This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
File:                     1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft (raw, json)
Hash identifier:          VvGmdDS1S41REP8bqi6EEwc2P5dgKbp451g/ETJ3V/s=
Subject key identifier:   DD:F4:C9:D7:4F:5C:AD:11:B0:11:2E:A3:90:AE:BE:80:BC:CB:69:BF
Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77
Certificate issuer:       /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
Certificate serial:       6AE83F5CD02ED0ED2BF3D747A902F0E76E137FE6
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
Manifest number:          0355
Signing time:             Thu 22 Jan 2026 02:01:01 +0000
Manifest this update:     Thu 22 Jan 2026 01:56:01 +0000
Manifest next update:     Fri 23 Jan 2026 03:06:01 +0000
Files and hashes:         1: 326130663a383563313a3766373a3a2f34382d3438203d3e20323135323432.roa (hash: 4CHXdVvHjYpqAYcHIcibvCLK5qq3tc1C66o5EpxaLt8=)
                          2: 326130663a383563313a3766613a3a2f34382d3438203d3e20323135323432.roa (hash: 6WOlcQZh4GVBhjXWW5Oz90ldzq2Au8/SbNiLZze2zNI=)
                          3: 326130663a383563313a3766363a3a2f34382d3438203d3e20323135323432.roa (hash: sqekG79xztP1stI8964y8O+ILcqcxMBKS5vM2N9Yeq4=)
                          4: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl (hash: z3kcy1RJltx7mQIToLTERQ7smhDPYC4BZZTURXSN37o=)
                          5: 326130663a383563313a3766383a3a2f34382d3438203d3e20323135323432.roa (hash: y9HbdtxnynZX2rM71oo4qhqJ/M/3l6e62X60vqkSXOc=)
                          6: 326130663a383563313a3766353a3a2f34382d3438203d3e20323135373631.roa (hash: byQYxxoRiZMkalXd6RzudJTQa4Ua3fqFXKXTWNIB1fs=)
                          7: 326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa (hash: LIVxcxtvoeze2S46mPqGSXeLOCk0JK2W2QKOiQjUdZQ=)
                          8: 326130663a383563313a3730313a3a2f34382d3438203d3e20323033353131.roa (hash: Tk4tJu5bvTD5dR9NoM2pYvWxSXCc2/x84lQAlZZqzIs=)
                          9: 326130663a383563313a3766303a3a2f34382d3438203d3e20323033353131.roa (hash: F6VJOi3vW8ih7gU8rCzD7A7gIu39IHtVGsLlId1ILkM=)
                          10: 326130663a383563313a3361323a3a2f34382d3438203d3e20323135323432.roa (hash: Gz7cU4OgmvLm8iR5sxlLJ8umD/eM2550DADKq1NdbVY=)
                          11: 326130663a383563313a3766623a3a2f34382d3438203d3e20323135323432.roa (hash: 9Ctv2mltThGL0RyhvpcjL2LOhkF9bTv3dQQCtaxW34I=)
                          12: 326130663a383563313a3766343a3a2f34382d3438203d3e20323135323432.roa (hash: Sqqkf1ajVYDwVw2KSKZnr/tFVnDaWUIPFwaxuN/hzVk=)
                          13: 326130663a383563313a3766313a3a2f34382d3438203d3e20323035343633.roa (hash: QtxzWf2JsAYGrlxsDmcE2oi7tthkDrQ3wvK+rgUOQxg=)
                          14: 326130663a383563313a3766313a3a2f34382d3438203d3e20323135313234.roa (hash: gq6me54MBqnqosS7iLksDmqAJs8yyfHwMXcZfgP1ijQ=)
                          15: 326130663a383563313a3766323a3a2f34382d3438203d3e20323135323432.roa (hash: sEiHLlrRoeeUa4AJCYCoXBnr24SESsEbTviJLVfMEys=)
                          16: 326130663a383563313a3766393a3a2f34382d3438203d3e20323135323432.roa (hash: EaK1Skh4Um4RxiTzKfvwYuiUAcDo6dIwTSOhuUAUNQg=)
                          17: 326130663a383563313a3766333a3a2f34382d3438203d3e20323035343633.roa (hash: YxuKH5bQA8YI1bwf7mCp5od3hfadKIetOc5KHPtspsc=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 23 Jan 2026 00:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:e8:3f:5c:d0:2e:d0:ed:2b:f3:d7:47:a9:02:f0:e7:6e:13:7f:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
        Validity
            Not Before: Jan 22 01:56:01 2026 GMT
            Not After : Jan 23 03:06:01 2026 GMT
        Subject: CN=DDF4C9D74F5CAD11B0112EA390AEBE80BCCB69BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ad:42:79:66:c6:17:75:61:b8:b5:f7:08:c2:
                    d5:9f:15:ce:86:eb:64:d4:14:8f:d5:3b:8e:52:5c:
                    55:f3:5d:dc:54:97:23:0f:e8:90:f2:16:1e:6d:2a:
                    3b:5e:3e:39:32:6e:7f:12:29:ee:21:a1:37:0d:7a:
                    43:55:48:88:68:d3:ac:42:7f:10:f7:2b:3f:4b:05:
                    93:9e:98:23:44:2d:44:8f:70:79:d0:63:60:a4:a9:
                    e1:b9:fb:c1:c9:94:92:df:08:0c:19:79:d4:66:43:
                    70:42:ce:6e:67:a3:e2:ab:00:e7:a6:f4:6c:d9:48:
                    02:87:94:dd:76:ce:68:bd:3c:e2:ee:a4:dc:ab:65:
                    ef:df:5a:10:ce:56:85:c8:72:a0:d4:a8:17:88:00:
                    15:fa:b1:a9:6b:15:6f:37:d6:42:ea:fe:59:66:68:
                    a4:45:aa:ce:31:27:e0:8b:b2:ca:58:f9:34:ad:e0:
                    1c:f3:39:ae:d8:4f:9f:98:23:dd:0e:9e:02:30:a8:
                    9c:0e:72:3e:14:b4:c1:13:71:b0:63:f3:5c:28:91:
                    9c:7f:5b:55:66:94:22:fe:66:c9:6c:b7:95:9b:12:
                    74:c6:54:94:56:46:a1:44:48:4e:05:9f:7b:24:5b:
                    90:9d:8c:68:93:a1:64:a3:b0:5c:d4:11:95:38:34:
                    13:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:F4:C9:D7:4F:5C:AD:11:B0:11:2E:A3:90:AE:BE:80:BC:CB:69:BF
            X509v3 Authority Key Identifier:
                keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:c7:65:2b:50:e8:fe:e3:52:ee:51:bd:ec:c1:c8:e2:da:96:
         44:6d:92:03:d3:dc:49:96:3b:4e:48:a9:ae:75:23:00:2f:08:
         15:3f:02:b7:94:2a:33:b7:83:59:41:9b:0f:c4:d6:aa:e4:a1:
         40:1c:18:78:09:f0:08:0d:f4:02:fd:16:76:c4:2e:f6:bd:1b:
         54:95:ce:f6:2c:60:2e:f4:3e:7e:81:82:38:1e:b4:d2:d4:ca:
         e8:e5:a8:a1:64:90:96:85:f7:6a:b0:6e:0d:87:8f:0d:74:36:
         b8:4d:00:d8:c5:b7:3f:8a:87:44:4b:1a:31:29:13:33:6e:5d:
         8a:e8:bc:5f:13:f2:10:26:8b:51:46:35:64:5f:bb:5e:9b:fd:
         51:92:af:1b:c0:07:a3:fd:1d:7b:47:43:bb:3a:dc:bc:3e:fd:
         f7:59:c5:a2:cd:26:56:59:e2:b2:53:01:eb:9a:ef:51:fd:d3:
         98:be:aa:28:11:d2:26:7c:3d:53:54:70:d1:f5:68:b8:27:7b:
         5d:24:00:ee:6e:dc:2b:73:fc:b0:75:54:b9:10:6f:f6:52:2f:
         69:a2:cf:1a:37:e2:66:5f:32:97:f6:1a:bc:ea:a0:ac:47:92:
         a4:9f:71:4d:d5:19:01:e4:ba:22:d1:41:31:a3:e4:45:4e:db:
         55:5f:84:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 22 05:49:23 2026 by rpki-client