This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft
File:                     20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft (raw, json)
Hash identifier:          WF5mW8tSw8+Hke1/hePXgreKItpLVp8ZOODQmrTEbSo=
Subject key identifier:   C2:C7:6B:6D:EE:96:28:82:81:7F:96:A5:F6:AE:F4:9C:75:95:E0:C7
Authority key identifier: 20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6
Certificate issuer:       /CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6
Certificate serial:       24E9319685F7D91763CFB5FF7E3C05B01C056FB4
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft
Manifest number:          037D
Signing time:             Sun 25 Jan 2026 02:08:55 +0000
Manifest this update:     Sun 25 Jan 2026 02:03:55 +0000
Manifest next update:     Mon 26 Jan 2026 05:36:55 +0000
Files and hashes:         1: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl (hash: oob6v4liZKpO4twTEMJFNFmpAKBlfoUdPLn0Xgl/hH0=)
                          2: 326131343a316563373a633031303a3a2f34342d3434203d3e2030.roa (hash: SsdW0YpcJfef7CtWvRhhfCUEgjAhSHqFG1h0ACBR214=)
                          3: 326131343a316563303a3a2f33312d3438203d3e203136353039.roa (hash: DO5U+zbxAW9dCHHkG8v0O5pLZTi9rHV+80EYsqI00GY=)
                          4: 326131343a316563313a376232303a3a2f34342d3438203d3e20323135303933.roa (hash: dVnYLOP17LHBFloAhm1YIONwpYCVs6bwv8Qels/37Kg=)
                          5: 326131343a316563373a633430303a3a2f34302d3438203d3e203438373030.roa (hash: LZc2AksEahD5rzoxMFxve6nJwmwqwYYZ+BLhaadaDDA=)
                          6: 326131343a316563313a3a2f33322d3438203d3e203438373030.roa (hash: rD1drMlhgCHEm0vlVi8DONqmz75yH/sypTpIzdkNP6c=)
                          7: 326131343a316563313a376231303a3a2f34342d3438203d3e20323135363636.roa (hash: pZyYX9vqAixKUDIqsxujnSVA6UfFKeJc5iZ4yNtLX48=)
                          8: 326131343a316563313a376230303a3a2f34342d3438203d3e20323037313936.roa (hash: U8fXRRyT8emRE+fVUuy2ekIUYzd/0os3T2/COS8ejYg=)
                          9: 326131343a316563313a3a2f33322d3332203d3e20323037323532.roa (hash: ZnCFtDlyKKIKHxL+mnWSwMiKEny7fbonjbSjngpcz7c=)
                          10: 326131343a316563303a3a2f33312d3438203d3e203438373030.roa (hash: NfdCiPZo2V7z2IR8DOEcP9s1WlT0wPdEK10WCc6hh18=)
                          11: 326131343a316563313a376233303a3a2f34342d3438203d3e20323134393036.roa (hash: YRMori7doYSmuYrHuDGxvFWUqZxa6EqhEvjhhQlS2vI=)
                          12: 326131343a316563303a3a2f33312d3438203d3e203134363138.roa (hash: TNC4zrNVSYq6rg1HfzOLsFNL5cW5pcjjIopBseDA51Y=)
                          13: 326131343a316563373a633030303a3a2f33362d3438203d3e203438373030.roa (hash: NDSS2hHdj8htIMoCQNzuGfJRE+FjfS7resxOlAoGNDM=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 19:50:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:e9:31:96:85:f7:d9:17:63:cf:b5:ff:7e:3c:05:b0:1c:05:6f:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6
        Validity
            Not Before: Jan 25 02:03:55 2026 GMT
            Not After : Jan 26 05:36:55 2026 GMT
        Subject: CN=C2C76B6DEE962882817F96A5F6AEF49C7595E0C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:82:1e:cc:aa:7a:69:50:9e:df:95:90:cc:a9:
                    17:a7:10:14:1d:74:4f:3c:14:e7:d5:8b:2a:62:04:
                    01:d6:e4:e2:6d:65:d4:57:da:20:23:95:22:ee:d4:
                    bc:06:4a:81:a9:f3:01:34:84:f0:bd:57:f8:8e:7d:
                    f2:2c:dc:03:c4:78:eb:4d:f6:fc:69:73:42:d0:17:
                    9d:ee:07:92:6f:ec:ed:d3:9b:d7:f9:7c:c7:27:35:
                    02:95:f1:37:20:f6:9c:53:24:bc:d8:03:1d:4c:5f:
                    65:d7:00:35:11:75:d8:b5:74:e2:22:48:e4:43:7b:
                    02:5a:17:ce:a0:aa:71:f0:ef:4f:a9:77:28:12:6a:
                    08:37:b8:30:6a:a3:68:88:26:e3:d5:c3:81:c4:38:
                    c2:a3:3c:d7:ad:71:e1:76:35:0a:83:ff:64:02:ae:
                    76:31:19:1d:f0:60:c9:01:9f:2c:a0:bd:03:06:d5:
                    c9:2b:1f:d2:56:c1:ed:55:68:1e:5d:67:38:55:1c:
                    dc:78:cb:e1:95:ee:cf:bc:25:69:80:46:19:0f:d4:
                    1b:76:41:b2:ae:55:18:c7:00:0b:df:6f:bd:66:61:
                    ad:d8:d8:b6:d0:49:68:48:de:b6:86:7f:c2:12:73:
                    85:4c:17:cf:2f:58:0f:1f:81:41:34:af:86:2b:1d:
                    f1:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:C7:6B:6D:EE:96:28:82:81:7F:96:A5:F6:AE:F4:9C:75:95:E0:C7
            X509v3 Authority Key Identifier:
                keyid:20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:80:55:47:c5:7d:c0:b9:ff:75:c7:8a:bf:71:0b:15:40:62:
         cc:03:44:bb:ec:88:aa:80:65:04:1f:5b:ba:75:47:dc:78:5e:
         cf:c4:26:2c:59:c1:13:8f:51:75:e9:4e:25:82:ff:62:52:54:
         29:65:e6:62:52:5a:10:ce:f7:8e:74:94:67:d5:ac:18:30:f8:
         5b:2f:f6:ec:e2:c0:b6:57:31:11:1a:66:2d:59:41:b0:2a:db:
         d9:2a:5b:69:f7:b8:9c:34:6c:86:c1:18:a4:b7:ac:a7:f6:83:
         ea:a0:ee:50:ef:b9:84:95:85:2e:a9:de:6a:7a:fd:9d:c5:55:
         65:53:5d:7f:eb:5b:5b:65:d8:b7:d1:04:71:3a:db:8f:c1:69:
         ff:cc:fc:67:94:2f:14:04:70:98:15:8f:f0:bb:16:fc:9d:4b:
         8b:0a:a7:13:59:bb:12:ce:4c:7a:2d:8b:78:d7:ee:b7:84:2f:
         2c:83:15:63:03:63:53:2a:ff:5e:66:8c:ef:8f:53:3f:0d:f7:
         9b:7e:6f:79:b5:0a:4a:74:cd:9f:0c:9e:59:22:29:ce:30:d7:
         69:78:80:27:4d:8c:50:a7:41:df:0d:f7:2d:ec:4d:e0:2c:0f:
         7e:fa:71:5a:75:3d:78:1b:4e:60:41:33:c7:6e:a2:1f:0e:51:
         d2:a8:ff:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:46:59 2026 by rpki-client