This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.mft
File:                     5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.mft (raw, json)
Hash identifier:          UKLnws0+w8beMaDg2GuRW92chRiJH5j9JddTuc1c75A=
Subject key identifier:   B1:22:8C:9B:85:C1:E9:2A:EA:DF:06:AD:0C:10:29:81:78:8F:C6:86
Authority key identifier: 5F:BB:D0:F3:D7:B8:1E:8A:FD:99:E5:A3:4B:67:83:4D:D3:CD:13:C9
Certificate issuer:       /CN=5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9
Certificate serial:       1A8780D13F6F59480A753626B4744EAEB8484C33
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.mft
Manifest number:          60
Signing time:             Sun 25 Jan 2026 00:02:10 +0000
Manifest this update:     Sat 24 Jan 2026 23:57:10 +0000
Manifest next update:     Mon 26 Jan 2026 02:29:10 +0000
Files and hashes:         1: 326130363a313238333a383930643a3a2f34382d3438203d3e20323136333637.roa (hash: FnSpyT9OnuvPM/GugFyozsjtsmrHeVUUgj2NyDK1wuc=)
                          2: 5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.crl (hash: +16iRH9RjXnqtxXyd0I8zD7Xjo9nkXXIuXUtUDL1J1U=)
                          3: 326130363a313238333a383931313a3a2f34382d3438203d3e20323134333138.roa (hash: nxTxBfayiVQT25dQojMI7kQmseMMilAT7TuM473ASuo=)
                          4: 326130363a313238333a383930663a3a2f34382d3438203d3e20323133343133.roa (hash: vOy3Hoo12y1MaF1xhG57rJd7z5CmXrBfc6rBSzJ2oUE=)
                          5: 326130363a313238333a383930613a3a2f34382d3438203d3e20323136333637.roa (hash: HuUH/JYH1vthyPEN3kexTHE/fhKQ1xn353p6qv+mYJg=)
                          6: 326130363a313238333a383930313a3a2f34382d3438203d3e20323134323035.roa (hash: cPNCLrbwdymPiqlNCY/iKCMb0/zZMwnLL5M7UNRh5H0=)
                          7: 326130363a313238333a383930343a3a2f34382d3438203d3e20323134373632.roa (hash: +ucDYfCsKINgleLYp642WIR5LEPN0kWQYDVnDQaA83s=)
                          8: 326130363a313238333a383931303a3a2f34382d3438203d3e20323034343634.roa (hash: q69dHOwOkc2Q3RdkddNdWABvLCUxxznoxKYiD9lMbNc=)
                          9: 326130363a313238333a383930633a3a2f34382d3438203d3e20323134373632.roa (hash: 2rCozjaLN+ORp+rF15yl0cLwnMgwxsdIwkSr5DBlLzo=)
                          10: 326130363a313238333a383930303a3a2f34302d3430203d3e20323133343133.roa (hash: 0gYE6skrisUrM06D53bvZrZFAv0EfqoV+nCI7G9OKOs=)
                          11: 326130363a313238333a383966303a3a2f34342d3434203d3e20323134303333.roa (hash: uXHhm0ZjjPodrKnjp4qW+YTDv1/Z29fczrFjmi+w+J4=)
                          12: 326130363a313238333a383930333a3a2f34382d3438203d3e20323133343133.roa (hash: hfsX7O4ssow2aXydnwN9zYa6SNNgkh4xqDb4M6RjByw=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/D54D443B67C1CC5EA1B5446EA0643CAC3A7A8B2C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/4/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/4807C118BD348934B5CC59B3E8A7A8C14F29C3FB.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 02:29:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:87:80:d1:3f:6f:59:48:0a:75:36:26:b4:74:4e:ae:b8:48:4c:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9
        Validity
            Not Before: Jan 24 23:57:10 2026 GMT
            Not After : Jan 26 02:29:10 2026 GMT
        Subject: CN=B1228C9B85C1E92AEADF06AD0C102981788FC686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7f:98:8a:bb:1e:48:3b:c5:c4:41:21:b7:58:
                    d7:e2:61:0a:62:6c:94:ea:3f:4a:30:e5:40:59:b2:
                    03:56:33:ff:e0:43:5b:69:36:4d:b6:58:b4:29:2c:
                    ad:9e:37:77:a1:ef:70:2d:31:f0:9a:4a:f6:8d:d2:
                    95:4b:d4:19:f9:ac:04:e4:28:49:11:65:54:46:83:
                    ba:65:73:c3:ff:aa:de:ae:d9:4d:fe:a2:1f:3b:98:
                    5d:fb:04:27:c5:1f:47:df:0d:b6:1c:ac:ed:0f:05:
                    9d:c2:e9:c7:52:1f:83:91:19:ec:9f:2b:bd:fd:3c:
                    81:6a:28:89:e6:07:41:54:85:05:15:d0:b7:12:01:
                    a7:ab:b8:2b:80:b5:96:11:35:91:c5:ed:58:7f:68:
                    f0:78:9d:3f:43:f4:28:e9:56:3f:e5:f2:09:b7:a7:
                    90:be:62:ae:fb:28:e9:58:08:03:8a:d2:51:5f:d0:
                    9f:36:99:5f:34:75:4b:c8:d5:c6:8d:52:b0:c8:f2:
                    fa:d2:e4:15:c7:7b:b2:1f:19:bc:d7:4f:24:46:2b:
                    22:66:53:b1:67:b3:5b:d2:0a:ab:53:b3:cd:40:55:
                    99:6f:81:63:3a:24:b0:c3:aa:5b:92:33:5b:de:3e:
                    dd:56:24:df:1b:6f:3e:12:d3:e1:04:cc:09:0b:09:
                    a6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:22:8C:9B:85:C1:E9:2A:EA:DF:06:AD:0C:10:29:81:78:8F:C6:86
            X509v3 Authority Key Identifier:
                keyid:5F:BB:D0:F3:D7:B8:1E:8A:FD:99:E5:A3:4B:67:83:4D:D3:CD:13:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/6/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/78e61611-3b0b-41ce-88cd-e560353f6942/1/5FBBD0F3D7B81E8AFD99E5A34B67834DD3CD13C9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:96:dc:e4:f1:8b:21:d2:0a:f5:3d:6c:52:54:ff:a0:c4:e3:
         56:87:fb:c4:49:b8:d1:ee:fe:b1:07:0e:04:c8:79:8d:b7:77:
         ea:a1:26:ef:f1:f2:3e:85:4c:8b:7a:45:96:74:f3:30:0f:c4:
         6e:2d:4a:54:66:74:e5:72:19:1d:1c:8d:53:3d:0f:88:f7:80:
         70:75:e4:4b:1c:6a:81:2b:d9:90:8f:cf:41:9e:24:7a:8b:0b:
         f6:df:92:1d:20:dd:8d:eb:71:27:31:5c:16:c7:76:3a:67:8b:
         80:b6:8b:ad:2e:b0:c5:87:a3:12:51:bb:ce:f4:12:b0:f9:3e:
         56:1c:f8:67:34:4e:e9:f3:f9:65:0c:91:61:2c:59:48:c1:5a:
         e1:dd:d5:8f:07:4f:c5:04:42:d6:67:a9:b9:9f:0a:84:75:c0:
         36:26:59:0c:73:35:5b:c3:90:42:ec:e2:87:55:bc:49:17:ef:
         ff:50:04:3b:55:47:4f:06:01:55:17:61:4c:77:62:fd:35:a0:
         a4:18:75:4d:d3:0f:21:d0:ee:9d:36:76:34:7f:11:8e:fa:66:
         b7:0f:19:fe:84:54:26:f9:68:2f:e1:c2:91:a1:a3:27:4b:7b:
         af:0f:d9:a2:9a:7c:0c:eb:2c:1c:e0:e3:7e:0b:3d:68:fe:a3:
         49:81:62:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:21:12 2026 by rpki-client