This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft
File:                     51917E722DB03952D9056BED2F6BD4BF98B78976.mft (raw, json)
Hash identifier:          7tID8g5us7l7IKDbtdLyKs1x4Jht3CAEyV25d7V9zUI=
Subject key identifier:   9C:DA:66:9D:C6:14:53:05:6F:5B:EE:2D:00:9D:48:49:A5:EB:52:F8
Authority key identifier: 51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76
Certificate issuer:       /CN=51917E722DB03952D9056BED2F6BD4BF98B78976
Certificate serial:       2E2CCFC9E1E63A86679351D6A62C75D5AC321D6B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft
Manifest number:          015A
Signing time:             Sun 25 Jan 2026 11:15:16 +0000
Manifest this update:     Sun 25 Jan 2026 11:10:16 +0000
Manifest next update:     Mon 26 Jan 2026 14:30:16 +0000
Files and hashes:         1: 326131343a373538303a666635313a3a2f34382d3438203d3e20323039373130.roa (hash: KcfiSDiqDvlLOqfaLqph9s6F4NvpySAcmNFiwDriyms=)
                          2: 326131343a373538303a666635303a3a2f34342d3434203d3e20323039373130.roa (hash: SHYewRnAEyfHeIS/ErCy1dNpuo8kVPzhKkgjNNzYVkM=)
                          3: 326131343a373538303a666635323a3a2f34382d3438203d3e20323039373130.roa (hash: vs66PWFM6L/hirNyhIXTRaz65c001j+IhkCdp8VdfS4=)
                          4: 326131343a373538303a3530303a3a2f34302d3430203d3e20323039373130.roa (hash: UtWLjV2JD6X8emwUC9bu8RyXGCD7bzymrTBVIEkaVv8=)
                          5: 326131343a373538303a3530303a3a2f34322d3432203d3e203331383938.roa (hash: 7z5RoyaJRkP9nx99eQ4HknE9KjY7eFLuMQrU4NhLP9s=)
                          6: 326131343a373538303a666635343a3a2f34382d3438203d3e20323039373130.roa (hash: i7VkbN6Rb5CnHlmR8BF2dlC+Uq3PFV4wJTcaolWAu+U=)
                          7: 326131343a373538303a666635333a3a2f34382d3438203d3e20323039373130.roa (hash: UpFVw7x1NBf/Uix4G0zJEj+QV4riL3tEIjso5GywhOU=)
                          8: 326131343a373538303a666635363a3a2f34382d3438203d3e20323039373130.roa (hash: SwKF9ZgurLBB1Omp9sHNYZoTnYJ/E2ALGPkMC5kD1BA=)
                          9: 51917E722DB03952D9056BED2F6BD4BF98B78976.crl (hash: KXL1MsmtMVH98cPDzzBg/0DtI828fp7kTpVswqX5ObQ=)
                          10: 326131343a373538303a3534303a3a2f34322d3432203d3e20323039373130.roa (hash: Av1B/CsfeimpaPDyAr/GwqgA0mmdJ8tWvzjK+NZ598o=)
                          11: 326131343a373538303a666635303a3a2f34382d3438203d3e20323039373130.roa (hash: RhrZumuCHn+6y3yZr34sdgh4sb8kS47/Ka9E3B3UluQ=)
                          12: 326131343a373538303a666635353a3a2f34382d3438203d3e20323039373130.roa (hash: 5weylF9E+kZUqdJn7nMGLccAIkWjUNuo5MqarqyfkO8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 14:30:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:2c:cf:c9:e1:e6:3a:86:67:93:51:d6:a6:2c:75:d5:ac:32:1d:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51917E722DB03952D9056BED2F6BD4BF98B78976
        Validity
            Not Before: Jan 25 11:10:16 2026 GMT
            Not After : Jan 26 14:30:16 2026 GMT
        Subject: CN=9CDA669DC61453056F5BEE2D009D4849A5EB52F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:15:73:f0:c5:d6:50:a9:59:3a:af:69:e3:58:
                    b7:fe:9b:83:99:9c:9c:8f:87:37:58:d7:30:48:fd:
                    81:01:57:a1:e1:13:d2:37:22:8a:fc:da:46:3f:cf:
                    02:f2:46:8e:5d:f4:18:57:40:27:84:ee:fa:c5:c1:
                    db:c1:ce:91:d6:fb:31:b2:e8:61:9a:b2:d0:16:a8:
                    31:99:02:df:2a:5c:45:25:43:c4:eb:24:65:84:82:
                    74:66:ce:62:38:f3:58:a4:49:fe:12:4b:12:4b:58:
                    67:98:59:b5:be:de:a3:c6:5a:b4:ca:4c:91:86:2e:
                    3a:5a:3e:00:5b:2b:f7:17:f3:a2:1a:dc:6c:76:df:
                    cc:75:c0:10:86:ec:6a:dd:bb:0f:86:70:30:76:2b:
                    ad:07:4d:6c:c7:25:b5:9e:92:35:19:df:11:89:47:
                    44:e4:f9:74:55:cf:92:35:65:6d:ae:5c:b7:fa:2a:
                    c1:ac:80:6c:03:60:13:18:3c:9f:6c:19:93:b9:aa:
                    ba:6c:a9:df:8c:71:e2:60:76:8a:80:45:1d:00:ea:
                    e5:16:b0:37:97:60:cd:b6:5b:f9:f0:a5:02:94:31:
                    54:dd:bf:30:57:80:14:2d:b0:4f:94:0c:24:d1:7c:
                    b8:36:fb:d3:6e:8b:d5:ac:d5:55:44:c9:cd:1e:16:
                    b5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:DA:66:9D:C6:14:53:05:6F:5B:EE:2D:00:9D:48:49:A5:EB:52:F8
            X509v3 Authority Key Identifier:
                keyid:51:91:7E:72:2D:B0:39:52:D9:05:6B:ED:2F:6B:D4:BF:98:B7:89:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/51917E722DB03952D9056BED2F6BD4BF98B78976.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/0/51917E722DB03952D9056BED2F6BD4BF98B78976.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:74:3f:9c:f0:5b:1a:13:01:f7:ff:58:60:b6:7b:2f:18:51:
         59:95:3e:30:6b:f3:8d:2c:b4:70:f7:ba:c7:ed:bc:e1:11:a9:
         eb:9d:20:ec:39:e2:fd:2f:30:05:c8:33:fb:7e:0b:db:d2:04:
         49:3d:9e:20:cd:f6:e4:2c:cb:dd:bb:c4:81:e1:e2:6c:92:7e:
         8b:98:5d:01:bb:d7:47:40:f1:c9:1f:72:9a:81:c4:32:74:cc:
         a0:94:a0:a1:ec:22:7a:64:7e:b6:82:dd:37:44:9e:1f:a3:49:
         c9:a1:46:f0:96:21:6a:3e:dc:fb:13:12:e1:04:ec:75:66:3d:
         42:c0:33:b1:2e:ee:8b:ef:d7:01:c7:2c:25:08:88:23:1d:8a:
         09:6d:d1:93:6c:ef:1a:ca:48:57:a0:c9:59:6d:9d:cc:10:ef:
         9c:a5:d9:cc:d7:c0:bd:35:ab:4f:9d:8b:bc:30:3a:ef:9c:8a:
         6f:94:0c:2a:3f:7c:3e:b3:03:a8:4e:35:bd:8a:e5:30:5c:b8:
         ef:e4:a8:ea:00:06:64:92:86:81:11:ac:41:c9:c0:e1:7c:ee:
         70:a1:54:52:30:f6:8d:ad:80:17:14:bb:25:53:eb:35:69:58:
         1c:6b:49:a5:2c:b2:75:68:19:d0:65:79:c5:cc:0d:65:69:e1:
         54:91:90:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:10:46 2026 by rpki-client