEMjRDODU1RUVFMDBGRTRB
QkYzOTAzQzZFOEZDQzcwODNFRDRELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiS7iuG2FPqIIaccTXoGG
7SyuZiHqhOv9casYe49gDUORM6CMCWySK4+uHR/h5+dknnHzvTcpgZ7C7RKMxEoP
Yca9F12f5m4j3RUAYdJaKCXvlTv9ZpWTd/QTFy963yCuz4Uk0XAgHnxm8EJL4P2N
UxdKKMDx7oQkRn5iHCB8ZBT8+Ztg7G9WRqZXw93n69/RwSs74sjOAWeNzAiAP5rA
VhZgKrQ598Pf3bNknudV7m4lGswNMZOcc/+J8C9ayiNjA0n/v5bEygJ/RCclUMVo
I/JwZOTXh4/vjj8tjHmhLHStByefQY5grcEw2T8Ou67OV2+zg4N2NzRodKpFyUFO
/Q==
-----END CERTIFICATE-----
Generated at Wed Jan 21 21:29:31 2026 by rpki-client