This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft
File:                     6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft (raw, json)
Hash identifier:          uey9IqPPX/XJbmWu7BGzRUXT9LpNcKolxVW9xSTzuFY=
Subject key identifier:   35:EA:64:A7:2D:32:DC:7D:1A:4E:29:38:B5:52:03:9F:73:91:59:0F
Authority key identifier: 6E:F8:DF:8B:74:C5:D8:BB:67:37:EC:42:CE:03:2A:B4:B0:3E:0C:51
Certificate issuer:       /CN=6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51
Certificate serial:       566DFBFA5E9F4C04060986405DD64A6304F601B4
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft
Manifest number:          0110
Signing time:             Sun 25 Jan 2026 02:02:16 +0000
Manifest this update:     Sun 25 Jan 2026 01:57:16 +0000
Manifest next update:     Mon 26 Jan 2026 03:17:16 +0000
Files and hashes:         1: 326130613a363034303a336638303a3a2f34312d3438203d3e203136353039.roa (hash: Wmi4Se034d+qqZcAnERqLlh4fra7054HHLp3mkWO2Ww=)
                          2: 326130613a363034303a336630303a3a2f34302d3438203d3e20323033303639.roa (hash: rHPewLaTkppiYRuEKYbkMC6q0fSzfeWOiDhEN8UQLrI=)
                          3: 326130613a363034303a336638303a3a2f34312d3438203d3e203134363138.roa (hash: aHvhuFqDO1GB7QIZ+LV93NwGnOmb8RZNrGiJRajypMI=)
                          4: 6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.crl (hash: H0A1mmJEcna21lh5wCtJHIU5rESIM75tik6s1eckqn4=)
                          5: 326130613a363034303a313130303a3a2f34302d3430203d3e20323033303639.roa (hash: pHFnoNPoWytPyebFL74GP4B+9dNFxdZc97XyE0fhg1o=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 23:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:6d:fb:fa:5e:9f:4c:04:06:09:86:40:5d:d6:4a:63:04:f6:01:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51
        Validity
            Not Before: Jan 25 01:57:16 2026 GMT
            Not After : Jan 26 03:17:16 2026 GMT
        Subject: CN=35EA64A72D32DC7D1A4E2938B552039F7391590F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:69:0d:4a:d6:b3:29:0d:04:65:60:ac:12:73:
                    af:ac:b4:94:d5:c0:a3:b5:e1:d4:73:71:f9:35:ca:
                    a0:88:3e:99:f7:f3:ef:1d:ef:f4:0d:75:6d:a3:93:
                    1b:ba:cf:28:21:51:c4:14:d4:82:39:0c:62:83:a2:
                    f7:4b:bf:d1:ca:6a:93:cf:ee:eb:3a:dd:b4:ee:0e:
                    c1:72:4f:2a:55:de:b2:a0:6c:8f:db:8a:4a:15:ff:
                    c8:fc:c2:b5:7b:23:35:89:49:ea:6a:49:95:79:da:
                    6c:f9:86:15:de:5e:af:52:4f:d9:9d:3a:f6:00:71:
                    77:58:e7:b3:c9:2b:1e:c7:e3:68:2d:93:1a:7b:ef:
                    cc:93:12:1d:61:ca:1d:4b:ec:a8:3a:09:60:7e:36:
                    57:80:eb:cc:76:b8:b7:56:5f:9c:43:a4:ce:82:cb:
                    7b:97:cb:10:b3:65:d2:28:c1:56:0f:ed:58:e0:a2:
                    26:c7:da:6c:1c:03:7f:35:98:2f:37:7c:9a:50:ab:
                    53:72:86:ab:6c:f1:3b:40:3e:9e:ff:03:d8:c3:35:
                    27:f2:cd:c2:06:78:ad:6a:d1:c4:bd:04:7a:84:7a:
                    fd:af:bf:b8:f8:ef:1c:14:dc:ba:5b:f6:25:ee:dc:
                    fa:95:84:bd:a0:18:7b:91:69:bc:0e:6e:05:bc:b3:
                    20:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:EA:64:A7:2D:32:DC:7D:1A:4E:29:38:B5:52:03:9F:73:91:59:0F
            X509v3 Authority Key Identifier:
                keyid:6E:F8:DF:8B:74:C5:D8:BB:67:37:EC:42:CE:03:2A:B4:B0:3E:0C:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/10/6EF8DF8B74C5D8BB6737EC42CE032AB4B03E0C51.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:46:ff:e1:a1:48:ac:a1:c0:3a:34:22:87:d7:e2:0d:9c:f7:
         04:0a:73:78:9e:1e:33:df:2d:50:a9:a5:c3:73:9a:41:a4:ca:
         d9:ca:83:52:b9:d2:b5:ae:6c:eb:ce:28:14:87:2e:43:45:37:
         53:f9:0e:8a:6e:6d:0b:e6:23:cd:05:ef:18:37:bf:a3:e0:16:
         23:2f:89:2e:df:24:f1:35:23:da:6a:fd:f9:cb:4f:63:ac:2b:
         48:4f:b2:91:db:56:91:ef:08:6c:b2:af:b6:b2:60:dc:af:fc:
         3a:52:8e:7e:71:ee:12:64:cc:84:ef:65:35:15:53:44:ee:aa:
         04:d6:a2:f9:e6:ff:91:0a:4b:52:10:26:25:11:93:ca:7f:b2:
         73:38:0f:00:28:fc:e3:a7:e1:ef:d1:3f:09:31:06:29:45:9d:
         b4:81:27:d6:0c:1f:21:ed:2d:dd:96:48:39:9c:86:de:4f:87:
         15:e3:cb:8b:a4:53:ef:67:a3:49:36:37:3d:29:6f:8f:62:c6:
         11:c5:fb:89:f2:6c:79:f1:83:9d:c9:87:c2:88:7e:67:2d:b9:
         a3:b4:40:f0:75:8d:6c:e9:a4:ce:ab:7e:32:8c:ab:5e:df:96:
         1d:d1:51:4d:f5:e2:04:5a:66:32:9b:74:66:95:c8:e1:fa:4c:
         21:70:a3:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:42:08 2026 by rpki-client