This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
File:                     1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft (raw, json)
Hash identifier:          YLeY2tzwhvKXtOeawst8/DrpIaFMj8qETJSEusKNnhw=
Subject key identifier:   2B:75:7C:C1:F3:1B:88:6F:EB:C2:63:8A:22:6C:A6:B3:3F:69:A0:CF
Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77
Certificate issuer:       /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
Certificate serial:       78C35768FA8B2D96AE0CA00452ED5EA4C4990A96
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
Manifest number:          0349
Signing time:             Tue 13 Jan 2026 04:35:42 +0000
Manifest this update:     Tue 13 Jan 2026 04:30:42 +0000
Manifest next update:     Wed 14 Jan 2026 07:52:42 +0000
Files and hashes:         1: 326130663a383563313a3730313a3a2f34382d3438203d3e20323033353131.roa (hash: Tk4tJu5bvTD5dR9NoM2pYvWxSXCc2/x84lQAlZZqzIs=)
                          2: 326130663a383563313a3766343a3a2f34382d3438203d3e20323135323432.roa (hash: Sqqkf1ajVYDwVw2KSKZnr/tFVnDaWUIPFwaxuN/hzVk=)
                          3: 326130663a383563313a3766303a3a2f34382d3438203d3e20323033353131.roa (hash: F6VJOi3vW8ih7gU8rCzD7A7gIu39IHtVGsLlId1ILkM=)
                          4: 326130663a383563313a3766613a3a2f34382d3438203d3e20323135323432.roa (hash: 6WOlcQZh4GVBhjXWW5Oz90ldzq2Au8/SbNiLZze2zNI=)
                          5: 326130663a383563313a3766313a3a2f34382d3438203d3e20323035343633.roa (hash: QtxzWf2JsAYGrlxsDmcE2oi7tthkDrQ3wvK+rgUOQxg=)
                          6: 326130663a383563313a3766373a3a2f34382d3438203d3e20323135323432.roa (hash: 4CHXdVvHjYpqAYcHIcibvCLK5qq3tc1C66o5EpxaLt8=)
                          7: 326130663a383563313a3361323a3a2f34382d3438203d3e20323135323432.roa (hash: Gz7cU4OgmvLm8iR5sxlLJ8umD/eM2550DADKq1NdbVY=)
                          8: 326130663a383563313a3766323a3a2f34382d3438203d3e20323135323432.roa (hash: sEiHLlrRoeeUa4AJCYCoXBnr24SESsEbTviJLVfMEys=)
                          9: 326130663a383563313a3766363a3a2f34382d3438203d3e20323135323432.roa (hash: sqekG79xztP1stI8964y8O+ILcqcxMBKS5vM2N9Yeq4=)
                          10: 326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa (hash: LIVxcxtvoeze2S46mPqGSXeLOCk0JK2W2QKOiQjUdZQ=)
                          11: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl (hash: UgnVuTJCv5ftpsATPuXgpcYlxtVbI8mnantwEpwZ1HQ=)
                          12: 326130663a383563313a3766353a3a2f34382d3438203d3e20323135373631.roa (hash: byQYxxoRiZMkalXd6RzudJTQa4Ua3fqFXKXTWNIB1fs=)
                          13: 326130663a383563313a3766623a3a2f34382d3438203d3e20323135323432.roa (hash: 9Ctv2mltThGL0RyhvpcjL2LOhkF9bTv3dQQCtaxW34I=)
                          14: 326130663a383563313a3766393a3a2f34382d3438203d3e20323135323432.roa (hash: EaK1Skh4Um4RxiTzKfvwYuiUAcDo6dIwTSOhuUAUNQg=)
                          15: 326130663a383563313a3766313a3a2f34382d3438203d3e20323135313234.roa (hash: gq6me54MBqnqosS7iLksDmqAJs8yyfHwMXcZfgP1ijQ=)
                          16: 326130663a383563313a3766383a3a2f34382d3438203d3e20323135323432.roa (hash: y9HbdtxnynZX2rM71oo4qhqJ/M/3l6e62X60vqkSXOc=)
                          17: 326130663a383563313a3766333a3a2f34382d3438203d3e20323035343633.roa (hash: YxuKH5bQA8YI1bwf7mCp5od3hfadKIetOc5KHPtspsc=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Jan 2026 07:52:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:c3:57:68:fa:8b:2d:96:ae:0c:a0:04:52:ed:5e:a4:c4:99:0a:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
        Validity
            Not Before: Jan 13 04:30:42 2026 GMT
            Not After : Jan 14 07:52:42 2026 GMT
        Subject: CN=2B757CC1F31B886FEBC2638A226CA6B33F69A0CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:27:47:26:da:42:45:4e:57:39:6a:ff:d0:90:
                    7a:7a:78:0e:5e:30:33:a5:64:08:5d:6a:05:53:b3:
                    00:a1:60:71:57:47:09:14:4e:34:bf:0d:7e:cc:cf:
                    b3:57:53:7d:60:99:cf:ea:0d:96:13:ba:5c:7e:13:
                    1a:b7:d6:7b:52:4b:a3:65:d8:68:30:cb:77:e3:9a:
                    2a:e6:47:6a:68:45:b8:15:44:63:30:5b:09:63:37:
                    e9:bc:ac:ad:6f:58:9a:9d:3c:ff:5c:60:bf:11:00:
                    23:4a:93:76:9f:b8:38:e8:84:b6:17:2c:a9:07:db:
                    3e:2b:6c:79:23:29:cb:1a:c9:f7:0e:3d:69:07:23:
                    d0:b7:81:f4:a0:9e:c1:d6:62:ff:b4:f9:23:02:70:
                    42:46:53:fd:7d:da:7a:ff:2a:c2:fe:ca:ae:4a:a1:
                    c9:f4:89:c1:b3:50:ca:ff:0d:68:fc:12:dd:1e:c9:
                    e3:0b:04:6f:ec:3e:57:4d:de:2c:04:89:8b:7e:32:
                    64:ea:3a:b7:61:29:86:6c:48:00:fe:a3:1d:93:5a:
                    00:23:bd:be:61:85:5f:08:e9:a6:68:5a:67:6b:31:
                    f1:98:65:bd:bd:15:bb:31:94:0e:92:f4:d8:7e:6d:
                    a7:97:16:2f:cf:20:2b:85:61:f4:66:05:5f:d7:55:
                    93:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:75:7C:C1:F3:1B:88:6F:EB:C2:63:8A:22:6C:A6:B3:3F:69:A0:CF
            X509v3 Authority Key Identifier:
                keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:e3:07:b6:f3:76:2c:4f:a8:1d:d2:e8:db:9f:df:21:94:ca:
         7f:9d:98:07:3a:47:e2:6a:4a:4f:aa:7b:7b:a4:89:e2:0d:1f:
         89:c8:5e:19:2b:e1:62:64:ec:f2:c2:2f:3b:c4:02:23:00:83:
         90:9a:6c:88:3d:5f:d8:9d:e7:4e:26:e8:89:c7:f4:9b:09:d9:
         60:20:17:4b:5c:e1:22:13:7b:ef:dc:93:c6:f6:10:a1:09:bd:
         6d:ac:89:26:8a:21:36:2f:8c:d1:ff:3d:92:8a:a5:cc:1d:9e:
         6e:39:30:6d:e6:42:10:8e:48:96:52:60:86:d3:e9:e5:01:cb:
         0a:f0:d7:c1:6f:4d:35:d7:7c:ed:42:60:a0:76:5d:b2:38:81:
         9b:22:3f:61:bb:58:7e:23:ce:13:98:93:ae:90:5c:f5:d6:37:
         44:10:6e:9e:df:b6:f0:1d:04:05:ca:e0:b6:fd:3c:8e:01:09:
         93:14:67:20:d9:ee:bf:c3:9f:c8:20:96:90:cc:48:30:34:11:
         63:27:95:0d:68:23:dd:4c:3b:55:5f:72:e6:f4:bf:00:bd:70:
         63:1d:a8:b1:08:9b:57:06:b8:ee:2f:21:94:82:65:58:17:7e:
         4b:a1:57:56:48:aa:0b:00:3e:88:69:d0:c9:df:84:e3:48:db:
         34:ec:3f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 12:58:01 2026 by rpki-client