This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
File:                     1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft (raw, json)
Hash identifier:          oaB5gHotNP4DPJnKAHcBcvtlUXu5EYJ3qoi/ghHRmbE=
Subject key identifier:   29:46:BF:39:93:77:5E:59:12:1B:9C:80:78:D0:63:A4:6E:3E:71:DA
Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77
Certificate issuer:       /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
Certificate serial:       2D0F83A2D16B9C5440CFA19552B224B9A6FA6F43
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
Manifest number:          0368
Signing time:             Wed 04 Feb 2026 21:31:15 +0000
Manifest this update:     Wed 04 Feb 2026 21:26:15 +0000
Manifest next update:     Thu 05 Feb 2026 22:31:15 +0000
Files and hashes:         1: 326130663a383563313a3766363a3a2f34382d3438203d3e20323135323432.roa (hash: sqekG79xztP1stI8964y8O+ILcqcxMBKS5vM2N9Yeq4=)
                          2: 326130663a383563313a3766373a3a2f34382d3438203d3e20323135323432.roa (hash: 4CHXdVvHjYpqAYcHIcibvCLK5qq3tc1C66o5EpxaLt8=)
                          3: 326130663a383563313a3361323a3a2f34382d3438203d3e20323135323432.roa (hash: Gz7cU4OgmvLm8iR5sxlLJ8umD/eM2550DADKq1NdbVY=)
                          4: 326130663a383563313a3766353a3a2f34382d3438203d3e20323135373631.roa (hash: byQYxxoRiZMkalXd6RzudJTQa4Ua3fqFXKXTWNIB1fs=)
                          5: 326130663a383563313a3766333a3a2f34382d3438203d3e20323035343633.roa (hash: YxuKH5bQA8YI1bwf7mCp5od3hfadKIetOc5KHPtspsc=)
                          6: 326130663a383563313a3766623a3a2f34382d3438203d3e20323135323432.roa (hash: 9Ctv2mltThGL0RyhvpcjL2LOhkF9bTv3dQQCtaxW34I=)
                          7: 326130663a383563313a3730313a3a2f34382d3438203d3e20323033353131.roa (hash: TDbI3KuFnMQ5wsBjn/X3RTmHb+sLgd0O0TV6P13Cktw=)
                          8: 326130663a383563313a3766313a3a2f34382d3438203d3e20323035343633.roa (hash: QtxzWf2JsAYGrlxsDmcE2oi7tthkDrQ3wvK+rgUOQxg=)
                          9: 326130663a383563313a3766343a3a2f34382d3438203d3e20323135323432.roa (hash: Sqqkf1ajVYDwVw2KSKZnr/tFVnDaWUIPFwaxuN/hzVk=)
                          10: 326130663a383563313a3766383a3a2f34382d3438203d3e20323135323432.roa (hash: y9HbdtxnynZX2rM71oo4qhqJ/M/3l6e62X60vqkSXOc=)
                          11: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl (hash: x6sI+i26W8cg2Xoz4ifxePAYBXKoxewIXg/c7BmUj3Q=)
                          12: 326130663a383563313a3766393a3a2f34382d3438203d3e20323135323432.roa (hash: EaK1Skh4Um4RxiTzKfvwYuiUAcDo6dIwTSOhuUAUNQg=)
                          13: 326130663a383563313a3766303a3a2f34382d3438203d3e20323033353131.roa (hash: vr5fx5Kig3QfzcDYWCbyXsNAdyvUkYtnxSYtv0y5hiM=)
                          14: 326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa (hash: LIVxcxtvoeze2S46mPqGSXeLOCk0JK2W2QKOiQjUdZQ=)
                          15: 326130663a383563313a3766613a3a2f34382d3438203d3e20323135323432.roa (hash: 6WOlcQZh4GVBhjXWW5Oz90ldzq2Au8/SbNiLZze2zNI=)
                          16: 326130663a383563313a3766313a3a2f34382d3438203d3e20323135313234.roa (hash: gq6me54MBqnqosS7iLksDmqAJs8yyfHwMXcZfgP1ijQ=)
                          17: 326130663a383563313a3766323a3a2f34382d3438203d3e20323135323432.roa (hash: sEiHLlrRoeeUa4AJCYCoXBnr24SESsEbTviJLVfMEys=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Feb 2026 22:31:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:0f:83:a2:d1:6b:9c:54:40:cf:a1:95:52:b2:24:b9:a6:fa:6f:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
        Validity
            Not Before: Feb  4 21:26:15 2026 GMT
            Not After : Feb  5 22:31:15 2026 GMT
        Subject: CN=2946BF3993775E59121B9C8078D063A46E3E71DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:03:6a:ec:e9:e9:68:e6:86:96:7c:b1:14:43:
                    b0:2d:bc:5d:a6:1a:70:5c:8f:73:79:e5:ec:53:0a:
                    5b:07:a4:13:fe:87:76:f7:b0:37:7c:ef:9a:1d:ab:
                    a3:66:37:d6:fc:15:ea:0f:f3:cb:a3:a1:a5:cd:27:
                    31:a4:01:de:54:7c:ee:00:b9:0a:66:1a:c4:12:f4:
                    3c:f7:a7:18:cb:e4:ee:39:bf:9d:d8:89:7d:85:4f:
                    31:d3:30:21:fe:b0:d4:7e:49:68:2c:34:99:1d:93:
                    fb:37:df:c2:ab:1b:aa:4c:80:f6:61:43:0d:6c:21:
                    6b:c4:dd:f6:f5:b2:65:11:6b:80:9e:25:f5:43:77:
                    65:80:18:bc:1b:6a:25:d4:95:04:5f:c8:bb:4e:3f:
                    32:45:29:d7:b8:0c:e7:06:19:bd:fc:00:5e:d1:1c:
                    a3:ff:70:e4:5b:32:26:45:d7:42:b8:98:50:cc:2a:
                    e3:34:f3:8c:b9:a9:d0:50:ad:a3:a4:a7:fc:c4:22:
                    8c:a6:dc:3e:b7:ac:2a:ee:f4:bd:17:00:7a:05:ce:
                    d4:c4:59:2a:fa:e0:45:99:5f:c5:f8:97:ae:93:ac:
                    d5:95:90:4e:d9:5c:6a:73:d1:a3:6d:58:7c:7a:98:
                    bc:9e:e4:11:5b:e8:14:8e:b5:04:b0:a0:e9:3c:4f:
                    ed:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:46:BF:39:93:77:5E:59:12:1B:9C:80:78:D0:63:A4:6E:3E:71:DA
            X509v3 Authority Key Identifier:
                keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:58:42:9e:03:9b:17:f4:af:1c:6f:1a:36:0c:a6:6d:9b:33:
         bd:a4:b6:cd:f8:14:d4:ac:19:8b:b3:00:91:ed:17:c9:90:93:
         3b:b9:08:4b:5a:73:40:fe:79:83:90:49:9d:5c:5f:47:9e:4b:
         36:e9:34:2a:2a:51:71:a3:74:35:66:4f:4c:e1:35:91:08:27:
         0f:c8:22:31:8b:47:ae:be:7f:ef:cf:fe:d2:d0:cb:f2:76:b7:
         ff:69:80:af:da:81:fc:2f:1e:f8:02:e7:37:ec:62:c4:e5:e0:
         a2:99:61:8d:f3:26:50:5b:56:8f:65:d5:f8:c7:9b:95:43:5c:
         06:1a:86:33:1c:43:73:e4:d0:97:c1:f8:f0:85:72:23:1c:90:
         67:ab:15:d6:6d:3b:91:3b:fa:55:78:fc:21:be:ea:bb:19:28:
         83:82:cc:cf:91:39:3a:b6:24:96:47:5d:13:8c:4a:b6:0d:b7:
         ec:a8:a6:51:60:cb:d5:65:ad:b8:44:94:fb:ef:7e:30:53:d1:
         02:f3:01:cd:e4:b2:30:ba:5b:4e:31:22:0a:9e:2c:35:a3:5f:
         7f:29:3b:16:a0:2f:52:29:1f:70:94:f2:45:07:42:29:bb:0d:
         21:97:d7:d8:f8:03:c6:d8:fd:77:c6:b4:c9:d2:66:70:c0:f1:
         82:8c:43:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 5 06:19:39 2026 by rpki-client