This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft
File:                     8184669B0189B7FABE05E700325A0D74957BEB27.mft (raw, json)
Hash identifier:          jXUuahSqtbjtfbb8V4h0TaTFIDxvQF/qLkYQzd9LWtM=
Subject key identifier:   B3:78:66:D4:4E:69:3C:49:5C:93:D2:1E:E7:A3:CC:C2:E1:95:5C:E5
Authority key identifier: 81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27
Certificate issuer:       /CN=8184669b0189b7fabe05e700325a0d74957beb27
Certificate serial:       6CFDD0A2B38BC955DC94E55B4928D2C37DC135A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft
Manifest number:          019A
Signing time:             Sat 24 Jan 2026 23:14:58 +0000
Manifest this update:     Sat 24 Jan 2026 23:09:58 +0000
Manifest next update:     Mon 26 Jan 2026 00:34:58 +0000
Files and hashes:         1: 8184669B0189B7FABE05E700325A0D74957BEB27.crl (hash: 3pBLoZ8uiw9msd5WFDhyzxGi2YaCF52rLF9v2NAEd9M=)
                          2: 3231332e3135372e39362e302f32302d3230203d3e203230353130.roa (hash: cK22q6rO6KtktflqsQYlSr1z73xEpoVM/WNGnd6YIEI=)
                          3: 3231332e3135372e3132312e302f32342d3234203d3e20323134303235.roa (hash: RPUL02BBqfEuAeIXoMzKuNRghBYAEq7hSrl5xqQtZ9Y=)
                          4: 3231332e3135372e3132312e302f32342d3234203d3e203235313938.roa (hash: ykzp5tnz4o2XaJdQq2rutfdKQVxXWuicM5gcWZtsbCo=)
                          5: 3231332e3135372e3132332e302f32342d3234203d3e20323035383836.roa (hash: 7VQoOdpqpVmjCELFW51uez7QJpyJbjW4JNhtOxfsg8E=)
                          6: 3231332e3135372e3131382e302f32332d3233203d3e203230353130.roa (hash: U2rsj2GmpPBYV9RPLITNHzbaDI2Gxelnlov5msxX9eI=)
                          7: 3231332e3135372e3132312e302f32342d3234203d3e203633313939.roa (hash: dfTQeycU3bCp9xP/UQaKaAmwMbvByiZ/89C4YDPwYlY=)
                          8: 3231332e3135372e3131362e302f32332d3233203d3e203230353130.roa (hash: u6D0nQIamyf1rwT6EphlkmgpGmdsHhrROhbEzSFSSxQ=)
                          9: 3231332e3135372e3131322e302f32322d3232203d3e203230353130.roa (hash: oXC9Asr9SJ7DSslxSZaWUX9xWnSBbY5iUxbxwvvcFUI=)
                          10: 3231332e3135372e3132302e302f32342d3234203d3e203432383331.roa (hash: obPbW0ZKO9rq4yp7c5UqzqijavPW0CV78gaYhHaBReI=)
                          11: 3231332e3135372e3130372e302f32342d3234203d3e203530323631.roa (hash: fkThFrWbc2SNg5nWL/DjCmp7efO9LKVSLfyHO63Odeo=)
                          12: 3231332e3135372e3132322e302f32342d3234203d3e2039333034.roa (hash: aUvc4UTsIU7R0m9dsnmxWesOTPr9WQo6/RshJ5X0hb4=)
                          13: 3231332e3135372e3132332e302f32342d3234203d3e203235313938.roa (hash: V87tDHJfEWPvC2C8BO/oDFyDQW6yLu4jA4a47My2iC0=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 00:34:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:fd:d0:a2:b3:8b:c9:55:dc:94:e5:5b:49:28:d2:c3:7d:c1:35:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8184669b0189b7fabe05e700325a0d74957beb27
        Validity
            Not Before: Jan 24 23:09:58 2026 GMT
            Not After : Jan 26 00:34:58 2026 GMT
        Subject: CN=B37866D44E693C495C93D21EE7A3CCC2E1955CE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a9:9f:da:8f:97:8d:ec:b7:ea:a4:69:82:c8:
                    38:c8:83:f8:4a:09:be:c7:50:3f:a2:ac:5b:4d:e7:
                    92:f8:c6:eb:d5:04:0a:68:8c:6e:e6:76:a4:08:d2:
                    3d:2f:7a:67:61:8f:80:39:c6:93:31:0a:96:f3:b0:
                    44:86:d9:2d:2b:3f:21:cb:cc:4a:71:3c:36:0f:63:
                    72:31:e4:5b:6c:1b:dd:01:fc:9f:95:19:df:b4:1e:
                    e0:73:07:5b:96:8e:69:14:66:66:f6:bc:8d:a2:4c:
                    b0:c6:97:c2:74:28:00:42:d5:e2:a3:36:06:63:49:
                    1c:8b:01:2b:fd:8c:72:96:3c:38:bc:bf:99:6c:93:
                    9d:0b:ad:34:16:7a:29:6a:da:e2:f6:1c:72:7c:b0:
                    0e:7f:7f:ed:ed:6e:e5:98:84:23:60:be:94:b7:91:
                    e1:f6:9a:c1:e7:82:30:d0:21:57:ca:35:05:3c:4c:
                    52:71:3e:f9:26:f9:b7:13:cb:65:42:92:1d:c6:1b:
                    8d:a3:23:fb:73:b4:d6:bf:44:8c:78:c6:38:7b:bc:
                    5c:13:96:fb:2f:2d:93:43:4a:88:66:af:2a:42:bc:
                    06:90:fa:a3:13:18:d0:db:8b:4f:66:44:fd:fa:87:
                    14:10:97:d1:5d:3f:52:3a:a3:fb:32:66:db:c5:1c:
                    f5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:78:66:D4:4E:69:3C:49:5C:93:D2:1E:E7:A3:CC:C2:E1:95:5C:E5
            X509v3 Authority Key Identifier:
                keyid:81:84:66:9B:01:89:B7:FA:BE:05:E7:00:32:5A:0D:74:95:7B:EB:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYRmmwGJt_q-BecAMloNdJV76yc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a431e42e-0d7f-44d0-813f-b5e3a2abbe25/0/8184669B0189B7FABE05E700325A0D74957BEB27.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:dd:43:2c:c8:56:aa:26:53:f0:2c:8d:8a:31:1d:fa:1a:92:
         24:b4:a1:18:a4:48:33:e8:f9:b5:85:dc:3a:7f:44:c6:0d:bd:
         79:98:c6:58:fd:8f:b5:a5:1c:f0:85:f3:cd:04:cf:f0:5e:88:
         65:0d:0e:a1:1c:3a:e2:a8:b8:f3:69:b3:27:4d:a1:73:9b:9e:
         86:23:d8:b7:e6:10:06:86:3f:ac:48:02:dc:50:37:78:a4:4b:
         5d:5b:e3:0c:f9:c3:40:21:dd:c7:cb:16:9c:86:5a:9e:17:f9:
         b5:34:16:6f:5e:5e:7c:60:c6:e7:ee:c7:ae:e2:76:41:54:dd:
         4b:3f:ea:18:d3:bf:5a:1f:b9:a9:87:69:a5:b4:07:81:c4:31:
         33:fe:e3:f3:2d:5e:c2:6b:63:e1:dc:6f:16:df:09:21:11:9a:
         35:33:26:da:fd:d5:fc:a7:be:4a:e0:62:66:99:ef:45:11:18:
         b0:38:6b:c7:ff:6f:2d:a8:54:e0:a7:0d:6f:16:43:b9:40:ca:
         b1:ad:2e:73:6d:fd:e2:28:45:c0:51:8f:e3:1e:f3:82:ad:77:
         09:c3:91:f6:f2:a4:49:22:e7:4f:f4:a6:9a:7e:fb:a9:1f:ef:
         ac:f8:c7:bf:d9:67:29:b4:f3:4e:a1:19:90:1f:cb:f9:d3:13:
         d8:85:65:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:20:58 2026 by rpki-client