This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft
File:                     C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft (raw, json)
Hash identifier:          83sKLToTJuxXoo3/NsEjZhshePpfkqcJA9fh3ckksi8=
Subject key identifier:   7D:B2:8C:8B:3C:96:2E:31:4A:57:85:25:F7:E7:9D:1E:6E:66:2F:60
Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
Certificate issuer:       /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Certificate serial:       47B23F31B5978FC7E7AEBD49B8A3BEA0D80B6600
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft
Manifest number:          0260
Signing time:             Mon 19 Jan 2026 16:59:12 +0000
Manifest this update:     Mon 19 Jan 2026 16:54:12 +0000
Manifest next update:     Tue 20 Jan 2026 19:15:12 +0000
Files and hashes:         1: 3130332e34392e3132382e302f32342d3234203d3e20313534303439.roa (hash: RP7fF4ljaFnG1QBw6wHJTYmQiSzsC+UtOPXQULgrH/c=)
                          2: 34332e3233302e38342e302f32342d3234203d3e203633313939.roa (hash: mN7VhJyGfS7zh6TYiLbpihJCInKpBaTwITIrbKnSr78=)
                          3: 3130332e34392e3133312e302f32342d3234203d3e20313534343038.roa (hash: uNydLTQQX3HfUttLHpAQztbzmsLo2FwUjxcM/0z5ejA=)
                          4: 34332e3233302e38342e302f32342d3234203d3e203235313938.roa (hash: D5rxpe/mz9cZbwkoouLs3Io8a9VjYwAhmSHGosd1BJQ=)
                          5: 34332e3233302e38352e302f32342d3234203d3e20323131343430.roa (hash: hoZQSGqkvoyh+Fwe28UicpO6RAJD80P7rklT/Di/mQU=)
                          6: 33312e32322e3130352e302f32342d3234203d3e20323135303236.roa (hash: CEnX1eNlwK6zTbdiivvYtvATObcHBs1ojc6GAmrJxmA=)
                          7: 33312e32322e3130372e302f32342d3234203d3e20313337353137.roa (hash: zucU5bamNfYRw/esvivyzaXHMAl8N0xQ+Q3coI+3JvA=)
                          8: 33312e32322e3130392e302f32342d3234203d3e203432383331.roa (hash: uRUTbbdZ8AYVGvK3CKTe3KYxaaV1m1bGyvfgh/rstUI=)
                          9: 33312e32322e3130382e302f32342d3234203d3e203432383331.roa (hash: 8yRIzyX7kSL5wlZucsqrW2Cnq9iyHa3XujSoVf8z1CY=)
                          10: 33312e32322e3131312e302f32342d3234203d3e20323135333535.roa (hash: brok2XUOzC0OAQs7efh1lP/TIOrHW70pJohRfs3tgEM=)
                          11: 3130332e34392e3133312e302f32342d3234203d3e20313338333634.roa (hash: PCBT1S5SsQNvPExnIxpGrOJnC4Zxkw3ilANCZAM8stA=)
                          12: 3130332e34392e3133312e302f32342d3234203d3e20313437323631.roa (hash: gI3QMk1nxnVJ3ar9nDADeDjafrF5rxSYgoW75rlLkBk=)
                          13: 3130332e34392e3132392e302f32342d3234203d3e20313533373836.roa (hash: 8ciOgQf/5f2kkiTl0Q7pGFYfq76YJlE+KlbE9/JeEuM=)
                          14: 33312e32322e3130342e302f32342d3234203d3e20313938303230.roa (hash: 2c/Q6mL57WPxOvD74dnFYEhVwjt0QpjY04YbOcxeQJ8=)
                          15: 34332e3233302e38352e302f32342d3234203d3e20323132363639.roa (hash: vgObUGnSREXD+ZGKD48TBidzsDD4bb41p0YUFbXX2ak=)
                          16: 33312e32322e3130362e302f32342d3234203d3e20323133353032.roa (hash: gMhOzO7mxft8aHHqMyhMEvoyI4x3AcVBhgkY3Yc2Ryc=)
                          17: 3130332e34392e3133302e302f32342d3234203d3e20383334.roa (hash: BeVzuWN/0Qvsq9GYvTx4ZuaACwAjnMKfoJ2e9z9vYwU=)
                          18: C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl (hash: in30pHHBkbOv1I6ZGOzBF/nCmED0p0DhlHZLIoCf428=)
                          19: 3130332e34392e3133312e302f32342d3234203d3e20323133373131.roa (hash: 0KQImRtVxQSlo2IkiWEm4Ta1ecdBVyx0gErMixeusbs=)
                          20: 34332e3233302e38362e302f32332d3234203d3e2033343931.roa (hash: BqbUmbythNNYP4WqssroNY2sOPvoyuRgXIRAVuIytpA=)
                          21: 33312e32322e3131302e302f32342d3234203d3e20323038393035.roa (hash: GDspqRij6MiNPh7udQ2b5uDlkV2tbpp6r9PQ/alfk6o=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 09:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:b2:3f:31:b5:97:8f:c7:e7:ae:bd:49:b8:a3:be:a0:d8:0b:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
        Validity
            Not Before: Jan 19 16:54:12 2026 GMT
            Not After : Jan 20 19:15:12 2026 GMT
        Subject: CN=7DB28C8B3C962E314A578525F7E79D1E6E662F60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:cd:4a:2f:6c:3b:71:2b:d9:e7:24:31:cc:76:
                    25:e8:dc:90:43:2b:f9:91:7e:98:a1:c0:e5:b9:90:
                    fb:99:a5:92:26:66:0e:44:c9:b5:5c:1e:65:42:96:
                    98:04:fc:61:bb:1e:68:59:a9:52:ed:d4:aa:9a:a0:
                    34:15:29:e8:24:12:c7:83:49:f9:a4:dc:ae:32:cc:
                    ab:95:e3:46:76:9e:74:3c:c6:30:ec:f2:49:a6:45:
                    d5:23:08:71:b0:72:80:12:e6:6c:fd:fe:c1:12:c1:
                    12:9a:30:09:2a:fa:43:94:cf:f6:17:31:17:81:19:
                    56:e2:9b:60:a3:d4:6c:37:a2:7a:08:1f:37:6a:33:
                    5d:68:72:d5:e7:ef:e6:0e:85:6d:a2:70:e8:97:ad:
                    2b:d0:e6:57:b7:0c:c5:7b:7c:de:3f:1e:84:c0:0e:
                    ed:5b:6c:67:2d:2b:31:5e:ff:d3:61:ea:1f:17:ca:
                    e6:9e:7b:4f:48:5b:35:55:7d:a7:5e:e8:ab:2c:97:
                    89:c7:5e:b1:2a:57:05:51:9c:c8:8e:a8:ce:c7:a3:
                    2c:ba:9d:8b:fd:59:9f:6e:2b:d9:65:49:f4:a2:76:
                    83:01:76:a0:71:61:fb:cd:07:f8:9b:90:f6:84:05:
                    e8:17:65:ff:85:3b:55:46:a8:44:e3:d3:0f:01:e9:
                    34:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:B2:8C:8B:3C:96:2E:31:4A:57:85:25:F7:E7:9D:1E:6E:66:2F:60
            X509v3 Authority Key Identifier:
                keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:65:f1:b1:79:91:4d:89:c9:70:6f:1e:22:60:eb:68:0c:cd:
         be:92:44:1d:e0:f0:f7:a8:37:ce:01:78:bc:5c:cf:17:31:40:
         4e:1c:d7:9f:f6:2b:b2:8b:c1:91:11:50:54:01:c9:ed:bb:7f:
         47:4d:c7:ec:a4:a6:61:25:9c:b9:dd:4e:64:b5:1e:f9:d6:b1:
         1d:de:21:6c:14:9d:63:77:b3:3d:6e:05:d3:c6:da:20:9a:cc:
         71:a4:8e:30:7b:3f:e6:2b:9f:c1:78:ea:b3:7f:31:9e:ba:6b:
         76:03:9f:e3:ec:06:26:1b:a7:06:73:f3:4e:cc:d1:4b:10:17:
         6b:40:d6:69:fe:8f:52:92:c4:79:1c:f5:bd:5e:38:eb:15:cd:
         a8:75:84:15:7b:d2:ef:a0:af:77:34:be:a9:31:e4:56:72:66:
         c2:87:31:48:88:08:65:15:f2:2c:b0:96:b3:56:4f:9c:0e:38:
         24:33:9e:46:4d:30:08:67:9b:10:37:66:3a:f5:78:46:10:81:
         76:13:a7:2f:63:58:65:09:de:1b:1f:1a:11:0d:d2:bb:34:d7:
         00:43:17:0b:16:e5:0b:dd:86:0d:87:e5:9d:c8:6c:d2:87:f5:
         5b:2b:c2:10:88:0c:98:7a:4d:36:f1:39:08:e6:5e:af:16:69:
         df:3e:eb:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 18:37:48 2026 by rpki-client