This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft
File:                     6003354361AF66B2F37153B9A7365EE572F6822E.mft (raw, json)
Hash identifier:          jz8/D7m1H623onCGwiddX6mEWH6HCmgx6QUpU/AG6Wg=
Subject key identifier:   D5:B9:4B:78:C4:CF:25:3E:63:C2:C2:45:9F:9B:08:15:A7:04:CF:61
Authority key identifier: 60:03:35:43:61:AF:66:B2:F3:71:53:B9:A7:36:5E:E5:72:F6:82:2E
Certificate issuer:       /CN=6003354361AF66B2F37153B9A7365EE572F6822E
Certificate serial:       757F64B998CC62DDA094E2A952C0CEB32E4B7941
Authority info access:    rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft
Manifest number:          0114
Signing time:             Sat 24 Jan 2026 19:34:29 +0000
Manifest this update:     Sat 24 Jan 2026 19:29:29 +0000
Manifest next update:     Sun 25 Jan 2026 22:00:29 +0000
Files and hashes:         1: 326130613a363034343a626130303a3a2f34302d3430203d3e20323134373233.roa (hash: QFhWc/Qi1XwFuZFFUxrJkVVsMNht6HRi/KIA9CCJysc=)
                          2: 326130613a363034343a626130323a3a2f34372d3438203d3e20323134373233.roa (hash: hUN5naRtN06Ia8W+gZVWL0PjC5030tIqv7AoahnILWU=)
                          3: 326130613a363034343a626130303a3a2f34382d3438203d3e20323134373233.roa (hash: hj2OdTJzJ/lMhD2+bSlhDwRPDkQ5RRLmuL3t94lTgMc=)
                          4: 6003354361AF66B2F37153B9A7365EE572F6822E.crl (hash: n1BdbRF33C5FoUsVBEvT1pOyv2H0vhBXXO/vyRSnUDQ=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft
                          rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
                          rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:7f:64:b9:98:cc:62:dd:a0:94:e2:a9:52:c0:ce:b3:2e:4b:79:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6003354361AF66B2F37153B9A7365EE572F6822E
        Validity
            Not Before: Jan 24 19:29:29 2026 GMT
            Not After : Jan 25 22:00:29 2026 GMT
        Subject: CN=D5B94B78C4CF253E63C2C2459F9B0815A704CF61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3d:d9:73:e8:5b:bf:1a:54:df:c2:6a:9e:59:
                    e8:d9:13:a9:3d:00:69:0f:e5:e9:1b:e7:f1:d6:0e:
                    6e:3f:e6:fe:da:69:7a:8d:ca:0e:99:3d:b6:52:7d:
                    4e:e5:3a:16:cc:b9:63:fc:d8:5e:c7:96:52:2e:7b:
                    3e:e5:e7:b1:9b:59:71:02:0c:4d:c7:35:f7:57:47:
                    6a:49:bf:04:71:a0:fc:80:2d:0c:7e:ea:fa:d6:65:
                    45:c7:20:85:ee:f9:68:48:f9:3c:12:72:bd:76:31:
                    24:e1:28:fd:68:aa:30:de:54:bd:18:c4:7c:bb:52:
                    66:fc:cd:26:6d:d2:0b:6e:37:f1:09:23:38:b0:52:
                    a0:4d:b4:6b:1a:d9:26:a2:cf:25:98:d6:b9:b5:75:
                    f4:b1:c2:50:25:d7:6a:3b:af:70:3b:4e:8b:35:84:
                    34:97:96:0f:76:23:3c:b2:12:25:e8:33:44:3c:a4:
                    06:b3:ca:3e:f3:fa:fb:74:8d:4b:a6:3a:d8:45:36:
                    4b:25:3c:f6:36:f6:96:17:60:36:87:88:6a:96:5a:
                    8f:fc:35:a1:a6:28:dd:2a:cd:b8:46:58:d3:6b:d4:
                    f8:79:d9:62:2d:aa:93:76:33:81:b4:1d:c1:12:35:
                    1c:79:1b:55:7a:b0:cc:4f:6c:27:44:55:44:fc:9c:
                    68:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:B9:4B:78:C4:CF:25:3E:63:C2:C2:45:9F:9B:08:15:A7:04:CF:61
            X509v3 Authority Key Identifier:
                keyid:60:03:35:43:61:AF:66:B2:F3:71:53:B9:A7:36:5E:E5:72:F6:82:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:9c:9d:1a:ac:0f:ac:73:36:0b:43:ea:ee:ce:6a:01:cb:a3:
         f6:ec:94:d3:3e:be:73:13:33:9f:94:44:15:db:bc:4d:9c:11:
         78:02:3d:bd:e7:52:f7:6b:cf:00:32:e9:24:77:7d:21:81:b6:
         5d:32:49:90:a4:52:b5:f3:6a:11:15:c4:97:49:9a:d9:07:2e:
         a3:f7:df:b4:88:9b:59:fb:23:55:0c:00:d9:2f:70:7f:ee:3d:
         d3:13:d6:fd:dd:16:1a:3b:f5:53:c0:1d:be:8f:d3:a8:ba:42:
         78:99:14:7b:b6:70:91:67:c4:95:ac:ab:aa:91:9b:01:00:bf:
         3b:3a:3b:97:15:89:b2:2a:59:ad:19:09:5d:b6:cc:6a:81:2a:
         93:ea:82:cd:42:33:a6:70:e9:e6:cf:a6:c7:95:d1:7f:c2:cd:
         c2:96:df:33:56:29:d4:bf:59:4b:8d:2d:4d:06:9c:e4:79:96:
         42:d0:cc:22:1e:0c:30:8d:14:34:4b:3f:3b:27:ad:40:ef:1b:
         13:34:38:c2:22:17:4c:65:24:19:00:33:36:13:1c:9e:98:ce:
         73:e9:c2:67:3c:df:34:68:3b:db:ae:f4:c1:1c:bf:ed:3c:c6:
         1e:6a:f7:16:d4:8c:72:b9:a9:a1:a4:da:6b:d7:95:01:88:1b:
         a1:1d:47:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:34:39 2026 by rpki-client