This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
File:                     3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft (raw, json)
Hash identifier:          4qBU7wgkzY9P168PzPs8G2uukiE9NeqNSOgQ1IVYOws=
Subject key identifier:   80:E0:1E:97:91:CC:06:8C:46:ED:81:40:37:3F:78:A0:E7:1E:EC:30
Authority key identifier: 3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
Certificate issuer:       /CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Certificate serial:       6A86D832CC11891C21564A6172B169B8D540184E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
Manifest number:          032E
Signing time:             Sat 24 Jan 2026 23:08:47 +0000
Manifest this update:     Sat 24 Jan 2026 23:03:47 +0000
Manifest next update:     Mon 26 Jan 2026 00:53:47 +0000
Files and hashes:         1: 326131343a366634343a633064653a3a2f34382d3438203d3e20313938333432.roa (hash: CR1Da8B3Ve/Ki5AH4lTB+zn6wD6Vb8CX/Tfk65mSnm4=)
                          2: 326131343a366634343a646561643a3a2f34382d3438203d3e203534363831.roa (hash: +RB/H3yC2Zhqk6dbZnb2AoHhKMIePUOM6t4+sjUxfqU=)
                          3: 326131343a366634323a3a2f33312d3438203d3e20323030323432.roa (hash: ITJiuOJiPhL9zGFnR/kFwwhgRvQux+ehMzGBms69CVM=)
                          4: 326131343a366634353a633030303a3a2f33362d3438203d3e203438343336.roa (hash: buWW9LxxoX84xDGlXRuc7ac6Vqdjfpe3tuguLo1bU7c=)
                          5: 326131343a366634343a633066663a3a2f34382d3438203d3e203534363831.roa (hash: dC8rQUoWVp/X7YVAzZ2dHrxEZrdm+LkwjO9CaebKOYE=)
                          6: 326131343a366634353a623030623a3a2f34382d3438203d3e20323134373537.roa (hash: J9QsdPj5DQDhu5mtlU23kktl0EvwgihwetcbiHJN5aI=)
                          7: 326131343a366634343a623030623a3a2f34382d3438203d3e20323130363637.roa (hash: m8+D+okBVVmTzlPUuDfmEBZbvua+N+sKP5fs6j2S33Y=)
                          8: 326131343a366634343a633064653a3a2f34382d3438203d3e203438343336.roa (hash: g+1tMLXY3SN1Y/zUSSaWRJc99akoWdOPFvMCxkZrGLU=)
                          9: AS200242.asa (hash: 1AlMG2dsNj+2a3kLp0CpSmy1LKhmLk73ZFr/4CSbD+w=)
                          10: 04C92D9B1C8307B70C47290166D5989CEFABDCC4.cer (hash: WC2xT6FYiM9dJRxOd1eaHqB3GTC9TL6xOPD7Nd7Wdro=)
                          11: 326131343a366634343a633730313a3a2f34382d3438203d3e20313938333432.roa (hash: 7HzMy3EQC4VhBpQQuwAgqmxWq4MZqQyb1t+9r/yAxck=)
                          12: 326131343a366634343a623030623a3a2f34382d3438203d3e20313937393139.roa (hash: Wi5+YIc762ypl+B2WINgJse4hzMgAIpn5Ywt7Gts2zw=)
                          13: 326131343a366634343a656465383a3a2f34382d3438203d3e20323035373839.roa (hash: 37pW5zkUWwecCqjFHAdYxHEZTGOlFK8BvptTevydiHI=)
                          14: 326131343a366634303a3a2f33322d3438203d3e20323030323432.roa (hash: wghHBUAPyTh1k75qu9+3ST+twxsY88XGIADNiAK2tow=)
                          15: 326131343a366634353a646561643a3a2f34382d3438203d3e20313938333432.roa (hash: 9H5bHORS1buGdk6dUDjyuqRIpPDaKxv77H5RNmLlgrw=)
                          16: 326131343a366634353a3a2f33362d3438203d3e203530323234.roa (hash: Cm6iG7rXYSmOBRLZv4C/D104nGz4969UDdr1rCKUD0A=)
                          17: 3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl (hash: vncpINVUSOpjfEzsTt1txcaRfOuSbKSFFzrNDQow6Nk=)
                          18: 326131343a366634353a633030303a3a2f33362d3438203d3e20313938333432.roa (hash: E5i+93dh5I/S5MMaZahzwFpc+FrF3/j8/oPFxMb1ofg=)
                          19: 326131343a366634343a353336303a3a2f34342d3438203d3e20323136303338.roa (hash: kV9C6QKeijySZWnfoj92GJUvF6GdpqcT/jUq1YV72FQ=)
                          20: 326131343a366634343a3432303a3a2f34342d3438203d3e20323036373531.roa (hash: tAH3E769OlzQWJEjgXPQBoGBF8R2vjgSThIJK0OhT8g=)
                          21: 326131343a366634343a353630383a3a2f34382d3438203d3e20323030323432.roa (hash: tIzxcCSG/V5QyAqn4lWVGbnRYKGordkU7LLlPvgkHMc=)
                          22: 326131343a366634353a646561643a3a2f34382d3438203d3e203438343336.roa (hash: qTx2l+4Rmw9QcHHVu+RMfEZ9wVvbUUTMbX9wtkxLgYk=)
                          23: 326131343a366634303a3a2f32392d3438203d3e20323030323432.roa (hash: x7hOPFZjN7RZHBsYqLnDpQUy2G9KH75g5Bkk7YCqeYo=)
                          24: 326131343a366634343a623030623a3a2f34382d3438203d3e20313939353832.roa (hash: jzgTEml4YLsCpJ5PWa0CjR2ZyZx1iGCX4c7IWy4h9Uw=)
                          25: 326131343a366634343a65663a3a2f34382d3438203d3e20323136303338.roa (hash: QG09fxLJtKa1Y7d6YZoiVLo1F1ttiuWxvVNqxNhuPNo=)
                          26: 326131343a366634343a343430303a3a2f34302d3438203d3e20323133313336.roa (hash: HawlF8j6AaLKvNQu2aTpKUa6yLzB5NKlnnf7Xm6b/mk=)
                          27: 326131343a366634343a636166653a3a2f34382d3438203d3e20323035373839.roa (hash: Gh/w94WLUPZNwP3yscIWB0P8fPzMkD8rKLwHE/CiSik=)
                          28: 326131343a366634343a323339303a3a2f34342d3438203d3e20323136313135.roa (hash: mVRk7OX5nwehY6QXOhw6587D02FFEQfLM0VwJdYXtak=)
                          29: 326131343a366634343a633730313a3a2f34382d3438203d3e203438343336.roa (hash: ga3nLrPruxDKXz/HZkq9lRMiU1IAca5YQ8TT+rGp+T4=)
                          30: 326131343a366634343a663030643a3a2f34382d3438203d3e20323037313138.roa (hash: ccOOAjxyylksS3iqkMGCPb0MvRpljc/bOW2a58HaGeg=)
                          31: 326131343a366634343a623030623a3a2f34382d3438203d3e20323135343733.roa (hash: FmiBX7ObUBJXMx50BEJxB5rcHYX/1xnmOVK+ALpTHJE=)
                          32: 37372e37332e3131372e302f32342d3234203d3e20323030323432.roa (hash: eQCFDDvBb9p3KuzX9nQDyWev7idoWrZ4UxFS/r5wLgI=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 00:53:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:86:d8:32:cc:11:89:1c:21:56:4a:61:72:b1:69:b8:d5:40:18:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
        Validity
            Not Before: Jan 24 23:03:47 2026 GMT
            Not After : Jan 26 00:53:47 2026 GMT
        Subject: CN=80E01E9791CC068C46ED8140373F78A0E71EEC30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d3:33:e6:e6:32:11:8c:c9:47:bf:fc:ed:a5:
                    62:a8:ea:ca:bf:f1:38:85:27:3f:35:74:88:e3:90:
                    fd:bd:75:a6:c0:a9:08:34:5a:23:96:b5:ca:d8:65:
                    14:7d:5b:d7:6a:d6:cb:8a:8a:a3:0e:2e:e4:0c:36:
                    59:d9:d3:7c:92:11:e1:d6:12:99:2e:9a:4d:f6:21:
                    45:5a:1b:73:f2:96:7d:20:bc:eb:3b:63:f8:17:b1:
                    62:a7:d7:98:82:de:71:b9:f9:fa:02:1b:e0:83:bf:
                    22:6c:22:11:7f:af:58:7e:d9:87:1e:39:73:95:20:
                    b0:aa:92:66:0a:6c:93:06:eb:9b:a8:f0:1d:18:14:
                    bd:58:5e:27:d7:39:38:4e:69:9e:2b:df:e4:60:bf:
                    6b:d3:51:4a:b4:3c:b9:57:bf:8b:3d:69:28:09:36:
                    02:15:e6:ab:49:72:55:7c:1a:ea:2a:64:11:4a:88:
                    ce:53:3b:5f:22:54:b8:53:5a:75:89:7a:07:41:98:
                    64:85:4c:12:bf:11:db:b4:ed:8b:2f:1c:6f:e9:3e:
                    ad:3d:75:58:e3:88:27:0e:1e:bc:ad:7e:55:bc:3b:
                    b2:c5:ab:3c:cd:a3:58:90:88:f0:df:4c:c4:27:d5:
                    6e:bf:44:d8:7f:7f:b2:7e:a0:66:75:be:08:74:1a:
                    f8:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:E0:1E:97:91:CC:06:8C:46:ED:81:40:37:3F:78:A0:E7:1E:EC:30
            X509v3 Authority Key Identifier:
                keyid:3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:4a:9a:62:76:6a:c5:d0:cc:fb:4c:36:08:7f:63:ab:12:c7:
         df:e1:35:3f:f6:e4:14:31:12:26:46:dc:eb:bd:f2:30:40:2e:
         4f:11:b7:b2:a0:d5:c0:af:3f:85:5d:5f:51:1f:bb:40:90:45:
         7e:12:20:ff:43:43:9a:8b:90:7a:5f:5e:b3:24:e8:4f:2e:2d:
         84:43:39:09:e6:4c:ce:d0:89:8e:e5:6c:1c:db:6b:03:76:6d:
         00:ca:70:82:c2:2e:f4:f8:50:46:76:c0:80:35:d9:e1:44:3f:
         df:42:0a:96:7d:37:65:6f:f4:96:0e:f4:72:ef:f9:8e:73:bb:
         ba:76:22:0e:6b:03:fd:53:d2:d8:8a:28:e7:6f:e8:f1:20:15:
         e3:1c:5e:78:84:16:f6:2b:35:bb:0e:49:0d:11:ed:09:7d:13:
         c3:bf:b5:27:74:24:48:04:0e:a9:f9:9c:90:56:37:9a:7a:65:
         67:93:67:fa:92:dd:2e:a7:25:ea:16:02:87:b4:f0:2c:2e:4c:
         10:2c:06:7a:18:01:1c:1a:5f:ab:d8:3e:8f:59:ab:09:a9:90:
         03:6f:48:c8:6f:84:1f:90:2e:b9:03:c9:05:86:be:29:70:fc:
         e1:f1:c3:d0:1e:d4:a1:48:45:c4:c8:d2:fc:2b:38:6b:27:23:
         85:19:84:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----