This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
File:                     1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft (raw, json)
Hash identifier:          tPVSF99wZneqOI/orzUqIea5bzGoRSljkkMg3Zyntpw=
Subject key identifier:   2F:39:81:57:32:38:12:98:80:21:59:F9:3B:0B:F1:AF:01:03:A8:9B
Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77
Certificate issuer:       /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
Certificate serial:       11A0E871CBF01935C38B020B69369FB7F259C387
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
Manifest number:          034D
Signing time:             Fri 16 Jan 2026 07:15:58 +0000
Manifest this update:     Fri 16 Jan 2026 07:10:58 +0000
Manifest next update:     Sat 17 Jan 2026 08:22:58 +0000
Files and hashes:         1: 326130663a383563313a3361323a3a2f34382d3438203d3e20323135323432.roa (hash: Gz7cU4OgmvLm8iR5sxlLJ8umD/eM2550DADKq1NdbVY=)
                          2: 326130663a383563313a3766303a3a2f34382d3438203d3e20323033353131.roa (hash: F6VJOi3vW8ih7gU8rCzD7A7gIu39IHtVGsLlId1ILkM=)
                          3: 326130663a383563313a3766343a3a2f34382d3438203d3e20323135323432.roa (hash: Sqqkf1ajVYDwVw2KSKZnr/tFVnDaWUIPFwaxuN/hzVk=)
                          4: 326130663a383563313a3766313a3a2f34382d3438203d3e20323035343633.roa (hash: QtxzWf2JsAYGrlxsDmcE2oi7tthkDrQ3wvK+rgUOQxg=)
                          5: 326130663a383563313a3766363a3a2f34382d3438203d3e20323135323432.roa (hash: sqekG79xztP1stI8964y8O+ILcqcxMBKS5vM2N9Yeq4=)
                          6: 326130663a383563313a3766393a3a2f34382d3438203d3e20323135323432.roa (hash: EaK1Skh4Um4RxiTzKfvwYuiUAcDo6dIwTSOhuUAUNQg=)
                          7: 326130663a383563313a3766623a3a2f34382d3438203d3e20323135323432.roa (hash: 9Ctv2mltThGL0RyhvpcjL2LOhkF9bTv3dQQCtaxW34I=)
                          8: 326130663a383563313a3730313a3a2f34382d3438203d3e20323033353131.roa (hash: Tk4tJu5bvTD5dR9NoM2pYvWxSXCc2/x84lQAlZZqzIs=)
                          9: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl (hash: /16C1V1ljCKxpMgOIGEjgZjvfN3et/3aQuH5Z7durMQ=)
                          10: 326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa (hash: LIVxcxtvoeze2S46mPqGSXeLOCk0JK2W2QKOiQjUdZQ=)
                          11: 326130663a383563313a3766323a3a2f34382d3438203d3e20323135323432.roa (hash: sEiHLlrRoeeUa4AJCYCoXBnr24SESsEbTviJLVfMEys=)
                          12: 326130663a383563313a3766333a3a2f34382d3438203d3e20323035343633.roa (hash: YxuKH5bQA8YI1bwf7mCp5od3hfadKIetOc5KHPtspsc=)
                          13: 326130663a383563313a3766613a3a2f34382d3438203d3e20323135323432.roa (hash: 6WOlcQZh4GVBhjXWW5Oz90ldzq2Au8/SbNiLZze2zNI=)
                          14: 326130663a383563313a3766383a3a2f34382d3438203d3e20323135323432.roa (hash: y9HbdtxnynZX2rM71oo4qhqJ/M/3l6e62X60vqkSXOc=)
                          15: 326130663a383563313a3766353a3a2f34382d3438203d3e20323135373631.roa (hash: byQYxxoRiZMkalXd6RzudJTQa4Ua3fqFXKXTWNIB1fs=)
                          16: 326130663a383563313a3766313a3a2f34382d3438203d3e20323135313234.roa (hash: gq6me54MBqnqosS7iLksDmqAJs8yyfHwMXcZfgP1ijQ=)
                          17: 326130663a383563313a3766373a3a2f34382d3438203d3e20323135323432.roa (hash: 4CHXdVvHjYpqAYcHIcibvCLK5qq3tc1C66o5EpxaLt8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 Jan 2026 08:22:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:a0:e8:71:cb:f0:19:35:c3:8b:02:0b:69:36:9f:b7:f2:59:c3:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
        Validity
            Not Before: Jan 16 07:10:58 2026 GMT
            Not After : Jan 17 08:22:58 2026 GMT
        Subject: CN=2F39815732381298802159F93B0BF1AF0103A89B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1b:31:9a:d0:25:cb:74:70:82:e7:b3:e6:a2:
                    ee:75:60:0c:a1:27:8a:85:ac:74:27:24:94:14:c8:
                    f2:9a:74:2b:00:f8:4b:fc:7e:b6:b5:6b:ce:37:4b:
                    4e:7b:a0:e9:c0:1b:8b:98:23:e0:64:ea:db:d8:59:
                    34:18:5b:a7:4a:f0:42:d9:cc:ee:fe:b4:83:68:d4:
                    1c:bc:27:0f:ac:30:13:2b:7a:9d:4b:68:f2:04:5d:
                    87:a6:ae:97:72:45:e9:aa:77:5c:66:65:58:54:18:
                    42:02:4a:ef:26:a5:d2:f9:cd:7b:61:9a:2b:07:13:
                    6c:54:06:63:f1:a4:6d:ef:b8:5a:11:79:97:1d:52:
                    d1:03:03:3b:8f:0e:16:dc:f7:7f:0e:f2:d8:3b:ab:
                    c3:be:ed:cf:44:87:fb:85:c1:68:84:9c:b4:1d:33:
                    0d:4c:e8:e5:7e:30:26:f2:8f:55:c7:99:de:18:65:
                    20:7f:85:e0:6b:65:3f:15:fc:43:60:b0:39:fe:40:
                    cd:75:d5:2f:3d:d9:f4:64:43:95:dd:ad:6a:fb:d8:
                    65:04:de:55:90:26:87:fd:e7:71:e8:84:cb:5c:46:
                    b0:a8:7d:80:b4:ac:c7:8a:55:0f:d7:f1:db:4c:b4:
                    6f:d6:e8:20:ab:96:64:f4:c8:cb:6e:48:10:41:65:
                    34:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:39:81:57:32:38:12:98:80:21:59:F9:3B:0B:F1:AF:01:03:A8:9B
            X509v3 Authority Key Identifier:
                keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:3f:b5:25:e3:f7:dc:2b:a5:56:f9:39:c0:f1:5d:90:49:14:
         fb:49:59:a3:9a:76:47:62:83:f7:1f:ae:11:6b:78:48:f1:d7:
         11:6b:e6:be:a5:4c:5f:84:9f:1e:44:58:18:a9:04:23:3d:3b:
         07:bb:94:41:8e:a2:2c:e7:04:79:cf:7a:a7:40:c2:b7:99:2d:
         db:d2:e0:a5:34:9d:ad:18:f3:e5:39:c6:66:46:e9:56:eb:a1:
         c8:63:d0:cf:0c:bd:f9:6f:43:48:4e:98:17:7e:64:51:22:c6:
         4f:51:74:ee:9a:e9:fb:79:a6:76:64:d9:0b:d9:70:83:6a:76:
         e9:96:f2:8e:3e:99:d9:33:74:79:2e:d9:6f:cf:1a:81:27:e9:
         c0:19:11:ed:a9:98:7a:37:ce:5e:5c:52:6d:0a:d5:0d:20:9b:
         0f:07:70:c1:e9:e8:e2:57:c9:f3:a9:22:12:f9:61:68:c8:29:
         8c:0a:b5:8c:05:1e:c2:27:a0:8f:c4:1d:e3:bb:da:0a:19:7c:
         0d:1f:78:83:7e:ec:ef:fa:d3:11:37:06:f2:fa:4c:2c:3e:87:
         f0:b4:81:f0:bb:87:95:19:eb:65:87:e7:1e:3a:91:27:9f:ed:
         23:5b:cf:3f:c1:6e:b8:9f:5b:db:80:98:bb:08:73:46:76:72:
         fd:23:ac:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 16 13:23:21 2026 by rpki-client