This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
File:                     1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft (raw, json)
Hash identifier:          SfRb7n0La9Pi+WiwH6nkL3y3yFo2RqsJtoY8nxtHwt8=
Subject key identifier:   BC:96:81:A0:C4:DB:42:08:7E:60:54:74:3C:CE:8F:AF:03:35:A3:9C
Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77
Certificate issuer:       /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
Certificate serial:       1DB84AD0DC2A5B3278EBC7333AF26744310A67EB
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
Manifest number:          034E
Signing time:             Sat 17 Jan 2026 00:25:58 +0000
Manifest this update:     Sat 17 Jan 2026 00:20:58 +0000
Manifest next update:     Sun 18 Jan 2026 00:32:58 +0000
Files and hashes:         1: 326130663a383563313a3766393a3a2f34382d3438203d3e20323135323432.roa (hash: EaK1Skh4Um4RxiTzKfvwYuiUAcDo6dIwTSOhuUAUNQg=)
                          2: 326130663a383563313a3361323a3a2f34382d3438203d3e20323135323432.roa (hash: Gz7cU4OgmvLm8iR5sxlLJ8umD/eM2550DADKq1NdbVY=)
                          3: 326130663a383563313a3766313a3a2f34382d3438203d3e20323135313234.roa (hash: gq6me54MBqnqosS7iLksDmqAJs8yyfHwMXcZfgP1ijQ=)
                          4: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl (hash: YiV3eqR/EBND4Ior7Qiu2rLE6BteEiRl6gKxua86RsQ=)
                          5: 326130663a383563313a3766313a3a2f34382d3438203d3e20323035343633.roa (hash: QtxzWf2JsAYGrlxsDmcE2oi7tthkDrQ3wvK+rgUOQxg=)
                          6: 326130663a383563313a3766353a3a2f34382d3438203d3e20323135373631.roa (hash: byQYxxoRiZMkalXd6RzudJTQa4Ua3fqFXKXTWNIB1fs=)
                          7: 326130663a383563313a3766323a3a2f34382d3438203d3e20323135323432.roa (hash: sEiHLlrRoeeUa4AJCYCoXBnr24SESsEbTviJLVfMEys=)
                          8: 326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa (hash: LIVxcxtvoeze2S46mPqGSXeLOCk0JK2W2QKOiQjUdZQ=)
                          9: 326130663a383563313a3766333a3a2f34382d3438203d3e20323035343633.roa (hash: YxuKH5bQA8YI1bwf7mCp5od3hfadKIetOc5KHPtspsc=)
                          10: 326130663a383563313a3730313a3a2f34382d3438203d3e20323033353131.roa (hash: Tk4tJu5bvTD5dR9NoM2pYvWxSXCc2/x84lQAlZZqzIs=)
                          11: 326130663a383563313a3766363a3a2f34382d3438203d3e20323135323432.roa (hash: sqekG79xztP1stI8964y8O+ILcqcxMBKS5vM2N9Yeq4=)
                          12: 326130663a383563313a3766613a3a2f34382d3438203d3e20323135323432.roa (hash: 6WOlcQZh4GVBhjXWW5Oz90ldzq2Au8/SbNiLZze2zNI=)
                          13: 326130663a383563313a3766623a3a2f34382d3438203d3e20323135323432.roa (hash: 9Ctv2mltThGL0RyhvpcjL2LOhkF9bTv3dQQCtaxW34I=)
                          14: 326130663a383563313a3766383a3a2f34382d3438203d3e20323135323432.roa (hash: y9HbdtxnynZX2rM71oo4qhqJ/M/3l6e62X60vqkSXOc=)
                          15: 326130663a383563313a3766303a3a2f34382d3438203d3e20323033353131.roa (hash: F6VJOi3vW8ih7gU8rCzD7A7gIu39IHtVGsLlId1ILkM=)
                          16: 326130663a383563313a3766343a3a2f34382d3438203d3e20323135323432.roa (hash: Sqqkf1ajVYDwVw2KSKZnr/tFVnDaWUIPFwaxuN/hzVk=)
                          17: 326130663a383563313a3766373a3a2f34382d3438203d3e20323135323432.roa (hash: 4CHXdVvHjYpqAYcHIcibvCLK5qq3tc1C66o5EpxaLt8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Jan 2026 00:32:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:b8:4a:d0:dc:2a:5b:32:78:eb:c7:33:3a:f2:67:44:31:0a:67:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
        Validity
            Not Before: Jan 17 00:20:58 2026 GMT
            Not After : Jan 18 00:32:58 2026 GMT
        Subject: CN=BC9681A0C4DB42087E6054743CCE8FAF0335A39C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:26:57:e5:d8:0a:6d:ef:94:5a:be:e2:7d:2f:
                    c2:f3:e5:86:7c:b6:04:14:81:72:0d:b7:a4:85:83:
                    e6:2a:af:42:d8:4f:38:75:11:20:c0:63:87:2a:2a:
                    c8:66:f5:f1:b5:2d:e0:b0:41:35:37:44:c4:d3:ec:
                    da:c6:98:53:c4:b2:30:01:ae:6e:e1:97:3f:1a:04:
                    b1:3b:29:80:f3:0b:7d:76:f0:ce:e4:d3:07:44:b7:
                    96:49:58:71:fa:96:ca:36:c8:1f:79:67:88:28:75:
                    6e:6c:5c:b7:fd:f0:64:c5:c0:4e:21:d9:53:be:4b:
                    4d:47:dc:af:61:a2:fc:ac:62:f0:7f:cc:05:eb:f8:
                    a2:b2:28:c3:73:42:ea:6b:92:ab:ce:72:fe:d5:63:
                    f2:78:b7:35:25:09:0f:80:f3:45:73:20:42:02:b5:
                    2a:42:17:44:ab:45:fa:fb:7e:15:f4:26:33:e8:af:
                    7b:ce:5e:7f:ea:aa:33:2b:3b:a7:7e:4f:0c:30:3b:
                    c3:8b:33:c9:55:df:b8:03:f2:4e:e0:be:3c:c9:c6:
                    8c:6f:60:37:ca:51:55:eb:a5:1f:5d:fd:57:6f:71:
                    38:fa:84:8e:18:76:e1:f5:c2:68:f4:9a:5b:41:df:
                    e9:1c:28:4e:b1:21:66:7f:96:88:17:d9:fc:80:dd:
                    a9:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:96:81:A0:C4:DB:42:08:7E:60:54:74:3C:CE:8F:AF:03:35:A3:9C
            X509v3 Authority Key Identifier:
                keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:29:2f:f2:ac:ed:16:c6:ce:ae:b8:48:23:09:68:47:22:9c:
         43:4e:ae:f6:99:5c:1c:b8:45:37:b0:b2:d4:89:5c:4b:d8:26:
         c8:7f:bb:6c:89:fa:cb:34:76:d3:f5:e2:95:d9:9b:7c:fc:c4:
         d9:79:9e:36:08:c0:ae:eb:83:3c:30:a4:2d:61:f9:3b:17:ee:
         61:db:e5:11:85:bf:bf:e8:b4:ed:0a:9e:19:b9:9d:dc:af:1f:
         37:44:87:94:e7:6d:42:27:f9:d9:bc:b2:a8:44:be:ae:50:e4:
         a3:88:ab:41:ee:03:85:fe:23:02:60:be:3c:6c:0e:f0:97:7f:
         cc:3d:c2:e9:cc:dd:dc:c7:da:e6:1c:db:97:1d:58:53:55:b9:
         5b:5d:d8:0b:e0:0e:cb:4a:98:b5:4b:6e:5a:dd:92:9d:11:e8:
         b8:5c:fb:ee:b1:e9:35:0d:b2:16:77:4a:2f:6b:d6:45:ea:da:
         b9:48:a1:10:c2:01:6d:81:87:8c:22:d6:0c:a5:51:78:89:61:
         ef:d1:b4:fe:eb:95:72:ef:4a:75:68:4d:f2:15:30:4a:cc:44:
         56:24:57:c6:5b:8f:03:a2:d0:82:84:88:47:97:f8:0e:7c:43:
         5f:bb:4b:f9:a8:ae:c0:28:02:96:ad:dd:25:e7:5d:cc:4c:e3:
         a1:d8:03:90
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUHbhK0NwqWzJ468czOvJnRDEKZ+swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0
OUMxODM3NzAeFw0yNjAxMTcwMDIwNThaFw0yNjAxMTgwMDMyNThaMDMxMTAvBgNV
BAMTKEJDOTY4MUEwQzREQjQyMDg3RTYwNTQ3NDNDQ0U4RkFGMDMzNUEzOUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvJlfl2Apt75RavuJ9L8Lz5YZ8
tgQUgXINt6SFg+Yqr0LYTzh1ESDAY4cqKshm9fG1LeCwQTU3RMTT7NrGmFPEsjAB
rm7hlz8aBLE7KYDzC3128M7k0wdEt5ZJWHH6lso2yB95Z4godW5sXLf98GTFwE4h
2VO+S01H3K9hovysYvB/zAXr+KKyKMNzQuprkqvOcv7VY/J4tzUlCQ+A80VzIEIC
tSpCF0SrRfr7fhX0JjPor3vOXn/qqjMrO6d+TwwwO8OLM8lV37gD8k7gvjzJxoxv
YDfKUVXrpR9d/VdvcTj6hI4YduH1wmj0mltB3+kcKE6xIWZ/logX2fyA3al1AgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUvJaBoMTbQgh+YFR0PM6PrwM1o5wwHwYDVR0j
BBgwFoAUGpCmrhVCo1PMp0l36yv+KknBg3cwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDA2MzMzYzYtOTQ2ZC00YjBiLTk1ZWYtZGFiYTI2MmE0
MmUxLzEvMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0OUMxODM3Ny5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3
MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8xQTkwQTZBRTE1NDJBMzUzQ0NBNzQ5NzdF
QjJCRkUyQTQ5QzE4Mzc3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L2QwNjMzM2M2LTk0NmQtNGIwYi05NWVmLWRhYmEyNjJhNDJlMS8xLzFBOTBBNkFF
MTU0MkEzNTNDQ0E3NDk3N0VCMkJGRTJBNDlDMTgzNzcubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB1KS/y
rO0Wxs6uuEgjCWhHIpxDTq72mVwcuEU3sLLUiVxL2CbIf7tsifrLNHbT9eKV2Zt8
/MTZeZ42CMCu64M8MKQtYfk7F+5h2+URhb+/6LTtCp4ZuZ3crx83RIeU521CJ/nZ
vLKoRL6uUOSjiKtB7gOF/iMCYL48bA7wl3/MPcLpzN3cx9rmHNuXHVhTVblbXdgL
4A7LSpi1S25a3ZKdEei4XPvusek1DbIWd0ova9ZF6tq5SKEQwgFtgYeMItYMpVF4
iWHv0bT+65Vy70p1aE3yFTBKzERWJFfGW48DotCChIhHl/gOfENfu0v5qK7AKAKW
rd0l513MTOOh2AOQ
-----END CERTIFICATE-----
Generated at Sat Jan 17 14:04:28 2026 by rpki-client