This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft
File:                     830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft (raw, json)
Hash identifier:          tB5DvjG5UnzLs1SQULyzegPjGtuyTLMvovRKHnrXXJk=
Subject key identifier:   78:39:55:98:3D:D0:DB:3D:82:BA:D5:0E:5B:B9:9A:C4:06:77:12:53
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Certificate issuer:       /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial:       6759FE5CB886388C72CD2CFC4A7A324EFA8853B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft
Manifest number:          0514
Signing time:             Sat 24 Jan 2026 22:24:56 +0000
Manifest this update:     Sat 24 Jan 2026 22:19:56 +0000
Manifest next update:     Sun 25 Jan 2026 22:55:56 +0000
Files and hashes:         1: 3138352e3235302e34312e302f32342d3234203d3e203136323736.roa (hash: e593QIRSwVx3PBIVSSf8HqCfMhSG+94/3uc22EyTMaw=)
                          2: 830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl (hash: DJWR7tUKjaJhqY+wqGvz4Qe5ynW8kQ2RY87OPB6+j7w=)
                          3: 34352e3133322e3231362e302f32342d3234203d3e203232343237.roa (hash: tUuPnhV53bW4URPIQtmcdJ9t+c19vj++YF4z51T+ooE=)
                          4: 34352e3133322e3231382e302f32342d3234203d3e20383334.roa (hash: pbWgbf3Z9k/Vp5McQhjO5BRe+dobiN8M8hutoOHnDIA=)
                          5: 326130653a666363303a3a2f32392d3239203d3e20323031393633.roa (hash: 8+yPsa43TFpd5bryniVq+R/mS0l3RvJVwdUmjJuuDIk=)
                          6: 34352e3133322e3231372e302f32342d3234203d3e20333935333734.roa (hash: 3xSg64X6b/VGeaW1sbUHbRQvvDa5xSkfsAgZrM/ksog=)
                          7: 34352e3133322e3231392e302f32342d3234203d3e203536393133.roa (hash: LgxsptwYXiKaAUBWPl2FzHApl9GRPHPCKLBon5Z4Y1I=)
                          8: 34352e3134352e3234302e302f32342d3234203d3e20323639303730.roa (hash: Jv5hg7ZMCRB06s35wjHY/AJp0QtnS8MPIuq3o7PIiYc=)
                          9: 34352e3134352e3234332e302f32342d3234203d3e20313337323335.roa (hash: Vyj6lQsSFmsAqcK6RGLYVMn7iV5vJhAX4GBUoB1+oMo=)
                          10: 34352e3132382e31332e302f32342d3234203d3e20313939393235.roa (hash: s2TQDlDgm+LKEqHBlB2hd8f187DM1tFrRFf93seXSWo=)
                          11: 34352e3134302e33362e302f32342d3234203d3e203136323736.roa (hash: YE94fuCtLJmvEhZZYY+osVagEB1zJux37+nlYqs1In8=)
                          12: 34352e3132382e31322e302f32342d3234203d3e20313336353537.roa (hash: Og0W7TwDKg18gSOzRskc5OEF19lsnNis615D+7M7BhY=)
                          13: 34352e38392e3135302e302f32332d3234203d3e20323130353432.roa (hash: Ymdbnf0H8VIDp2h5OwlBLkLPkpG++nC20m+3X7rdp/E=)
                          14: 3138352e3235302e34322e302f32332d3233203d3e203338313935.roa (hash: N+mjQzTN9eKn05wWYxGO3ym5VpigEEyuw5Wil2CeqM0=)
                          15: 34352e38392e3134382e302f32332d3234203d3e2039333034.roa (hash: 01Ns2zacvuFqS8uOlsWojYjkWBIGN4AOQtvKqD1ZOSw=)
                          16: 34352e3134302e33392e302f32342d3234203d3e20323132333834.roa (hash: L7EHGwvWSSXWjiN+ge5rSBcePeV6DFnXvflhKIMhGIM=)
                          17: 34352e3134352e3234322e302f32342d3234203d3e203631333137.roa (hash: pTg06oxajXpI71ZXI8g/lx5GH1NCIopoua34IGLJlFw=)
                          18: 34352e39332e3138342e302f32342d3234203d3e20323135333438.roa (hash: WuhjfEGxgnUblhWiSTciY5olX30b9mmfrhJBU4OPYFY=)
                          19: 34352e39332e3138352e302f32342d3234203d3e2039303039.roa (hash: YsgVKvqjDSfl5cY3VgnMOM/cSxhu5cHJw+NQE7V5wtA=)
                          20: 34352e3134302e33382e302f32342d3234203d3e203330363434.roa (hash: pgys4dKx+35Hg2BzEkcta2TxxholJ1T4995uIhT8Aeg=)
                          21: 34352e39332e3138362e302f32332d3234203d3e2033333230.roa (hash: QsFkBfitbwvpDW+gZ0ARVvjc1k4LIU/KZWDeJAgWITQ=)
                          22: 3138352e3235302e34302e302f32342d3234203d3e2035303635.roa (hash: vADHpi7lqq2FTz+I44BCLsWOTCezg1eq9mEd669wIuU=)
                          23: 34352e3132382e31342e302f32332d3233203d3e20323734373836.roa (hash: V6mtJWR732G/FJGWxHZiLboD66+fB4OqjGMzuHg8F6s=)
                          24: 34352e3134352e3234312e302f32342d3234203d3e20383334.roa (hash: pPd1T7/n7wSEex84D0bbPA7sw5pSmXLYFj3f9wYPbC0=)
                          25: 34352e3134302e33372e302f32342d3234203d3e20323638363234.roa (hash: FqBzJG7QyS5rhAL6kP0DnaUbBW+1O9qvi1K+fqN47FU=)
                          26: 34352e3132382e31322e302f32332d3234203d3e20383334.roa (hash: eLJWCWbxEQgDeE1wotxgC/UVUKhDY5SIchlsKqSoar0=)
                          27: 34352e38392e3135302e302f32332d3234203d3e20313338393937.roa (hash: smn3sboQyoA3CPmf3JjoxNaRPhD1ofeV3o7i3x5m8hU=)
                          28: 34352e38392e3135302e302f32332d3234203d3e20313532313739.roa (hash: hd+a1khpY29A3GDYfNLzWao9yX3aCS4vUId7ZnXPCC4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:55:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:59:fe:5c:b8:86:38:8c:72:cd:2c:fc:4a:7a:32:4e:fa:88:53:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
        Validity
            Not Before: Jan 24 22:19:56 2026 GMT
            Not After : Jan 25 22:55:56 2026 GMT
        Subject: CN=783955983DD0DB3D82BAD50E5BB99AC406771253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3e:aa:b6:fd:60:72:15:56:d4:6a:af:60:39:
                    22:73:c7:5c:d2:cf:c4:62:c2:c4:06:40:70:2b:25:
                    40:76:61:b0:7b:9b:4f:16:4c:b9:da:bb:bd:dc:a1:
                    f7:9f:2a:fa:ce:6e:2e:a1:16:e4:6a:2a:22:37:18:
                    c2:56:38:19:69:8d:20:07:4c:f8:04:14:df:8b:5e:
                    69:64:78:a4:b9:42:80:9b:25:af:8b:77:bb:3d:9e:
                    c5:a6:6e:ba:77:92:06:49:82:ab:dc:eb:32:39:68:
                    e0:79:cb:44:62:7e:ac:ef:2f:64:a2:0f:23:80:44:
                    bd:78:4f:b0:40:c5:0d:b2:18:0f:fa:ab:93:1f:36:
                    ec:e9:ae:b6:eb:7d:52:e7:42:c4:d1:c5:22:60:b8:
                    97:79:8d:44:9e:f2:53:c4:d0:3f:7e:63:39:eb:40:
                    58:c4:55:f4:c8:e0:bc:02:41:46:7f:1b:31:11:68:
                    70:a1:49:df:ab:49:42:03:0f:61:62:96:79:eb:10:
                    d5:a6:c0:78:43:63:07:c7:49:25:b1:52:a7:39:6d:
                    95:62:c2:2b:21:0f:b8:92:9c:3e:9f:b7:06:57:42:
                    64:f0:75:01:31:6e:66:60:e7:d2:36:e6:c5:0a:2d:
                    a1:02:f5:9e:0c:2a:c5:a5:40:a4:0c:55:49:79:95:
                    3a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:39:55:98:3D:D0:DB:3D:82:BA:D5:0E:5B:B9:9A:C4:06:77:12:53
            X509v3 Authority Key Identifier:
                keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:ae:75:92:30:57:a4:b8:f2:0e:fc:c3:b3:76:24:10:dd:94:
         56:ee:99:8c:45:1d:cc:5b:94:39:f9:7f:58:07:53:ff:01:b5:
         4b:40:df:76:50:ab:0c:9a:7f:c1:31:e4:38:b6:0b:4f:d3:e7:
         c6:f4:63:eb:6c:df:f4:d7:80:84:1d:6a:72:9c:fc:d0:ae:bb:
         2e:63:05:01:05:6c:c9:3f:c4:51:bb:2a:d7:9c:33:66:8c:69:
         ac:dd:27:f4:e5:7e:18:3e:48:d9:6b:42:58:66:e2:c9:92:1f:
         d4:b8:f3:df:bc:f8:c6:89:c5:00:8a:4a:bf:e5:ad:e8:12:1b:
         57:4c:2b:cb:ab:d0:4e:65:15:91:a3:bc:67:71:90:10:af:32:
         dc:51:97:e6:4d:e8:d8:8d:6c:dc:ab:db:41:24:a0:b0:45:ad:
         f9:ae:35:4c:29:62:c8:58:c6:fd:cd:83:91:eb:5c:ab:2c:96:
         7d:6c:1f:5e:a2:21:17:b9:bc:d9:78:bc:f7:fc:40:e5:22:87:
         44:34:31:d4:48:d4:92:6f:84:d0:3b:58:2a:90:22:8e:ae:cc:
         3e:3e:67:77:86:f4:3f:a2:47:40:fc:d5:00:6b:77:5d:6d:b5:
         f0:a8:c5:98:81:ac:71:ac:2e:da:82:31:7d:f0:ec:99:b8:35:
         60:3e:c3:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:41:34 2026 by rpki-client