This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
File:                     5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft (raw, json)
Hash identifier:          A+ICcYlzahl9pu8KHnE4sTJ8o+U774IK8Nz2bqGuJBQ=
Subject key identifier:   2D:45:A0:92:D1:06:B3:5D:48:1B:8D:44:4D:C9:A4:10:3C:97:88:7D
Authority key identifier: 5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68
Certificate issuer:       /CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
Certificate serial:       3FDCB5A3D2DBCBD05699ADE1A422D6E33D8E28CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
Manifest number:          0213
Signing time:             Sun 01 Feb 2026 17:47:01 +0000
Manifest this update:     Sun 01 Feb 2026 17:42:01 +0000
Manifest next update:     Mon 02 Feb 2026 19:09:01 +0000
Files and hashes:         1: 326131343a333863303a313a3a2f34382d3438203d3e20333936303634.roa (hash: hT2vS1KxZCIrrbIeX36lXo5PB7z3bFiXrMszQcpSghE=)
                          2: 3139342e3131372e36392e302f32342d3234203d3e20333936303634.roa (hash: uPzNQdfiTlC1R9B5J33ZDfQAHE+DMHweR/VNt7ogg2k=)
                          3: 326131343a333863303a343a3a2f34382d3438203d3e20333936303634.roa (hash: c/SHLHo2u//fub298bFboq1gpoyciy9cj/euJmiNfvQ=)
                          4: 326131343a333863303a3130343a3a2f34382d3438203d3e20323135323438.roa (hash: QZeJi0O4ini6QNF1syA5gZ8HehGzsGo0INWd9T4WodA=)
                          5: 3130332e3134392e3136382e302f32342d3234203d3e20323135323438.roa (hash: RPFyh+9f4VeLKwhSKFsibkww2V1WrimAJUdSq1OTL10=)
                          6: 326131343a333863303a313a3a2f34382d3438203d3e20323135323438.roa (hash: hYvWm7RFlZS1l2LX8NsvpkNf0MsxvPiQn7slmgwssck=)
                          7: 3139342e3131372e36392e302f32342d3234203d3e20323135323438.roa (hash: EqbKHazBpNo/bx4pclFyuqidomfYzdI+MjCRoDSagrM=)
                          8: 326131343a333863303a323a3a2f34382d3438203d3e20333936303634.roa (hash: b3AvMY9Sl1B0jVsJOJivHhqGlksNlQ/JV9muHKrGSGQ=)
                          9: 326131343a333863303a323a3a2f34382d3438203d3e20323135323438.roa (hash: e6DNGKmUmYh4KhA4h67tF7nM55oym+8oQ84yYdEmy64=)
                          10: AS215248.asa (hash: hK0Cl1hoR91yj4hhch1arYrJqQ+uSCR61Ha0eKoO6gs=)
                          11: 3130332e3134392e3136382e302f32342d3234203d3e20333936303634.roa (hash: +yFHbjFdcl3OkH9bM82B/wbQvRBlEBGqJ0LTOyulC0Q=)
                          12: 5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl (hash: zWS3DQ5FFbhO/H0a1DhFh30w2WM7L3SiVTWUfaevhKA=)
                          13: 326131343a333863303a343a3a2f34382d3438203d3e20323135323438.roa (hash: WXZZhktlKD9T2nrBzZ0hLrkDPYKvkgJO3m6d5vMac1U=)
                          14: 326131343a333863303a3a2f32392d3239203d3e20333936303634.roa (hash: izH2bRAdoHB65ZOfP1RgM/881EkkTABDPPywFSiQ9f4=)
                          15: 326131343a333863303a3130343a3a2f34382d3438203d3e20333936303634.roa (hash: uQC+ycpajw6LG1MwmEH2bQGDaDjqft9mY/Ula5mB0Rs=)
                          16: 326131343a333863303a333a3a2f34382d3438203d3e20333936303634.roa (hash: RQOZ0GeuB2hc8N96mezhBhXKeCrh7X17R4TSsdmASyE=)
                          17: 3130332e3134392e3136392e302f32342d3234203d3e203630373831.roa (hash: M972A2zux5bp2vtM/yV/ifXNBlJMRB7g6qDIDzpgNsU=)
                          18: 326131343a333863303a333a3a2f34382d3438203d3e20323135323438.roa (hash: rQvL6z8yuqUS7v24/Ra9en3S8KmIgkMtv1rcn8o1sfA=)
                          19: 326131343a333863303a3a2f32392d3239203d3e20323135323438.roa (hash: bqsY4FQ10AI29Vxl2YGsNnTvNpFvBsuO3ChiwTJi6QE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:dc:b5:a3:d2:db:cb:d0:56:99:ad:e1:a4:22:d6:e3:3d:8e:28:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cdc04bb23eaa4cecc791dfe04bb028b7e797b68
        Validity
            Not Before: Feb  1 17:42:01 2026 GMT
            Not After : Feb  2 19:09:01 2026 GMT
        Subject: CN=2D45A092D106B35D481B8D444DC9A4103C97887D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:3f:25:76:39:95:cd:85:76:d1:b9:7c:d0:50:
                    32:2f:55:b7:9d:3f:aa:ed:6b:4b:48:18:57:81:72:
                    d7:13:6c:b5:56:b0:65:f0:c3:8f:f3:45:68:c7:25:
                    ae:80:f1:6a:01:48:4d:3c:6e:66:ce:35:a5:dc:ed:
                    e5:11:e1:b1:d0:ec:f9:9b:e7:6b:64:6a:93:1e:c9:
                    8c:9d:24:a5:86:5c:3c:a1:ac:e8:31:05:c5:f2:57:
                    b0:7e:d7:3f:34:ed:a8:ce:8c:39:f4:73:39:ea:5f:
                    f9:f1:cb:7c:eb:f1:f7:99:be:62:54:80:6f:c3:f8:
                    6a:81:eb:fe:f6:31:a4:60:72:ca:0f:15:de:b0:60:
                    79:f9:97:13:3a:53:9c:eb:cc:dc:65:4d:7b:c7:5c:
                    a1:0c:2e:22:c0:6d:f8:d3:ce:49:57:83:b4:4f:81:
                    63:38:8f:1b:a3:b6:87:fc:b0:08:35:28:72:98:4b:
                    ac:3f:fe:e8:9f:7b:30:fd:75:a9:e8:96:03:4b:e1:
                    b9:17:39:7d:1a:44:76:cb:03:b5:03:47:ff:56:34:
                    7a:bd:03:63:4f:20:49:b5:0c:90:ba:e8:65:75:82:
                    ca:81:3c:20:bd:d7:0f:e4:8d:46:05:ba:0a:f8:e0:
                    83:df:5d:1e:60:e6:b2:d0:46:01:bf:bc:01:8e:15:
                    f8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:45:A0:92:D1:06:B3:5D:48:1B:8D:44:4D:C9:A4:10:3C:97:88:7D
            X509v3 Authority Key Identifier:
                keyid:5C:DC:04:BB:23:EA:A4:CE:CC:79:1D:FE:04:BB:02:8B:7E:79:7B:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNwEuyPqpM7MeR3-BLsCi355e2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd19db20-4653-48d4-8fc4-580d1369b7c4/0/5CDC04BB23EAA4CECC791DFE04BB028B7E797B68.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:a8:2f:c7:0d:56:ef:eb:47:df:4a:e5:e6:2c:30:19:ed:d6:
         38:0b:2c:e4:f9:e1:4b:a1:11:57:9f:82:6d:4a:21:3c:c8:68:
         ed:66:7e:f0:76:db:e2:5b:82:5a:ee:43:52:4e:5a:6a:78:af:
         30:4b:7f:46:df:8b:b3:be:c4:35:0d:37:f0:33:26:fb:8f:95:
         4a:ed:a9:21:47:ba:4e:97:fd:a7:88:5a:4d:72:08:65:59:48:
         ff:84:fa:b8:d6:20:05:66:f5:07:e4:d9:f3:6f:0b:6c:30:1c:
         cc:47:7a:d7:52:3c:e9:b2:af:39:1b:13:25:3f:19:48:8d:fd:
         3e:f1:ca:36:16:aa:69:24:ac:01:c7:e0:d8:30:c5:23:a9:8f:
         86:92:80:2a:48:fd:61:87:50:a7:4e:db:a1:bf:13:06:21:89:
         36:de:37:fb:fc:b9:a0:f7:21:0a:1b:de:74:9f:89:25:40:0f:
         96:ed:16:e8:ff:bb:35:c6:5e:80:d6:38:70:92:03:fd:eb:d6:
         ed:9b:ca:56:16:65:fa:ff:1f:ed:6a:70:ff:54:b0:7f:f0:0a:
         2e:25:8a:80:3c:35:1d:9d:5b:87:ca:70:50:fe:de:45:67:61:
         73:5a:df:3b:68:0a:33:92:c6:57:76:85:46:6b:82:a1:61:0c:
         e6:04:36:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:48:35 2026 by rpki-client