This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft
File:                     AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft (raw, json)
Hash identifier:          rBu5YUTJ/qnqrZPnmy2fGdqhyFMjxanZFQNJu6nUB0k=
Subject key identifier:   DF:20:9A:CB:DA:99:9E:25:0F:B2:15:3B:B5:9A:9C:D6:85:DC:D0:2D
Authority key identifier: AE:2E:1D:EF:AD:81:FF:39:E0:28:3E:D6:1B:C9:F9:DC:6D:A9:BE:96
Certificate issuer:       /CN=AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96
Certificate serial:       6E0E80B526A69A4F3AA188E72C64ECC51D7DB0D7
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft
Manifest number:          13
Signing time:             Mon 09 Feb 2026 14:51:45 +0000
Manifest this update:     Mon 09 Feb 2026 14:46:45 +0000
Manifest next update:     Tue 10 Feb 2026 15:12:45 +0000
Files and hashes:         1: 3138352e33382e32372e302f32342d3234203d3e20323031303738.roa (hash: ukyrW3OkENdui2e2lMLTPGtAVU5Vow3lLLqAXhAKFmY=)
                          2: 34352e3133362e33372e302f32342d3234203d3e203233353332.roa (hash: lQ482c7dNPnq+b2J23abNSxD06d725wZrRqBuqXdD1I=)
                          3: 34352e3133362e33382e302f32342d3234203d3e203232343237.roa (hash: DVZekNAuwA3ip9E2oJI8N7TO3EANrn8mc568ZgMFs/g=)
                          4: 3138352e33382e32352e302f32342d3234203d3e203133333335.roa (hash: 8Dov3dsVRdYA9hssq4paEGEc00JaP1eCascbI1uHeu4=)
                          5: 3139342e33312e3136342e302f32342d3234203d3e203136323736.roa (hash: AK1oqHAqMnnxuZW3vUOIU/C69osd8/Sq7aeyLgJgdu4=)
                          6: 3139342e33312e3136352e302f32342d3234203d3e203235313938.roa (hash: 1XT5eK0onCHcuEXsori5RDmzilEugz+LQ7l81zuXthY=)
                          7: 34352e3133362e33362e302f32342d3234203d3e203633303235.roa (hash: +pP+6RG5Xk+om9nXzvq6WKJqnS83TS8lI7ERhzFqThI=)
                          8: 34352e3133362e33392e302f32342d3234203d3e20313337323335.roa (hash: UhTypQACgX/qose3+Rz5crr8U0o2FSTLVVAcLhIaRXU=)
                          9: 3139342e33312e3136352e302f32342d3234203d3e20323134303235.roa (hash: EY78SLNdqDoVTGyYCNTO3r94gx+kGyxnzZbPSk3cNUM=)
                          10: 3139342e33312e3136362e302f32342d3234203d3e203136323736.roa (hash: xckGOR/L6iL88H1v7gJMeK7SKf18xGtIgBg4zda7xRA=)
                          11: 34352e3133362e33372e302f32342d3234203d3e20323136313338.roa (hash: JZ1L2KQs0f2eXdqI4to3PHDMlAV/dVTRle8eNzjpil8=)
                          12: AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.crl (hash: ja6HZ4qPZGT2b3KUcYCVWnabkBbpPzOlumNqF/lWW7Q=)
                          13: 3138352e33382e32362e302f32342d3234203d3e20323033303736.roa (hash: sDu6cSq1jkixXmJL543CieEIPCSsRynaX7T0t0iTsp4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:0e:80:b5:26:a6:9a:4f:3a:a1:88:e7:2c:64:ec:c5:1d:7d:b0:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96
        Validity
            Not Before: Feb  9 14:46:45 2026 GMT
            Not After : Feb 10 15:12:45 2026 GMT
        Subject: CN=DF209ACBDA999E250FB2153BB59A9CD685DCD02D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:33:78:e6:aa:fc:a1:f5:c5:99:ea:78:67:18:
                    60:8b:8d:51:22:22:cf:4d:f1:ca:80:b0:cb:c3:b4:
                    61:b6:c5:6f:81:af:84:f9:25:1e:ef:c8:20:73:76:
                    98:33:16:7f:44:ae:28:2e:54:81:ec:b1:28:97:9a:
                    87:82:c7:31:65:db:cb:79:b7:27:aa:c3:59:99:3e:
                    22:a3:43:0e:d0:e5:98:17:0d:32:71:5c:e3:39:97:
                    2b:8d:7f:6d:b1:db:f3:c2:c2:e0:4e:bc:33:d3:fe:
                    e7:37:ba:31:83:89:fc:71:7a:91:63:1b:3d:ba:33:
                    5f:4d:48:44:0e:f4:f9:42:66:89:69:b7:d5:3f:b5:
                    06:a5:f8:b7:3c:66:95:e0:46:34:36:4c:d8:18:b7:
                    84:13:80:78:c0:5a:1e:30:fa:fe:56:9a:42:79:6e:
                    0c:b3:2b:36:a8:c5:ff:a7:d6:d5:4a:b9:56:6d:20:
                    f9:6c:62:fc:f5:94:c0:3e:ae:a9:60:9e:c9:a8:86:
                    71:19:86:63:a9:4e:ee:8c:21:fe:9b:d6:53:81:76:
                    6c:9c:0f:74:c2:c4:9e:f0:da:d4:cb:de:e3:4e:8b:
                    9d:50:a2:bc:cb:20:e0:e8:db:b5:93:2d:f7:f9:a9:
                    e3:87:d8:f0:6f:18:a1:85:39:cc:45:8b:bb:07:07:
                    e2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:20:9A:CB:DA:99:9E:25:0F:B2:15:3B:B5:9A:9C:D6:85:DC:D0:2D
            X509v3 Authority Key Identifier:
                keyid:AE:2E:1D:EF:AD:81:FF:39:E0:28:3E:D6:1B:C9:F9:DC:6D:A9:BE:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:68:4c:35:df:50:04:eb:26:10:68:28:e9:91:f3:2d:05:21:
         49:f6:14:e5:58:df:e7:3c:8e:91:0c:a9:0a:40:a7:b7:f2:52:
         67:68:52:ab:0c:90:63:93:9e:c0:4a:ef:a7:d2:c5:4e:f9:6e:
         a7:b9:b6:68:77:f6:74:e1:26:d6:46:de:83:7a:3a:6d:7e:73:
         e9:cf:fd:3a:b7:fe:5d:db:68:02:3c:55:4c:ba:a2:74:91:bf:
         e6:cf:47:45:82:71:1d:ec:d5:f0:3d:b7:7b:fe:73:ea:9e:e1:
         7c:b3:3e:1b:09:74:d5:ea:03:88:87:58:b4:5f:e1:6a:7c:98:
         d3:08:1d:1f:63:68:2b:eb:ad:7d:19:6f:ac:5d:03:b6:bf:99:
         ca:de:82:46:a4:85:b2:8f:4f:b7:b7:2c:64:69:a5:4d:7c:af:
         0f:12:73:8e:bd:39:58:fe:ee:af:f0:0e:76:68:53:6c:31:82:
         62:e2:1b:7e:1e:a2:dc:a4:d9:9c:61:9c:83:bc:d8:f3:87:15:
         89:00:fe:6d:10:ab:de:06:9b:89:34:cd:21:cf:1d:3f:da:1b:
         56:6c:51:fb:00:e1:6b:d3:81:f5:ad:0e:0e:52:80:62:aa:24:
         11:94:93:86:36:b5:51:fb:58:48:76:af:8a:24:48:0c:5e:ff:
         38:a7:6a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:38:43 2026 by rpki-client