This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
File:                     F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft (raw, json)
Hash identifier:          3rONUtqL2Xfx4k9FRhNbSXG+GLO6MghJ5ncPeeTHqwQ=
Subject key identifier:   09:7F:50:61:E2:81:B4:9D:2E:38:43:D1:6F:8B:88:EA:A4:AA:C5:78
Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3
Certificate issuer:       /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
Certificate serial:       2F5037EC1AB540F4947612FD4A42F451FB1F9FE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
Manifest number:          0222
Signing time:             Sat 24 Jan 2026 15:44:41 +0000
Manifest this update:     Sat 24 Jan 2026 15:39:41 +0000
Manifest next update:     Sun 25 Jan 2026 16:57:41 +0000
Files and hashes:         1: 3137382e3133322e3139362e302f32342d3234203d3e20333933393432.roa (hash: D28ld5kVJceea0qzm5GNZqptmPyuFgFAFujny6boKiE=)
                          2: 3137382e3133322e3139322e302f32342d3234203d3e203134363138.roa (hash: UgtgsSF4DmUx+FqAs5WV6TWI9fyKhqfkEeJgaHpzYEc=)
                          3: F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl (hash: 2frSVy4j26dber1DgpXHv0qLSGSxqmbyHUSuRE6vYPQ=)
                          4: 3137382e3133322e3139382e302f32342d3234203d3e203133333335.roa (hash: aweSXhd8mJw0T/P7jNxc4m1Vtbpxw0PK6PNEOA0lb/w=)
                          5: 3130392e3233342e3231342e302f32342d3234203d3e203433363431.roa (hash: 6BGcWOFPHM6AYGamfRs+s+1VsWvQIYZ1oxiJHAvfJjg=)
                          6: 3130392e3233342e3231332e302f32342d3234203d3e203434323133.roa (hash: LFoy9nvq32ZdqPmOf9YSI6suXdwdYoUwrv21WI7Aj/Y=)
                          7: 352e3232362e3138372e302f32342d3234203d3e203331383938.roa (hash: kBpq1LEvwgTf4WM51jxpYydvFyszuazgeravGzXETJo=)
                          8: 352e3232362e3138352e302f32342d3234203d3e2034363337.roa (hash: EK5hsG3gRXHAek4iXi8s4jAj1cLZXBGuH9nPrYMwZyI=)
                          9: 3130392e3233342e3231312e302f32342d3234203d3e203133333335.roa (hash: 3WrBrAOV7SjPMl8BInuI3B0KtzI0JvDAuGMIMq+S9D8=)
                          10: 3130392e3233342e3230392e302f32342d3234203d3e20333935373933.roa (hash: o3GE/oY8MCJAGEjtcPLWPVhOZbFRZAMmde/X42j4j+s=)
                          11: 352e3232362e3139312e302f32342d3234203d3e20323135323338.roa (hash: UAeHXbW3QhFNKys+iIRYQQp2rK+CbLJVmAbT44zmQ1k=)
                          12: 352e3232362e3138382e302f32342d3234203d3e20313532313739.roa (hash: nFzeEleWTSIYtIbjgNdPg9c+CwbgHF8u+W2VGtxEBpQ=)
                          13: 3137382e3133322e3139332e302f32342d3234203d3e2033333230.roa (hash: oI+z5B0JaicbPoA0ktNCShJBGRgRTGuhGcC7A8+Ru9U=)
                          14: 352e3232362e3139302e302f32342d3234203d3e203633313939.roa (hash: 2DnoHFrcYgZYTX09bTGRwV4k6M3RH4U3hsvU0Uso1jI=)
                          15: 3137382e3133322e3139322e302f32342d3234203d3e203136353039.roa (hash: 0XlqzvD5WZeVhzrMIb+ArV6j60KVoqxW88qIB/mg2yk=)
                          16: 3137382e3133322e3139342e302f32342d3234203d3e2033333230.roa (hash: BSTbx9NRftehGX7dsv5BX6onmmpsKJtVOHvBBhUYkJA=)
                          17: 3130392e3233342e3231352e302f32342d3234203d3e20393733.roa (hash: 7XlPdZ+5k5dznfPMoT3Ni5uRfyL41Likgo5fplEaDTA=)
                          18: 3130392e3233342e3230392e302f32342d3234203d3e203235313630.roa (hash: 4qmNKGx6VCIK53hbSqHwJPgKKMACqFJu608tkfoDU90=)
                          19: 3130392e3233342e3230382e302f32342d3234203d3e203331383938.roa (hash: b3VPqm78d32upkRS45HOejDpaZzakM7RvUm8zYxxirQ=)
                          20: 3130392e3233342e3231302e302f32342d3234203d3e203432383331.roa (hash: XdAkV6zbkuI1AZDLksTC73fyYmD1RaBTy+I3AGFuaxA=)
                          21: 352e3232362e3138392e302f32342d3234203d3e2039333034.roa (hash: KMYDoKnPWH3TUSOlAA/wzDsC66Y3O5PlUt+i9WMB8YA=)
                          22: 352e3232362e3138362e302f32342d3234203d3e203633303233.roa (hash: kysMqqfL+cxQFiZ9hx+MYhVVLOWVsGxNP3RzuLn0/y4=)
                          23: 3130392e3233342e3230392e302f32342d3234203d3e20323134313433.roa (hash: kfImODVrJ9DJfBDHIqmGZX0zk9Yq1KND0WLu9uNQXdY=)
                          24: 3137382e3133322e3139382e302f32342d3234203d3e20323635393139.roa (hash: u4r7X/suBx+FzLFBQvOSNxzBhjg3wd1M6uflDgVU6DA=)
                          25: 3137382e3133322e3139382e302f32342d3234203d3e20323133393230.roa (hash: 18uWoZxLQSNFgorcRVHtw6ibhqjhBqTrkSvVXqFqM+Y=)
                          26: 3137382e3133322e3139392e302f32342d3234203d3e203631333137.roa (hash: g03b1IthT7R6emRcKoovUUAfL6xJm+JexZ6oxCLs8E4=)
                          27: 352e3232362e3138342e302f32342d3234203d3e20313534303439.roa (hash: H9hlRxAktpjIeT3DJhaD4nFRiEtoUGveoYH/KllFDKE=)
                          28: 3137382e3133322e3139352e302f32342d3234203d3e20313335333931.roa (hash: zF5vtY5ZU3KHcRy+FQX7xaMDnJJVjBqba81pLZ1Y9sw=)
                          29: 3137382e3133322e3139372e302f32342d3234203d3e2033333230.roa (hash: g0HR3CrBWD7c96+vrs4TgM7+nplGfauLE7gBOh8WqYo=)
                          30: 3130392e3233342e3231322e302f32342d3234203d3e20313937353337.roa (hash: Lxa7aR1NsNsgX0Y0Me+SOrl9Sd6ODfPmrUUHY7uRFAg=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 16:57:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:50:37:ec:1a:b5:40:f4:94:76:12:fd:4a:42:f4:51:fb:1f:9f:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3
        Validity
            Not Before: Jan 24 15:39:41 2026 GMT
            Not After : Jan 25 16:57:41 2026 GMT
        Subject: CN=097F5061E281B49D2E3843D16F8B88EAA4AAC578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:26:25:1c:87:6a:d0:19:06:60:f7:11:c8:87:
                    b1:d0:12:df:24:ee:4d:30:30:d6:5e:c1:71:4c:eb:
                    51:d8:82:80:fc:74:88:d7:c0:83:98:b9:c2:2e:66:
                    ea:48:ee:aa:0b:1b:a4:40:fa:75:4a:d5:76:d9:ec:
                    a2:92:86:de:92:8d:50:a7:23:20:d0:d3:aa:cb:63:
                    96:c4:0e:5f:23:f7:29:6c:16:23:4a:01:87:2f:06:
                    4e:0a:43:88:75:32:77:6e:bf:6d:7e:f4:df:a9:15:
                    86:02:9d:a7:9b:bf:31:a5:4b:9d:c5:3c:be:5f:a8:
                    6f:30:df:5e:c4:20:df:89:23:ab:e2:68:22:a1:75:
                    de:6f:97:04:3b:95:5d:ca:55:76:dc:a6:a3:02:d4:
                    41:89:53:25:ee:67:a2:e5:70:41:7d:0b:a1:ba:a4:
                    e3:21:a0:f5:a2:86:04:18:a1:d3:35:29:4b:7e:17:
                    b7:45:fc:90:70:af:2f:ae:c4:eb:70:57:73:78:19:
                    dd:32:d1:fa:d0:92:ae:03:23:8e:de:b3:c5:c5:0c:
                    ea:b1:bb:c3:8b:87:2d:20:05:ea:a8:b6:5a:b7:2f:
                    44:5a:19:a8:33:c1:fe:42:56:86:66:16:96:d2:af:
                    88:d4:52:77:34:5a:1d:6b:57:e5:16:18:03:c4:6d:
                    a3:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:7F:50:61:E2:81:B4:9D:2E:38:43:D1:6F:8B:88:EA:A4:AA:C5:78
            X509v3 Authority Key Identifier:
                keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:f7:a7:ba:8d:77:11:28:c0:34:63:8b:43:a4:8a:38:f5:27:
         2b:d9:cb:a5:18:fd:93:62:c8:f7:8a:5c:57:a0:8a:86:c0:01:
         83:38:b0:f4:0a:39:b7:72:82:a8:aa:72:ab:e4:6a:84:8e:9d:
         27:5f:9e:4b:1b:2d:bc:e8:8a:9f:cf:0d:da:e0:c7:8d:03:85:
         d4:01:c9:10:da:d6:a8:68:1d:04:c2:90:11:02:d5:f7:a4:36:
         2e:88:4e:ce:ac:3e:6c:a3:75:8f:3f:00:79:8d:55:ac:c0:fd:
         fe:fb:f3:f7:93:3e:1e:e7:d1:5d:95:f2:44:e2:2a:94:4c:a7:
         eb:10:2f:bd:18:41:a4:4a:3c:fe:64:5d:74:0b:7d:08:c1:67:
         58:cc:2d:d2:55:83:54:da:81:19:32:09:38:2b:51:6f:51:b0:
         26:60:30:27:2d:7c:2e:cb:8f:36:19:8d:b1:f5:35:62:53:ba:
         14:9a:69:5c:e6:ce:56:5c:fd:23:98:86:07:ac:c5:81:d3:4f:
         69:3f:64:09:e2:32:89:ac:af:34:34:64:08:e1:5f:34:8f:65:
         19:a8:d2:b8:c1:98:71:e5:94:37:53:06:81:9d:1f:0a:d1:a8:
         36:55:58:0a:47:fb:d5:49:29:56:b1:f8:b7:43:8b:a8:6b:3a:
         b1:cf:d0:6b
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUL1A37Bq1QPSUdhL9SkL0Ufsfn+cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZjc2OGZmNmU2ODE4NThjMGVjMTlmM2E5M2ZhMTc5MmNk
MTZjZWVkMzAeFw0yNjAxMjQxNTM5NDFaFw0yNjAxMjUxNjU3NDFaMDMxMTAvBgNV
BAMTKDA5N0Y1MDYxRTI4MUI0OUQyRTM4NDNEMTZGOEI4OEVBQTRBQUM1NzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaJiUch2rQGQZg9xHIh7HQEt8k
7k0wMNZewXFM61HYgoD8dIjXwIOYucIuZupI7qoLG6RA+nVK1XbZ7KKSht6SjVCn
IyDQ06rLY5bEDl8j9ylsFiNKAYcvBk4KQ4h1Mnduv21+9N+pFYYCnaebvzGlS53F
PL5fqG8w317EIN+JI6viaCKhdd5vlwQ7lV3KVXbcpqMC1EGJUyXuZ6LlcEF9C6G6
pOMhoPWihgQYodM1KUt+F7dF/JBwry+uxOtwV3N4Gd0y0frQkq4DI47es8XFDOqx
u8OLhy0gBeqotlq3L0RaGagzwf5CVoZmFpbSr4jUUnc0Wh1rV+UWGAPEbaNbAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUCX9QYeKBtJ0uOEPRb4uI6qSqxXgwHwYDVR0j
BBgwFoAU92j/bmgYWMDsGfOpP6F5LNFs7tMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMGNjMDg3MzctOTI2Ny00MDJhLTk5ZDQtN2FhYWZlYTQ0
NGVkLzAvRjc2OEZGNkU2ODE4NThDMEVDMTlGM0E5M0ZBMTc5MkNEMTZDRUVEMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkyal9ibWdZV01Ec0dmT3BQNkY1TE5G
czd0TS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wY2MwODczNy05
MjY3LTQwMmEtOTlkNC03YWFhZmVhNDQ0ZWQvMC9GNzY4RkY2RTY4MTg1OEMwRUMx
OUYzQTkzRkExNzkyQ0QxNkNFRUQzLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAPenuo13ESjANGOLQ6SK
OPUnK9nLpRj9k2LI94pcV6CKhsABgziw9Ao5t3KCqKpyq+RqhI6dJ1+eSxstvOiK
n88N2uDHjQOF1AHJENrWqGgdBMKQEQLV96Q2LohOzqw+bKN1jz8AeY1VrMD9/vvz
95M+HufRXZXyROIqlEyn6xAvvRhBpEo8/mRddAt9CMFnWMwt0lWDVNqBGTIJOCtR
b1GwJmAwJy18LsuPNhmNsfU1YlO6FJppXObOVlz9I5iGB6zFgdNPaT9kCeIyiayv
NDRkCOFfNI9lGajSuMGYceWUN1MGgZ0fCtGoNlVYCkf71UkpVrH4t0OLqGs6sc/Q
aw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 09:22:45 2026 by rpki-client