This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
File:                     1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft (raw, json)
Hash identifier:          Po46akwgv0fq6qpcxV1Fwv1xUQj0XkD2UzrUFTOAN4A=
Subject key identifier:   1D:7E:86:B4:3B:E4:C0:64:98:9C:58:27:30:AD:97:CD:D3:07:A5:09
Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77
Certificate issuer:       /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
Certificate serial:       41D8763AD7E6E29F3D3BCEFC878153314A569264
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
Manifest number:          0359
Signing time:             Sun 25 Jan 2026 01:31:01 +0000
Manifest this update:     Sun 25 Jan 2026 01:26:01 +0000
Manifest next update:     Mon 26 Jan 2026 02:35:01 +0000
Files and hashes:         1: 326130663a383563313a3766393a3a2f34382d3438203d3e20323135323432.roa (hash: EaK1Skh4Um4RxiTzKfvwYuiUAcDo6dIwTSOhuUAUNQg=)
                          2: 326130663a383563313a3766623a3a2f34382d3438203d3e20323135323432.roa (hash: 9Ctv2mltThGL0RyhvpcjL2LOhkF9bTv3dQQCtaxW34I=)
                          3: 326130663a383563313a3766333a3a2f34382d3438203d3e20323035343633.roa (hash: YxuKH5bQA8YI1bwf7mCp5od3hfadKIetOc5KHPtspsc=)
                          4: 326130663a383563313a3766373a3a2f34382d3438203d3e20323135323432.roa (hash: 4CHXdVvHjYpqAYcHIcibvCLK5qq3tc1C66o5EpxaLt8=)
                          5: 326130663a383563313a3361323a3a2f34382d3438203d3e20323135323432.roa (hash: Gz7cU4OgmvLm8iR5sxlLJ8umD/eM2550DADKq1NdbVY=)
                          6: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl (hash: n++hzKfHSz4e8qjSkrJZM7k0pAJxqzezz1tsEzRAPlM=)
                          7: 326130663a383563313a3766353a3a2f34382d3438203d3e20323135373631.roa (hash: byQYxxoRiZMkalXd6RzudJTQa4Ua3fqFXKXTWNIB1fs=)
                          8: 326130663a383563313a3766343a3a2f34382d3438203d3e20323135323432.roa (hash: Sqqkf1ajVYDwVw2KSKZnr/tFVnDaWUIPFwaxuN/hzVk=)
                          9: 326130663a383563313a3766323a3a2f34382d3438203d3e20323135323432.roa (hash: sEiHLlrRoeeUa4AJCYCoXBnr24SESsEbTviJLVfMEys=)
                          10: 326130663a383563313a3766313a3a2f34382d3438203d3e20323135313234.roa (hash: gq6me54MBqnqosS7iLksDmqAJs8yyfHwMXcZfgP1ijQ=)
                          11: 326130663a383563313a3766363a3a2f34382d3438203d3e20323135323432.roa (hash: sqekG79xztP1stI8964y8O+ILcqcxMBKS5vM2N9Yeq4=)
                          12: 326130663a383563313a3766303a3a2f34382d3438203d3e20323033353131.roa (hash: F6VJOi3vW8ih7gU8rCzD7A7gIu39IHtVGsLlId1ILkM=)
                          13: 326130663a383563313a3766613a3a2f34382d3438203d3e20323135323432.roa (hash: 6WOlcQZh4GVBhjXWW5Oz90ldzq2Au8/SbNiLZze2zNI=)
                          14: 326130663a383563313a3730313a3a2f34382d3438203d3e20323033353131.roa (hash: Tk4tJu5bvTD5dR9NoM2pYvWxSXCc2/x84lQAlZZqzIs=)
                          15: 326130663a383563313a3766313a3a2f34382d3438203d3e20323035343633.roa (hash: QtxzWf2JsAYGrlxsDmcE2oi7tthkDrQ3wvK+rgUOQxg=)
                          16: 326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa (hash: LIVxcxtvoeze2S46mPqGSXeLOCk0JK2W2QKOiQjUdZQ=)
                          17: 326130663a383563313a3766383a3a2f34382d3438203d3e20323135323432.roa (hash: y9HbdtxnynZX2rM71oo4qhqJ/M/3l6e62X60vqkSXOc=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 02:35:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:d8:76:3a:d7:e6:e2:9f:3d:3b:ce:fc:87:81:53:31:4a:56:92:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
        Validity
            Not Before: Jan 25 01:26:01 2026 GMT
            Not After : Jan 26 02:35:01 2026 GMT
        Subject: CN=1D7E86B43BE4C064989C582730AD97CDD307A509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bc:cd:93:74:47:08:90:11:80:be:e7:80:33:
                    a8:be:c8:96:06:5c:97:c1:00:d8:d9:a9:cb:cb:52:
                    f8:dd:5d:f0:3a:8d:82:27:03:2c:8f:b3:4f:6c:65:
                    e6:6b:4b:b2:43:d3:a5:d9:93:6a:0c:e8:0f:bb:02:
                    bf:c6:c0:d3:a4:4e:c2:c2:14:2c:bc:f4:48:f7:9d:
                    cd:9b:0c:76:ad:29:71:6a:0a:31:4a:f5:ff:4a:13:
                    96:15:15:98:e5:20:09:85:9e:50:b3:66:89:2f:c9:
                    f3:c4:0a:cb:d7:e5:90:84:33:7b:5e:d2:80:75:b1:
                    0c:38:7a:e7:e5:4d:39:d2:a0:84:f3:a1:5c:84:e5:
                    3e:09:08:34:26:d4:f7:a6:38:24:d8:97:93:59:9d:
                    cd:e4:38:fd:c8:97:44:03:42:fb:6d:93:a1:55:07:
                    a8:cc:15:c4:03:e2:c9:75:9f:ad:8a:df:73:5f:d1:
                    40:bd:e3:1c:7c:5f:92:59:06:66:70:39:64:1e:52:
                    14:70:14:f2:cf:0a:ee:58:c2:10:56:89:6c:03:b5:
                    88:9c:b6:54:8f:1b:6c:c2:b9:73:61:3a:66:4d:df:
                    7a:02:e9:63:58:b6:ed:d7:c7:45:83:68:1b:e3:96:
                    a5:1a:8b:7f:c8:71:30:18:db:21:f2:ed:8d:dc:a4:
                    42:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:7E:86:B4:3B:E4:C0:64:98:9C:58:27:30:AD:97:CD:D3:07:A5:09
            X509v3 Authority Key Identifier:
                keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:d4:f7:c3:4a:e3:63:44:83:be:43:e0:00:10:e9:c3:5d:84:
         07:57:8b:2b:26:34:94:17:10:d6:0b:36:24:bd:70:03:47:a7:
         cc:c2:17:aa:0b:c6:8b:88:ff:c7:1e:e2:5b:a6:8c:82:ee:01:
         f1:0f:49:9c:6a:7b:8e:a8:5a:33:9e:2c:e7:de:72:80:e0:63:
         6a:11:ea:9f:0e:8e:11:d7:97:24:2e:76:2d:76:89:18:25:68:
         0d:e0:ec:79:a2:ad:e3:c5:0c:d4:cd:45:da:86:03:6b:0d:e7:
         d4:2a:9b:02:51:52:ff:83:f4:1a:38:c9:be:b7:57:96:7a:d3:
         a7:b0:50:f8:09:c2:a5:23:03:30:1c:c3:7d:9c:39:56:dc:57:
         c6:90:95:9e:a0:fb:79:0f:f3:2b:a7:82:ad:1b:90:af:55:97:
         2a:52:3e:3e:09:d5:40:c2:f3:b5:54:2c:ef:3c:cb:8e:de:d7:
         00:75:a2:9c:8f:fc:fa:18:41:e4:71:50:ad:dd:b2:0f:ff:f4:
         ad:fa:8b:cc:37:18:0b:68:f0:60:fc:cd:d2:89:24:4a:e8:73:
         6b:9d:d4:05:e5:51:ec:45:53:9f:47:11:69:c2:7f:97:26:4d:
         5d:9e:da:0c:64:3a:4a:c8:f1:02:a8:ff:66:12:51:a8:14:4e:
         b7:f1:e7:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:55:11 2026 by rpki-client