This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft
File:                     529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft (raw, json)
Hash identifier:          XDYv2VY79MSbWz06NoucgrM1zTr+lzlYGxh3I1f3lAY=
Subject key identifier:   94:86:94:5D:69:92:1A:09:54:9F:92:55:50:22:D8:3F:33:3F:BD:97
Authority key identifier: 52:9B:FC:6D:D3:06:B2:C4:96:29:AA:6C:EB:31:31:94:CA:A5:D3:3F
Certificate issuer:       /CN=529BFC6DD306B2C49629AA6CEB313194CAA5D33F
Certificate serial:       20101C82A5F6456A656423E7C07C4141F9527404
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft
Manifest number:          0B
Signing time:             Sun 25 Jan 2026 13:57:06 +0000
Manifest this update:     Sun 25 Jan 2026 13:52:06 +0000
Manifest next update:     Mon 26 Jan 2026 14:53:06 +0000
Files and hashes:         1: 326130663a316363363a623131303a3a2f34342d3438203d3e20313534313835.roa (hash: ib4ImjZeR/tjrdRWs2Z2Xtcq0lxhnT9KoS6I+V5ukmg=)
                          2: 326130663a316363363a623130303a3a2f34342d3438203d3e20323034323131.roa (hash: 29kVVWLYr7weidsqfKbNgXTNshpnIGiMJ62fMPFeOns=)
                          3: 326130663a316363363a623132303a3a2f34342d3438203d3e20323039353537.roa (hash: scEe2IowhilowN4x+WVVH9irUBDlv+kjiHhElpwuSSI=)
                          4: 326130663a316363363a626162303a3a2f34342d3438203d3e20323034353335.roa (hash: cHEORjblcG00sbZyjw6Bu9EsXIA7oC5/AO7mRT4IUjg=)
                          5: 529BFC6DD306B2C49629AA6CEB313194CAA5D33F.crl (hash: ZOqW+M9JuZteGxPojCl2kM6vF2ec3REivjqQWXPBz70=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 12:34:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:10:1c:82:a5:f6:45:6a:65:64:23:e7:c0:7c:41:41:f9:52:74:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=529BFC6DD306B2C49629AA6CEB313194CAA5D33F
        Validity
            Not Before: Jan 25 13:52:06 2026 GMT
            Not After : Jan 26 14:53:06 2026 GMT
        Subject: CN=9486945D69921A09549F92555022D83F333FBD97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b1:8c:50:66:93:04:82:b9:5a:35:f5:f5:e8:
                    cc:80:80:11:15:4b:38:ba:16:59:7d:7e:37:4e:ae:
                    83:12:65:29:73:d4:c4:6e:99:80:4f:63:8f:86:29:
                    e3:2b:e0:b8:61:80:99:55:b5:b4:63:21:14:01:f0:
                    85:cd:43:1f:4d:66:70:31:0b:03:ea:13:86:6b:42:
                    cd:8e:b9:ea:0b:b0:23:c4:40:30:93:8f:bd:51:95:
                    8e:fe:cb:82:c2:70:e5:49:6b:b3:6d:ba:6f:e4:94:
                    14:ca:26:94:47:a5:e9:4c:38:b1:47:9e:89:63:3a:
                    54:05:55:31:fb:33:cc:c7:0a:3c:e8:29:c3:96:56:
                    90:cf:2a:d6:06:7a:51:48:0f:02:82:22:33:1e:ba:
                    88:0c:ec:77:eb:80:9c:21:2d:25:98:6a:98:62:28:
                    81:13:94:91:6d:b0:ed:eb:59:54:82:84:96:80:6c:
                    33:a1:30:61:a4:dc:2a:9f:ae:ba:43:e0:f2:5f:bf:
                    04:b9:e5:54:f1:eb:c8:a0:51:1c:9d:61:d2:b2:79:
                    bc:00:78:2e:fd:56:47:83:ee:bd:e1:8b:41:5a:7c:
                    3a:54:a9:54:9f:62:47:b5:ba:e0:c9:9b:e4:fd:01:
                    b2:23:05:f7:88:22:fb:2d:37:f4:ac:39:b6:05:99:
                    2f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:86:94:5D:69:92:1A:09:54:9F:92:55:50:22:D8:3F:33:3F:BD:97
            X509v3 Authority Key Identifier:
                keyid:52:9B:FC:6D:D3:06:B2:C4:96:29:AA:6C:EB:31:31:94:CA:A5:D3:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/2/529BFC6DD306B2C49629AA6CEB313194CAA5D33F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:b9:01:85:9c:cf:94:10:b2:f7:60:7a:ce:9c:5b:cc:72:27:
         db:c8:e0:3f:4d:3e:c6:01:8c:23:45:04:e0:da:f0:d4:20:53:
         07:85:08:b0:b6:de:34:48:5f:24:29:eb:df:6c:f8:27:54:5b:
         b0:14:1f:53:8b:e5:f5:b0:f7:bb:e3:75:13:01:87:4d:c6:4b:
         1b:b1:df:30:d8:99:8f:ee:83:53:56:cf:d4:5b:9d:57:9d:13:
         b8:96:26:81:f6:7f:50:09:88:c7:f0:62:30:29:ed:e4:32:b3:
         37:19:fe:d9:43:f8:e4:59:4c:11:eb:a2:48:88:be:f2:0e:22:
         30:55:e1:8e:85:54:22:c6:f4:71:36:a2:c0:71:b0:a7:40:a6:
         fb:44:a2:10:bc:62:12:23:a3:d3:ce:fc:ec:51:c6:b9:20:fc:
         7e:91:70:0f:21:c6:1f:82:93:b2:bc:4f:ca:9d:ff:b3:4d:0b:
         ab:21:ec:eb:d3:f9:7f:bc:98:65:f6:a7:d5:01:46:19:fc:32:
         8c:f5:b2:af:61:a2:27:80:74:49:a1:1f:51:f5:5e:5c:03:a9:
         e0:d9:cc:66:8a:4b:5e:81:bc:ec:cb:6e:e2:1b:76:8e:13:4d:
         17:b9:e0:a8:d0:9c:b2:c7:91:2a:61:5d:1f:b8:df:75:33:83:
         56:63:b2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----