This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
File:                     0993289B168A37D449BC0D44B1AD35E532025CF1.mft (raw, json)
Hash identifier:          t+HXArwaVkYizPJ3JLr1ijLyvG8SeqajjY8s0FcuY6c=
Subject key identifier:   A9:BE:19:2B:84:C7:BE:39:EE:A9:72:89:AF:F2:73:2D:4D:D1:0C:6D
Authority key identifier: 09:93:28:9B:16:8A:37:D4:49:BC:0D:44:B1:AD:35:E5:32:02:5C:F1
Certificate issuer:       /CN=0993289b168a37d449bc0d44b1ad35e532025cf1
Certificate serial:       0DD68F53A2C9DF271C48B8F2B2BE2EAB73C44129
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
Manifest number:          033F
Signing time:             Sun 25 Jan 2026 07:45:18 +0000
Manifest this update:     Sun 25 Jan 2026 07:40:18 +0000
Manifest next update:     Mon 26 Jan 2026 10:53:18 +0000
Files and hashes:         1: 0993289B168A37D449BC0D44B1AD35E532025CF1.crl (hash: LcqB0dCjyeCYWi/0Q9BHWxFtit9v0ToTZ9mqIgQwVxE=)
                          2: 3139342e3135362e37362e302f32342d3234203d3e20323132323338.roa (hash: +FUmQfKGqa7l1UgyL4zjqDbJWdoQDDjzi+PS6gpsjlM=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:d6:8f:53:a2:c9:df:27:1c:48:b8:f2:b2:be:2e:ab:73:c4:41:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0993289b168a37d449bc0d44b1ad35e532025cf1
        Validity
            Not Before: Jan 25 07:40:18 2026 GMT
            Not After : Jan 26 10:53:18 2026 GMT
        Subject: CN=A9BE192B84C7BE39EEA97289AFF2732D4DD10C6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:98:71:99:20:62:7d:81:ee:76:45:bd:42:51:
                    7f:70:76:52:52:7b:c0:eb:ad:8e:7c:f0:49:cf:b4:
                    7b:41:cb:c9:8b:2a:48:c8:df:f2:4c:0d:f4:4e:ee:
                    26:c5:f2:54:4b:19:8f:91:a4:ad:4b:44:29:eb:a0:
                    cf:35:0b:7f:a3:ae:24:83:b9:30:61:3c:d0:5f:e7:
                    dd:d3:76:25:af:ee:87:cc:69:17:59:22:3e:46:0e:
                    e0:4f:6e:2f:2d:8e:5c:f9:5c:ee:59:90:b1:88:b8:
                    07:49:c8:d3:3f:a4:6d:3d:d4:ef:1e:5f:b0:dd:b5:
                    06:87:9f:71:77:d4:f6:64:07:6c:e8:84:02:99:7c:
                    ff:e8:31:8b:0a:74:2b:79:9b:c0:96:05:e5:90:2f:
                    f5:2c:dd:7e:f6:30:7d:1f:12:6a:62:8d:a5:7f:82:
                    ff:4f:45:20:6d:49:59:8e:5f:bc:f2:c3:0e:dc:81:
                    9e:92:46:a0:fd:f3:f0:d2:d5:53:f7:39:50:30:03:
                    d2:7e:f2:9b:f3:7f:10:b2:c8:24:56:09:bf:bd:3f:
                    3b:74:da:12:ec:67:86:0d:4f:71:d9:a7:89:11:9f:
                    89:f6:73:c6:a3:06:f8:52:a7:f9:de:5d:90:65:9a:
                    05:5c:eb:9f:6c:33:7d:d3:b3:22:04:e1:c5:6f:fd:
                    69:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:BE:19:2B:84:C7:BE:39:EE:A9:72:89:AF:F2:73:2D:4D:D1:0C:6D
            X509v3 Authority Key Identifier:
                keyid:09:93:28:9B:16:8A:37:D4:49:BC:0D:44:B1:AD:35:E5:32:02:5C:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZMomxaKN9RJvA1Esa015TICXPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3bd2d2e-f40e-472e-9f8f-8984feaaa5c7/0/0993289B168A37D449BC0D44B1AD35E532025CF1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:0b:77:48:74:0d:ec:c9:a2:36:00:15:6c:b2:4d:92:a5:6b:
         0d:cc:99:13:c9:77:de:5a:c9:c2:cd:81:83:8a:2a:54:c5:8f:
         90:d3:b0:8c:da:44:40:18:c6:04:38:f3:1a:e7:c2:19:79:08:
         ea:d4:df:c9:15:f8:f0:8d:6b:bf:df:eb:eb:f8:fd:f2:04:7b:
         3b:73:bd:40:a8:7b:17:97:9b:8f:18:8f:26:15:58:9e:e3:50:
         86:42:d0:e5:9b:05:52:f8:74:a5:8d:48:b9:53:4e:a0:75:a2:
         e2:d2:6b:a8:df:2f:07:fb:df:dc:c0:59:f8:26:13:ee:33:6e:
         9b:6d:22:54:c4:e1:b3:60:b7:19:b1:79:7b:2b:97:fb:97:83:
         4c:0c:5d:ca:7a:29:48:dc:49:ed:32:b8:a8:2e:1f:b3:e5:20:
         5c:16:4d:8f:3c:a0:8b:57:b9:44:92:10:98:81:15:d7:fa:28:
         14:e2:68:4e:82:ba:4c:f9:08:0f:84:67:94:ac:c4:ee:4b:c1:
         e4:59:9d:42:1c:7c:3c:2b:84:55:88:34:ad:39:c6:96:25:b5:
         ed:35:1d:b1:2b:e2:20:d1:a0:3a:dd:82:de:fb:f4:3d:ac:68:
         00:e7:98:24:f6:11:ea:02:73:1b:c8:1a:18:27:df:a0:83:cd:
         aa:7e:78:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:04:50 2026 by rpki-client