This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft
File:                     9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft (raw, json)
Hash identifier:          ocWlVQx3QYeEmfyuMZvjtBNRMuxi1MZ9l7plpETsPus=
Subject key identifier:   7C:82:C7:FB:09:67:B2:A5:FE:B1:EA:5D:2E:7C:BA:68:E4:53:7D:7B
Authority key identifier: 9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D
Certificate issuer:       /CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d
Certificate serial:       1D4103B989CAC679DAA8BD77911698A3AB592105
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft
Manifest number:          0522
Signing time:             Sun 25 Jan 2026 03:35:02 +0000
Manifest this update:     Sun 25 Jan 2026 03:30:02 +0000
Manifest next update:     Mon 26 Jan 2026 06:42:02 +0000
Files and hashes:         1: 3139352e3138342e39322e302f32332d3234203d3e203631333137.roa (hash: qGNft1uCzkGwuPJH7iDQ4xUhWrhNnduWexIhT+DgvI8=)
                          2: 36322e3131322e3132382e302f32302d3234203d3e20313532313739.roa (hash: GCjCQc0vdu8E+NZi5emgx2vW0PKbTzGL5UYc+2R4voE=)
                          3: 323030313a3637633a3333633a3a2f34382d3438203d3e2035343634.roa (hash: DuCHe81tO8TVOKBTNFQCS5fRuYDjbGZfxshPpJZXNzc=)
                          4: 3138352e322e3136322e302f32332d3234203d3e20323135323639.roa (hash: sEO5Q+LtE+juFIMx1yqrmSkIjuvpVFxY8R1aiQqtGzs=)
                          5: 3139352e3138342e39322e302f32332d3233203d3e2035343634.roa (hash: OKc3uZvr3kmY38TGv/j5cCd/d8TD6IBU2hGWJY9u+K0=)
                          6: 36322e3131322e3132382e302f32302d3234203d3e20323130353432.roa (hash: W95e9h2ypKBcN51G9gRI82wozQL8rXCLvGb2mHpv6bk=)
                          7: 3139342e302e3232392e302f32342d3234203d3e2035343634.roa (hash: oQj2no095+LyjZGzWOfw+sSJOW/7fRxpgUOPswu5nqM=)
                          8: 3139332e33372e3233362e302f32342d3234203d3e203239383032.roa (hash: NPxcG44HSvUhEjS0S2kkms3rMNVlot0JsRdIfylKbjg=)
                          9: 3138352e322e3136322e302f32332d3234203d3e20323136303433.roa (hash: GiYpmPsNeJIM+tOFpoqBAp0iPcUDNpER8nLACmla4d4=)
                          10: 9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl (hash: zGqPOE2rM+udyreDyIAwfLgz27RQrNNxaB4It836DVU=)
                          11: 36322e3131322e3134342e302f32302d3234203d3e203230333236.roa (hash: PvFG9BZ+YdbKPRfUC/0dM3w7V209DRWmI/bk8VoBnFU=)
                          12: 3139332e33372e3233362e302f32342d3234203d3e203631333137.roa (hash: qxlkfW/nLMV9I5WoI6HQ89q00naILT20Rguml63Zf0A=)
                          13: 36322e3131322e3134342e302f32302d3230203d3e203539363432.roa (hash: hNXCqst3dZC+Dp3skkO26cOwh1zWEwx2n+JeuoU1IgU=)
                          14: 36322e3131322e3132382e302f32302d3234203d3e20313338393937.roa (hash: X+PLwzsRRQMgaM/TWKrSkseThdECGWKV7QbjrMlPn80=)
                          15: 326130303a316466303a3a2f33322d3332203d3e2035343634.roa (hash: hY/iIpaGanxmxatebFYi3ijTkZjHjUc/Iwjsijc0S+E=)
                          16: 3138352e322e3136322e302f32332d3234203d3e203531383437.roa (hash: breC5Ek41qDRBKS2wQZurpJCqHLgY68sHvSK/et8bfI=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 06:42:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:41:03:b9:89:ca:c6:79:da:a8:bd:77:91:16:98:a3:ab:59:21:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f0d24c855eee00fe4abf3903c6e8fcc7083ed4d
        Validity
            Not Before: Jan 25 03:30:02 2026 GMT
            Not After : Jan 26 06:42:02 2026 GMT
        Subject: CN=7C82C7FB0967B2A5FEB1EA5D2E7CBA68E4537D7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:45:4e:b3:2d:b4:e8:94:60:ad:41:54:f6:b3:
                    4e:6d:2d:37:43:26:25:eb:bd:78:8d:f3:59:f7:3e:
                    64:2d:d3:b5:2d:b9:0b:7a:35:bc:a8:99:35:e9:a8:
                    73:b4:a9:3b:8b:70:e6:f6:d4:41:f0:ca:af:65:fc:
                    4d:68:a9:19:0e:5e:2e:28:5e:b3:34:5a:43:2d:fd:
                    77:19:b4:d7:29:b1:99:bb:5a:4a:89:33:61:68:a9:
                    e3:2d:4f:04:5d:f0:c9:2d:c8:5a:3c:05:70:73:de:
                    b8:6b:6e:73:fb:9e:bc:f7:91:e8:bd:20:6d:cb:6e:
                    e6:8d:c7:86:a2:a7:e5:f3:c8:9c:61:83:f1:42:df:
                    b3:83:52:3a:f0:d4:69:04:31:28:67:5c:65:7d:a5:
                    a4:ab:2f:ef:b1:98:3c:ab:51:0e:b6:a2:51:05:da:
                    17:b4:17:00:ad:62:ae:a9:c9:09:ca:fa:15:5a:62:
                    a8:7b:f4:ad:8f:01:46:78:93:11:d8:bf:95:84:a1:
                    79:81:74:7c:55:e5:b0:6a:2e:93:a2:60:4b:64:2c:
                    18:1b:c8:13:14:d5:48:9c:4c:6d:95:d6:b0:cd:3b:
                    a9:4c:09:f1:49:1a:3d:f4:89:8a:d7:d5:dc:66:81:
                    f7:29:f6:3b:9f:ff:e0:9d:3c:a7:88:0d:bd:4f:a0:
                    11:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:82:C7:FB:09:67:B2:A5:FE:B1:EA:5D:2E:7C:BA:68:E4:53:7D:7B
            X509v3 Authority Key Identifier:
                keyid:9F:0D:24:C8:55:EE:E0:0F:E4:AB:F3:90:3C:6E:8F:CC:70:83:ED:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw0kyFXu4A_kq_OQPG6PzHCD7U0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/af31768d-42b1-4e92-b83f-bef7ee017813/0/9F0D24C855EEE00FE4ABF3903C6E8FCC7083ED4D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:49:81:12:b6:6f:02:91:ca:ed:65:f9:98:9d:c1:e6:37:0d:
         99:d6:65:26:e7:83:c5:87:ff:e5:f3:08:67:65:4c:e6:26:ce:
         68:83:ec:8e:5f:12:93:e5:ee:9d:b1:6a:9f:c9:98:77:f3:b0:
         de:4e:9f:b4:b5:7c:72:c3:58:6f:70:3d:08:8c:b8:85:d4:86:
         df:72:59:55:6e:22:00:8d:96:34:0e:2a:52:6c:6a:4f:ff:d8:
         85:22:6f:77:c2:e0:e8:f3:df:7f:e1:ef:cb:38:7b:07:0f:59:
         bc:29:62:84:df:c4:81:cd:47:d9:a1:8c:54:72:19:0e:e4:eb:
         0f:a5:96:5e:e6:5e:c7:94:38:7c:d8:6b:51:9d:f2:1f:24:83:
         d7:18:6c:22:94:41:0d:52:e1:03:1c:b0:f5:a0:01:d9:5f:bc:
         2f:1f:a2:7d:99:e7:3c:a8:00:f7:1b:b8:87:8c:0a:04:51:08:
         94:07:01:56:df:eb:9b:b4:0c:63:c0:b9:93:1d:d2:75:f1:cc:
         bc:97:1f:5b:8d:eb:10:c6:52:a7:60:9c:eb:1d:6f:09:e5:22:
         84:a4:ad:d6:25:b1:5f:4f:d1:11:ce:60:3c:4d:00:76:a4:07:
         53:d7:d5:a9:0a:e2:6f:f3:36:c7:12:d2:5a:bf:0e:44:85:a3:
         fd:ca:d4:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:42:37 2026 by rpki-client