This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bfc6fd8f-46c3-465b-9810-d8f75b815f7b/0/7362A987ABB0200A1FC035126DEA767619F0F15F.mft
File:                     7362A987ABB0200A1FC035126DEA767619F0F15F.mft (raw, json)
Hash identifier:          g/sijm2TJnn14xrm8lN6610GD0HiL0wb8hXIVquB4Jk=
Subject key identifier:   8D:95:7A:34:4B:7F:89:58:B4:DF:C1:F1:56:F5:DC:53:B3:FC:4A:43
Authority key identifier: 73:62:A9:87:AB:B0:20:0A:1F:C0:35:12:6D:EA:76:76:19:F0:F1:5F
Certificate issuer:       /CN=7362A987ABB0200A1FC035126DEA767619F0F15F
Certificate serial:       221EBCC1D25554A4EBAA02C3D85282A176CA9BBE
Authority info access:    rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/7362A987ABB0200A1FC035126DEA767619F0F15F.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bfc6fd8f-46c3-465b-9810-d8f75b815f7b/0/7362A987ABB0200A1FC035126DEA767619F0F15F.mft
Manifest number:          0C
Signing time:             Sun 25 Jan 2026 14:05:58 +0000
Manifest this update:     Sun 25 Jan 2026 14:00:58 +0000
Manifest next update:     Mon 26 Jan 2026 15:03:58 +0000
Files and hashes:         1: 326130623a346530373a34323a3a2f34382d3438203d3e20323032313932.roa (hash: fquVfgp9MANaCnmZHU29EbjJoqDiozGaupPPXtG8uuA=)
                          2: 326130623a346530373a3930303a3a2f34382d3438203d3e20323135393533.roa (hash: 33PVDh1AwEiMWBu1NWzQg4gSejc9rOdvBp9sLjtT1Nw=)
                          3: 7362A987ABB0200A1FC035126DEA767619F0F15F.crl (hash: 9E8H0tydggClK91jBXtbQ373JBxWEGfGwnuEFwFf0ck=)
                          4: 326130623a346530373a323a3a2f34382d3438203d3e20323032313932.roa (hash: 2Q78hs9dDRNLVJzlGxzW9WgXODF3/8z4QP/om6m2wzs=)
                          5: 326130623a346530373a3930303a3a2f34302d3430203d3e20323032313932.roa (hash: EJC2hIlnRT4fGm8BiWu+mKtkuG7C8nqqr/7ojxbQkQQ=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/bfc6fd8f-46c3-465b-9810-d8f75b815f7b/0/7362A987ABB0200A1FC035126DEA767619F0F15F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/bfc6fd8f-46c3-465b-9810-d8f75b815f7b/0/7362A987ABB0200A1FC035126DEA767619F0F15F.mft
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/7362A987ABB0200A1FC035126DEA767619F0F15F.cer
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 01:58:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:1e:bc:c1:d2:55:54:a4:eb:aa:02:c3:d8:52:82:a1:76:ca:9b:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7362A987ABB0200A1FC035126DEA767619F0F15F
        Validity
            Not Before: Jan 25 14:00:58 2026 GMT
            Not After : Jan 26 15:03:58 2026 GMT
        Subject: CN=8D957A344B7F8958B4DFC1F156F5DC53B3FC4A43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ea:ac:19:a5:6c:56:6c:23:5f:29:b2:f1:05:
                    5f:53:26:56:91:7d:ba:bc:27:56:2f:db:2f:0d:b6:
                    49:2d:cf:55:57:5c:eb:72:37:0b:b1:06:6c:ea:b1:
                    64:c5:c1:0c:4e:cc:55:93:af:38:f6:ab:1a:99:b8:
                    c6:0d:5a:56:46:7f:a3:0f:38:63:23:3c:be:04:02:
                    aa:7a:f3:cf:8f:74:d4:47:f6:e2:50:0e:08:70:3e:
                    b5:59:99:1b:e9:b7:49:5d:d3:fc:a4:3f:07:1b:68:
                    87:4b:05:93:7b:67:32:81:10:b2:02:63:d4:89:c0:
                    ee:0a:64:5a:90:07:e3:f8:00:e9:1a:40:d8:4a:ac:
                    08:45:74:4a:a9:02:ee:83:12:18:0c:71:5c:29:51:
                    53:d5:af:de:35:05:02:09:c4:3a:24:1b:14:db:1d:
                    85:63:a0:14:70:72:21:56:4e:35:a6:67:a4:e8:4e:
                    5f:9d:7d:c3:77:a2:b8:56:f0:05:cf:75:d6:cc:15:
                    a5:cb:72:31:89:91:dd:9d:5a:aa:1e:27:5b:d0:4e:
                    b0:dd:b5:3e:0e:48:6e:03:f5:e1:39:9e:d6:fa:c3:
                    49:a3:71:b2:a7:47:de:e9:06:92:92:72:16:65:98:
                    de:b7:f7:8d:14:7f:7d:a2:9d:18:41:0a:99:5c:c3:
                    ba:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:95:7A:34:4B:7F:89:58:B4:DF:C1:F1:56:F5:DC:53:B3:FC:4A:43
            X509v3 Authority Key Identifier:
                keyid:73:62:A9:87:AB:B0:20:0A:1F:C0:35:12:6D:EA:76:76:19:F0:F1:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bfc6fd8f-46c3-465b-9810-d8f75b815f7b/0/7362A987ABB0200A1FC035126DEA767619F0F15F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/7362A987ABB0200A1FC035126DEA767619F0F15F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bfc6fd8f-46c3-465b-9810-d8f75b815f7b/0/7362A987ABB0200A1FC035126DEA767619F0F15F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:97:6d:08:bc:97:19:73:80:1e:e8:73:aa:13:b1:42:10:64:
         a8:9c:60:12:f1:0f:22:78:53:10:bc:b5:55:f0:8e:e3:28:30:
         6e:8a:0d:55:2f:15:f5:b8:fe:29:a6:38:59:54:71:4b:b0:35:
         4b:40:b6:50:a7:6c:00:40:11:6d:ac:16:57:5e:a3:f4:3f:9b:
         f3:36:ed:53:d5:16:d8:4a:d5:c4:cd:19:1d:77:29:b0:2e:05:
         62:74:04:fe:fb:b0:a9:1d:f0:34:e9:ce:8c:5d:8f:78:45:84:
         6e:25:d7:8e:11:44:fc:2d:8e:97:22:71:8c:aa:24:7e:d9:a5:
         67:f4:57:85:86:99:64:37:4d:25:b8:be:2d:11:85:c7:aa:40:
         5a:ba:8b:25:c5:23:01:6d:b2:3a:ef:7a:bd:6c:b3:c1:5c:8d:
         87:73:c3:b6:fc:4d:ca:8c:41:8e:34:97:1e:27:ad:97:96:8c:
         5c:c4:af:85:ab:1f:80:a1:6d:7c:7b:17:c7:c8:e1:72:19:19:
         09:3f:f2:a2:c7:ea:5c:58:78:78:64:1e:01:01:ec:b7:38:1e:
         05:0c:b5:1c:ce:72:c1:37:80:35:4d:56:19:dc:48:e4:11:15:
         0d:aa:f0:23:7c:db:68:52:6b:d6:82:ef:aa:4a:c4:d2:9b:da:
         45:65:df:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:51:13 2026 by rpki-client