This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft
File:                     E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft (raw, json)
Hash identifier:          d9/z1ypBOpR2jsi+PqL+E7bggv9hsgDrMnSDr/kEQRw=
Subject key identifier:   B1:F3:B3:2C:4A:38:3F:74:58:E3:BC:07:E8:46:A9:26:13:B8:18:B6
Authority key identifier: E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4
Certificate issuer:       /CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
Certificate serial:       13BFEFE2EAA3E2278CE5EE0D4656F73AEA63F657
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft
Manifest number:          0170
Signing time:             Sat 24 Jan 2026 19:14:43 +0000
Manifest this update:     Sat 24 Jan 2026 19:09:43 +0000
Manifest next update:     Sun 25 Jan 2026 21:11:43 +0000
Files and hashes:         1: 34352e3134392e3135332e302f32342d3234203d3e20323635393139.roa (hash: kgIiY2hKU4E4tRDz3OnYpx84hUJKrY7sZF8oMbsebok=)
                          2: 3138382e39342e3139312e302f32342d3234203d3e203537303433.roa (hash: 8styg8XghivByqecwh8GqtE8kKwAeHdMu50Ggf4sImQ=)
                          3: 3138352e3136322e3137392e302f32342d3234203d3e203132383734.roa (hash: Oev3T5PHjGnxWqjgwbUH88tHYEWPx4hW7vlkYnxUh4c=)
                          4: 3138382e39342e3139312e302f32342d3234203d3e203236333833.roa (hash: KVgKufhzMCzuYPXRdj1v2nCOHhTInMxlTivgHzFkAcY=)
                          5: 39312e3233322e39392e302f32342d3234203d3e20313937353337.roa (hash: G+mgzv7tRhUfmSaRumVwyhbJ8nNvEA0s859L61Ejv18=)
                          6: 3138352e3136322e3137372e302f32342d3234203d3e2030.roa (hash: pXGL6Ylkg/a8RE2/h4mmXqSiT6qT6xF23I4QHA58rgg=)
                          7: 38392e3135302e34392e302f32342d3234203d3e2030.roa (hash: ALU/WiKi+F/SsajUvhBxkSVoNXo5oZajppJ0LbHGyXc=)
                          8: 3139342e39392e3135362e302f32342d3234203d3e203232343237.roa (hash: rIB6LZlyDY4ccd8aiBOUspQRAkgz2Qkx5QliZapGW3w=)
                          9: 3138352e33332e32362e302f32342d3234203d3e20323132363039.roa (hash: +Uou40uKN3P8LL5yuWZGR768rlaEfbKR2VYxApN71AA=)
                          10: 3138352e3132332e3135362e302f32342d3234203d3e20323133323832.roa (hash: HI1VX16qX1LTsAjuvQN0eR8x1ZQ2WlG9l18ZWZhTnXQ=)
                          11: 3139332e31372e39352e302f32342d3234203d3e20313938353834.roa (hash: MkExyo8U1yyFCZEb3tQEd4BjY7tmz/8ir10w+z/6Mqg=)
                          12: 3138352e3233342e3130302e302f32342d3234203d3e203335363631.roa (hash: 7IoW8V7sYCxYnK3GpV+L+iywqaWF/MSER2M0Aaj+ktk=)
                          13: 3138352e3132332e3135382e302f32342d3234203d3e203239383032.roa (hash: TLiGnJOFD2b+z4uS2pKNa+Gc2aYGJ4ZFIaexiybn7wo=)
                          14: 34352e3134392e3135322e302f32342d3234203d3e203235313630.roa (hash: F5qAcWfgptgKaaDsmY0iSSOR+nBZv9RYAI/0kq8SYl8=)
                          15: 39312e3233312e3132362e302f32342d3234203d3e2035363530.roa (hash: it6kdqtvQIR1fmnyxGg95/2ozlg9ybLYZncNwT8sS4M=)
                          16: 34352e3134392e3135322e302f32342d3234203d3e20323134313433.roa (hash: ZqsnAbwfQsSLAO15y/hQmlAKLget/IE+XAeE4Nr5/8I=)
                          17: 3138352e3136322e3137362e302f32342d3234203d3e203537303433.roa (hash: SVrpMsQaq2+Of1pyWLABKDNguVH/um78jdJjsg2PZXk=)
                          18: E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl (hash: QPrQxjInuh8tvnFQzOCw5tnrHPw7sl6XSN+6hxBhFp0=)
                          19: 3138352e3136322e3137382e302f32342d3234203d3e2032393134.roa (hash: s1bbd6LyvYQrZ11FtU3Xa/oNq7QSAV2j6DcxJrrwcV0=)
                          20: 34352e3134392e3135332e302f32342d3234203d3e203133333335.roa (hash: oW4WynaArlYMwXoVGq9L68dOfSrJj8wnnWqrszCEjBM=)
                          21: 34352e3134392e3135342e302f32342d3234203d3e20323132343737.roa (hash: ElvQJHHMZyjhqFtZ4eXubU55AwJuUHlB5VPhchi0zEY=)
                          22: 3138352e3132332e3135392e302f32342d3234203d3e20333936333536.roa (hash: 8ymSE6/IZ4mS3/jdg4jdCuqPIOO7MFcCnM1/lcLJutM=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 21:11:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:bf:ef:e2:ea:a3:e2:27:8c:e5:ee:0d:46:56:f7:3a:ea:63:f6:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4
        Validity
            Not Before: Jan 24 19:09:43 2026 GMT
            Not After : Jan 25 21:11:43 2026 GMT
        Subject: CN=B1F3B32C4A383F7458E3BC07E846A92613B818B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:85:4d:76:10:7c:ad:3e:06:88:7e:fe:ea:2c:
                    90:3e:ab:98:9b:16:57:07:75:5c:ad:6b:d8:7b:d5:
                    84:50:70:c4:4d:48:4c:be:60:5a:54:1d:7b:7a:78:
                    a4:b2:67:01:fc:f9:d1:f4:28:f7:e7:a3:13:6f:c6:
                    c0:5a:3e:00:52:b2:5e:5e:ca:86:b7:28:8d:8f:09:
                    0d:0e:7c:78:54:d2:4b:0e:d8:ef:51:1f:21:bc:c9:
                    33:bb:e3:38:d5:6e:0b:6c:a1:4b:31:6b:84:c4:fb:
                    4c:84:b1:4a:6f:f8:e4:a4:49:0c:21:b1:f2:40:13:
                    8b:7d:3f:95:00:32:8c:4e:e2:f0:0b:c8:fd:be:10:
                    e3:f3:ef:ca:da:79:f6:bc:e1:c3:81:9d:a2:95:c9:
                    59:7f:91:73:16:ab:b3:76:1c:0e:ab:09:ac:8c:99:
                    99:ad:1a:b7:f7:08:2e:02:27:05:0d:f6:ff:6b:1d:
                    51:97:37:9a:30:2c:83:82:c1:7f:4f:6f:d3:f2:23:
                    f2:35:99:e7:a2:a5:91:c4:fb:90:93:bc:63:fc:4e:
                    58:0f:ba:73:46:b4:f8:f9:0d:0a:ad:0c:1f:88:a4:
                    96:b9:d7:b9:1f:9b:24:f3:3c:9f:9d:10:5f:af:4b:
                    e0:58:ad:31:a8:e7:e9:39:08:40:55:36:03:85:6b:
                    01:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:F3:B3:2C:4A:38:3F:74:58:E3:BC:07:E8:46:A9:26:13:B8:18:B6
            X509v3 Authority Key Identifier:
                keyid:E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:01:1d:e6:9a:02:39:88:de:71:bf:0f:f7:8c:29:9a:5d:69:
         eb:2c:e0:20:49:69:68:34:db:b5:f3:89:ca:b8:26:d0:1f:9d:
         99:4a:96:69:c2:32:0d:02:3d:8f:fb:99:54:c3:96:e4:48:2e:
         72:30:e5:05:d9:1c:fe:37:d9:24:2b:99:a7:ca:59:6d:1f:59:
         b0:e1:b4:1b:5f:68:4b:f1:45:2e:0a:d1:a5:04:c2:5f:fc:e7:
         36:b1:1b:87:1d:df:8a:4c:2d:cf:aa:5b:f9:c6:c6:c0:e9:0b:
         3b:7a:25:44:f1:dc:44:c7:d5:34:c4:f0:d0:4c:d3:6f:09:18:
         72:86:a4:4a:45:de:de:28:8e:fb:ba:ff:f0:cf:0c:9b:82:1c:
         bb:2a:7b:b2:1b:0c:ca:d7:94:79:e6:93:f5:f8:b6:7a:73:d3:
         3f:5b:e6:84:1a:82:93:f4:06:a4:68:55:f8:20:46:8e:e8:b1:
         9c:49:82:c7:04:ae:88:f8:06:48:f9:34:88:98:5a:13:64:46:
         d8:6a:1a:2e:96:84:f4:3b:f3:48:5c:20:9d:d8:ea:80:72:31:
         2c:fd:b2:fa:64:dd:0a:2c:b7:49:fd:84:6a:7c:3f:92:8e:ec:
         2f:64:f4:fe:3d:bb:ac:37:bc:87:d2:cc:95:8b:5a:7f:26:95:
         5e:e2:de:94
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUE7/v4uqj4ieM5e4NRlb3Oupj9lcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZTFmMzUxMmY1MWRjNDJiYjllYjEyYWJjMGJiNTI5NjY4
YjJlZGVlNDAeFw0yNjAxMjQxOTA5NDNaFw0yNjAxMjUyMTExNDNaMDMxMTAvBgNV
BAMTKEIxRjNCMzJDNEEzODNGNzQ1OEUzQkMwN0U4NDZBOTI2MTNCODE4QjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCshU12EHytPgaIfv7qLJA+q5ib
FlcHdVyta9h71YRQcMRNSEy+YFpUHXt6eKSyZwH8+dH0KPfnoxNvxsBaPgBSsl5e
yoa3KI2PCQ0OfHhU0ksO2O9RHyG8yTO74zjVbgtsoUsxa4TE+0yEsUpv+OSkSQwh
sfJAE4t9P5UAMoxO4vALyP2+EOPz78raefa84cOBnaKVyVl/kXMWq7N2HA6rCayM
mZmtGrf3CC4CJwUN9v9rHVGXN5owLIOCwX9Pb9PyI/I1meeipZHE+5CTvGP8TlgP
unNGtPj5DQqtDB+IpJa517kfmyTzPJ+dEF+vS+BYrTGo5+k5CEBVNgOFawFDAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUsfOzLEo4P3RY47wH6EapJhO4GLYwHwYDVR0j
BBgwFoAU4fNRL1HcQruesSq8C7UpZosu3uQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZTNjZGM2NDgtZDIwMy00NjJhLWJkMGYtZWMxYjYwZDg3
OWE3LzAvRTFGMzUxMkY1MURDNDJCQjlFQjEyQUJDMEJCNTI5NjY4QjJFREVFNC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRmTlJMMUhjUXJ1ZXNTcThDN1VwWm9z
dTN1US5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lM2NkYzY0OC1k
MjAzLTQ2MmEtYmQwZi1lYzFiNjBkODc5YTcvMC9FMUYzNTEyRjUxREM0MkJCOUVC
MTJBQkMwQkI1Mjk2NjhCMkVERUU0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAagEd5poCOYjecb8P94wp
ml1p6yzgIElpaDTbtfOJyrgm0B+dmUqWacIyDQI9j/uZVMOW5EgucjDlBdkc/jfZ
JCuZp8pZbR9ZsOG0G19oS/FFLgrRpQTCX/znNrEbhx3fikwtz6pb+cbGwOkLO3ol
RPHcRMfVNMTw0EzTbwkYcoakSkXe3iiO+7r/8M8Mm4Icuyp7shsMyteUeeaT9fi2
enPTP1vmhBqCk/QGpGhV+CBGjuixnEmCxwSuiPgGSPk0iJhaE2RG2GoaLpaE9Dvz
SFwgndjqgHIxLP2y+mTdCiy3Sf2Eanw/ko7sL2T0/j27rDe8h9LMlYtafyaVXuLe
lA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 05:39:36 2026 by rpki-client