This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
File:                     1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft (raw, json)
Hash identifier:          2Dro4zuqhrisnBgIaUDy71JeC3+Umno7bI19VoXJfO4=
Subject key identifier:   8A:93:E6:FA:6C:D1:CE:0E:0B:76:9C:B6:C3:AF:F2:BD:71:A8:AA:2B
Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77
Certificate issuer:       /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
Certificate serial:       5E91BF354DF50E1E0E15ACB2DE1E072046200466
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
Manifest number:          032F
Signing time:             Fri 26 Dec 2025 14:51:21 +0000
Manifest this update:     Fri 26 Dec 2025 14:46:21 +0000
Manifest next update:     Sat 27 Dec 2025 18:29:21 +0000
Files and hashes:         1: 326130663a383563313a3766343a3a2f34382d3438203d3e20323135323432.roa (hash: Sqqkf1ajVYDwVw2KSKZnr/tFVnDaWUIPFwaxuN/hzVk=)
                          2: 326130663a383563313a3730313a3a2f34382d3438203d3e20323033353131.roa (hash: Tk4tJu5bvTD5dR9NoM2pYvWxSXCc2/x84lQAlZZqzIs=)
                          3: 326130663a383563313a3766393a3a2f34382d3438203d3e20323135323432.roa (hash: ZhIUpj5tVPDcWiQ+3SY61ZE9RRhM2AJ7zchpU/cGNbk=)
                          4: 326130663a383563313a3766323a3a2f34382d3438203d3e20323135323432.roa (hash: sEiHLlrRoeeUa4AJCYCoXBnr24SESsEbTviJLVfMEys=)
                          5: 326130663a383563313a3766303a3a2f34382d3438203d3e20323033353131.roa (hash: F6VJOi3vW8ih7gU8rCzD7A7gIu39IHtVGsLlId1ILkM=)
                          6: 326130663a383563313a3766373a3a2f34382d3438203d3e20323135323432.roa (hash: polxJUQuuGvo82QFQvRtgLcGzpMrITqZaH9JMW5PByU=)
                          7: 326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa (hash: LIVxcxtvoeze2S46mPqGSXeLOCk0JK2W2QKOiQjUdZQ=)
                          8: 326130663a383563313a3766363a3a2f34382d3438203d3e20323135323432.roa (hash: sqekG79xztP1stI8964y8O+ILcqcxMBKS5vM2N9Yeq4=)
                          9: 326130663a383563313a3361323a3a2f34382d3438203d3e20323135323432.roa (hash: Gz7cU4OgmvLm8iR5sxlLJ8umD/eM2550DADKq1NdbVY=)
                          10: 326130663a383563313a3766313a3a2f34382d3438203d3e20323135313234.roa (hash: gq6me54MBqnqosS7iLksDmqAJs8yyfHwMXcZfgP1ijQ=)
                          11: 326130663a383563313a3766383a3a2f34382d3438203d3e20323135323432.roa (hash: 7RQ0gXCWkNwXJyLVMAjMT4ifOZKJ140AG/jnIia+kz4=)
                          12: 326130663a383563313a3766613a3a2f34382d3438203d3e20323135323432.roa (hash: M4zqLtdUHSAbU4GatESAUlsOQgWU2zpPTfy3/5JmOsg=)
                          13: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl (hash: 4YLTRIOToRtLhO+8jbJ6Hwaj1QZEl5GANEM/vxDx1dI=)
                          14: 326130663a383563313a3766353a3a2f34382d3438203d3e20323135373631.roa (hash: byQYxxoRiZMkalXd6RzudJTQa4Ua3fqFXKXTWNIB1fs=)
                          15: 326130663a383563313a3766313a3a2f34382d3438203d3e20323035343633.roa (hash: QtxzWf2JsAYGrlxsDmcE2oi7tthkDrQ3wvK+rgUOQxg=)
                          16: 326130663a383563313a3766623a3a2f34382d3438203d3e20323135323432.roa (hash: 6RxmKyitzJl4tEe1yv4vU5lxANHGsLOEl2k3HSP2ddo=)
                          17: 326130663a383563313a3766333a3a2f34382d3438203d3e20323035343633.roa (hash: YxuKH5bQA8YI1bwf7mCp5od3hfadKIetOc5KHPtspsc=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 27 Dec 2025 15:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:91:bf:35:4d:f5:0e:1e:0e:15:ac:b2:de:1e:07:20:46:20:04:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
        Validity
            Not Before: Dec 26 14:46:21 2025 GMT
            Not After : Dec 27 18:29:21 2025 GMT
        Subject: CN=8A93E6FA6CD1CE0E0B769CB6C3AFF2BD71A8AA2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f9:ea:e2:16:83:77:ce:8f:68:55:46:a9:c5:
                    20:a3:36:dc:dd:43:71:c3:b5:c8:b0:0c:e8:80:2a:
                    8e:b5:b8:0e:74:64:4b:b6:5a:07:af:56:12:2d:08:
                    9d:de:5d:b5:16:b4:9b:ff:5a:ac:9e:88:57:33:62:
                    f3:67:7e:3b:81:98:de:d3:a2:7f:df:f4:71:1d:d4:
                    9e:40:a2:e1:53:07:a9:26:36:0b:80:40:00:c1:69:
                    ad:60:3a:29:f0:f7:bd:6f:76:a0:22:11:55:21:08:
                    85:6a:e9:90:76:f1:7f:a1:68:99:6b:98:75:b1:e6:
                    9d:37:b3:e0:57:29:3b:a6:b8:fd:1a:c3:ef:20:f9:
                    8b:86:ae:aa:0e:a9:1c:63:05:42:86:2a:10:b6:87:
                    2a:6f:99:da:22:db:96:87:78:f3:cb:90:e0:16:02:
                    65:fb:92:46:a6:8e:7f:2d:66:f8:7c:94:fb:5e:56:
                    64:e1:c8:2e:39:5e:a4:26:f8:11:51:40:64:3e:17:
                    09:94:bf:f5:d9:b5:0d:f0:0f:e3:6b:2e:0a:84:95:
                    54:1b:01:82:7d:80:68:65:0f:1c:3e:c0:62:f9:a7:
                    3a:72:6f:c3:65:26:1c:29:31:46:28:7e:61:48:ee:
                    ca:58:de:71:01:49:d7:bb:55:20:70:65:fb:5e:6c:
                    dc:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:93:E6:FA:6C:D1:CE:0E:0B:76:9C:B6:C3:AF:F2:BD:71:A8:AA:2B
            X509v3 Authority Key Identifier:
                keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:3a:bd:b3:d0:01:2c:c3:9a:4f:84:ee:d6:70:6f:7c:03:34:
         b2:63:b2:cb:44:22:ef:0e:eb:94:65:95:a7:99:c8:a3:82:4a:
         8e:32:8a:cb:d5:68:8b:6c:12:4e:16:71:2b:dd:67:e6:1d:76:
         ce:4f:17:9e:a8:31:3f:30:38:e2:d5:3a:82:83:19:35:46:d2:
         47:77:0a:12:72:1c:11:32:ab:2d:52:a3:20:31:f2:86:b4:cd:
         12:01:47:09:d1:d2:b4:35:95:25:e3:c8:cb:66:42:47:0b:46:
         9b:bd:1d:ce:3a:2f:0c:b5:0f:20:63:87:83:93:e1:48:ad:ed:
         01:52:11:01:d2:d7:fd:0e:ff:c7:95:aa:ab:97:22:57:c0:54:
         c5:0e:88:91:0f:8b:b4:f4:5f:4f:41:56:f4:de:43:14:a9:33:
         20:9c:9d:e0:f2:84:9e:9a:d2:4b:4f:ea:2b:2f:b9:f3:bd:51:
         11:0e:a5:6d:dc:bb:c3:0d:23:ce:e3:fc:e7:04:64:3b:71:7c:
         63:c4:c8:3a:7f:ae:d5:08:9d:46:4e:b7:c9:f6:1e:01:57:ed:
         4a:ff:16:3d:fa:98:9c:e4:22:b2:7e:11:bd:11:b8:4a:44:9a:
         49:7c:e3:c5:b7:fc:95:94:56:b7:15:35:77:5f:ec:b0:da:62:
         6e:29:5b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 01:22:31 2025 by rpki-client