This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.mft
File:                     AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.mft (raw, json)
Hash identifier:          +QJ7WbQwS6aRY4GYSVpLYjTfjqK8/AYz1RFozjxZeTA=
Subject key identifier:   7A:27:06:5B:98:A5:72:88:07:62:B5:B5:50:49:1D:57:09:E2:B7:F9
Authority key identifier: AC:7F:9B:C3:0C:04:B3:A2:36:BD:F8:A4:30:86:9E:CA:1A:28:B3:24
Certificate issuer:       /CN=AC7F9BC30C04B3A236BDF8A430869ECA1A28B324
Certificate serial:       67A437347683EBAD83669A097E036AC9CDA1DD7F
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.mft
Manifest number:          61
Signing time:             Sun 25 Jan 2026 07:57:47 +0000
Manifest this update:     Sun 25 Jan 2026 07:52:47 +0000
Manifest next update:     Mon 26 Jan 2026 07:57:47 +0000
Files and hashes:         1: AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.crl (hash: OItjF+Z4/zOJy8dNk2aphuQoQ0X5BLaWvkglwpuyguE=)
                          2: 3230362e35332e302e302f32342d3234203d3e20323038393135.roa (hash: WAuGwGix52TOMRQkik+jyE1rcWEn8673KCYGvlhnhXY=)
                          3: 326130643a643930353a3a2f33322d3332203d3e20323038393135.roa (hash: 2xUP0qecdhpogJJIXpKqaPO0rpU4gp47dCbQRpKimlY=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:a4:37:34:76:83:eb:ad:83:66:9a:09:7e:03:6a:c9:cd:a1:dd:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC7F9BC30C04B3A236BDF8A430869ECA1A28B324
        Validity
            Not Before: Jan 25 07:52:47 2026 GMT
            Not After : Jan 26 07:57:47 2026 GMT
        Subject: CN=7A27065B98A572880762B5B550491D5709E2B7F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a7:db:75:2d:a7:0d:c1:03:1f:03:b2:a4:5b:
                    27:57:11:97:b3:44:da:78:11:09:48:72:67:b1:68:
                    1c:5a:3d:1c:39:43:80:45:ff:68:36:9f:80:90:b9:
                    ea:f2:a7:42:77:ec:bb:99:3e:e8:b9:24:45:10:5c:
                    b2:53:07:05:11:2f:78:d7:b1:4b:98:3c:b2:c3:5e:
                    e0:48:2e:70:31:6a:12:a9:2c:23:a4:17:ab:97:20:
                    6e:22:70:e7:87:f2:76:ac:6c:b8:cc:f3:96:85:d1:
                    bf:12:30:b5:70:b6:d9:26:df:92:3d:af:e3:b6:e8:
                    67:4c:77:5d:c3:d1:1c:6f:2f:26:35:51:73:11:61:
                    ef:a2:05:ee:f2:fe:00:05:48:95:63:e5:93:66:91:
                    fc:a5:3d:ce:b4:f8:bc:17:d3:a3:af:2d:ce:69:53:
                    46:14:d7:aa:e2:1a:ad:74:d8:1e:41:8f:56:6b:d2:
                    d3:2f:97:9c:44:e8:e4:6b:c3:1d:f2:03:1f:80:b7:
                    e9:59:e0:72:8a:d8:91:ca:80:56:21:e8:84:12:a8:
                    7d:af:6e:2f:70:90:51:67:a1:2e:cf:61:15:e0:da:
                    24:82:a5:43:cf:7d:f8:43:d7:17:8e:34:38:bc:7e:
                    d6:9e:74:c8:ee:f3:93:29:51:26:f2:1c:e0:53:ba:
                    60:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:27:06:5B:98:A5:72:88:07:62:B5:B5:50:49:1D:57:09:E2:B7:F9
            X509v3 Authority Key Identifier:
                keyid:AC:7F:9B:C3:0C:04:B3:A2:36:BD:F8:A4:30:86:9E:CA:1A:28:B3:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9dccb4b0-e30e-426c-84dc-464fd1899116/1/AC7F9BC30C04B3A236BDF8A430869ECA1A28B324.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:21:06:44:11:bb:a4:76:ad:ea:76:60:ec:d6:24:6c:9b:c0:
         3a:13:ba:b5:2a:cd:14:6a:67:78:08:b6:d7:98:6b:e4:5f:f2:
         7a:df:e6:93:7e:4d:3a:f1:3e:61:bd:69:e9:58:c7:a3:f6:f0:
         33:bc:60:16:fb:cb:81:35:43:65:22:07:80:35:35:60:de:5c:
         38:2b:ac:0d:cd:27:18:f8:5a:67:ed:13:46:be:b2:11:a7:27:
         dc:d5:e9:3d:f5:52:94:d9:4c:ac:62:21:af:f5:cd:1a:67:44:
         40:f9:45:bb:50:c3:c5:a3:a5:5b:6e:dc:9d:62:a3:60:6a:40:
         90:03:ab:22:b6:09:79:31:fe:37:eb:e8:69:a5:a2:43:da:b3:
         db:c7:4b:80:ec:e4:af:bd:36:12:21:17:2f:1c:ef:89:0d:94:
         a5:6d:09:f6:1f:84:89:f3:28:34:cf:e9:b4:94:c5:f5:2a:0e:
         b8:b7:5b:32:7b:6e:f4:d6:1f:45:54:cd:1e:02:e9:9c:cd:98:
         bc:72:9b:58:c9:99:8b:3e:e4:e3:3b:42:fe:7b:ec:70:44:a7:
         4f:dd:05:c5:12:90:2f:be:40:65:18:6f:55:05:2f:7d:18:72:
         ee:c9:b4:c8:c2:03:e1:c8:ba:9e:5b:42:ff:3b:0b:9d:72:b7:
         42:16:60:1b
-----BEGIN CERTIFICATE-----
MIIFbTCCBFWgAwIBAgIUZ6Q3NHaD662DZpoJfgNqyc2h3X8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM3RjlCQzMwQzA0QjNBMjM2QkRGOEE0MzA4NjlFQ0Ex
QTI4QjMyNDAeFw0yNjAxMjUwNzUyNDdaFw0yNjAxMjYwNzU3NDdaMDMxMTAvBgNV
BAMTKDdBMjcwNjVCOThBNTcyODgwNzYyQjVCNTUwNDkxRDU3MDlFMkI3RjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhp9t1LacNwQMfA7KkWydXEZez
RNp4EQlIcmexaBxaPRw5Q4BF/2g2n4CQueryp0J37LuZPui5JEUQXLJTBwURL3jX
sUuYPLLDXuBILnAxahKpLCOkF6uXIG4icOeH8nasbLjM85aF0b8SMLVwttkm35I9
r+O26GdMd13D0RxvLyY1UXMRYe+iBe7y/gAFSJVj5ZNmkfylPc60+LwX06OvLc5p
U0YU16riGq102B5Bj1Zr0tMvl5xE6ORrwx3yAx+At+lZ4HKK2JHKgFYh6IQSqH2v
bi9wkFFnoS7PYRXg2iSCpUPPffhD1xeONDi8ftaedMju85MpUSbyHOBTumClAgMB
AAGjggJ3MIICczAdBgNVHQ4EFgQUeicGW5ilcogHYrW1UEkdVwnit/kwHwYDVR0j
BBgwFoAUrH+bwwwEs6I2vfikMIaeyhoosyQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOWRjY2I0YjAtZTMwZS00MjZjLTg0ZGMtNDY0ZmQxODk5
MTE2LzEvQUM3RjlCQzMwQzA0QjNBMjM2QkRGOEE0MzA4NjlFQ0ExQTI4QjMyNC5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzcvQUM3RjlCQzMwQzA0QjNBMjM2QkRGOEE0MzA4NjlFQ0ExQTI4
QjMyNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGNjYjRiMC1l
MzBlLTQyNmMtODRkYy00NjRmZDE4OTkxMTYvMS9BQzdGOUJDMzBDMDRCM0EyMzZC
REY4QTQzMDg2OUVDQTFBMjhCMzI0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfyEGRBG7pHat6nZg7NYk
bJvAOhO6tSrNFGpneAi215hr5F/yet/mk35NOvE+Yb1p6VjHo/bwM7xgFvvLgTVD
ZSIHgDU1YN5cOCusDc0nGPhaZ+0TRr6yEacn3NXpPfVSlNlMrGIhr/XNGmdEQPlF
u1DDxaOlW27cnWKjYGpAkAOrIrYJeTH+N+voaaWiQ9qz28dLgOzkr702EiEXLxzv
iQ2UpW0J9h+EifMoNM/ptJTF9SoOuLdbMntu9NYfRVTNHgLpnM2YvHKbWMmZiz7k
4ztC/nvscESnT90FxRKQL75AZRhvVQUvfRhy7sm0yMID4ci6nltC/zsLnXK3QhZg
Gw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:25:03 2026 by rpki-client