This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.mft
File:                     702B79B445330AC21D237308277A4472598CE771.mft (raw, json)
Hash identifier:          Ry3/U1Xr0C/kkjtBwTVicYWRLa6KlYu4XjdAF17egKU=
Subject key identifier:   F3:89:F9:3F:FF:3D:BA:F9:C3:29:64:D5:A4:A5:30:83:0F:E6:DD:1C
Authority key identifier: 70:2B:79:B4:45:33:0A:C2:1D:23:73:08:27:7A:44:72:59:8C:E7:71
Certificate issuer:       /CN=702B79B445330AC21D237308277A4472598CE771
Certificate serial:       57F4047D7C6832F41484ADDA7CF09F4960BDB8AE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.mft
Manifest number:          E3
Signing time:             Sun 25 Jan 2026 07:09:36 +0000
Manifest this update:     Sun 25 Jan 2026 07:04:36 +0000
Manifest next update:     Mon 26 Jan 2026 08:20:36 +0000
Files and hashes:         1: 326131343a373538333a663730393a3a2f34382d3438203d3e20323134393535.roa (hash: ody+MZu+p9r7722qUv+nib+WdzL08bt7JIhdIl0nBOM=)
                          2: 326131343a373538333a663730353a3a2f34382d3438203d3e20323134393535.roa (hash: v1ff3/5opCg79B8vnRLLf35N5RlDFleXR6jWqIzcy+A=)
                          3: 326131343a373538333a663730373a3a2f34382d3438203d3e20323134393535.roa (hash: KKLY1zCTXfmGMrjDFuT7b/5dqeecgqHT0wX+vU1j/NU=)
                          4: 326131343a373538333a663730323a3a2f34382d3438203d3e20323134393535.roa (hash: j1h3rUtpYcXTQ9tg2+zKR1MIHOPPCpnwfhKyK3a6mSc=)
                          5: 326131343a373538333a663730313a3a2f34382d3438203d3e20323134393535.roa (hash: RzicPZXer6PLdeFy+vOsancgSNcjrm95+RPOXY7LoDc=)
                          6: 326131343a373538333a663736343a3a2f34382d3438203d3e20323134393535.roa (hash: zM36/OphB/KbTgVAZhJZfKncuog5pc9Z90qFovwCspo=)
                          7: 326131343a373538333a663730363a3a2f34382d3438203d3e20323134393535.roa (hash: HF0IXoiIoV1vsEb3Y7UE6hceXgn4rnvPt86H7Wi7oFU=)
                          8: 326131343a373538333a663730343a3a2f34382d3438203d3e20323134393535.roa (hash: GR7y7aRgVAUP5lUmI8IZDhrv8mAyuuXgZxhshW1ruYs=)
                          9: 326131343a373538333a663730383a3a2f34382d3438203d3e20323134393535.roa (hash: s15NOBRzlJhT8Ilr0QxZxBoPvIfuNlcjTL4p1JyK0Rg=)
                          10: 326131343a373538333a663730623a3a2f34382d3438203d3e20323134393535.roa (hash: kLF1pGobCPtSBqVgUGHgu1by1e7kkegKpHMRpd10cN0=)
                          11: 326131343a373538333a663734343a3a2f34382d3438203d3e20323134393535.roa (hash: 2S+JbymcjIynwfVZAKfR00rXladCcxDgshwKEZR1YsA=)
                          12: 702B79B445330AC21D237308277A4472598CE771.crl (hash: x/FLFDq2OE3By8VcgOFKPYde55MR3SAATb2JipP5xt0=)
                          13: 326131343a373538333a663730613a3a2f34382d3438203d3e20323134393535.roa (hash: KrncfgwV2JNmUMMX9XTAiUcGcVNG82mQHu5/P0lF/YQ=)
                          14: 326131343a373538333a663734333a3a2f34382d3438203d3e20323134393535.roa (hash: F//u8b8URxPoSW5tKZ7gI7LWdU+B7yQQrxeBR/nXITQ=)
                          15: 326131343a373538303a666666613a3a2f34382d3438203d3e20323134393535.roa (hash: h/rRMvyqafFU+yTlCYjO1aoLzPvMYTq8Atefyqn1aw8=)
                          16: 326131343a373538333a663730633a3a2f34382d3438203d3e20323134393535.roa (hash: MCTGvJAm8U3NtPMr0TfqstCKnf65Svz4B5aqt1Vg4GE=)
                          17: 326131343a373538333a663730333a3a2f34382d3438203d3e20323134393535.roa (hash: 9+boFqIS6keyE5RNh9z/i3/Vy3fO+EE8pDJc8uN4NyQ=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 01:36:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:f4:04:7d:7c:68:32:f4:14:84:ad:da:7c:f0:9f:49:60:bd:b8:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=702B79B445330AC21D237308277A4472598CE771
        Validity
            Not Before: Jan 25 07:04:36 2026 GMT
            Not After : Jan 26 08:20:36 2026 GMT
        Subject: CN=F389F93FFF3DBAF9C32964D5A4A530830FE6DD1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:94:3e:4d:bd:bb:f8:f4:15:5d:ec:fd:9b:57:
                    c3:9b:1c:7e:d6:21:36:95:67:9f:83:24:48:dc:8f:
                    f0:39:60:87:cf:98:13:9e:df:50:48:00:b8:ca:c7:
                    42:a3:39:65:fc:8b:99:44:12:12:b4:2a:90:9a:50:
                    ba:09:48:16:a3:58:71:7b:71:15:e0:96:5b:7b:14:
                    90:b4:ab:18:61:2a:49:7c:88:40:ad:79:c5:55:87:
                    b3:2d:04:0c:19:36:c0:c5:23:d5:a6:14:ac:6d:7d:
                    22:67:de:65:44:90:76:60:da:4f:9c:62:62:80:4b:
                    45:04:c2:6c:96:32:c8:16:1b:cf:d1:ae:7c:56:ed:
                    7b:b2:5e:4f:46:cf:3c:b3:9e:ac:8a:ed:e0:a0:8e:
                    77:f4:af:0f:84:12:67:34:6c:2c:f1:ee:8d:0c:3b:
                    dd:d4:94:4c:b9:5c:4e:70:1d:30:07:1a:99:b1:13:
                    01:3e:36:6f:3d:43:d6:47:6e:f3:77:31:a9:4e:ad:
                    fa:f4:61:3c:50:90:db:f4:57:fa:2b:af:0d:64:b1:
                    d9:37:e9:e7:56:41:9c:2e:e1:f1:81:d9:d0:02:e0:
                    82:59:3e:6d:f0:23:08:f3:a6:e8:45:bc:81:60:62:
                    9d:e6:a8:8c:b7:cc:78:7c:ee:1c:d6:4f:8f:a5:9d:
                    6c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:89:F9:3F:FF:3D:BA:F9:C3:29:64:D5:A4:A5:30:83:0F:E6:DD:1C
            X509v3 Authority Key Identifier:
                keyid:70:2B:79:B4:45:33:0A:C2:1D:23:73:08:27:7A:44:72:59:8C:E7:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/702B79B445330AC21D237308277A4472598CE771.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/1/702B79B445330AC21D237308277A4472598CE771.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:86:c6:e8:6e:a6:6c:7a:a0:09:f3:54:db:24:fa:44:70:22:
         51:8e:86:59:34:d4:a3:de:1f:de:74:49:58:30:ea:70:b0:b7:
         a7:45:11:19:9e:c0:cd:86:f6:a3:42:b4:a6:10:2c:48:5b:53:
         9f:c2:21:e2:16:ae:4c:1e:a6:54:9e:86:dc:83:32:da:26:32:
         80:8a:30:17:49:49:cf:54:81:ae:3a:93:0c:43:31:d1:02:bb:
         26:b8:71:01:07:0f:da:7c:0c:51:85:4b:b8:72:06:ec:93:a8:
         88:73:e9:ff:11:5e:80:f8:d7:d1:f5:8f:88:bb:30:40:70:f4:
         f6:94:7f:ce:71:59:1d:57:67:4e:9d:04:d3:65:84:8b:5e:a1:
         0b:87:da:28:5f:33:05:e6:90:25:91:a8:a1:f1:5c:d8:23:45:
         c8:0e:c9:b3:6a:cf:5e:cd:c7:75:19:59:80:a8:99:1f:87:79:
         9a:ef:22:62:4b:94:87:99:4e:15:d2:a2:bf:f1:21:6c:bd:49:
         17:dc:84:b6:99:0d:39:e1:f2:fc:64:e3:87:2e:24:38:c5:fb:
         dd:db:7d:cb:6c:54:2f:ed:20:66:b3:5c:9a:b5:ab:72:a9:af:
         db:a8:80:f6:a8:26:e4:64:8f:46:2b:4d:df:53:cd:08:e2:7f:
         9e:8a:57:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:09:03 2026 by rpki-client