This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft
File:                     411E2D411D687BCB4449C3DF45BEEDC041007D94.mft (raw, json)
Hash identifier:          WW8HVHCYLLp5c9Qg6kcwMfM5dHx1DmKr3VLSdaVvM0w=
Subject key identifier:   32:C6:29:A8:7A:F4:41:67:BD:CF:1B:F7:C9:E9:E1:50:16:9F:E7:5C
Authority key identifier: 41:1E:2D:41:1D:68:7B:CB:44:49:C3:DF:45:BE:ED:C0:41:00:7D:94
Certificate issuer:       /CN=411e2d411d687bcb4449c3df45beedc041007d94
Certificate serial:       33752DFAFBCC96A215629C94FFEA1C7FB10A62EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft
Manifest number:          6A
Signing time:             Sun 25 Jan 2026 08:46:56 +0000
Manifest this update:     Sun 25 Jan 2026 08:41:56 +0000
Manifest next update:     Mon 26 Jan 2026 12:34:56 +0000
Files and hashes:         1: D5EE63D9B1D2D5C6FADC9A169E9B4AF644CF37E9.cer (hash: X7BtIqYuY9CGfqbBF9famZoZLIlZWc4+DDZ02mC1ZUY=)
                          2: 326130663a316363353a6630303a3a2f34302d3438203d3e20323130333532.roa (hash: PJthaD3Dqq1MsFvHVoT7SFWUfWl9HRqCSrg1Gh5Hnbs=)
                          3: 326130663a316363353a313430303a3a2f34302d3438203d3e20323133383738.roa (hash: zOwHDjdhedqSqEGyWds4coIp7+ut0lW+Oo9tUWToG3g=)
                          4: 8BCE7E72ABBBAD00536393A0840BBA0ABF3AA28E.cer (hash: cxq9XcuHu2/vR/iQ4cPyYB4dnefhGATjkWK0w1d+3TE=)
                          5: 411E2D411D687BCB4449C3DF45BEEDC041007D94.crl (hash: 0XSIjFbDi07+pMOHjLSSwVyoMCgAVNGhxv2Vwb8AYf4=)
                          6: 326130663a316363353a326330303a3a2f34302d3438203d3e20323132343235.roa (hash: FHO6yQdE9pVoMQZDbmdnV97e+QL5O1Qj0xNfbrOZSso=)
                          7: CECA73092344CA9B6F74C1A83D6C747962186C47.cer (hash: m9A7pY21LBJWnoBWYTfcDrDbAq6DrjMijRojMG3Rirc=)
                          8: 326130663a316363353a31303a3a2f34342d3438203d3e20313533333736.roa (hash: HGaLio0Jo6U3+NxUmzAYGoR9w/tlCge/EFE0NkxzeVQ=)
                          9: 326130663a316363353a6430303a3a2f34302d3438203d3e20323034323434.roa (hash: 8U6uSk7tsPccVTskG2OLsMSqghKHOmq5AIh1lYBYbH4=)
                          10: 326130663a316363313a3a2f33322d3438203d3e20323033333134.roa (hash: 3CbPZlZdBv1wijTy1xiC/sWOE+eNUnisRKG/PEqX4Ls=)
                          11: 529BFC6DD306B2C49629AA6CEB313194CAA5D33F.cer (hash: 6r/3C/Tu9WqIAMRf5wqBgloGFaXd48/YhtGn/rLklQA=)
                          12: E1DB87BBBBD20DFF2619E614B86D4B7E91FBB73A.cer (hash: mXOWkVI+O5dfAGsBgGASZf8zQGRkapL7Yid77qUV13A=)
                          13: 326130663a316363353a3930303a3a2f34302d3438203d3e20323134383939.roa (hash: /phJ7IvkIJjQqedc+6zIS2gYoqHi+Ocf/hRYSoER9/g=)
                          14: 326130663a316363353a316330303a3a2f34302d3438203d3e20323037333033.roa (hash: ALGIA29NNbeFSJiSIRW+cPqzoSQbByDZ7Tc3zl5bUzE=)
                          15: 326130663a316363353a326530303a3a2f34302d3438203d3e20323131373231.roa (hash: BkW1C05jo1OHjmQfgh6BSthITjhcqgr7WoujWuOO764=)
                          16: 326130663a316363353a6230303a3a2f34302d3438203d3e20323134353735.roa (hash: /wBjERMVRUk3eATx7xB8KQMRotjHS8Dx8tee6UNFQoc=)
                          17: 326130663a316363353a3630303a3a2f34302d3438203d3e20323134393333.roa (hash: QAVw3nto63ezajf647rQJV/gJ9ugJ4OboWETYueKwa0=)
                          18: DB5BBDB30210314E9040B6C99DBF69EE85FA4EE1.cer (hash: Y59Iau9nin7BF25bY/G3aQb/k2UfFjDTb0NVecR9cTA=)
                          19: 326130663a316363353a3430303a3a2f34302d3438203d3e20323033393233.roa (hash: 8bqKwz8sj3sbN6VTB3pi6s7mX6CCSGrFYbUBfIR2kCw=)
                          20: 326130663a316363353a316430303a3a2f34302d3438203d3e20323134323037.roa (hash: NiIvuZazmDP3kGdz61QEI+q94NtgxG3Gr/oHjOzpBtE=)
                          21: 326130663a316363353a316530303a3a2f34302d3438203d3e20323134393638.roa (hash: URwclaYoVILE99k3dHkDkNvZg1XOMo4nTmtLuMv/9so=)
                          22: 326130663a316363353a6530303a3a2f34302d3438203d3e20323034353339.roa (hash: 8Lg12+qS457Clceh7CRKK2dYQVdupidFacGSjFmqeRY=)
                          23: 326130663a316363303a3a2f33322d3438203d3e203434333234.roa (hash: 2itISUuyiq2kJ3p6MrMIH40PF2ksGE3/FGvvEXcIVOY=)
                          24: 326130663a316363353a313530303a3a2f34302d3438203d3e20313938303235.roa (hash: 41VnGMIsMh3o9pctowqTD26wfCcnjcgLC79guvJR91I=)
                          25: 326130663a316363353a3530303a3a2f34302d3438203d3e20323037333137.roa (hash: IlSzSHDNIZ6+6aFd92vwII4f0I4UgOAOOCbXoAxD+t0=)
                          26: 2A91778ACCE76333081468D9784DE132C2985976.cer (hash: jaQi5vFpWZxrP+5SgB0/Nof0i0h5yIIkFhb/WKoltSY=)
                          27: 326130663a316363353a316230303a3a2f34302d3438203d3e20323033313638.roa (hash: bo1SBRM8XSA6XMG/cECAtn9xvjXWplHBDXvg2PuT6oE=)
                          28: 326130663a316363353a3230303a3a2f34302d3438203d3e20323135313732.roa (hash: KBjHfA9kjqW8OLDitF/Wf34xfbXVf7rNOb2IaI6UkFY=)
                          29: 326130663a316363353a326230303a3a2f34302d3438203d3e20323131373239.roa (hash: g8hKj91W7Xvro//u0J6C0VC1r489GP2/wMZRbU9A2RM=)
                          30: 326130663a316363353a32303a3a2f34342d3434203d3e20323034353138.roa (hash: uTnixv9hxV4t+/MNYIl3JI/v2d7u+7nTSEPq/Xubyao=)
                          31: 326130663a316363353a316130303a3a2f34302d3438203d3e20323030343535.roa (hash: caS1uw+tIHonGiirp27ihWFLNvPI3Lqgcb7cJY/5URU=)
                          32: AS44324.asa (hash: tgcGt6L9P1xGHanSZBtdBsLfGpUeuqaqrlfCZKm/qc4=)
                          33: 326130663a316363323a3a2f33322d3430203d3e203535323031.roa (hash: GoVxMbuxvRYAhL8X1ylPrO2LPPd0V08hTTxPYE/XoV8=)
                          34: 326130663a316363353a323530303a3a2f34302d3438203d3e20313533333736.roa (hash: 6Namxrf43YQyS33tbhmcxyljur2zp+JmJmQQBoRyqdg=)
                          35: 326130663a316363353a316630303a3a2f34302d3438203d3e20323132353332.roa (hash: OkA7mE2By1tX1d9l2TmDX/6EpIF8txUZN6tihggXGTs=)
                          36: AS214720.asa (hash: +U4auO/V8nlV4camGgHaMOAhD4vWi6ijODldNL0Ba0k=)
                          37: 326130663a316363313a3a2f33322d3438203d3e20323134303236.roa (hash: 0Mmksrtruh7fbUKALb2tK8xrOixD39y8EOgMrAELKKs=)
                          38: 326130663a316363353a3830303a3a2f34302d3438203d3e20313530323839.roa (hash: 8+UeIsdjHRsho3hm72Zq62QcdYxLHdat1mG4wxsTodU=)
                          39: 326130663a316363353a323630303a3a2f34302d3438203d3e20323032333335.roa (hash: rra7K6FfnmdhsuCKYcUdQImHwFvo7h9/pjiSjqvVfjg=)
                          40: 326130663a316363353a313130303a3a2f34302d3438203d3e20323135363139.roa (hash: 3ieELc5m08pyqFMvyZGwvLU4zxh5CWdP2r+xgmPYVZ0=)
                          41: 326130663a316363353a313230303a3a2f34302d3438203d3e20323032373334.roa (hash: JjNm5rDvtwoxVpKuyNODbWvZAo/OVdErv9yLLiqZwbQ=)
                          42: 326130663a316363353a34303a3a2f34342d3438203d3e20323131353735.roa (hash: 6w5bQISM5/f3Xx7fnLIHrjymZJmICgp/4YLl/tppTc4=)
                          43: 326130663a316363353a6130303a3a2f34302d3438203d3e20313938323636.roa (hash: cu3myeTajLRffV1p90jDI0TXRI0bh3Dv5VJAXzLfnts=)
                          44: 37AAEE584452DDAB0250921C4B2D8474F61FF74D.cer (hash: ji6sF/pbFHw0dk9l03JsSI1lTa/vQmzHwyiisPTjG2M=)
                          45: 326130663a316363353a323930303a3a2f34302d3438203d3e20323030303738.roa (hash: glctOSn6s4Xj9+H9ebH8OBXBfYfFT2hJPUufn2SZLJY=)
                          46: 326130663a316363353a313830303a3a2f34302d3438203d3e20323132343833.roa (hash: LD1kZoESri8SSiT70G4BwNPurj1h2Z8rsheZy9D25wQ=)
                          47: 326130663a316363353a3130303a3a2f34302d3438203d3e20323033333039.roa (hash: KPdxYweyaoN6aJ1WDQcAbIzYbTq2UWw3eNhM2zo446w=)
                          48: 326130663a316363353a3730303a3a2f34302d3438203d3e20323034303731.roa (hash: a9VTadKi3X1qXhii/AdM18H2c+kqhz05BGXKnS6Oxrw=)
                          49: 326130663a316363353a3330303a3a2f34302d3438203d3e20313939303138.roa (hash: RUR4g5rbDAp6ciVfkAyWU6prG9LPyX+46qC6E1BXuuI=)
                          50: 326130663a316363353a35303a3a2f34342d3438203d3e20323036353430.roa (hash: aeHFhugMkHAq+hujmnc0CAWqcy4S7rlH+hTvTizIIcQ=)
                          51: 326130663a316363353a313630303a3a2f34302d3438203d3e20313939333130.roa (hash: iz1tU+n1QM8JuIsf3A3u8SxRanJcAgiwVHnAaQQiyLs=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:75:2d:fa:fb:cc:96:a2:15:62:9c:94:ff:ea:1c:7f:b1:0a:62:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=411e2d411d687bcb4449c3df45beedc041007d94
        Validity
            Not Before: Jan 25 08:41:56 2026 GMT
            Not After : Jan 26 12:34:56 2026 GMT
        Subject: CN=32C629A87AF44167BDCF1BF7C9E9E150169FE75C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ce:6b:49:df:3f:44:94:23:40:e1:47:41:ce:
                    0d:9c:fc:91:4d:d4:72:c9:e2:b5:c6:ec:2c:fd:e5:
                    16:46:d8:2c:32:b5:cf:d5:85:35:d5:56:86:3f:db:
                    d5:f1:64:15:14:bb:04:14:a4:99:7d:ee:91:d2:a0:
                    27:21:b2:54:ba:c7:ff:4f:ef:1e:98:8b:39:42:5d:
                    a0:58:33:e9:25:ea:d2:65:63:66:0a:78:61:67:35:
                    ba:34:38:64:64:3a:c1:dc:38:ec:37:cf:07:a7:d2:
                    f8:60:41:5c:a7:4c:2f:db:d7:4a:a8:7f:12:fb:2f:
                    84:e9:ff:6b:21:a5:4d:1a:c1:18:ff:9a:3d:8a:88:
                    88:e7:e0:97:d7:be:3e:fe:27:08:fd:b5:d8:30:52:
                    7a:ca:4c:bf:6f:a5:cd:02:e0:7e:db:e5:5b:ce:61:
                    a3:d3:2d:27:ce:03:98:7b:d4:04:17:8d:48:dc:ab:
                    c6:85:2f:48:d3:c0:e9:b6:17:e6:84:3c:88:6e:eb:
                    c1:0e:28:e4:46:db:50:1f:1d:05:5d:e2:36:1f:c5:
                    74:2e:09:42:68:c5:13:2d:e4:4f:bd:5e:a5:38:fc:
                    8b:a1:ab:24:fe:a1:5d:df:44:b0:ca:3d:f9:13:2e:
                    33:2c:d5:50:67:37:be:64:92:d2:d9:c7:74:de:c2:
                    94:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:C6:29:A8:7A:F4:41:67:BD:CF:1B:F7:C9:E9:E1:50:16:9F:E7:5C
            X509v3 Authority Key Identifier:
                keyid:41:1E:2D:41:1D:68:7B:CB:44:49:C3:DF:45:BE:ED:C0:41:00:7D:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:d5:de:cd:bd:60:2e:a5:00:46:e8:7c:c9:5c:66:b6:dc:24:
         b2:3d:4e:6b:79:84:7c:67:94:db:f5:b4:4a:b5:b4:cb:a5:cd:
         4d:73:39:11:36:e6:c1:e6:03:bd:6c:d1:83:e8:95:36:39:ec:
         71:79:c2:e5:a4:7b:42:f1:3e:c9:40:3b:3f:09:f0:0f:64:03:
         69:45:a7:d6:53:9c:54:0e:d3:aa:a7:12:f2:45:6f:2c:67:6c:
         f2:1d:b7:3e:10:a2:e4:96:81:e6:1d:47:3f:9b:dc:21:7b:9a:
         a6:ce:54:2d:5a:a7:d8:98:86:46:ba:27:0c:63:57:d1:fd:dd:
         06:f1:9f:97:89:20:00:dc:b8:f4:ab:33:04:a6:db:22:2a:bc:
         08:05:90:56:aa:67:99:7e:6f:73:2b:80:5f:9c:5c:dd:51:15:
         ed:b9:6b:11:a0:9a:7b:32:c6:a5:d8:32:9b:4d:56:e6:d0:2b:
         c2:3b:4b:67:15:de:67:47:59:ed:10:1c:1f:8e:9a:2d:1d:eb:
         e2:4b:00:c6:e3:ae:db:26:1e:a7:0a:39:79:e3:bc:43:8d:f2:
         0d:ec:61:e1:66:5d:93:e3:14:f0:d9:06:25:99:8d:8f:93:93:
         c6:5a:3f:2d:cb:6b:39:8f:48:7d:f3:3e:45:b6:3d:c6:13:f4:
         9d:8c:f6:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:35:46 2026 by rpki-client