This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft
File:                     1498141819112B8446C2D4A3111F53038F05DBE9.mft (raw, json)
Hash identifier:          UpKRr3pVSlw3YjvQpXhgcoGM5hFrDRBplX2E9QUIAUo=
Subject key identifier:   12:13:9A:34:89:DB:3E:27:8B:97:D1:BF:BC:FA:56:D9:BF:A2:A6:3C
Authority key identifier: 14:98:14:18:19:11:2B:84:46:C2:D4:A3:11:1F:53:03:8F:05:DB:E9
Certificate issuer:       /CN=1498141819112b8446c2d4a3111f53038f05dbe9
Certificate serial:       6FB03900E10F7E82622927AAECFDE933E0A85A87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft
Manifest number:          014F
Signing time:             Sun 25 Jan 2026 16:40:27 +0000
Manifest this update:     Sun 25 Jan 2026 16:35:27 +0000
Manifest next update:     Mon 26 Jan 2026 17:36:27 +0000
Files and hashes:         1: 3138352e39312e3131322e302f32342d3234203d3e203230343733.roa (hash: uQR2ZEBSc/gm5nc4UWXss03+GuSFprtiONvs7ml01aQ=)
                          2: 3138352e39312e3131342e302f32342d3234203d3e20323132323338.roa (hash: O3+fkuGYHEGuJgzobwksf3BrAnxvmElLOiQKqynfHQQ=)
                          3: 1498141819112B8446C2D4A3111F53038F05DBE9.crl (hash: 1lmDEUHy8S6LohkJ8pXdXZRsxK4aYMW+RQyS304UXZo=)
                          4: 3138352e39312e3131332e302f32342d3234203d3e20323134323038.roa (hash: qSSu/jTa9CtmAhgZlrJ1s4QldXeKp0EqfLu29FuP5Zs=)
                          5: 3138352e39312e3131352e302f32342d3234203d3e2034363337.roa (hash: ck91ILJJRhGrU5dcx7s2t1suhnGyLbRTekoZlADPXPE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:b0:39:00:e1:0f:7e:82:62:29:27:aa:ec:fd:e9:33:e0:a8:5a:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1498141819112b8446c2d4a3111f53038f05dbe9
        Validity
            Not Before: Jan 25 16:35:27 2026 GMT
            Not After : Jan 26 17:36:27 2026 GMT
        Subject: CN=12139A3489DB3E278B97D1BFBCFA56D9BFA2A63C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:09:6c:b3:82:4e:0a:aa:6d:d5:cf:ba:9e:de:
                    16:82:95:6f:fb:a4:ec:ec:5e:99:25:e9:f5:12:48:
                    8a:32:1d:85:81:07:44:00:48:c0:80:8f:99:00:8a:
                    ae:a2:97:b0:91:18:dd:bd:94:59:58:5a:76:5f:3a:
                    a7:fc:17:fd:6c:e7:5b:7b:e2:46:d9:c4:2d:b8:d8:
                    26:50:c7:2d:cb:e7:0a:24:27:57:0c:de:f6:1f:35:
                    7b:24:d2:2e:42:ef:73:2d:66:10:d8:65:f7:05:a0:
                    81:85:c3:82:36:3f:34:59:57:55:bb:6d:c4:8b:04:
                    06:0d:cd:d6:00:94:93:da:69:b7:58:4d:50:11:80:
                    20:00:99:2c:fa:83:90:5d:70:a8:54:39:a3:bf:3c:
                    ac:16:ce:71:a5:40:bb:51:36:d2:5f:e6:83:d0:15:
                    0a:98:a3:46:04:75:9b:ba:3f:03:d5:ce:b9:90:d0:
                    60:86:16:f0:60:f0:9d:b9:7b:f4:b4:df:e2:4b:47:
                    89:1a:4b:13:65:b9:07:cc:88:a3:eb:bd:e5:28:40:
                    14:dc:1e:fb:59:af:4f:60:34:2e:40:8c:28:0d:9e:
                    76:1f:09:cd:17:91:85:a3:d6:aa:06:38:66:7c:6d:
                    61:7b:6c:27:94:12:d4:fd:61:a9:f0:4e:01:00:cd:
                    a6:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:13:9A:34:89:DB:3E:27:8B:97:D1:BF:BC:FA:56:D9:BF:A2:A6:3C
            X509v3 Authority Key Identifier:
                keyid:14:98:14:18:19:11:2B:84:46:C2:D4:A3:11:1F:53:03:8F:05:DB:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJgUGBkRK4RGwtSjER9TA48F2-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/29066f5d-ecc1-4927-95c1-e1a8df8f9897/0/1498141819112B8446C2D4A3111F53038F05DBE9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:5b:c7:48:e8:d1:4f:a7:5d:7f:03:68:85:ba:09:fb:9d:63:
         af:c4:74:08:e9:fb:45:62:39:8b:47:6b:2e:c8:ea:bc:4d:ed:
         80:81:be:50:93:80:66:cb:3b:c9:31:11:8d:e4:f8:3c:1c:91:
         d2:16:d1:5a:62:6e:04:24:7c:dc:95:b8:32:74:a9:d4:29:fc:
         f2:89:41:c1:85:82:e1:a8:87:6d:8e:5e:0e:b8:0c:82:8c:29:
         38:72:46:e7:05:ab:15:07:91:92:a3:90:fc:33:85:95:88:ee:
         55:12:df:75:86:17:5e:0d:f6:9b:b1:f2:a7:6c:7e:3e:ed:00:
         03:48:b6:ae:db:5b:c4:2c:b2:ff:ce:33:fd:a3:31:61:7d:ba:
         9c:1b:b3:66:9e:32:34:70:c5:47:7e:25:86:f0:43:0f:13:bd:
         c7:d1:bd:94:0e:87:40:c3:84:94:4a:e3:c2:53:42:0b:07:13:
         d5:ae:a1:d4:f1:36:6b:09:06:d0:03:71:1e:44:b0:77:28:93:
         f3:34:34:0a:3e:d8:60:58:2d:95:e6:f9:1a:4b:c4:34:36:ef:
         a2:bf:65:e8:cd:5e:5a:cf:49:0e:72:5d:c6:37:5e:9b:21:79:
         d5:e2:87:f9:e9:c9:7f:6a:ad:18:82:42:19:05:4d:62:49:67:
         33:4a:6b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:07:12 2026 by rpki-client