This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/34DEF610B33BA719BA344A660C4BDA8333112372.mft
File:                     34DEF610B33BA719BA344A660C4BDA8333112372.mft (raw, json)
Hash identifier:          oSkj8IUOLGBxr8qge1Drbatyw4ro0y28jXdr8J4hnwQ=
Subject key identifier:   96:70:6D:EE:61:04:C5:48:41:FA:1B:62:E5:A8:17:B3:FB:73:7A:68
Authority key identifier: 34:DE:F6:10:B3:3B:A7:19:BA:34:4A:66:0C:4B:DA:83:33:11:23:72
Certificate issuer:       /CN=34DEF610B33BA719BA344A660C4BDA8333112372
Certificate serial:       73D0F214DD0FE70F9FD0CB344820E85CE52121B9
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/34DEF610B33BA719BA344A660C4BDA8333112372.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/34DEF610B33BA719BA344A660C4BDA8333112372.mft
Manifest number:          21
Signing time:             Sat 24 Jan 2026 22:53:05 +0000
Manifest this update:     Sat 24 Jan 2026 22:48:05 +0000
Manifest next update:     Mon 26 Jan 2026 00:13:05 +0000
Files and hashes:         1: 326131343a373538363a393161303a3a2f34342d3438203d3e20323134323233.roa (hash: czMZ6yHzk1H5R4x8pCiKnN7yebua0d7E2WPcIPaQbQU=)
                          2: 326131343a373538363a393030303a3a2f34302d3438203d3e20323134323233.roa (hash: sK/28IbuKKKyA7SCTgY03EIdfGQ4xy21thbu3jiR9Kc=)
                          3: 326131343a373538363a393162303a3a2f34342d3438203d3e20323134323233.roa (hash: ZO9VHs/jdkk6zzSYMSYZUdvcDq76KLDhmDYi/qPc0gQ=)
                          4: 326131343a373538363a393030303a3a2f33362d3438203d3e20323134323233.roa (hash: iA4p3IYifVrgGD3/GcCBblPOiSEiC+VZIiOYTHmZ3ew=)
                          5: 326131343a373538363a373030303a3a2f33362d3438203d3e20323134323233.roa (hash: pCJnPNsZB30IXmBLO9EkDOhxW1xXJNPlCqoAbVJT2Wc=)
                          6: 326131343a373538313a333730303a3a2f34302d3438203d3e20323134323233.roa (hash: ZXZeF/4tgTqT/vfx1rQrIuGclMSkLzx41lELH0gATSk=)
                          7: 34DEF610B33BA719BA344A660C4BDA8333112372.crl (hash: Bb4fwNfc5e7k1b2MU4RhF7NBWnzjOayd9uv6IRdkxrI=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/34DEF610B33BA719BA344A660C4BDA8333112372.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/34DEF610B33BA719BA344A660C4BDA8333112372.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/34DEF610B33BA719BA344A660C4BDA8333112372.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 00:13:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:d0:f2:14:dd:0f:e7:0f:9f:d0:cb:34:48:20:e8:5c:e5:21:21:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34DEF610B33BA719BA344A660C4BDA8333112372
        Validity
            Not Before: Jan 24 22:48:05 2026 GMT
            Not After : Jan 26 00:13:05 2026 GMT
        Subject: CN=96706DEE6104C54841FA1B62E5A817B3FB737A68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:91:11:c5:29:51:54:8c:4d:dd:d0:11:cf:ac:
                    5d:14:dc:7b:40:a5:52:ee:a0:4c:b7:43:43:87:7c:
                    82:7c:83:c5:96:b4:7f:7d:3d:d1:ed:0e:26:52:7e:
                    56:99:78:53:8e:b7:41:7a:af:3a:2e:81:e3:ca:61:
                    49:bc:63:80:34:cf:5a:1b:2f:38:e4:1c:1f:65:6b:
                    15:da:21:c3:e3:a4:25:08:40:e1:73:db:aa:df:79:
                    aa:df:8e:d4:f7:0f:20:f3:22:f4:e9:e9:01:91:fb:
                    8c:bc:ff:f9:09:8d:93:4c:6c:df:fa:69:d2:0d:37:
                    f9:b6:8f:47:60:45:c2:45:2d:53:d4:54:1f:75:c9:
                    55:5d:f1:db:a3:31:2e:2d:5a:9f:c3:a8:35:c9:10:
                    85:6b:01:9e:f9:57:73:42:6f:ae:0a:1a:30:2e:ba:
                    99:a2:ab:93:de:47:97:d7:e8:cb:38:8d:26:2f:44:
                    55:cb:f3:e3:aa:9a:c9:a6:6f:82:cf:fc:d3:31:ea:
                    db:08:09:f1:8b:0b:58:ff:9e:54:30:ba:91:55:f1:
                    4f:ce:da:92:e5:3f:dd:4e:90:fe:a0:19:e5:0f:c7:
                    e8:c5:2c:e4:10:37:a6:cb:5e:08:fe:bf:a1:b3:e8:
                    4b:36:0f:d1:a7:2e:91:e1:ae:5b:0b:9a:ea:8e:e7:
                    fe:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:70:6D:EE:61:04:C5:48:41:FA:1B:62:E5:A8:17:B3:FB:73:7A:68
            X509v3 Authority Key Identifier:
                keyid:34:DE:F6:10:B3:3B:A7:19:BA:34:4A:66:0C:4B:DA:83:33:11:23:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/34DEF610B33BA719BA344A660C4BDA8333112372.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/34DEF610B33BA719BA344A660C4BDA8333112372.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/1/34DEF610B33BA719BA344A660C4BDA8333112372.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:ee:03:eb:a9:ad:73:cd:f2:b1:db:63:6b:f6:9d:8c:b3:ed:
         39:8e:f7:7d:2a:e8:78:c4:7f:73:ca:91:a0:6e:1e:db:1c:8e:
         65:ff:61:2f:b9:53:8a:49:0a:f6:a6:b3:30:7f:b4:a8:0a:0f:
         cc:93:03:22:62:f5:28:8b:1e:9c:06:52:09:79:1b:6b:2d:f0:
         70:09:14:f1:01:ae:fd:ed:be:92:8c:34:0e:76:e8:87:82:25:
         0b:bc:ff:06:f4:0e:c0:e8:5f:d0:77:18:fe:dd:5c:ff:2f:32:
         c2:a1:15:b2:55:09:73:53:4a:8b:d6:1a:b0:97:46:c8:e1:ea:
         48:0e:52:cf:5a:b6:38:00:18:ee:cc:52:f7:a4:e8:df:65:a3:
         ca:fc:52:10:51:66:88:07:59:b5:39:06:fe:a4:23:c2:13:a9:
         39:d8:ba:dc:71:a6:08:c4:d3:27:9d:5f:1c:0e:c6:4a:91:21:
         d7:74:ec:fb:af:45:4e:15:63:16:84:1c:fa:7d:ff:43:5e:7e:
         2c:c1:90:e7:59:fa:db:39:32:53:24:91:a7:9d:59:13:c6:79:
         cd:0e:ea:b6:73:89:9b:94:41:74:6d:f9:15:78:1c:20:00:40:
         03:aa:ad:a0:ed:f1:52:e6:2f:c8:dd:b9:d1:10:dd:20:b2:16:
         04:92:46:79
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUc9DyFN0P5w+f0Ms0SCDoXOUhIbkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzRERUY2MTBCMzNCQTcxOUJBMzQ0QTY2MEM0QkRBODMz
MzExMjM3MjAeFw0yNjAxMjQyMjQ4MDVaFw0yNjAxMjYwMDEzMDVaMDMxMTAvBgNV
BAMTKDk2NzA2REVFNjEwNEM1NDg0MUZBMUI2MkU1QTgxN0IzRkI3MzdBNjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7kRHFKVFUjE3d0BHPrF0U3HtA
pVLuoEy3Q0OHfIJ8g8WWtH99PdHtDiZSflaZeFOOt0F6rzougePKYUm8Y4A0z1ob
LzjkHB9laxXaIcPjpCUIQOFz26rfearfjtT3DyDzIvTp6QGR+4y8//kJjZNMbN/6
adINN/m2j0dgRcJFLVPUVB91yVVd8dujMS4tWp/DqDXJEIVrAZ75V3NCb64KGjAu
upmiq5PeR5fX6Ms4jSYvRFXL8+Oqmsmmb4LP/NMx6tsICfGLC1j/nlQwupFV8U/O
2pLlP91OkP6gGeUPx+jFLOQQN6bLXgj+v6Gz6Es2D9GnLpHhrlsLmuqO5/69AgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUlnBt7mEExUhB+hti5agXs/tzemgwHwYDVR0j
BBgwFoAUNN72ELM7pxm6NEpmDEvagzMRI3IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMmVkNGI3ZWItMTdhNy00NGUxLTljYTItMDk4YTMyMzgz
YzkwLzEvMzRERUY2MTBCMzNCQTcxOUJBMzQ0QTY2MEM0QkRBODMzMzExMjM3Mi5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8zNERFRjYxMEIzM0JBNzE5QkEzNDRBNjYw
QzRCREE4MzMzMTEyMzcyLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzJlZDRiN2ViLTE3YTctNDRlMS05Y2EyLTA5OGEzMjM4M2M5MC8xLzM0REVGNjEw
QjMzQkE3MTlCQTM0NEE2NjBDNEJEQTgzMzMxMTIzNzIubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBy7gPr
qa1zzfKx22Nr9p2Ms+05jvd9Kuh4xH9zypGgbh7bHI5l/2EvuVOKSQr2prMwf7So
Cg/MkwMiYvUoix6cBlIJeRtrLfBwCRTxAa797b6SjDQOduiHgiULvP8G9A7A6F/Q
dxj+3Vz/LzLCoRWyVQlzU0qL1hqwl0bI4epIDlLPWrY4ABjuzFL3pOjfZaPK/FIQ
UWaIB1m1OQb+pCPCE6k52LrccaYIxNMnnV8cDsZKkSHXdOz7r0VOFWMWhBz6ff9D
Xn4swZDnWfrbOTJTJJGnnVkTxnnNDuq2c4mblEF0bfkVeBwgAEADqq2g7fFS5i/I
3bnREN0gshYEkkZ5
-----END CERTIFICATE-----