This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft
File:                     8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft (raw, json)
Hash identifier:          JM64umbEevLzj1hqjwXtZ6yAqIX176ij3CCm8X+RFh0=
Subject key identifier:   25:11:D3:AF:57:C0:DF:7D:72:B0:65:D8:96:EC:A7:84:A5:2F:B5:9C
Authority key identifier: 8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C
Certificate issuer:       /CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C
Certificate serial:       3603D84616F95899ACDA0FDB6FDB187A1949930C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft
Manifest number:          0301
Signing time:             Sun 25 Jan 2026 20:35:06 +0000
Manifest this update:     Sun 25 Jan 2026 20:30:06 +0000
Manifest next update:     Mon 26 Jan 2026 20:53:06 +0000
Files and hashes:         1: 326131343a373538313a343835633a3a2f34382d3438203d3e20313431303637.roa (hash: 9VIFUmaELJ+SuXK7+C+ONAUKoDB5ufOLiduhS88tcKE=)
                          2: 326131343a373538313a343536303a3a2f34342d3438203d3e20323135313731.roa (hash: QP4KPs363lKNvbDMC91nWR64EDb9a5wYXaiiUC4k7Hs=)
                          3: 326131343a373538313a343832303a3a2f34342d3438203d3e20323135323233.roa (hash: 8fwqZHGyIJyFYdJn0gwpv+qKZFLFFwexw2Z/QOknvfY=)
                          4: 326131343a373538313a343332303a3a2f34342d3438203d3e2039343232.roa (hash: gQv5NI8fa+cTBzk0tpepQG6QGKXWkVIlxityrSNAUjQ=)
                          5: 326131343a373538313a343836303a3a2f34342d3438203d3e20313531353434.roa (hash: XJo8jS2djpRteJlKSIzBy0GSOcq3Jj/2wBDjV1PmcuQ=)
                          6: 8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl (hash: qc3i3q9nyF7zi/DxyE4+5zY8Aogrznm78SJD51Squkk=)
                          7: 326131343a373538313a343731303a3a2f34342d3438203d3e20313439363930.roa (hash: rLVUcUxyRgJtw6VSAGlKyA8uqmBel4P5gDB+BMhpgCc=)
                          8: 326131343a373538313a343835663a3a2f34382d3438203d3e20323135333739.roa (hash: LiQaiw5undZF8O9ZPrbB+SuBZXPDpvcvnNafAQKgteo=)
                          9: 326131343a373538313a343835653a3a2f34382d3438203d3e20323134363737.roa (hash: iHR6gaBLhEeuJStOmjFzEe4Moo+lPwxxC1xTUcqx6g4=)
                          10: 326131343a373538313a343934303a3a2f34342d3434203d3e20323135313731.roa (hash: 7nhFTtPjQhKd1Ac2yjZIA1kYzFwc8dF19rkGkZd+QFk=)
                          11: 326131343a373538313a343030303a3a2f33362d3438203d3e203434383137.roa (hash: fudCQ5HvpSkAFWaORqCftP85E1ijbMZ/SJYbFT8n65o=)
                          12: 326131343a373538313a343834303a3a2f34342d3438203d3e20323135323839.roa (hash: IeK6ZG/g9V25xfR3xKZZdyq5xuMwonnHdhMMCLRMWBo=)
                          13: 326131343a373538313a343534303a3a2f34342d3438203d3e203434383137.roa (hash: lL21MUDpM3YDFXY+VNPjMEqMt9/EFafQb01ArsWLAjk=)
                          14: 326131343a373538313a343331303a3a2f34342d3438203d3e20323135313731.roa (hash: z2fbMMdTRhRUpcDHMD2rvY/J1s4P2i8N3FhzYltODNc=)
                          15: 326131343a373538313a343831303a3a2f34342d3438203d3e20323135363734.roa (hash: HscFYsQcMtvjpDQJk86+k68Lr7MoMlx0VU02QHyOcGk=)
                          16: 326131343a373538313a343535303a3a2f34342d3438203d3e20323136333735.roa (hash: 33Hc4k2qb/SFtHgCtF148ZPS40TPUk0mIWne3Kl1fjs=)
                          17: 326131343a373538313a343635303a3a2f34342d3438203d3e20313335363539.roa (hash: iqN0K0kqjE2jNtYdeLoflK5x6Z7cJoriz0IZPsDEpKs=)
                          18: 326131343a373538313a343535353a3a2f34382d3438203d3e20323136333735.roa (hash: JVdP0q01IdpmOHNHM/8N7QIeZGO9fY1B0zhs290wioo=)
                          19: 326131343a373538313a343835303a3a2f34342d3438203d3e20323135333739.roa (hash: mgbh+id7sfJxNC8FBIA9w2AVClblyfoF7d8LLx0Ph9g=)
                          20: 326131343a373538313a343934303a3a2f34342d3438203d3e20313335363539.roa (hash: isp+v1bbWY3zX+eoFLAf4eK3r9/zMrMmocZ2PNCW2Rw=)
                          21: 326131343a373538313a343833303a3a2f34342d3438203d3e20323135323231.roa (hash: j14pv+Fih0N85ic38d12TDY0uRhDLdNY7cvkmnI17jw=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:03:d8:46:16:f9:58:99:ac:da:0f:db:6f:db:18:7a:19:49:93:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C
        Validity
            Not Before: Jan 25 20:30:06 2026 GMT
            Not After : Jan 26 20:53:06 2026 GMT
        Subject: CN=2511D3AF57C0DF7D72B065D896ECA784A52FB59C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d2:30:20:44:e5:36:79:52:2f:e9:da:0d:b4:
                    a3:df:0d:ea:ea:cd:2c:b2:83:c3:d7:51:b6:ac:76:
                    67:cd:63:86:90:ad:ae:ce:ca:5e:73:a1:d4:62:c0:
                    3f:9b:ca:5c:17:7b:c3:7d:ec:47:b8:b7:0e:a5:f7:
                    95:85:f4:10:d1:7d:66:36:95:8c:0f:a3:1a:44:21:
                    9b:60:16:bb:96:59:67:36:97:bd:d1:0f:3f:3d:4b:
                    63:45:fe:49:89:56:c4:f1:d5:51:5c:9f:45:d5:92:
                    d1:7b:46:66:58:e7:13:b7:c5:21:8b:20:67:b6:09:
                    20:35:43:fc:18:48:c9:bd:ff:a0:3b:d1:37:e8:e6:
                    6d:4e:58:08:9b:c7:a3:94:b9:2f:be:18:b8:05:32:
                    29:ec:fa:5c:da:2e:e1:81:6a:6e:ae:bc:6d:cd:45:
                    bd:5e:a7:45:9b:42:c2:21:bb:89:6c:c1:c4:36:df:
                    da:1c:f4:e9:f1:7b:00:46:e2:1e:82:64:9f:00:1e:
                    a9:a3:fc:e4:04:85:72:54:28:17:f8:2b:42:38:6a:
                    ae:56:15:00:ee:52:a6:09:73:05:b1:2b:e2:b4:b7:
                    fc:ec:0a:3f:1c:08:94:b6:8a:73:e5:5a:af:10:3a:
                    1e:47:07:a8:7c:f3:17:86:2d:70:69:cb:e0:15:9c:
                    03:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:11:D3:AF:57:C0:DF:7D:72:B0:65:D8:96:EC:A7:84:A5:2F:B5:9C
            X509v3 Authority Key Identifier:
                keyid:8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:c9:92:29:3d:cc:74:e4:c1:c9:a4:95:78:6c:9b:ed:a8:39:
         4a:fe:58:bd:fb:ce:3d:f0:87:35:33:95:3d:b9:4a:ee:72:c9:
         0f:3b:ec:93:ab:02:dc:6c:56:74:81:be:60:b7:20:eb:b6:3d:
         11:35:b9:b8:8e:67:e7:00:83:23:4d:5b:7f:5e:8f:4b:b3:3c:
         5c:9f:cb:90:23:8a:0f:7b:55:8c:77:c8:49:5e:b7:bd:87:62:
         68:30:24:b9:3c:2f:08:dc:1b:5c:e7:05:50:da:be:20:e1:2b:
         db:87:22:bb:08:94:c9:80:9f:26:d6:c9:60:8c:be:04:50:38:
         59:51:fb:20:b8:e9:b8:89:3e:e1:e5:80:21:ba:14:90:db:0b:
         09:9f:3b:2b:4b:6d:88:a5:0d:6a:c5:33:10:3a:03:b5:ea:7a:
         ae:11:dd:20:b4:d7:84:fc:49:08:8b:71:a0:e2:f4:36:65:87:
         31:2b:8e:1a:12:a1:36:6c:21:cb:59:00:98:2c:2e:d1:e6:d1:
         73:86:79:9c:36:d9:fd:c9:ca:8d:03:53:40:dd:02:f4:a8:69:
         18:63:23:12:86:2b:fd:6d:65:3c:3b:cb:3b:04:4a:e8:55:72:
         12:dd:f0:63:b5:ee:99:80:4d:37:8d:b5:15:cf:fc:d2:5e:c3:
         7e:ac:e1:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:33:36 2026 by rpki-client