This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
File:                     1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft (raw, json)
Hash identifier:          fKTQAIBXhvHl1fRvBADxmpNwW+vImvApWLhAaQ+Ew+k=
Subject key identifier:   CB:B4:C1:CF:B9:0F:01:91:4A:F4:12:A1:B9:CA:EA:46:A8:AA:0D:27
Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77
Certificate issuer:       /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
Certificate serial:       029879C98F0E2020D153A03C48956754265414FA
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
Manifest number:          0353
Signing time:             Tue 20 Jan 2026 14:51:00 +0000
Manifest this update:     Tue 20 Jan 2026 14:46:00 +0000
Manifest next update:     Wed 21 Jan 2026 15:36:00 +0000
Files and hashes:         1: 326130663a383563313a3361323a3a2f34382d3438203d3e20323135323432.roa (hash: Gz7cU4OgmvLm8iR5sxlLJ8umD/eM2550DADKq1NdbVY=)
                          2: 326130663a383563313a3766343a3a2f34382d3438203d3e20323135323432.roa (hash: Sqqkf1ajVYDwVw2KSKZnr/tFVnDaWUIPFwaxuN/hzVk=)
                          3: 326130663a383563313a3766613a3a2f34382d3438203d3e20323135323432.roa (hash: 6WOlcQZh4GVBhjXWW5Oz90ldzq2Au8/SbNiLZze2zNI=)
                          4: 326130663a383563313a3766353a3a2f34382d3438203d3e20323135373631.roa (hash: byQYxxoRiZMkalXd6RzudJTQa4Ua3fqFXKXTWNIB1fs=)
                          5: 326130663a383563313a3766363a3a2f34382d3438203d3e20323135323432.roa (hash: sqekG79xztP1stI8964y8O+ILcqcxMBKS5vM2N9Yeq4=)
                          6: 326130663a383563313a3766303a3a2f34382d3438203d3e20323033353131.roa (hash: F6VJOi3vW8ih7gU8rCzD7A7gIu39IHtVGsLlId1ILkM=)
                          7: 326130663a383563313a3766323a3a2f34382d3438203d3e20323135323432.roa (hash: sEiHLlrRoeeUa4AJCYCoXBnr24SESsEbTviJLVfMEys=)
                          8: 326130663a383563313a3730313a3a2f34382d3438203d3e20323033353131.roa (hash: Tk4tJu5bvTD5dR9NoM2pYvWxSXCc2/x84lQAlZZqzIs=)
                          9: 326130663a383563313a3766623a3a2f34382d3438203d3e20323135323432.roa (hash: 9Ctv2mltThGL0RyhvpcjL2LOhkF9bTv3dQQCtaxW34I=)
                          10: 326130663a383563313a3766373a3a2f34382d3438203d3e20323135323432.roa (hash: 4CHXdVvHjYpqAYcHIcibvCLK5qq3tc1C66o5EpxaLt8=)
                          11: 326130663a383563313a3766393a3a2f34382d3438203d3e20323135323432.roa (hash: EaK1Skh4Um4RxiTzKfvwYuiUAcDo6dIwTSOhuUAUNQg=)
                          12: 326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa (hash: LIVxcxtvoeze2S46mPqGSXeLOCk0JK2W2QKOiQjUdZQ=)
                          13: 326130663a383563313a3766383a3a2f34382d3438203d3e20323135323432.roa (hash: y9HbdtxnynZX2rM71oo4qhqJ/M/3l6e62X60vqkSXOc=)
                          14: 326130663a383563313a3766313a3a2f34382d3438203d3e20323135313234.roa (hash: gq6me54MBqnqosS7iLksDmqAJs8yyfHwMXcZfgP1ijQ=)
                          15: 326130663a383563313a3766313a3a2f34382d3438203d3e20323035343633.roa (hash: QtxzWf2JsAYGrlxsDmcE2oi7tthkDrQ3wvK+rgUOQxg=)
                          16: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl (hash: EUWOU+p87laXKCSiBNusb0gFOk4jaYY+pTQbLl4/Ogg=)
                          17: 326130663a383563313a3766333a3a2f34382d3438203d3e20323035343633.roa (hash: YxuKH5bQA8YI1bwf7mCp5od3hfadKIetOc5KHPtspsc=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Jan 2026 15:30:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:98:79:c9:8f:0e:20:20:d1:53:a0:3c:48:95:67:54:26:54:14:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
        Validity
            Not Before: Jan 20 14:46:00 2026 GMT
            Not After : Jan 21 15:36:00 2026 GMT
        Subject: CN=CBB4C1CFB90F01914AF412A1B9CAEA46A8AA0D27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:30:8b:a7:48:82:88:5c:c3:0f:52:c3:20:12:
                    b6:b2:c2:66:a0:ef:83:e7:fd:c8:21:86:d5:e0:a1:
                    2e:b1:93:26:2c:c2:92:d3:7e:42:ae:19:b5:6f:f0:
                    02:6b:22:9a:4f:13:2d:31:ab:c0:e7:33:3f:98:39:
                    dc:24:44:97:28:96:7e:26:be:c7:b9:bd:97:ce:e9:
                    a2:fb:4d:bc:7a:02:36:df:76:a1:81:ea:55:fa:81:
                    e3:27:3a:c6:3e:6e:e6:45:9b:01:74:d2:d5:36:f3:
                    3b:72:2f:05:1e:df:0f:ad:61:8c:5e:77:de:f8:7a:
                    5e:5a:a9:1a:3f:0c:42:45:8c:5c:0c:0f:a7:b8:87:
                    12:be:d4:ae:4a:e4:e2:38:45:4a:b8:9f:a4:b2:00:
                    23:30:41:4c:53:77:f1:2a:4a:8d:3f:49:53:6c:83:
                    4e:a3:10:cf:5e:00:4c:e4:23:a5:92:d6:62:a4:9e:
                    53:d5:4e:6f:67:09:82:1e:7c:f0:f6:5d:7f:bc:d9:
                    2a:99:37:de:14:7c:72:55:15:20:ce:36:7d:b9:b9:
                    46:1d:ea:9f:3d:0b:ef:17:a3:48:c2:49:4d:7e:f5:
                    2c:56:f5:3f:8f:a6:00:54:8a:8b:42:99:4e:25:89:
                    7c:eb:93:2b:f2:a4:2b:58:6c:29:bc:d9:cd:11:2d:
                    9f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:B4:C1:CF:B9:0F:01:91:4A:F4:12:A1:B9:CA:EA:46:A8:AA:0D:27
            X509v3 Authority Key Identifier:
                keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:72:b2:1f:61:00:3a:56:54:16:52:f9:fa:80:2e:71:9c:9c:
         7f:35:c9:44:f9:a7:47:a4:12:25:4a:74:bd:a1:b5:0c:65:4b:
         4f:e8:77:cc:79:9f:67:f0:cc:60:1b:a4:1d:e3:50:8b:9a:dd:
         93:c8:7d:c9:af:40:59:fb:05:15:15:b4:dd:77:41:b3:44:0f:
         d1:76:bd:6c:1f:37:ca:40:b5:43:7b:3d:8a:c2:cc:b3:6c:4b:
         38:14:75:14:d5:ac:2e:7e:e3:9b:57:d6:34:4e:61:99:69:c9:
         ce:87:56:24:1e:06:bd:81:50:4a:da:0b:b6:6d:65:fa:ef:9d:
         f3:67:3e:16:72:ce:ea:45:7b:62:38:b5:b6:14:40:60:f8:bc:
         06:ba:3a:b3:2a:fd:5d:50:37:c8:91:e6:6b:a6:e1:38:3b:15:
         62:b4:92:85:09:69:c9:f9:78:02:0b:cc:d4:65:c7:cf:0a:f2:
         ab:95:a1:69:b6:78:2d:7b:8e:6a:9b:ba:a0:7e:8a:d0:79:05:
         18:f5:db:27:86:f7:93:8c:e4:15:27:27:67:57:e1:fd:1b:63:
         ea:89:17:cf:9c:22:04:8f:3c:83:c1:cd:55:d8:4c:b2:64:a0:
         dd:87:d0:e2:ff:7b:c4:7e:ae:4c:2a:b4:14:79:2f:5f:3a:1d:
         14:c1:23:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 18:00:47 2026 by rpki-client