This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft
File:                     ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft (raw, json)
Hash identifier:          6eRmP2dKHGKeaDhwaYlL/sDt2NylwVgQSBLKTZjT9XM=
Subject key identifier:   CF:37:03:D8:B8:FD:52:36:4E:B6:9D:81:FB:F0:13:80:4A:5A:18:AF
Authority key identifier: ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B
Certificate issuer:       /CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b
Certificate serial:       56ACE99E05B46C540529105D49BD7787DE287B15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft
Manifest number:          63
Signing time:             Sun 25 Jan 2026 02:29:59 +0000
Manifest this update:     Sun 25 Jan 2026 02:24:59 +0000
Manifest next update:     Mon 26 Jan 2026 04:10:59 +0000
Files and hashes:         1: 3139342e35302e312e302f32342d3234203d3e203534323532.roa (hash: ruvdsYTXtE0Ab54FYmgOEkBccmfDScUwXgNFAX7lgcQ=)
                          2: 34352e3134392e3136352e302f32342d3234203d3e20323039303433.roa (hash: xof4y/WucaiGMtyPzgbTPsOcPFlb9obn6jFW42zp3IM=)
                          3: 3139342e3234372e34342e302f32342d3234203d3e20313432313436.roa (hash: TqX0P9wlnvbZoWAo8DlV20oJQITx6kCNiVhWbz6v/l4=)
                          4: 34352e3134392e36322e302f32342d3234203d3e20383334.roa (hash: K8ltTDgW9HfANPuVJSFbKlcEJqaQBf+iEfDLJr+tHyE=)
                          5: 3139342e3234372e34352e302f32342d3234203d3e20313337353137.roa (hash: 7Uz0iGXKq5oSbUI44D0T64XUT0jHl47mRLVxjRhD2eU=)
                          6: 3139342e35302e342e302f32342d3234203d3e20343030303339.roa (hash: 1KQ8U/cyI6RlRLUmJsQ7MnZR4YGCCRfjVSVg2/aEhuA=)
                          7: 34352e3134392e3136372e302f32342d3234203d3e20323132363639.roa (hash: G5FQ1l+cRk3n7sDIEiJiOqD91u3IjodfdNcjTCN0Zms=)
                          8: 34352e3134392e36302e302f32342d3234203d3e203235313938.roa (hash: BMVUQxVH4pq3R9s8f6YkxUT4rJ9AD3/MSsJhChcEejg=)
                          9: 34352e3134392e3136362e302f32342d3234203d3e20323132333834.roa (hash: oGRqBKIGwkwo89Qzo8J8QE2XhyVF3R37X5VJTJkYTLY=)
                          10: 3139342e35302e312e302f32342d3234203d3e203634323637.roa (hash: Y111o5heSVgTuvX1afqOIbWwexv6C9e08p+YRNlvpVI=)
                          11: 3139342e3234362e33372e302f32342d3234203d3e20313534303439.roa (hash: qsoqYvzpUXEnewa636Uqf3ZdHju9vYqXC78N1RH7Kt0=)
                          12: 34352e3134392e36312e302f32342d3234203d3e20313335333931.roa (hash: CjBHEb6e8KCFokD4ry4Ct4NNWk9/i3N//pYJT3Rzvpg=)
                          13: 34352e3134332e3136322e302f32342d3234203d3e203233343730.roa (hash: OcZ6EMgc6x8+IMfJh9quglLv9DVchqMI90FMfGysZqA=)
                          14: 34352e3134332e3136302e302f32342d3234203d3e203232313638.roa (hash: R01FRlBDr9pZoq05BG3LRHuNkIAJs+FNxUn/NkK9at8=)
                          15: 34352e3134392e3136342e302f32342d3234203d3e203235333639.roa (hash: a0LqwFPI6pwa1fZnOKWJVr+UvNzZLlo/pfpnRlcnUlw=)
                          16: 3139342e35302e312e302f32342d3234203d3e20333937363330.roa (hash: TeUJtf1ikY7LLYRPrAz/E+BsfW9QE1+7cNe6Ilv12VI=)
                          17: 3139342e35302e302e302f32342d3234203d3e203438333134.roa (hash: BtX3QzIneVP4peKGNcyeJeMDG5hgOoQ4i/5PEk0YGmY=)
                          18: 34352e3134332e3136332e302f32342d3234203d3e203139343337.roa (hash: M8Y5TaWjTiVOLanqncdwCCTpjaAInXMAJmIU/gVIuL8=)
                          19: 34352e3134332e3136312e302f32342d3234203d3e203631333137.roa (hash: 8ZjMd6obm3N7HBniZT8uftJQwQbBGvAMihymyaoAi+E=)
                          20: ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl (hash: QkZ/uFvRTOEa83EhXObN+eIT38l5JEKw3o1aMwHU0TY=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 04:10:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:ac:e9:9e:05:b4:6c:54:05:29:10:5d:49:bd:77:87:de:28:7b:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b
        Validity
            Not Before: Jan 25 02:24:59 2026 GMT
            Not After : Jan 26 04:10:59 2026 GMT
        Subject: CN=CF3703D8B8FD52364EB69D81FBF013804A5A18AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:8c:26:8a:5d:1f:32:9b:26:fc:93:d2:17:d4:
                    4e:f6:f9:aa:c2:e4:20:6e:ac:ff:95:75:16:d0:25:
                    57:02:3a:88:e8:b3:8f:e2:ec:18:7d:3b:34:2a:f7:
                    55:ce:ca:63:8e:5e:e7:ac:9d:6e:83:4a:f5:d3:f2:
                    91:d4:98:8d:5a:4f:9d:65:7d:df:2c:65:2f:e7:47:
                    94:1e:fc:8f:59:78:25:49:bb:6c:9e:8b:ec:a4:50:
                    d9:15:cc:6f:49:b0:0d:4b:f0:07:21:3c:d2:40:59:
                    d6:0e:7d:64:58:07:75:5e:2b:af:6f:66:68:ae:f1:
                    c6:80:5a:92:72:fe:a4:5e:90:de:7a:e2:1b:58:71:
                    a2:50:2b:de:d0:2b:57:4d:42:1f:87:47:90:d7:70:
                    45:f3:d9:2a:f4:fc:07:56:84:73:12:c1:1e:ab:96:
                    87:c0:77:fa:f0:0f:56:81:a9:a1:f8:1e:dc:2d:70:
                    04:22:c8:f6:50:8f:7f:40:32:38:00:19:97:83:67:
                    bc:bd:76:00:83:e2:33:1f:ef:6a:a0:ec:77:87:bc:
                    10:dd:4b:72:8e:1a:21:f0:67:58:40:1f:10:8c:65:
                    5e:11:97:83:cf:79:4a:e1:fc:05:6e:30:bc:7d:cf:
                    58:63:95:24:e3:58:71:19:90:2a:eb:b4:e2:7c:dd:
                    92:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:37:03:D8:B8:FD:52:36:4E:B6:9D:81:FB:F0:13:80:4A:5A:18:AF
            X509v3 Authority Key Identifier:
                keyid:ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:a9:09:59:0e:89:a9:c6:04:15:19:56:b1:5f:4e:2a:f1:2d:
         f5:35:92:06:ee:33:d7:70:4b:10:3b:a1:80:98:ae:7c:8c:73:
         d7:53:cc:6b:4e:fe:cf:4e:e8:30:8b:cb:23:00:56:97:92:a0:
         5c:49:bc:25:9b:5d:b8:61:bb:82:6f:a3:15:d7:f8:95:2d:b2:
         53:49:02:4b:e5:6c:f3:bd:f6:f9:04:85:fa:e2:0e:c6:59:87:
         8d:45:92:5b:4f:f0:c5:65:0e:5f:11:cf:5d:aa:de:36:c7:23:
         f2:6a:f0:1a:0b:85:4f:75:90:7e:ca:a2:f3:ae:4d:0a:c9:3e:
         53:a2:91:09:7c:42:ad:0e:a8:80:43:d0:e4:97:82:5e:47:68:
         ab:3a:77:e8:ec:91:ae:43:00:15:84:6e:34:37:b2:cc:a4:03:
         65:dc:22:e8:d3:af:70:6a:fd:39:f7:3e:f7:28:eb:3e:d5:d6:
         fc:d2:7d:70:45:10:c3:a3:0f:6e:04:9f:ec:ff:98:23:78:c5:
         f4:7f:29:9a:99:8f:a9:7c:93:c8:19:30:c4:de:1f:22:17:4b:
         d6:12:0e:72:33:76:6f:dd:a7:9b:94:49:57:de:b3:17:cb:e5:
         eb:c4:9b:5b:39:f6:60:73:51:76:c1:c1:71:ec:61:2c:18:ca:
         48:b7:89:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:46:19 2026 by rpki-client