This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft
File:                     52285B8754F215EBEAB614DEB86E66DA3B37320C.mft (raw, json)
Hash identifier:          n+M0rYPTC1xHFR8/yn8cg6BRGkVaAP1KmnM7DkFJbEs=
Subject key identifier:   78:E6:46:3F:62:7D:78:6E:02:4D:ED:3A:1C:0B:B6:1C:62:43:FD:BD
Authority key identifier: 52:28:5B:87:54:F2:15:EB:EA:B6:14:DE:B8:6E:66:DA:3B:37:32:0C
Certificate issuer:       /CN=52285B8754F215EBEAB614DEB86E66DA3B37320C
Certificate serial:       3213657DC4C44FB04282F01264B2C0565EB764B0
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft
Manifest number:          027E
Signing time:             Sun 25 Jan 2026 03:33:20 +0000
Manifest this update:     Sun 25 Jan 2026 03:28:20 +0000
Manifest next update:     Mon 26 Jan 2026 07:10:20 +0000
Files and hashes:         1: 326131343a373538313a623030303a3a2f33362d3336203d3e20323135303834.roa (hash: 8Iv1HdyRUhjcvQFIVfomOSyv77EzHn71qEiaLSvjvAE=)
                          2: 326131343a373538313a6130303a3a2f34302d3430203d3e20323135303834.roa (hash: 6SMGzy0qxU/C5+Cz9d8WI56z67FiL2uOHLuZUmmEFig=)
                          3: 52285B8754F215EBEAB614DEB86E66DA3B37320C.crl (hash: KZhtMdu7OqQVg9KGToYHainF4NUWJPuzqNvDp1Wdpu4=)
                          4: 326131343a373538313a6632303a3a2f34342d3434203d3e20323135303834.roa (hash: ikRuOA2n8u4zq4qR5S8PkgRSZxYIGPGee0tyFklQIEM=)
                          5: 326131343a373538313a6632303a3a2f34382d3438203d3e20313533313736.roa (hash: Q+SHdUagvI6KZ73P7qEzwFM/MmpC3zK1RzbKHzMJDSM=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:10:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:13:65:7d:c4:c4:4f:b0:42:82:f0:12:64:b2:c0:56:5e:b7:64:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52285B8754F215EBEAB614DEB86E66DA3B37320C
        Validity
            Not Before: Jan 25 03:28:20 2026 GMT
            Not After : Jan 26 07:10:20 2026 GMT
        Subject: CN=78E6463F627D786E024DED3A1C0BB61C6243FDBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e0:a7:be:a5:10:61:70:f6:7e:d3:cf:a4:b3:
                    19:c1:32:7c:05:c3:d6:24:2e:e0:e1:40:ab:c7:1b:
                    ee:5a:3c:ae:17:3c:a4:8d:20:35:39:c6:c1:24:6f:
                    ef:b6:d7:f2:bb:d4:e9:e9:18:bb:eb:f2:7c:27:04:
                    f2:55:a8:04:96:9f:39:d8:7c:e9:99:11:06:a8:a2:
                    83:dc:9f:2b:18:a8:70:e1:d0:72:78:8a:a5:c5:f7:
                    eb:b1:97:61:fb:68:9b:cf:3a:53:77:68:49:6a:1e:
                    2c:99:f2:18:9b:17:14:61:c9:f7:48:76:fc:ee:da:
                    63:33:ec:89:3d:b6:55:00:5f:7c:43:43:d4:2a:b0:
                    a2:50:eb:32:f8:b1:6a:06:ae:a7:93:7a:83:94:bf:
                    9e:4c:f4:32:b5:69:f8:48:a9:11:11:2a:73:f2:0b:
                    74:f4:ae:14:37:45:e9:8c:2a:ad:00:1f:00:1e:78:
                    9f:3c:90:42:9d:cc:e0:88:f5:32:84:2b:25:a3:c7:
                    c2:15:fb:d4:76:16:27:0f:a1:e6:88:3e:60:9d:75:
                    f1:10:2f:a9:22:57:bb:67:94:27:0f:ca:df:d1:76:
                    24:d9:d3:f9:89:9f:8d:68:48:70:16:f3:ee:35:7f:
                    8b:af:d1:6a:57:90:37:b5:84:c5:18:1b:3f:23:1d:
                    0a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:E6:46:3F:62:7D:78:6E:02:4D:ED:3A:1C:0B:B6:1C:62:43:FD:BD
            X509v3 Authority Key Identifier:
                keyid:52:28:5B:87:54:F2:15:EB:EA:B6:14:DE:B8:6E:66:DA:3B:37:32:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:64:f9:e2:8f:33:8b:3a:a3:5f:7c:d0:c8:ec:63:dc:87:78:
         7b:9a:89:32:17:c3:cd:5b:76:a7:2e:3d:07:d7:8c:15:56:66:
         3b:68:21:ff:07:7b:d2:b5:0c:4d:b5:4d:7c:81:b7:65:57:02:
         44:f3:ae:44:f4:85:c8:92:9d:d8:d1:7f:54:fc:16:ff:b5:cf:
         9c:76:79:7d:0e:ff:0c:30:8b:b5:61:f5:c8:aa:45:8c:d0:c3:
         7c:18:0c:64:45:da:84:b8:a5:5d:ba:f7:97:8d:36:26:7b:43:
         2a:27:92:67:74:86:e1:ef:bc:20:eb:01:15:19:1d:96:2f:b5:
         4d:f2:70:b7:11:9f:dd:0f:1e:e6:c6:32:19:a9:a6:69:69:3c:
         dc:ca:fb:0f:4f:b2:1b:09:c1:de:bd:b3:34:c1:21:f3:f6:1d:
         29:cd:d4:14:2c:d9:be:1a:19:33:97:57:2f:86:42:47:eb:42:
         4d:4f:96:c3:0d:50:ae:24:b6:cd:6e:d7:df:26:52:2c:b5:f5:
         b7:c7:96:8a:41:b4:43:09:32:32:b7:55:e8:97:a4:d5:e0:ce:
         7c:1f:1b:77:7e:91:c2:10:dd:72:a5:30:57:08:52:b5:be:54:
         b6:f8:03:28:4d:8e:81:ad:41:9c:eb:af:3d:b0:8f:44:31:23:
         24:73:25:2c
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUMhNlfcTET7BCgvASZLLAVl63ZLAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTIyODVCODc1NEYyMTVFQkVBQjYxNERFQjg2RTY2REEz
QjM3MzIwQzAeFw0yNjAxMjUwMzI4MjBaFw0yNjAxMjYwNzEwMjBaMDMxMTAvBgNV
BAMTKDc4RTY0NjNGNjI3RDc4NkUwMjRERUQzQTFDMEJCNjFDNjI0M0ZEQkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ4Ke+pRBhcPZ+08+ksxnBMnwF
w9YkLuDhQKvHG+5aPK4XPKSNIDU5xsEkb++21/K71OnpGLvr8nwnBPJVqASWnznY
fOmZEQaoooPcnysYqHDh0HJ4iqXF9+uxl2H7aJvPOlN3aElqHiyZ8hibFxRhyfdI
dvzu2mMz7Ik9tlUAX3xDQ9QqsKJQ6zL4sWoGrqeTeoOUv55M9DK1afhIqRERKnPy
C3T0rhQ3RemMKq0AHwAeeJ88kEKdzOCI9TKEKyWjx8IV+9R2FicPoeaIPmCddfEQ
L6kiV7tnlCcPyt/RdiTZ0/mJn41oSHAW8+41f4uv0WpXkDe1hMUYGz8jHQrJAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUeOZGP2J9eG4CTe06HAu2HGJD/b0wHwYDVR0j
BBgwFoAUUihbh1TyFevqthTeuG5m2js3MgwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOGQ1Y2QxNGUtNWY2My00ZjFjLTk0ZTMtMjcwNTBjMjY2
NDgwLzEvNTIyODVCODc1NEYyMTVFQkVBQjYxNERFQjg2RTY2REEzQjM3MzIwQy5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC81MjI4NUI4NzU0RjIxNUVCRUFCNjE0REVC
ODZFNjZEQTNCMzczMjBDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzhkNWNkMTRlLTVmNjMtNGYxYy05NGUzLTI3MDUwYzI2NjQ4MC8xLzUyMjg1Qjg3
NTRGMjE1RUJFQUI2MTRERUI4NkU2NkRBM0IzNzMyMEMubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA4ZPni
jzOLOqNffNDI7GPch3h7mokyF8PNW3anLj0H14wVVmY7aCH/B3vStQxNtU18gbdl
VwJE865E9IXIkp3Y0X9U/Bb/tc+cdnl9Dv8MMIu1YfXIqkWM0MN8GAxkRdqEuKVd
uveXjTYme0MqJ5JndIbh77wg6wEVGR2WL7VN8nC3EZ/dDx7mxjIZqaZpaTzcyvsP
T7IbCcHevbM0wSHz9h0pzdQULNm+Ghkzl1cvhkJH60JNT5bDDVCuJLbNbtffJlIs
tfW3x5aKQbRDCTIyt1Xol6TV4M58Hxt3fpHCEN1ypTBXCFK1vlS2+AMoTY6BrUGc
6689sI9EMSMkcyUs
-----END CERTIFICATE-----