This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft
File:                     307456E03A11DBB48443E93538958B15B4E9E0F0.mft (raw, json)
Hash identifier:          1e5NHyU8gWpKjions47m6Ml6VhVOPZrU5V3od4UI898=
Subject key identifier:   E1:D6:07:2A:17:F1:70:10:A0:6D:EF:16:00:83:C4:CE:31:26:EB:6C
Authority key identifier: 30:74:56:E0:3A:11:DB:B4:84:43:E9:35:38:95:8B:15:B4:E9:E0:F0
Certificate issuer:       /CN=307456E03A11DBB48443E93538958B15B4E9E0F0
Certificate serial:       6765EAE05E55D5914D757B1783435D162521EB7C
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/307456E03A11DBB48443E93538958B15B4E9E0F0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft
Manifest number:          FD
Signing time:             Sun 25 Jan 2026 01:19:37 +0000
Manifest this update:     Sun 25 Jan 2026 01:14:37 +0000
Manifest next update:     Mon 26 Jan 2026 04:45:37 +0000
Files and hashes:         1: 3130332e3133392e38382e302f32342d3234203d3e20323134383039.roa (hash: aBp6U2aVMH3hSM5eeFVi+p63pJd0WYDoQYC72uEJ/w8=)
                          2: 307456E03A11DBB48443E93538958B15B4E9E0F0.crl (hash: 5nmLqumY5EkpmXp/pF7kY3j8JQa4V6dhoXZyk8apkVM=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/307456E03A11DBB48443E93538958B15B4E9E0F0.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 04:45:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:65:ea:e0:5e:55:d5:91:4d:75:7b:17:83:43:5d:16:25:21:eb:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=307456E03A11DBB48443E93538958B15B4E9E0F0
        Validity
            Not Before: Jan 25 01:14:37 2026 GMT
            Not After : Jan 26 04:45:37 2026 GMT
        Subject: CN=E1D6072A17F17010A06DEF160083C4CE3126EB6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:76:93:a5:5e:a6:b2:8b:a1:e3:cc:2a:e2:11:
                    41:89:93:2c:34:87:8e:d1:82:87:04:ba:a4:c3:68:
                    eb:b0:3c:67:b5:de:5f:da:a7:90:ff:d8:30:7a:33:
                    2a:c8:32:3b:e8:ad:d4:2b:da:bc:a5:af:d5:2c:8c:
                    2f:a9:10:74:17:52:36:55:d6:b1:fd:a0:e3:c6:0a:
                    41:10:d2:ca:14:6c:b3:bf:b2:ba:63:43:ec:81:d7:
                    5e:1d:bf:b5:bb:6e:88:81:6b:18:52:12:f8:5c:a7:
                    ca:22:c7:05:d8:be:5d:85:69:d3:e1:a4:b9:ae:6d:
                    ed:76:f2:2c:f3:ad:5a:45:84:d4:f5:ab:a1:34:3d:
                    e1:63:18:1c:a3:4c:cf:f4:95:0f:83:de:66:a1:97:
                    49:e3:e0:86:14:a1:f9:55:59:21:33:97:de:08:91:
                    ad:ea:d9:ef:ab:93:18:14:f8:0f:67:85:dd:f2:c1:
                    31:06:fe:05:8d:b7:bd:40:de:ab:b7:5b:1c:ec:98:
                    ff:67:4e:a2:d6:bf:07:c5:cb:12:2f:14:04:ce:38:
                    8d:16:06:c1:6a:40:d1:46:70:c5:ba:4b:8a:72:f6:
                    69:eb:c0:56:30:42:0e:b6:06:80:c4:2a:38:2e:32:
                    c9:e4:cb:69:68:14:82:e5:4b:a8:f2:8e:11:91:4a:
                    d4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:D6:07:2A:17:F1:70:10:A0:6D:EF:16:00:83:C4:CE:31:26:EB:6C
            X509v3 Authority Key Identifier:
                keyid:30:74:56:E0:3A:11:DB:B4:84:43:E9:35:38:95:8B:15:B4:E9:E0:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/307456E03A11DBB48443E93538958B15B4E9E0F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/1/307456E03A11DBB48443E93538958B15B4E9E0F0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:95:38:6a:b1:d2:19:3d:8b:cd:40:bc:00:54:cb:ca:08:76:
         cf:cf:83:dd:68:41:81:3b:f2:74:e4:69:40:6d:c5:4d:e7:bd:
         f3:65:ca:54:82:fe:c9:ff:b8:56:1b:e7:62:6a:e9:41:f5:2f:
         9c:74:76:73:71:e9:cd:06:d8:df:ee:90:7f:bd:c0:52:eb:ab:
         7d:5e:d6:5b:d7:08:d2:4c:af:d5:84:3e:92:f4:a3:1b:f4:37:
         b4:64:b3:9e:de:e1:7e:e4:94:2b:7e:25:24:4f:aa:e1:ce:d7:
         e1:55:a0:4e:c2:b2:c8:09:3e:7b:76:ef:04:3b:e3:e4:fa:ab:
         c8:62:42:fd:e6:ac:8d:b1:92:c7:67:be:c5:a1:83:51:3e:4f:
         84:f8:03:e7:d2:c2:9a:d6:de:e8:9a:1c:12:19:06:b2:22:26:
         43:61:85:f6:2d:fa:e0:b9:b7:e4:fa:21:fd:35:08:a0:34:52:
         1f:e4:89:46:1e:ac:9d:60:fd:92:56:1a:a0:0d:85:4b:5b:7c:
         65:d2:0c:f1:f3:db:c2:8a:e1:ed:72:cc:7b:34:81:11:c5:fb:
         66:18:22:fc:fd:42:66:3e:23:2c:5a:7a:64:66:1c:92:91:33:
         0e:47:88:7f:be:78:22:3b:99:04:d4:ec:a5:a0:7f:bd:6b:81:
         6f:95:e2:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:35:11 2026 by rpki-client