This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
File:                     1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft (raw, json)
Hash identifier:          FZWBQCuFiZOAReZHPUvkUn7Dwuqnh+PeiolIA7nNEkA=
Subject key identifier:   1A:19:B2:20:21:A4:28:75:2B:87:37:B9:52:0A:AA:BE:1C:99:79:0B
Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77
Certificate issuer:       /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
Certificate serial:       078918FA1B6D03B8FF0EDAABA31CE9C55CF2489D
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
Manifest number:          0331
Signing time:             Sun 28 Dec 2025 02:36:21 +0000
Manifest this update:     Sun 28 Dec 2025 02:31:21 +0000
Manifest next update:     Mon 29 Dec 2025 03:05:21 +0000
Files and hashes:         1: 326130663a383563313a3766623a3a2f34382d3438203d3e20323135323432.roa (hash: 6RxmKyitzJl4tEe1yv4vU5lxANHGsLOEl2k3HSP2ddo=)
                          2: 326130663a383563313a3766323a3a2f34382d3438203d3e20323135323432.roa (hash: sEiHLlrRoeeUa4AJCYCoXBnr24SESsEbTviJLVfMEys=)
                          3: 326130663a383563313a3730313a3a2f34382d3438203d3e20323033353131.roa (hash: Tk4tJu5bvTD5dR9NoM2pYvWxSXCc2/x84lQAlZZqzIs=)
                          4: 326130663a383563313a3766383a3a2f34382d3438203d3e20323135323432.roa (hash: 7RQ0gXCWkNwXJyLVMAjMT4ifOZKJ140AG/jnIia+kz4=)
                          5: 326130663a383563313a3766313a3a2f34382d3438203d3e20323035343633.roa (hash: QtxzWf2JsAYGrlxsDmcE2oi7tthkDrQ3wvK+rgUOQxg=)
                          6: 326130663a383563313a3766303a3a2f34382d3438203d3e20323033353131.roa (hash: F6VJOi3vW8ih7gU8rCzD7A7gIu39IHtVGsLlId1ILkM=)
                          7: 326130663a383563313a3766313a3a2f34382d3438203d3e20323135313234.roa (hash: gq6me54MBqnqosS7iLksDmqAJs8yyfHwMXcZfgP1ijQ=)
                          8: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl (hash: EZTwqfZT9J+Z+WoFIstDfVl36HhRKGx/VLggjYJXxoY=)
                          9: 326130663a383563313a3766373a3a2f34382d3438203d3e20323135323432.roa (hash: polxJUQuuGvo82QFQvRtgLcGzpMrITqZaH9JMW5PByU=)
                          10: 326130663a383563313a3766343a3a2f34382d3438203d3e20323135323432.roa (hash: Sqqkf1ajVYDwVw2KSKZnr/tFVnDaWUIPFwaxuN/hzVk=)
                          11: 326130663a383563313a3766363a3a2f34382d3438203d3e20323135323432.roa (hash: sqekG79xztP1stI8964y8O+ILcqcxMBKS5vM2N9Yeq4=)
                          12: 326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa (hash: LIVxcxtvoeze2S46mPqGSXeLOCk0JK2W2QKOiQjUdZQ=)
                          13: 326130663a383563313a3766353a3a2f34382d3438203d3e20323135373631.roa (hash: byQYxxoRiZMkalXd6RzudJTQa4Ua3fqFXKXTWNIB1fs=)
                          14: 326130663a383563313a3766333a3a2f34382d3438203d3e20323035343633.roa (hash: YxuKH5bQA8YI1bwf7mCp5od3hfadKIetOc5KHPtspsc=)
                          15: 326130663a383563313a3361323a3a2f34382d3438203d3e20323135323432.roa (hash: Gz7cU4OgmvLm8iR5sxlLJ8umD/eM2550DADKq1NdbVY=)
                          16: 326130663a383563313a3766393a3a2f34382d3438203d3e20323135323432.roa (hash: ZhIUpj5tVPDcWiQ+3SY61ZE9RRhM2AJ7zchpU/cGNbk=)
                          17: 326130663a383563313a3766613a3a2f34382d3438203d3e20323135323432.roa (hash: M4zqLtdUHSAbU4GatESAUlsOQgWU2zpPTfy3/5JmOsg=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Dec 2025 03:05:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:89:18:fa:1b:6d:03:b8:ff:0e:da:ab:a3:1c:e9:c5:5c:f2:48:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
        Validity
            Not Before: Dec 28 02:31:21 2025 GMT
            Not After : Dec 29 03:05:21 2025 GMT
        Subject: CN=1A19B22021A428752B8737B9520AAABE1C99790B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a7:a0:ff:00:26:c2:3f:db:13:9c:3f:7f:34:
                    19:f0:63:df:77:68:cc:33:bd:f5:24:ef:c5:91:bd:
                    b1:1f:b1:a4:8e:82:2b:d9:e3:54:b4:67:20:00:ba:
                    43:9f:b2:51:a0:cf:e5:37:84:53:2f:39:ee:3e:41:
                    09:f4:69:21:d2:a1:26:bf:d2:8d:d0:bc:c9:86:63:
                    01:a6:84:e2:3b:5c:5d:a7:85:e7:3e:61:d7:3e:d6:
                    8a:bd:f4:bb:8c:23:af:5a:6b:dc:b9:2a:dd:ba:59:
                    f4:f1:30:e8:02:33:ec:63:d6:2a:95:01:03:fe:62:
                    cc:50:63:68:ef:06:2c:91:d3:a0:16:8f:b4:d7:53:
                    e0:08:82:7e:e1:5c:d3:59:c3:88:4c:f6:78:95:c3:
                    f0:bb:62:9d:28:53:51:b9:22:a1:51:b9:fa:e6:ff:
                    84:19:c1:af:31:d3:c9:30:fe:b0:63:e3:a3:50:31:
                    35:d2:ac:11:d9:89:8b:f0:9c:93:6e:9a:d5:5e:1a:
                    98:01:1b:99:85:76:2f:bc:bc:dc:18:78:7d:e1:f7:
                    1b:e0:8e:b2:15:11:4d:24:f7:dd:85:42:43:16:4d:
                    98:6b:72:34:eb:41:07:e2:ab:a5:d9:bf:84:20:be:
                    41:a2:07:f2:e4:db:b1:df:3d:16:39:46:bd:ea:f2:
                    99:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:19:B2:20:21:A4:28:75:2B:87:37:B9:52:0A:AA:BE:1C:99:79:0B
            X509v3 Authority Key Identifier:
                keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:20:6e:7c:33:e6:76:26:4a:3e:1d:9c:d2:d8:3d:ff:f5:7e:
         b7:45:19:cf:56:1d:a8:0b:9b:32:be:ea:19:00:44:bf:7c:7a:
         c4:9d:1e:dd:63:ae:f7:f0:94:60:7c:53:05:9c:45:a8:58:b6:
         ca:25:b6:55:78:ab:57:e9:98:42:2f:6e:53:51:86:fa:0b:53:
         f7:40:92:03:18:8a:3f:79:b5:a4:7b:37:bf:50:58:07:67:58:
         14:99:d2:c6:5f:99:b3:6d:99:48:f1:cf:15:37:d7:57:9c:1d:
         f6:27:e8:db:9f:65:45:9d:d2:87:07:0c:45:76:ca:46:5b:81:
         a0:79:0e:32:0b:83:f9:70:8f:ef:23:e8:51:c7:cd:5a:df:cb:
         91:73:59:25:3d:bd:2a:b3:89:ca:e3:0a:ba:9b:a9:29:30:48:
         00:82:e9:9d:5f:b3:96:3e:83:3d:5e:a9:4b:30:d2:d8:fd:f0:
         82:dc:03:bb:e0:b6:08:a4:3c:23:d5:5f:f8:d4:a8:b4:5b:60:
         63:b9:75:62:57:00:0e:5f:01:96:e4:13:e4:13:3d:c2:df:e5:
         43:29:50:64:68:2b:79:2e:81:03:55:7e:59:59:29:bf:25:f6:
         07:29:0e:50:1e:fb:56:07:a2:8f:cd:f2:ca:50:86:36:7b:02:
         0f:c8:15:95
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUB4kY+httA7j/DtqroxzpxVzySJ0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0
OUMxODM3NzAeFw0yNTEyMjgwMjMxMjFaFw0yNTEyMjkwMzA1MjFaMDMxMTAvBgNV
BAMTKDFBMTlCMjIwMjFBNDI4NzUyQjg3MzdCOTUyMEFBQUJFMUM5OTc5MEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUp6D/ACbCP9sTnD9/NBnwY993
aMwzvfUk78WRvbEfsaSOgivZ41S0ZyAAukOfslGgz+U3hFMvOe4+QQn0aSHSoSa/
0o3QvMmGYwGmhOI7XF2nhec+Ydc+1oq99LuMI69aa9y5Kt26WfTxMOgCM+xj1iqV
AQP+YsxQY2jvBiyR06AWj7TXU+AIgn7hXNNZw4hM9niVw/C7Yp0oU1G5IqFRufrm
/4QZwa8x08kw/rBj46NQMTXSrBHZiYvwnJNumtVeGpgBG5mFdi+8vNwYeH3h9xvg
jrIVEU0k992FQkMWTZhrcjTrQQfiq6XZv4QgvkGiB/Lk27HfPRY5Rr3q8pkFAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUGhmyICGkKHUrhze5UgqqvhyZeQswHwYDVR0j
BBgwFoAUGpCmrhVCo1PMp0l36yv+KknBg3cwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDA2MzMzYzYtOTQ2ZC00YjBiLTk1ZWYtZGFiYTI2MmE0
MmUxLzEvMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0OUMxODM3Ny5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3
MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8xQTkwQTZBRTE1NDJBMzUzQ0NBNzQ5NzdF
QjJCRkUyQTQ5QzE4Mzc3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L2QwNjMzM2M2LTk0NmQtNGIwYi05NWVmLWRhYmEyNjJhNDJlMS8xLzFBOTBBNkFF
MTU0MkEzNTNDQ0E3NDk3N0VCMkJGRTJBNDlDMTgzNzcubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBpIG58
M+Z2Jko+HZzS2D3/9X63RRnPVh2oC5syvuoZAES/fHrEnR7dY6738JRgfFMFnEWo
WLbKJbZVeKtX6ZhCL25TUYb6C1P3QJIDGIo/ebWkeze/UFgHZ1gUmdLGX5mzbZlI
8c8VN9dXnB32J+jbn2VFndKHBwxFdspGW4GgeQ4yC4P5cI/vI+hRx81a38uRc1kl
Pb0qs4nK4wq6m6kpMEgAgumdX7OWPoM9XqlLMNLY/fCC3AO74LYIpDwj1V/41Ki0
W2BjuXViVwAOXwGW5BPkEz3C3+VDKVBkaCt5LoEDVX5ZWSm/JfYHKQ5QHvtWB6KP
zfLKUIY2ewIPyBWV
-----END CERTIFICATE-----
Generated at Sun Dec 28 13:36:47 2025 by rpki-client