This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft
File:                     06DB699D191D4B0289910C88E99CF94A671142F5.mft (raw, json)
Hash identifier:          LXu5BHm21gE6eMFewMsxRoJMVFyFJE8C4qDeC5ZGT/Q=
Subject key identifier:   2F:86:26:73:8A:07:FB:73:5F:8A:E1:A9:70:3C:23:25:88:4F:1A:D6
Authority key identifier: 06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5
Certificate issuer:       /CN=06DB699D191D4B0289910C88E99CF94A671142F5
Certificate serial:       3338724AA272EAC5DBE89CB1439D50C673EDEF93
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft
Manifest number:          011D
Signing time:             Sat 24 Jan 2026 21:24:40 +0000
Manifest this update:     Sat 24 Jan 2026 21:19:40 +0000
Manifest next update:     Mon 26 Jan 2026 00:49:40 +0000
Files and hashes:         1: 326130363a396634313a3230303a3a2f34302d3438203d3e20323134393239.roa (hash: QtN9SLO6BSjzyIiwoZRqiVH48LS9HyuRs3lqnsdDiKs=)
                          2: 326130363a396634313a363936393a3a2f34382d3438203d3e20323132323432.roa (hash: oZMKPe8zIqKXDWE+ceP6ZovC366mkj//dk5ag6RqSYo=)
                          3: 326130363a396634313a3a2f33322d3332203d3e20323135303835.roa (hash: oQiFmCDOiC8wMUPyhseeYgHp6yjZLGbjApAcNJ0LBoc=)
                          4: 326130643a643930363a3a2f33322d3438203d3e20323134393239.roa (hash: D6RZOojsGndN0vlTfP0QQUwSDXr1XyPrUaJBhshfYr4=)
                          5: 326130363a396634313a613930313a3a2f34382d3438203d3e20323035383338.roa (hash: TZFInP0XSpkR7gzjfw2R3ov4SaV+J0Kzbqc0lAbOzbM=)
                          6: 06DB699D191D4B0289910C88E99CF94A671142F5.crl (hash: TlWDh2vhaiCAg6T1ll1dSOV59ClWcXwUT3JROGtWJ/Y=)
                          7: 326130363a396634313a313030303a3a2f34342d3438203d3e20323035383338.roa (hash: AZY42IY279tP8q55kCb+OP1wLi+9ejrODI15M2jhRhg=)
                          8: 326130363a396634313a613930303a3a2f34382d3438203d3e20323037363832.roa (hash: UqjWSUv2XiZdDsdQ0uOndREGc/szQ2JnxQlbZ2ADckI=)
                          9: 5A3F7819353CE0FD13B8FFCDCB8837ED0BF5915F.cer (hash: vr0IDnvMrQlAIKTPbmc9XgADtBREMeozkPpGVjOFGr4=)
                          10: 38332e3134322e33312e302f32342d3234203d3e20323135303835.roa (hash: K8xHXu8PBNylpSXaMswB01W3KM9JQNKdf8F+yOiMZUQ=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 00:49:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:38:72:4a:a2:72:ea:c5:db:e8:9c:b1:43:9d:50:c6:73:ed:ef:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06DB699D191D4B0289910C88E99CF94A671142F5
        Validity
            Not Before: Jan 24 21:19:40 2026 GMT
            Not After : Jan 26 00:49:40 2026 GMT
        Subject: CN=2F8626738A07FB735F8AE1A9703C2325884F1AD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b1:e9:1b:34:8c:40:42:ae:de:4f:db:3d:09:
                    f1:e9:09:a3:ed:79:f5:4e:ad:c2:47:44:ab:5f:4a:
                    07:77:1f:cc:12:eb:31:c8:bd:8e:8f:68:32:f9:76:
                    40:c7:e0:81:9d:e8:5a:9d:10:e5:8e:a0:41:b3:72:
                    bb:fb:bd:2f:53:8c:c9:ed:29:e2:dd:18:be:d4:65:
                    46:7e:66:e5:59:53:84:55:81:2c:4a:76:e0:d3:71:
                    58:fe:0e:55:e3:c8:77:9e:ac:38:55:23:37:89:9e:
                    51:7a:6e:18:07:12:3d:da:75:bd:97:7a:f8:65:2a:
                    92:10:99:f9:67:7d:46:e7:7b:6f:8d:00:0c:11:a9:
                    5f:28:4f:ba:f9:23:75:c6:b1:40:82:ea:3c:c7:84:
                    78:5f:ad:46:28:09:6a:6c:a2:be:54:13:17:1e:74:
                    91:ad:ba:b8:20:3f:ed:9c:d3:8b:84:2b:89:26:85:
                    9e:73:df:ff:28:80:8f:6f:1d:8a:6b:d8:f8:f5:27:
                    b4:50:7a:c0:f9:81:5e:af:3e:56:8e:ea:65:95:35:
                    ed:d2:3c:4a:89:7c:4f:38:20:8d:4a:06:4e:61:8a:
                    fb:71:9f:40:67:19:b3:73:4f:d8:61:25:5b:4e:53:
                    c8:a2:27:a4:a8:d8:8b:52:50:c5:4c:65:52:44:5e:
                    94:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:86:26:73:8A:07:FB:73:5F:8A:E1:A9:70:3C:23:25:88:4F:1A:D6
            X509v3 Authority Key Identifier:
                keyid:06:DB:69:9D:19:1D:4B:02:89:91:0C:88:E9:9C:F9:4A:67:11:42:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/06DB699D191D4B0289910C88E99CF94A671142F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/2/06DB699D191D4B0289910C88E99CF94A671142F5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:8b:16:3a:96:18:c2:79:a8:c1:8a:8c:a7:0a:99:db:d5:3f:
         12:33:e4:03:a4:b5:45:6c:18:dc:94:b2:e8:a3:bc:26:bd:bf:
         16:e4:cf:6a:fd:dd:8a:ee:20:29:b1:89:33:74:4a:15:06:16:
         9e:6b:06:9a:b0:a3:49:91:a1:79:97:eb:8e:d6:78:6c:66:ab:
         e8:ea:13:89:32:33:6b:f7:32:ab:b3:1d:b2:b9:12:99:51:c0:
         c5:54:ad:88:fa:bd:a7:20:a1:99:ef:ac:20:41:6f:99:e5:d3:
         3f:99:07:7e:37:93:48:66:9b:28:c8:7a:57:94:44:92:14:33:
         b9:fd:70:f9:57:ce:ad:16:3e:ef:c8:40:71:eb:0e:39:9d:f4:
         fc:da:f5:e5:5a:cc:12:0e:09:ce:8d:cf:f7:ba:60:b0:91:a0:
         0b:3e:25:2d:85:f7:fb:61:3d:80:a3:5f:bc:8f:a1:54:ca:fa:
         b7:06:fe:d5:e7:b7:53:d3:9f:27:a6:1f:9a:34:b0:3f:a0:ed:
         82:58:78:ad:c4:63:ea:38:61:5d:18:be:51:6f:a2:1f:16:e4:
         a6:bc:82:dd:b7:37:7e:3b:ed:14:2c:c4:bb:83:99:fc:74:04:
         ae:ee:b9:bb:8d:12:43:8f:1d:59:ec:b7:74:89:2b:ef:df:85:
         91:70:06:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:50:42 2026 by rpki-client