This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.mft
File:                     E19302BE91C9D4211CDF4AFF091055A173B3593B.mft (raw, json)
Hash identifier:          JkS35nvPfye+AfFgX5tq5rv/vGSlaz+Y1PSxNSOHtgE=
Subject key identifier:   F1:E0:20:56:5F:FA:62:9A:E3:CB:EF:C3:B5:4C:14:40:F5:20:A7:1A
Authority key identifier: E1:93:02:BE:91:C9:D4:21:1C:DF:4A:FF:09:10:55:A1:73:B3:59:3B
Certificate issuer:       /CN=E19302BE91C9D4211CDF4AFF091055A173B3593B
Certificate serial:       6578A020F2185F48C128373C3F48133AA1434C8D
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/E19302BE91C9D4211CDF4AFF091055A173B3593B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.mft
Manifest number:          0118
Signing time:             Sun 25 Jan 2026 02:10:53 +0000
Manifest this update:     Sun 25 Jan 2026 02:05:53 +0000
Manifest next update:     Mon 26 Jan 2026 03:06:53 +0000
Files and hashes:         1: 326130373a353463313a343230303a3a2f34302d3430203d3e20313939353138.roa (hash: p0V0EhuR94jsdFZ1UsjzKoR4Va7GATjKkx+PVQ3cRs4=)
                          2: 326130373a353463313a343236313a3a2f34382d3438203d3e203436373636.roa (hash: 7m4uBl7pjkxamzWCFShzOT8dP3zXIx3Ew/sIEJmrOk4=)
                          3: E19302BE91C9D4211CDF4AFF091055A173B3593B.crl (hash: OI1QqUdqHUXqDzo8xa4kO4BuJRygNAmVeUQfq2G2FaA=)
                          4: 326130373a353463313a343234323a3a2f34382d3438203d3e20313939353138.roa (hash: BOG3fQtugkiXpKS/p2fTg16ei6qBO6dg8xuWYfodSgU=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/E19302BE91C9D4211CDF4AFF091055A173B3593B.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 21:56:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:78:a0:20:f2:18:5f:48:c1:28:37:3c:3f:48:13:3a:a1:43:4c:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E19302BE91C9D4211CDF4AFF091055A173B3593B
        Validity
            Not Before: Jan 25 02:05:53 2026 GMT
            Not After : Jan 26 03:06:53 2026 GMT
        Subject: CN=F1E020565FFA629AE3CBEFC3B54C1440F520A71A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:49:6b:a3:52:09:63:03:9c:f5:bb:81:cb:b6:
                    72:99:2c:54:42:12:e0:a4:5a:fc:47:13:f3:7e:60:
                    37:e0:7d:90:2d:77:f5:2d:37:99:07:4c:9d:0e:a5:
                    28:f6:7b:45:de:f9:99:0d:41:fc:c6:f1:c2:ae:50:
                    2c:10:83:0f:53:08:6b:f2:4c:f8:4c:28:c6:17:41:
                    5c:e0:f4:66:e8:c9:99:d5:ec:ea:df:42:c3:f7:cc:
                    82:db:cf:25:a2:42:4c:5b:b1:58:a6:10:c8:2e:44:
                    fa:d9:17:c6:26:00:1f:a3:7d:f8:30:7a:52:b2:80:
                    7a:4d:b2:94:3e:33:e4:e6:40:db:81:b5:fe:61:0f:
                    f6:f6:21:1c:e0:1f:12:37:c6:5e:01:00:f8:92:18:
                    aa:b3:d3:f6:1f:ee:75:82:94:d6:e8:6d:2c:95:74:
                    c4:4a:50:37:45:e6:26:ad:e9:4e:93:49:74:ba:b6:
                    f0:73:2b:c5:d7:5e:7a:72:7e:87:0c:41:d1:b8:43:
                    42:c3:06:dc:7a:39:8a:7b:87:69:c8:94:1e:9f:f2:
                    b5:27:b3:7c:0f:a7:7a:a4:de:74:db:88:65:e5:4e:
                    b9:ca:86:ba:ef:e7:bb:79:c6:b6:b3:43:4d:3d:b3:
                    db:c8:a7:02:9d:18:b2:4c:2d:58:f0:34:db:8c:bd:
                    07:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:E0:20:56:5F:FA:62:9A:E3:CB:EF:C3:B5:4C:14:40:F5:20:A7:1A
            X509v3 Authority Key Identifier:
                keyid:E1:93:02:BE:91:C9:D4:21:1C:DF:4A:FF:09:10:55:A1:73:B3:59:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/E19302BE91C9D4211CDF4AFF091055A173B3593B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/10/E19302BE91C9D4211CDF4AFF091055A173B3593B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:25:c4:f4:1d:39:ef:ac:09:c9:3b:e5:22:5b:f5:96:cd:36:
         bf:c9:3c:42:55:38:1a:6f:1d:d7:72:c0:d4:7b:5c:d2:78:cd:
         89:f6:6b:f9:41:ca:5d:bf:ed:da:66:e3:1f:fa:63:b0:a3:93:
         07:d9:ca:5f:3b:04:29:61:32:c6:2b:3b:2a:dc:77:bb:55:44:
         ed:a8:2a:80:f0:dd:29:90:6e:59:1d:cf:11:0f:de:7d:a4:a2:
         35:1a:da:54:95:98:d9:8c:f6:0e:d1:f5:be:df:f1:ab:23:4c:
         85:96:f8:34:f1:91:1b:5b:5c:da:a1:6b:47:62:a9:ae:e7:8d:
         18:7f:f4:8a:7e:4d:f4:20:e0:80:61:c5:13:01:02:90:25:83:
         fa:ed:f2:bb:9a:c9:62:e4:d2:18:f6:aa:fd:3d:58:b1:d0:e2:
         87:de:20:0a:1a:1d:2a:12:64:d8:87:b7:92:b8:5b:8c:6c:19:
         63:a1:5a:e3:51:a0:fb:2d:67:54:d7:e1:ba:67:f0:1b:90:21:
         db:06:0f:0c:10:c1:13:3f:23:93:5b:e6:f6:2b:f8:cd:d0:1f:
         59:0b:a9:b6:85:26:1a:7d:24:b4:a5:64:84:e4:86:e9:ff:fc:
         91:17:f2:75:da:f0:dc:a4:03:ae:a4:a6:bb:81:98:a4:5d:f8:
         3c:b1:1d:fe
-----BEGIN CERTIFICATE-----
MIIFfDCCBGSgAwIBAgIUZXigIPIYX0jBKDc8P0gTOqFDTI0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTE5MzAyQkU5MUM5RDQyMTFDREY0QUZGMDkxMDU1QTE3
M0IzNTkzQjAeFw0yNjAxMjUwMjA1NTNaFw0yNjAxMjYwMzA2NTNaMDMxMTAvBgNV
BAMTKEYxRTAyMDU2NUZGQTYyOUFFM0NCRUZDM0I1NEMxNDQwRjUyMEE3MUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHSWujUgljA5z1u4HLtnKZLFRC
EuCkWvxHE/N+YDfgfZAtd/UtN5kHTJ0OpSj2e0Xe+ZkNQfzG8cKuUCwQgw9TCGvy
TPhMKMYXQVzg9GboyZnV7OrfQsP3zILbzyWiQkxbsVimEMguRPrZF8YmAB+jffgw
elKygHpNspQ+M+TmQNuBtf5hD/b2IRzgHxI3xl4BAPiSGKqz0/Yf7nWClNbobSyV
dMRKUDdF5iat6U6TSXS6tvBzK8XXXnpyfocMQdG4Q0LDBtx6OYp7h2nIlB6f8rUn
s3wPp3qk3nTbiGXlTrnKhrrv57t5xrazQ009s9vIpwKdGLJMLVjwNNuMvQcpAgMB
AAGjggKGMIICgjAdBgNVHQ4EFgQU8eAgVl/6Yprjy+/DtUwUQPUgpxowHwYDVR0j
BBgwFoAU4ZMCvpHJ1CEc30r/CRBVoXOzWTswDgYDVR0PAQH/BAQDAgeAMIGXBgNV
HR8EgY8wgYwwgYmggYaggYOGgYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNm
NTBlOC8xMC9FMTkzMDJCRTkxQzlENDIxMUNERjRBRkYwOTEwNTVBMTczQjM1OTNC
LmNybDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWIt
NGRiNS1iYmQzLTVjY2E2MzNjYWUzZi80L0UxOTMwMkJFOTFDOUQ0MjExQ0RGNEFG
RjA5MTA1NUExNzNCMzU5M0IuY2VyMIGgBggrBgEFBQcBCwSBkzCBkDCBjQYIKwYB
BQUHMAuGgYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNmNTBlOC8xMC9FMTkz
MDJCRTkxQzlENDIxMUNERjRBRkYwOTEwNTVBMTczQjM1OTNCLm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
FCXE9B0576wJyTvlIlv1ls02v8k8QlU4Gm8d13LA1Htc0njNifZr+UHKXb/t2mbj
H/pjsKOTB9nKXzsEKWEyxis7Ktx3u1VE7agqgPDdKZBuWR3PEQ/efaSiNRraVJWY
2Yz2DtH1vt/xqyNMhZb4NPGRG1tc2qFrR2KprueNGH/0in5N9CDggGHFEwECkCWD
+u3yu5rJYuTSGPaq/T1YsdDih94gChodKhJk2Ie3krhbjGwZY6Fa41Gg+y1nVNfh
umfwG5Ah2wYPDBDBEz8jk1vm9iv4zdAfWQuptoUmGn0ktKVkhOSG6f/8kRfyddrw
3KQDrqSmu4GYpF34PLEd/g==
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:23:24 2026 by rpki-client