This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft
File:                     1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft (raw, json)
Hash identifier:          /W7vB4H1EHKOy3P/AWZ80dt8ke9m1pHgbldc7kpVqzI=
Subject key identifier:   39:8B:68:C4:09:1B:5D:BD:EB:87:6A:18:5B:DF:AC:93:75:02:89:94
Authority key identifier: 1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB
Certificate issuer:       /CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB
Certificate serial:       15C54996AB2888024A01485BEA37489FECD3BBA7
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft
Manifest number:          031A
Signing time:             Sat 24 Jan 2026 22:42:08 +0000
Manifest this update:     Sat 24 Jan 2026 22:37:08 +0000
Manifest next update:     Mon 26 Jan 2026 01:31:08 +0000
Files and hashes:         1: 1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl (hash: 3gvTJmmcjYu4udZpfVta/WBr+6bgIGUa9HORT7c4Uw0=)
                          2: 326131343a373538313a643030303a3a2f34302d3430203d3e203337393838.roa (hash: R4oy1L8+rEt1QdmoGVV7PiYt423B/xK5i6kPhc7W9aI=)
                          3: 326131343a373538313a643038303a3a2f34312d3431203d3e203337393838.roa (hash: BL4+PYIdcLs3fiOkkamkg94lgyO9kcRHp6ACoQUQ5y8=)
                          4: 326131343a373538313a643330303a3a2f34302d3430203d3e2037353435.roa (hash: 9phDdz/jhh9vxdEc5WXHXIl+cdnJzAyh/6SdvyVejiI=)
                          5: 326131343a373538313a643230303a3a2f34302d3430203d3e203533363637.roa (hash: KPVNDBydB4lEOCddQAWiNda/rm6IVb4G2i+sUeOhrYg=)
                          6: 326131343a373538313a643030303a3a2f34312d3431203d3e203337393838.roa (hash: DvQHKT6M+fkiG6o9KW4wBm0yNbqCXWjg78L/cu4BiJ0=)
                          7: 326131343a373538313a643130303a3a2f34302d3438203d3e203533363637.roa (hash: e+p8+Sw9X8S3Ty3gF9pg+LdvDbV5qMXAYBBthQD4LPE=)
                          8: 326131343a373538313a643130303a3a2f34302d3430203d3e203533363637.roa (hash: M0+yHEN3VX8K+aVDmpusml/7Hx8dbBnadNDMaFbGOzQ=)
                          9: 326131343a373538313a643230303a3a2f34302d3438203d3e203633343733.roa (hash: OTYsTfrglFs/JKFj7RJtAXdrMe1OUcjbc3WSXqeD0dk=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 01:31:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:c5:49:96:ab:28:88:02:4a:01:48:5b:ea:37:48:9f:ec:d3:bb:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F4C828276A9966865AB2B59533D1CB1BEC890BB
        Validity
            Not Before: Jan 24 22:37:08 2026 GMT
            Not After : Jan 26 01:31:08 2026 GMT
        Subject: CN=398B68C4091B5DBDEB876A185BDFAC9375028994
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a0:bb:d4:8e:c6:f9:b9:84:22:f5:54:21:5a:
                    5b:6b:9c:4e:f9:b0:cd:58:f4:32:11:0d:c9:d5:fc:
                    99:1f:2c:01:75:dd:aa:d7:f3:28:5e:ae:a6:28:b8:
                    c3:a6:9c:35:44:d0:f2:28:7d:3c:ae:2d:fb:4a:58:
                    cc:22:c5:b6:11:0e:c1:7c:f7:5c:78:d4:bb:ae:45:
                    49:00:32:f4:42:b0:94:ad:72:07:7b:8d:d3:31:db:
                    8e:23:b6:90:81:1b:0e:62:db:96:14:6c:8d:1a:fa:
                    12:6a:12:76:82:c3:8a:d3:ed:a2:93:31:cd:26:b2:
                    03:c6:16:6c:25:f3:9d:e1:07:b1:b3:c6:0a:23:9a:
                    af:e4:87:9e:51:d1:8c:46:a8:5b:dc:b9:13:cd:22:
                    93:fb:fa:99:16:ef:1b:f0:69:44:23:fd:b3:a9:7a:
                    8a:94:2e:b4:84:62:4f:4e:1a:0f:7c:80:3d:4c:7b:
                    1e:30:97:8e:f2:1a:2a:df:72:dc:a9:ab:8e:12:c1:
                    0c:4c:9e:59:d9:8b:bc:44:b2:32:5e:77:08:78:98:
                    83:4a:85:c3:75:f6:14:f7:3c:6c:44:8e:f9:70:aa:
                    ae:07:4f:81:50:22:4b:08:fc:d0:98:97:0c:9b:dd:
                    ed:7f:9c:06:4a:56:b4:7c:42:22:5f:f5:04:a8:5d:
                    77:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:8B:68:C4:09:1B:5D:BD:EB:87:6A:18:5B:DF:AC:93:75:02:89:94
            X509v3 Authority Key Identifier:
                keyid:1F:4C:82:82:76:A9:96:68:65:AB:2B:59:53:3D:1C:B1:BE:C8:90:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b59c106c-53b4-4e92-9fba-d60827b5bdb8/0/1F4C828276A9966865AB2B59533D1CB1BEC890BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:dc:84:1f:fb:68:c1:a1:5b:30:2b:2f:6f:40:50:5c:87:06:
         1a:e6:95:7a:f9:5a:f8:9a:75:2a:87:6e:e3:92:bb:14:99:c8:
         8e:2f:6f:08:bf:2c:69:f3:3f:c6:c6:d0:d3:55:8f:db:3f:0b:
         6f:02:99:4f:2c:8c:60:cb:99:b3:ae:1d:ec:4c:b5:22:4e:35:
         b6:24:eb:be:9d:e3:3e:f6:32:66:53:d9:2c:2b:21:8f:8f:ef:
         9b:52:e0:fb:e9:0e:7e:55:bd:fa:ca:64:b4:a6:20:03:11:bb:
         81:f3:bd:c6:34:8c:c0:ff:49:04:5a:29:a0:d8:5f:d2:6b:87:
         26:21:af:0b:00:ae:c4:95:7f:f9:0f:1e:81:43:58:c2:96:22:
         a3:91:b3:51:c1:87:07:54:0f:78:8f:19:77:7d:44:b7:f0:5f:
         7a:a6:f1:03:ee:87:54:44:99:a2:f2:2e:7d:85:93:0f:43:ae:
         38:55:c8:93:fe:8e:14:91:d1:9f:dc:05:79:0a:5f:19:bb:03:
         8b:c2:bc:c3:5b:b5:1a:41:76:c7:47:13:c6:02:20:c5:bf:78:
         e2:77:7d:1e:63:b7:c3:37:30:e6:90:ce:a4:c2:f2:18:f7:f9:
         a0:a4:3a:dc:43:6b:0c:0a:2c:1c:69:e2:89:0e:b9:58:5a:d8:
         0d:8d:d7:a7
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUFcVJlqsoiAJKAUhb6jdIn+zTu6cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUY0QzgyODI3NkE5OTY2ODY1QUIyQjU5NTMzRDFDQjFC
RUM4OTBCQjAeFw0yNjAxMjQyMjM3MDhaFw0yNjAxMjYwMTMxMDhaMDMxMTAvBgNV
BAMTKDM5OEI2OEM0MDkxQjVEQkRFQjg3NkExODVCREZBQzkzNzUwMjg5OTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLoLvUjsb5uYQi9VQhWltrnE75
sM1Y9DIRDcnV/JkfLAF13arX8yherqYouMOmnDVE0PIofTyuLftKWMwixbYRDsF8
91x41LuuRUkAMvRCsJStcgd7jdMx244jtpCBGw5i25YUbI0a+hJqEnaCw4rT7aKT
Mc0msgPGFmwl853hB7Gzxgojmq/kh55R0YxGqFvcuRPNIpP7+pkW7xvwaUQj/bOp
eoqULrSEYk9OGg98gD1Mex4wl47yGirfctypq44SwQxMnlnZi7xEsjJedwh4mINK
hcN19hT3PGxEjvlwqq4HT4FQIksI/NCYlwyb3e1/nAZKVrR8QiJf9QSoXXdLAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUOYtoxAkbXb3rh2oYW9+sk3UCiZQwHwYDVR0j
BBgwFoAUH0yCgnaplmhlqytZUz0csb7IkLswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYjU5YzEwNmMtNTNiNC00ZTkyLTlmYmEtZDYwODI3YjVi
ZGI4LzAvMUY0QzgyODI3NkE5OTY2ODY1QUIyQjU5NTMzRDFDQjFCRUM4OTBCQi5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8xRjRDODI4Mjc2QTk5NjY4NjVBQjJCNTk1
MzNEMUNCMUJFQzg5MEJCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L2I1OWMxMDZjLTUzYjQtNGU5Mi05ZmJhLWQ2MDgyN2I1YmRiOC8wLzFGNEM4Mjgy
NzZBOTk2Njg2NUFCMkI1OTUzM0QxQ0IxQkVDODkwQkIubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBW3IQf
+2jBoVswKy9vQFBchwYa5pV6+Vr4mnUqh27jkrsUmciOL28Ivyxp8z/GxtDTVY/b
PwtvAplPLIxgy5mzrh3sTLUiTjW2JOu+neM+9jJmU9ksKyGPj++bUuD76Q5+Vb36
ymS0piADEbuB873GNIzA/0kEWimg2F/Sa4cmIa8LAK7ElX/5Dx6BQ1jCliKjkbNR
wYcHVA94jxl3fUS38F96pvED7odURJmi8i59hZMPQ644VciT/o4UkdGf3AV5Cl8Z
uwOLwrzDW7UaQXbHRxPGAiDFv3jid30eY7fDNzDmkM6kwvIY9/mgpDrcQ2sMCiwc
aeKJDrlYWtgNjden
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:19:32 2026 by rpki-client