This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft
File:                     45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft (raw, json)
Hash identifier:          cfuuKJTIcvpla7kXn2eoAEWDNs6YVw8pvwCi6NRB/C0=
Subject key identifier:   C4:B8:D0:05:FC:1B:E9:41:93:15:4A:09:B0:41:D4:38:4E:E1:0A:19
Authority key identifier: 45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
Certificate issuer:       /CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Certificate serial:       035A4F4383C3403CBA67ED8B1A37CAB70E5DDB1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft
Manifest number:          01CC
Signing time:             Sun 25 Jan 2026 03:10:40 +0000
Manifest this update:     Sun 25 Jan 2026 03:05:40 +0000
Manifest next update:     Mon 26 Jan 2026 05:33:40 +0000
Files and hashes:         1: 3139342e32362e322e302f32342d3234203d3e2035363530.roa (hash: ZRXlceutGr+HdF7VzH6TN3nc+64+GLWiw3p0vss7mZQ=)
                          2: 37372e38312e38302e302f32332d3233203d3e203230383630.roa (hash: ENs1tyjr+QsCNkYiVs8CGb16BSmudiUVAdhDAu4V/ek=)
                          3: 3138382e3231342e3233322e302f32332d3233203d3e2035303635.roa (hash: BFuLnnyWuJctlm6cMRTXIHiK+UW5qbLi6zguqt9+aRs=)
                          4: 3138352e33392e3138312e302f32342d3234203d3e203438353932.roa (hash: Vuif+1Rwal2KWngsbR1gG7PlppvF8JCFTHMdlSgwTho=)
                          5: 3132382e36352e3136342e302f32322d3232203d3e2033333230.roa (hash: jUzg8MFBi50HDoiq8ZBSiLc/BkEY3Sqp4qzgmYg5v/k=)
                          6: 3139332e3234362e3136352e302f32342d3234203d3e2035353131.roa (hash: dGzL7JETjjIym98dnO672H+l9ARVq+lFYDpH7EjSgtE=)
                          7: 3139332e3234362e3136342e302f32342d3234203d3e20313335333931.roa (hash: JL/dBZtc7cqNfBqDUBsHO8zmA5iOWu/V8229oSGf3qQ=)
                          8: 37372e38312e37392e302f32342d3234203d3e2037303138.roa (hash: Mtmk/kZphhA5s4uopguvEbJvjOjUXgfeStc99+50/4U=)
                          9: 3139332e3234362e3136352e302f32342d3234203d3e20323135373237.roa (hash: lSm6X66gNWDs/TTuCVneNTdg6ziFYnxT4m3l/GUHEaA=)
                          10: 37372e38312e38332e302f32342d3234203d3e203438353932.roa (hash: FUbnkxuvcKLpw8C4HQaABzR8zDln4ay05cwGyEgtqLs=)
                          11: 3132382e36352e3136302e302f32322d3232203d3e203438353932.roa (hash: e2sDKCcJlT/U2mWShGzkoM6fLVC3axyQA7582KFjXl0=)
                          12: 37372e38312e37392e302f32342d3234203d3e2035363530.roa (hash: chtAnXZi5q6GRUxpR5xO2uIiP96tdCrOBTIeDsoa8hE=)
                          13: 3139342e32362e322e302f32342d3234203d3e2037303138.roa (hash: KZ2g79XWhSpy1OjdBEbA7bKBiIPr4KF5cEbdhi1cO+c=)
                          14: 37372e38312e37372e302f32342d3234203d3e203438323636.roa (hash: J/r1ohjqm58lYGf0PKhjS1FTmSVJSsFJuiHDfyKNQLE=)
                          15: 3138352e33392e3138332e302f32342d3234203d3e203438353932.roa (hash: 1itaUJD6MM9qJoykl2AD3Me7plWTAUPMb45hv4KS1Is=)
                          16: 3139332e3234362e3136352e302f32342d3234203d3e20323132383135.roa (hash: v4ysGluIX7l1o3oYHo6hoD+oU+wMieIX0KtE9SekExI=)
                          17: 37372e38312e38322e302f32342d3234203d3e203438353932.roa (hash: g9+qPCIMbMsxLbmabycfUHp6SrIAw5buxV/5VJi8ArY=)
                          18: 45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl (hash: dTZaglXSQOosxAEENnmk9eg+VR6qDHpktaA6UMruh1k=)
                          19: 3132382e36352e3136382e302f32312d3234203d3e2036303739.roa (hash: i6JhDTo2qgsHKnhvdAD8kBBVl6YUcjppNLTK7aRFku0=)
                          20: 3139342e32362e32312e302f32342d3234203d3e2037303138.roa (hash: 7yEbo3DradWn9p6FL6O0sR90rL76BXVbRvfqqu/D+3E=)
                          21: 37372e38312e37382e302f32342d3234203d3e203438353932.roa (hash: sxtXA2eVprRgAPdjB6IZUpHTWxye7ZI2nEVGAB55zbo=)
                          22: 3138352e33392e3138302e302f32342d3234203d3e203438353932.roa (hash: eRfFsAmiOd7fmXSkLY1iDQqDLPihvnF73pAdlTyZEec=)
                          23: 37372e38312e37392e302f32342d3234203d3e20343031383338.roa (hash: jqhfslJN0nyOj/30XxhLZVefzpoYoh0e1/irmr4G57s=)
                          24: 3139342e32362e32312e302f32342d3234203d3e2035363530.roa (hash: p78KH8kgcBRXXFcw1mzLGQ6wEbtzI8eA56dk/vajAYc=)
                          25: 3139342e32362e332e302f32342d3234203d3e20343031313930.roa (hash: LIKAmocMMAfJYEkBfDTJGvC18ZVuFHLl0Op0JOVO1hY=)
                          26: 3139342e32362e322e302f32342d3234203d3e20343031383338.roa (hash: hww+5Hf4jmFo7Au813kPo2lBtFDkf7ALOlVDrCFDow8=)
                          27: 3139342e32362e32302e302f32342d3234203d3e20323132323338.roa (hash: YP/VU7Ddy/RINA1ejeDsmhFrZUIqFHueTf4iQvV7+Jw=)
                          28: 3139332e3234362e3136352e302f32342d3234203d3e20323136313539.roa (hash: 6btW8oVMBrDCtZqv+Luv6y7+nYwucV6SF0bhOqSqdro=)
                          29: 37372e38312e37362e302f32342d3234203d3e203438353932.roa (hash: AeGgNi4bw9l3zN1DkQ6g095MQ+7U7OthIn51Fzss3Oc=)
                          30: 3139342e32362e32312e302f32342d3234203d3e20343031383338.roa (hash: W6OrrdK1OeSj0zhiikePRhbHjS9VOD7qyg5G4TQyO4k=)
                          31: 3138352e33392e3138322e302f32342d3234203d3e203438353932.roa (hash: ZRiHbt3iKKs0O/K+Xj70IALSK3+jGBgHEkJ3Uk6rxC8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 05:33:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:5a:4f:43:83:c3:40:3c:ba:67:ed:8b:1a:37:ca:b7:0e:5d:db:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
        Validity
            Not Before: Jan 25 03:05:40 2026 GMT
            Not After : Jan 26 05:33:40 2026 GMT
        Subject: CN=C4B8D005FC1BE94193154A09B041D4384EE10A19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:8c:21:2f:1d:1c:96:e3:39:d0:8f:91:63:01:
                    77:c6:ce:66:f9:59:45:67:1d:ff:f9:b0:78:47:54:
                    3e:a9:ff:cb:98:85:ca:c0:29:a4:aa:76:51:0d:1e:
                    ff:39:ed:94:36:33:b5:c9:e0:3f:53:e1:4a:c6:ee:
                    11:0c:0e:1e:7c:d9:22:da:b4:cb:ef:80:b5:0f:f8:
                    ed:e8:41:b0:30:ef:10:b0:12:92:55:88:43:a0:e3:
                    98:1a:40:49:2b:a8:5d:a7:81:8a:ed:55:b7:aa:c5:
                    63:c9:4f:57:38:92:66:76:f7:4e:bf:fd:ee:6c:26:
                    c5:b5:2c:1f:25:e1:b6:da:07:ea:5f:4a:52:30:79:
                    93:98:47:0c:5f:8a:43:08:d6:4b:bf:5d:6b:95:33:
                    7d:7a:60:18:9d:9b:c6:94:19:ec:e5:1d:57:2d:04:
                    81:50:4a:2c:93:5b:51:4a:fd:2a:76:95:d1:1e:08:
                    40:7a:c9:6d:2b:d8:19:53:7c:4c:a5:9d:ce:4a:8f:
                    34:70:ff:fc:d6:b5:c0:58:3d:52:7b:c2:43:8c:24:
                    02:eb:d8:fc:89:58:2d:f5:7f:65:f6:71:86:1a:c6:
                    47:a0:22:6f:d5:a2:e7:54:a3:5d:d0:32:ca:3b:35:
                    8a:37:ab:84:ce:ac:4a:9d:e9:05:66:62:6e:50:2f:
                    77:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:B8:D0:05:FC:1B:E9:41:93:15:4A:09:B0:41:D4:38:4E:E1:0A:19
            X509v3 Authority Key Identifier:
                keyid:45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:b1:9b:07:b3:c4:b1:4c:bf:2b:da:eb:1f:2e:fe:54:fb:79:
         c7:36:02:66:7f:21:81:49:68:ab:3f:eb:4c:b9:31:40:5c:c5:
         e5:07:ea:47:f5:55:0a:6f:db:b9:3f:80:73:31:57:68:90:53:
         6c:f5:bf:d0:b0:2f:2d:2c:9c:0b:17:d0:ab:8b:f9:5c:d1:e5:
         d0:c0:33:bb:35:dc:fc:6a:80:a0:fd:c5:c3:1c:f7:78:f1:07:
         0d:c8:19:03:90:c5:5a:c7:be:ed:f7:2e:dc:74:81:7e:a0:29:
         af:4d:37:14:98:b8:97:7f:1b:1a:43:6e:83:68:d9:53:83:37:
         90:fa:13:8b:43:9d:c0:d4:ca:db:37:a7:ca:88:10:8d:e1:cf:
         0f:f5:bd:cd:4a:af:41:b0:5a:d3:1d:3d:94:af:82:bf:51:e1:
         72:87:45:a1:e3:4e:49:17:7c:e9:6c:71:44:26:69:c6:cc:77:
         b3:ad:01:06:31:ba:d3:9b:13:4e:6b:34:d7:d7:e8:5a:00:5d:
         f3:e9:d9:a6:ea:ef:48:7d:7d:ef:90:f5:6c:bb:b3:7e:c6:30:
         93:92:03:61:e8:3e:a7:36:a4:c0:ff:c8:8b:d6:e9:6d:71:4f:
         07:f5:3c:cc:08:59:2a:cf:f9:f4:a3:df:a5:38:70:d4:18:9b:
         38:34:77:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:27:20 2026 by rpki-client