This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft
File:                     202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft (raw, json)
Hash identifier:          XTFG3OkGW9lklW2wZLbvgHwz7WKHDAS2/khgTrv/0sQ=
Subject key identifier:   46:6F:30:9D:81:F9:51:05:E7:45:72:D9:88:9D:BC:CA:AB:A1:DF:06
Authority key identifier: 20:2A:82:DA:6E:73:CE:42:62:E1:8B:AE:D6:0A:3F:A6:C8:89:23:F0
Certificate issuer:       /CN=202A82DA6E73CE4262E18BAED60A3FA6C88923F0
Certificate serial:       58C1636734B7071CD621B8BC408BD49D587CF1B6
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft
Manifest number:          CF
Signing time:             Sun 25 Jan 2026 05:32:53 +0000
Manifest this update:     Sun 25 Jan 2026 05:27:53 +0000
Manifest next update:     Mon 26 Jan 2026 05:53:53 +0000
Files and hashes:         1: 326131343a373538313a333062363a3a2f34382d3438203d3e20323037323939.roa (hash: QF7sj3Q22cpFIfftMWFUaaWBXSTUWiNGhFKa4Gm8DjQ=)
                          2: 326131343a373538313a333062363a3a2f34382d3438203d3e203331383938.roa (hash: EiykYxl+6FaTNBSgNTe5hk8ztAyCkiKmYpqs3J6XV7E=)
                          3: 326131343a373538313a333030303a3a2f34302d3438203d3e20323037353239.roa (hash: 49tQr1GLN9QvPACiaQcXfaSDsuhRZJax3rEAyqF9fvs=)
                          4: 202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl (hash: 5v8IXni9jMKmWILoWQwWf1J14xAGTmjgUYaWimdlynk=)
                          5: 326131343a373538313a333039303a3a2f34342d3434203d3e20323034323131.roa (hash: an2CTnY48XCjuCGH81CGgjVXZdlCvh7kWv6euA7rsaw=)
                          6: 326131343a373538303a666666353a3a2f34382d3438203d3e20323037353239.roa (hash: 8GEpSwKR5aAKrW7JpZcQNrVUIUKVu8YVCYytf208qTw=)
                          7: 326131343a373538313a333062353a3a2f34382d3438203d3e20323131373239.roa (hash: tFUXq6i30FxB1SNNhCRKk78oQl/FXFjJBGghOw722to=)
                          8: 64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.cer (hash: Cg46VfMFxkibHVY72VspTJE2BjBtIpE0lG8+Ny9YFKc=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 05:53:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:c1:63:67:34:b7:07:1c:d6:21:b8:bc:40:8b:d4:9d:58:7c:f1:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=202A82DA6E73CE4262E18BAED60A3FA6C88923F0
        Validity
            Not Before: Jan 25 05:27:53 2026 GMT
            Not After : Jan 26 05:53:53 2026 GMT
        Subject: CN=466F309D81F95105E74572D9889DBCCAABA1DF06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f1:07:bc:df:22:bf:69:85:e3:8a:6a:03:0b:
                    48:a3:3f:46:89:c7:1e:95:e2:aa:65:33:4c:f4:48:
                    7a:86:f1:c5:3c:27:25:b7:bc:95:e3:40:5e:ec:f0:
                    3a:ba:72:cc:93:80:ca:8a:d6:c3:84:44:b4:45:14:
                    80:d7:eb:e7:c5:2a:33:c7:ff:16:db:bd:f9:ec:ad:
                    19:a9:36:07:24:7f:6a:31:62:64:14:20:95:73:e3:
                    c1:96:de:43:25:7b:09:87:70:2e:48:25:4c:9d:3a:
                    7b:f7:94:d3:6e:32:34:f9:0a:42:49:cd:26:ab:e0:
                    cc:13:ce:1c:de:bf:7e:34:86:6a:6f:6c:30:8a:88:
                    22:8b:57:36:81:8d:6a:9c:fc:95:5d:1e:bc:13:82:
                    a2:f7:08:d0:2a:a9:58:07:13:d5:45:20:7d:b6:e6:
                    3f:2b:bc:e2:c8:31:0c:dc:60:ea:be:4e:30:9a:57:
                    16:71:1c:2f:2f:79:dd:de:15:aa:20:62:39:c2:e7:
                    fb:57:ab:f6:d0:a7:e4:18:a0:53:e7:88:5f:de:10:
                    ef:2a:0b:88:c9:04:be:5d:1a:c4:40:f5:95:65:cf:
                    47:fe:58:84:a0:6e:47:be:4c:75:71:6c:9b:a2:3d:
                    b5:9a:31:8b:ba:5c:3e:a5:7d:e7:57:db:b9:be:05:
                    eb:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:6F:30:9D:81:F9:51:05:E7:45:72:D9:88:9D:BC:CA:AB:A1:DF:06
            X509v3 Authority Key Identifier:
                keyid:20:2A:82:DA:6E:73:CE:42:62:E1:8B:AE:D6:0A:3F:A6:C8:89:23:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/202A82DA6E73CE4262E18BAED60A3FA6C88923F0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:06:42:1a:6e:d8:8b:39:64:10:2c:71:b2:a6:db:60:7e:cf:
         62:30:71:14:43:de:bd:a4:c8:ce:e7:d6:ad:d9:12:05:cf:43:
         49:a0:25:d3:5d:9b:87:36:6d:68:35:e3:9b:6f:9e:35:90:d0:
         91:c0:6b:4b:4b:4d:94:1c:48:61:73:89:36:b5:a5:1e:2f:8c:
         6d:7c:45:58:73:0e:a5:a7:db:6c:d6:de:64:f1:a5:5a:87:e9:
         cf:a7:e7:37:8d:40:3d:8e:81:84:96:34:ad:6d:a4:6c:0f:10:
         b9:fe:10:ab:6e:83:3d:83:e0:cf:96:b6:ce:7b:92:c1:42:72:
         de:75:9e:68:27:3f:b8:5e:1a:c7:85:01:49:e7:01:48:29:02:
         95:88:dc:2a:85:25:9a:f2:46:0e:96:d8:b3:2c:33:b6:32:e4:
         79:b5:4c:a6:e7:99:8f:90:ad:64:91:7d:65:30:90:8f:45:50:
         fe:53:76:64:ba:94:1b:f8:30:c7:a3:98:46:b2:30:5b:25:b9:
         19:1b:0b:ef:62:07:34:57:09:be:80:6f:63:a8:09:fa:53:19:
         06:ee:65:ae:f0:ca:57:07:73:ab:66:5e:a1:80:36:9e:b2:49:
         63:9d:bb:21:10:35:e5:3b:4e:7e:03:80:68:60:94:84:50:8c:
         17:91:9e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----