This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft
File:                     D36546790928F44FF74C564231471FA1D8D2A97B.mft (raw, json)
Hash identifier:          k+G/682vsNcI1twlpxosLWnlaNY6au/qZb4ToRBcMhc=
Subject key identifier:   4E:C2:97:61:B9:83:F7:82:93:BF:CB:56:B6:58:C9:70:75:86:AB:18
Authority key identifier: D3:65:46:79:09:28:F4:4F:F7:4C:56:42:31:47:1F:A1:D8:D2:A9:7B
Certificate issuer:       /CN=D36546790928F44FF74C564231471FA1D8D2A97B
Certificate serial:       545A46A0BB9A52C91B30F446C210E52A783F6BF8
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D36546790928F44FF74C564231471FA1D8D2A97B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft
Manifest number:          5F
Signing time:             Sun 18 Jan 2026 10:01:29 +0000
Manifest this update:     Sun 18 Jan 2026 09:56:29 +0000
Manifest next update:     Mon 19 Jan 2026 10:05:29 +0000
Files and hashes:         1: 326130363a313238333a626434303a3a2f34322d313238203d3e20323130373936.roa (hash: Uw0Yd63FHiLbrVWXi+u/Khr5x1SAZF46bRDWajH7ZJ4=)
                          2: D36546790928F44FF74C564231471FA1D8D2A97B.crl (hash: y99ZAiX5uczCJ1FAsZmOqe/w7Y8OhaN5Snyq4W9tFRw=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D36546790928F44FF74C564231471FA1D8D2A97B.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 06:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:5a:46:a0:bb:9a:52:c9:1b:30:f4:46:c2:10:e5:2a:78:3f:6b:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D36546790928F44FF74C564231471FA1D8D2A97B
        Validity
            Not Before: Jan 18 09:56:29 2026 GMT
            Not After : Jan 19 10:05:29 2026 GMT
        Subject: CN=4EC29761B983F78293BFCB56B658C9707586AB18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4b:6d:d5:4e:43:d3:48:88:04:2e:3c:03:78:
                    6b:db:57:a5:d4:8b:d8:a8:24:ab:f2:61:e2:34:4c:
                    2a:ce:f3:60:1d:b2:fa:83:f5:01:32:7b:af:95:19:
                    77:48:96:ea:fd:49:d5:05:7b:13:0e:fd:6f:de:b6:
                    cd:1e:3a:6b:02:7f:83:36:07:08:0c:78:1b:a9:11:
                    81:ae:f2:69:03:be:fe:74:e8:55:e2:4b:f6:e9:7b:
                    0f:fc:f4:ba:68:2d:49:32:cb:08:a2:16:3d:e9:25:
                    92:8d:d2:57:c4:ba:48:80:3f:ff:36:cb:47:99:4c:
                    1f:95:8b:34:1f:79:e9:14:f2:4b:8f:4c:98:90:72:
                    65:43:27:50:9c:21:7c:e5:aa:b3:70:78:98:1d:73:
                    50:be:21:ef:0e:12:5b:82:84:00:64:23:47:c7:ef:
                    22:dc:f1:b9:15:f6:c0:81:73:c0:0c:c9:56:72:0f:
                    1a:47:79:0d:ec:ae:db:41:44:6a:f9:02:6c:e8:ed:
                    26:da:78:f0:2e:f8:6b:42:1f:bf:8b:2b:fc:cb:bc:
                    62:2b:af:b7:ba:d6:79:d7:ce:cb:9a:b2:0c:e5:fa:
                    0f:9f:80:c2:22:ec:67:5c:90:c1:52:0b:48:58:ef:
                    89:51:fe:6c:2d:66:08:c7:3f:44:f4:d4:d1:83:eb:
                    5f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:C2:97:61:B9:83:F7:82:93:BF:CB:56:B6:58:C9:70:75:86:AB:18
            X509v3 Authority Key Identifier:
                keyid:D3:65:46:79:09:28:F4:4F:F7:4C:56:42:31:47:1F:A1:D8:D2:A9:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D36546790928F44FF74C564231471FA1D8D2A97B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/1/D36546790928F44FF74C564231471FA1D8D2A97B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:d9:25:11:bf:bc:a4:e9:c7:1e:52:e9:88:7e:30:81:dd:3c:
         31:dc:62:5a:b4:ae:ec:8d:d5:97:96:16:3a:ad:5f:d3:b1:b6:
         ef:1e:25:16:2d:06:1f:dd:24:16:03:e4:f5:77:04:dc:3f:d8:
         27:c7:ae:fb:cf:8e:f9:1c:02:c5:ac:56:60:27:24:ce:68:fd:
         f1:46:31:4c:e9:03:20:07:95:e0:3b:67:2e:4c:ea:da:a2:8f:
         77:79:b4:06:b1:7d:aa:bc:93:98:c7:0a:13:d4:8d:b7:6c:8e:
         8d:54:e3:5b:3b:93:a9:10:dc:0a:e5:e2:c5:a2:ab:f5:cd:14:
         08:a7:1f:63:8e:17:6a:74:e5:6a:4b:c0:1e:64:3f:df:98:7a:
         aa:3f:4f:f5:6b:7b:a0:47:5d:61:57:43:b6:02:48:f9:9b:67:
         88:3a:f1:03:9f:cc:99:2c:97:74:b2:de:59:b3:b3:1c:d3:af:
         80:e8:57:57:d5:57:3a:f4:67:51:6e:ec:9d:52:7c:59:23:60:
         57:88:98:d1:18:a5:13:6d:f5:5c:f8:09:bd:b9:7e:88:63:de:
         fd:dc:be:11:20:0c:d1:d6:7c:cc:cb:7e:25:f3:5a:bd:fc:ea:
         13:36:9a:fe:06:77:8c:f2:11:85:c3:56:f4:9d:77:cb:b8:46:
         05:d8:31:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 14:22:25 2026 by rpki-client