This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft
File:                     E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft (raw, json)
Hash identifier:          CzRE5mXem1JU0QF2mh1nxbsIKMv5/Lo0J2A2qUyxx8Q=
Subject key identifier:   62:AE:37:33:05:D9:F7:18:6D:1F:AC:F7:BC:70:09:36:13:C4:42:82
Authority key identifier: E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
Certificate issuer:       /CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Certificate serial:       4332272BACA34912CC63F9B059B4EAFD83C732DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft
Manifest number:          0172
Signing time:             Mon 26 Jan 2026 08:46:12 +0000
Manifest this update:     Mon 26 Jan 2026 08:41:12 +0000
Manifest next update:     Tue 27 Jan 2026 10:10:12 +0000
Files and hashes:         1: 34352e3134392e3135342e302f32342d3234203d3e20323132343737.roa (hash: ElvQJHHMZyjhqFtZ4eXubU55AwJuUHlB5VPhchi0zEY=)
                          2: 3139332e31372e39352e302f32342d3234203d3e20313938353834.roa (hash: MkExyo8U1yyFCZEb3tQEd4BjY7tmz/8ir10w+z/6Mqg=)
                          3: 3138352e3136322e3137382e302f32342d3234203d3e2032393134.roa (hash: s1bbd6LyvYQrZ11FtU3Xa/oNq7QSAV2j6DcxJrrwcV0=)
                          4: 3138352e3233342e3130302e302f32342d3234203d3e203335363631.roa (hash: 7IoW8V7sYCxYnK3GpV+L+iywqaWF/MSER2M0Aaj+ktk=)
                          5: 38392e3135302e34392e302f32342d3234203d3e2030.roa (hash: ALU/WiKi+F/SsajUvhBxkSVoNXo5oZajppJ0LbHGyXc=)
                          6: 34352e3134392e3135322e302f32342d3234203d3e20323134313433.roa (hash: ZqsnAbwfQsSLAO15y/hQmlAKLget/IE+XAeE4Nr5/8I=)
                          7: 3138382e39342e3139312e302f32342d3234203d3e203236333833.roa (hash: KVgKufhzMCzuYPXRdj1v2nCOHhTInMxlTivgHzFkAcY=)
                          8: 34352e3134392e3135322e302f32342d3234203d3e203235313630.roa (hash: F5qAcWfgptgKaaDsmY0iSSOR+nBZv9RYAI/0kq8SYl8=)
                          9: 34352e3134392e3135332e302f32342d3234203d3e203133333335.roa (hash: oW4WynaArlYMwXoVGq9L68dOfSrJj8wnnWqrszCEjBM=)
                          10: 3138352e3136322e3137372e302f32342d3234203d3e2030.roa (hash: pXGL6Ylkg/a8RE2/h4mmXqSiT6qT6xF23I4QHA58rgg=)
                          11: 3138352e3132332e3135362e302f32342d3234203d3e20323133323832.roa (hash: HI1VX16qX1LTsAjuvQN0eR8x1ZQ2WlG9l18ZWZhTnXQ=)
                          12: 39312e3233312e3132362e302f32342d3234203d3e2035363530.roa (hash: it6kdqtvQIR1fmnyxGg95/2ozlg9ybLYZncNwT8sS4M=)
                          13: 34352e3134392e3135332e302f32342d3234203d3e20323635393139.roa (hash: kgIiY2hKU4E4tRDz3OnYpx84hUJKrY7sZF8oMbsebok=)
                          14: 3139342e39392e3135362e302f32342d3234203d3e203232343237.roa (hash: rIB6LZlyDY4ccd8aiBOUspQRAkgz2Qkx5QliZapGW3w=)
                          15: 3138352e3136322e3137392e302f32342d3234203d3e203132383734.roa (hash: Oev3T5PHjGnxWqjgwbUH88tHYEWPx4hW7vlkYnxUh4c=)
                          16: 3138352e3132332e3135382e302f32342d3234203d3e203239383032.roa (hash: TLiGnJOFD2b+z4uS2pKNa+Gc2aYGJ4ZFIaexiybn7wo=)
                          17: 39312e3233322e39392e302f32342d3234203d3e20313937353337.roa (hash: G+mgzv7tRhUfmSaRumVwyhbJ8nNvEA0s859L61Ejv18=)
                          18: 3138352e33332e32362e302f32342d3234203d3e20323132363039.roa (hash: +Uou40uKN3P8LL5yuWZGR768rlaEfbKR2VYxApN71AA=)
                          19: 3138382e39342e3139312e302f32342d3234203d3e203537303433.roa (hash: 8styg8XghivByqecwh8GqtE8kKwAeHdMu50Ggf4sImQ=)
                          20: 3138352e3132332e3135392e302f32342d3234203d3e20333936333536.roa (hash: 8ymSE6/IZ4mS3/jdg4jdCuqPIOO7MFcCnM1/lcLJutM=)
                          21: E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl (hash: ILVK+GYqmmQiECxZGbZIKvtuLhopsaWeCw8s3cDXuqw=)
                          22: 3138352e3136322e3137362e302f32342d3234203d3e203537303433.roa (hash: SVrpMsQaq2+Of1pyWLABKDNguVH/um78jdJjsg2PZXk=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 10:10:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:32:27:2b:ac:a3:49:12:cc:63:f9:b0:59:b4:ea:fd:83:c7:32:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
        Validity
            Not Before: Jan 26 08:41:12 2026 GMT
            Not After : Jan 27 10:10:12 2026 GMT
        Subject: CN=62AE373305D9F7186D1FACF7BC70093613C44282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0f:ac:43:50:70:ba:25:41:db:3d:8b:13:97:
                    b2:2d:40:5f:bf:da:3c:fd:20:04:46:1d:72:cb:31:
                    2a:4f:dd:88:c0:b0:35:8e:c2:c6:ec:90:a8:a4:c8:
                    f0:c2:af:dd:90:3d:3a:0c:fb:81:18:a2:ee:18:a5:
                    cd:37:ce:ee:5c:a4:39:2c:ae:cc:d9:6b:49:86:92:
                    5d:86:61:5c:20:7d:74:a7:00:b5:9c:92:9c:51:28:
                    88:74:bc:38:3a:e1:db:9f:54:08:51:7d:89:8d:0d:
                    cc:bf:99:89:8d:b0:8d:7c:a4:e3:35:b9:8f:d7:2a:
                    80:64:13:49:24:9a:91:21:60:83:15:de:4c:79:ff:
                    2d:b6:7e:a0:2f:ad:36:18:a5:e4:84:06:10:54:e3:
                    aa:2c:3a:6b:14:b7:0a:ab:06:24:71:72:f9:29:93:
                    92:02:1f:54:6e:9a:8c:8b:ce:3b:f7:f9:73:61:c3:
                    c1:9d:79:e9:d6:d6:dc:93:87:e4:fb:9b:d9:86:7b:
                    99:10:e2:71:1e:9a:f7:f8:3a:49:4f:bf:ab:b9:59:
                    1b:35:53:10:28:c7:bf:f8:2e:47:1f:e8:94:cb:86:
                    fb:f5:8f:1e:d0:ba:cb:d8:9c:4b:22:dc:06:29:2d:
                    cc:6a:c7:07:2c:df:ff:b9:f5:c2:1a:95:76:f9:b3:
                    db:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:AE:37:33:05:D9:F7:18:6D:1F:AC:F7:BC:70:09:36:13:C4:42:82
            X509v3 Authority Key Identifier:
                keyid:E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:85:3c:7a:1e:98:c7:0e:3b:30:d4:f7:90:46:05:d5:1d:52:
         2c:77:99:e5:b3:08:c4:4a:ea:ba:c4:16:c9:93:82:da:68:56:
         f6:e7:65:fe:16:f5:ff:5e:43:ae:1a:9f:74:89:88:46:53:c4:
         6d:ae:5b:40:b1:e3:df:1a:2e:a5:76:ef:6b:1a:07:32:87:a3:
         df:5e:4e:c2:23:5f:5a:8e:62:5d:1d:ab:9c:fe:d1:1f:ac:b5:
         f8:3f:97:0a:d8:30:47:ff:2c:5c:ab:50:bf:a9:00:cd:6b:a9:
         9a:22:fb:f0:14:57:ab:80:7e:5d:bf:5f:d9:87:33:7d:a6:5f:
         1a:17:9d:12:d5:8c:f0:7b:c9:b9:ec:2c:87:80:82:5a:2a:92:
         03:e7:c3:8a:88:74:16:9e:ab:c8:4c:52:cf:e7:1f:63:12:fc:
         cc:38:72:c0:e9:88:13:db:bb:c3:0d:de:e1:0d:74:f4:01:49:
         87:d8:3e:1e:02:46:d4:6b:01:11:d2:77:e5:a9:63:d4:be:4b:
         26:8f:90:61:36:38:29:6e:0b:40:5f:25:4f:d3:58:db:e1:35:
         22:71:f5:c3:bb:31:03:7c:c1:f1:0f:61:47:9b:d2:58:4e:05:
         71:ed:42:a3:95:ea:7d:10:d4:d8:c7:70:29:5a:cf:22:c0:cb:
         3f:59:63:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 03:55:23 2026 by rpki-client