This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.mft
File:                     F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.mft (raw, json)
Hash identifier:          su0G/Hoz61QMClC2f/UZz/BgRpserC07U6q+bm/ZIgM=
Subject key identifier:   43:60:73:54:52:FF:2F:42:B5:E9:3D:D1:9D:04:9E:CC:C8:D2:19:2C
Authority key identifier: F4:00:72:FF:DC:0F:1B:15:A6:9E:5B:C7:9A:2F:58:8C:F9:39:F4:F4
Certificate issuer:       /CN=F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4
Certificate serial:       6A1142A5E70F8BF8CADA81FDCB908B588EC9CDC3
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.mft
Manifest number:          01FF
Signing time:             Sun 25 Jan 2026 10:41:39 +0000
Manifest this update:     Sun 25 Jan 2026 10:36:39 +0000
Manifest next update:     Mon 26 Jan 2026 12:40:39 +0000
Files and hashes:         1: 326131343a373538303a663330303a3a2f34302d3430203d3e20323135343730.roa (hash: NYjufeU5nji5tNLR9669xX3/zAC6IxnZWFE8KHjLm6Y=)
                          2: 326131343a373538303a663330313a3a2f34382d3438203d3e20323135343730.roa (hash: AE4p/Aixbf8sW/I3bLOtRbnycH5RSiNSfyRxjv0S1Bw=)
                          3: 326131343a373538303a663330323a3a2f34382d3438203d3e20323135343730.roa (hash: cnH25DZSJN2OBLW6Zt+bGPFETNQaOmZLaMlgHZ7R4qw=)
                          4: 326131343a373538303a663335303a3a2f34342d3438203d3e20323135343730.roa (hash: QilIoQFDy86/kZThJ8L3yMVtIo9IuLOdGRNLTOrhh2s=)
                          5: 326131343a373538303a663334303a3a2f34342d3438203d3e20323133343238.roa (hash: Z7InVHvKI4/fqGkdwdL0zl1WS4Iyc09xlEsVxaD8p5A=)
                          6: 326131343a373538303a383030303a3a2f33362d3438203d3e20323135343730.roa (hash: eW78302x42s0yWxTWFOWa+EI8gsEah6kU2PGz4oxB3o=)
                          7: F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.crl (hash: 2yykyGgYMX7MwGbDooMeqYOLE8pluQxLxla2iKl0w1c=)
                          8: 326131343a373538303a363030303a3a2f33362d3438203d3e20323039353534.roa (hash: 7bwiHUB+0vEKFxOfRTRz/zFRAxgK1WxBsECd2SJxocI=)
                          9: 326131343a373538303a663333303a3a2f34342d3438203d3e20323134303330.roa (hash: xT802+pU8TCiwwtqUkMgmyrnKplgnOIvmjCKunR0EEU=)
                          10: 326131343a373538303a663332303a3a2f34342d3434203d3e20323135343730.roa (hash: XgYHMfBb1tBckmqvYy7acYD3hSj36S+vN34vUn5oaD4=)
                          11: 326131343a373538303a663331303a3a2f34342d3438203d3e20323134303834.roa (hash: CM6yYKZbtILEkjFEjxVgY2XszlZITvyYfxEqji4AD0c=)
                          12: 326131343a373538303a343030303a3a2f33362d3336203d3e20323133343238.roa (hash: f38GGJwA8aLs49rknYyp3/ozCmX5eTGnavOZGUBAqUw=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 01:36:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:11:42:a5:e7:0f:8b:f8:ca:da:81:fd:cb:90:8b:58:8e:c9:cd:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4
        Validity
            Not Before: Jan 25 10:36:39 2026 GMT
            Not After : Jan 26 12:40:39 2026 GMT
        Subject: CN=4360735452FF2F42B5E93DD19D049ECCC8D2192C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:51:6a:34:7c:6c:95:71:d5:a1:03:90:2d:91:
                    13:df:f7:13:1a:a8:24:4d:5c:51:d9:c9:8f:1d:e9:
                    9b:60:8c:83:51:ea:a3:dc:d9:84:68:65:b7:f9:b2:
                    0e:59:48:29:41:e4:89:69:9f:81:dd:64:9f:fc:9c:
                    72:82:04:8c:b2:f7:09:b1:ad:73:03:f5:83:7e:c1:
                    9b:37:1a:9a:a8:bd:a1:15:6e:2c:5d:1c:e0:75:dd:
                    c3:79:6e:78:eb:f2:73:38:bb:87:3f:bc:3d:f5:5a:
                    57:e3:70:f8:95:5f:fb:73:51:46:28:96:f5:8d:f7:
                    69:cb:1b:97:8b:d9:b9:b2:92:13:a5:f3:bc:97:8a:
                    97:bf:24:48:d2:aa:9a:4d:bb:33:56:2a:47:28:4f:
                    e5:df:98:c5:8e:8e:91:b7:1e:65:e3:12:94:a9:49:
                    62:54:fd:3d:e8:65:66:dd:ac:ad:69:86:a5:02:50:
                    7d:a7:83:9f:c9:3d:82:7a:e4:4d:a4:ed:2b:dd:77:
                    f2:7b:bc:0d:64:0f:53:7c:dd:ca:0a:bc:6c:d9:f7:
                    b9:db:61:9a:87:6a:0b:78:92:cd:d7:38:89:a3:c5:
                    d7:0a:a8:4f:6d:7f:29:b4:d4:b5:df:b1:a4:dc:a6:
                    ca:fc:cd:e0:25:a1:4b:45:55:12:81:ed:4e:40:ab:
                    55:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:60:73:54:52:FF:2F:42:B5:E9:3D:D1:9D:04:9E:CC:C8:D2:19:2C
            X509v3 Authority Key Identifier:
                keyid:F4:00:72:FF:DC:0F:1B:15:A6:9E:5B:C7:9A:2F:58:8C:F9:39:F4:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:7c:60:e9:48:99:2d:0f:3d:06:95:01:f3:df:62:52:be:b6:
         ef:72:7f:77:04:22:f1:d6:8a:32:58:61:7f:8c:a2:f8:6f:30:
         f9:e7:08:18:c5:e1:34:f0:1c:73:62:df:0f:57:55:fc:db:18:
         a9:0b:ce:09:91:32:cb:7f:cd:70:4e:34:58:c6:0f:1c:ad:05:
         ff:5c:5e:3d:14:90:11:5c:99:9a:36:35:e5:d5:ae:c1:00:4c:
         21:bd:f4:b7:23:f6:18:e9:ec:89:2f:6f:f8:70:23:2d:8f:90:
         69:64:81:4b:1e:c9:a5:45:44:b5:16:e0:59:ea:7b:08:a7:bb:
         3c:46:28:20:41:29:72:67:ca:1c:1e:4c:b1:ec:38:f7:87:67:
         03:23:6a:12:f4:04:a9:67:71:1f:25:2a:7a:48:79:d8:10:b5:
         6a:10:79:b3:e2:cf:cd:1d:0f:3c:6d:49:fb:ce:f7:2d:4c:b8:
         6a:28:df:8f:74:37:dc:7c:96:00:9f:9a:e4:e1:35:82:77:ed:
         db:f4:29:a1:0c:01:79:07:9e:1f:ff:02:52:2d:17:ab:d0:3f:
         32:23:87:8c:01:3e:81:92:37:69:34:78:bb:a9:3d:a5:40:27:
         e6:21:0c:3c:92:2b:36:0b:11:b4:96:4f:6b:08:5a:dd:0e:ed:
         2f:c1:29:0c
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUahFCpecPi/jK2oH9y5CLWI7JzcMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjQwMDcyRkZEQzBGMUIxNUE2OUU1QkM3OUEyRjU4OENG
OTM5RjRGNDAeFw0yNjAxMjUxMDM2MzlaFw0yNjAxMjYxMjQwMzlaMDMxMTAvBgNV
BAMTKDQzNjA3MzU0NTJGRjJGNDJCNUU5M0REMTlEMDQ5RUNDQzhEMjE5MkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1UWo0fGyVcdWhA5AtkRPf9xMa
qCRNXFHZyY8d6ZtgjINR6qPc2YRoZbf5sg5ZSClB5Ilpn4HdZJ/8nHKCBIyy9wmx
rXMD9YN+wZs3GpqovaEVbixdHOB13cN5bnjr8nM4u4c/vD31WlfjcPiVX/tzUUYo
lvWN92nLG5eL2bmykhOl87yXipe/JEjSqppNuzNWKkcoT+XfmMWOjpG3HmXjEpSp
SWJU/T3oZWbdrK1phqUCUH2ng5/JPYJ65E2k7Svdd/J7vA1kD1N83coKvGzZ97nb
YZqHagt4ks3XOImjxdcKqE9tfym01LXfsaTcpsr8zeAloUtFVRKB7U5Aq1X5AgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUQ2BzVFL/L0K16T3RnQSezMjSGSwwHwYDVR0j
BBgwFoAU9ABy/9wPGxWmnlvHmi9YjPk59PQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMTlhYTlkYTctZjFlNC00ZDk4LWJmOTUtOWZkZmNmNDQ4
Zjc3LzAvRjQwMDcyRkZEQzBGMUIxNUE2OUU1QkM3OUEyRjU4OENGOTM5RjRGNC5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GNDAwNzJGRkRDMEYxQjE1QTY5RTVCQzc5
QTJGNTg4Q0Y5MzlGNEY0LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzE5YWE5ZGE3LWYxZTQtNGQ5OC1iZjk1LTlmZGZjZjQ0OGY3Ny8wL0Y0MDA3MkZG
REMwRjFCMTVBNjlFNUJDNzlBMkY1ODhDRjkzOUY0RjQubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAbfGDp
SJktDz0GlQHz32JSvrbvcn93BCLx1ooyWGF/jKL4bzD55wgYxeE08BxzYt8PV1X8
2xipC84JkTLLf81wTjRYxg8crQX/XF49FJARXJmaNjXl1a7BAEwhvfS3I/YY6eyJ
L2/4cCMtj5BpZIFLHsmlRUS1FuBZ6nsIp7s8RiggQSlyZ8ocHkyx7Dj3h2cDI2oS
9ASpZ3EfJSp6SHnYELVqEHmz4s/NHQ88bUn7zvctTLhqKN+PdDfcfJYAn5rk4TWC
d+3b9CmhDAF5B54f/wJSLRer0D8yI4eMAT6BkjdpNHi7qT2lQCfmIQw8kis2CxG0
lk9rCFrdDu0vwSkM
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:51:53 2026 by rpki-client