This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft
File:                     C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft (raw, json)
Hash identifier:          7dIf0eCtVVI7XWlc3lCH+cyKh1Ta9Mxm8Sju5vb4Tf4=
Subject key identifier:   AC:A4:0C:05:3F:45:CC:99:16:62:13:D3:31:B8:1B:D9:24:BE:7D:85
Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
Certificate issuer:       /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Certificate serial:       402E1BA6033B7A1121FF4748B7ACAA93EC1D86C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft
Manifest number:          0268
Signing time:             Sun 25 Jan 2026 11:45:24 +0000
Manifest this update:     Sun 25 Jan 2026 11:40:24 +0000
Manifest next update:     Mon 26 Jan 2026 14:45:24 +0000
Files and hashes:         1: 33312e32322e3130372e302f32342d3234203d3e20313337353137.roa (hash: zucU5bamNfYRw/esvivyzaXHMAl8N0xQ+Q3coI+3JvA=)
                          2: 33312e32322e3130362e302f32342d3234203d3e20323133353032.roa (hash: gMhOzO7mxft8aHHqMyhMEvoyI4x3AcVBhgkY3Yc2Ryc=)
                          3: 34332e3233302e38352e302f32342d3234203d3e20323132363639.roa (hash: vgObUGnSREXD+ZGKD48TBidzsDD4bb41p0YUFbXX2ak=)
                          4: 3130332e34392e3133312e302f32342d3234203d3e20313338333634.roa (hash: PCBT1S5SsQNvPExnIxpGrOJnC4Zxkw3ilANCZAM8stA=)
                          5: 33312e32322e3130392e302f32342d3234203d3e203432383331.roa (hash: uRUTbbdZ8AYVGvK3CKTe3KYxaaV1m1bGyvfgh/rstUI=)
                          6: 3130332e34392e3133312e302f32342d3234203d3e20313534343038.roa (hash: uNydLTQQX3HfUttLHpAQztbzmsLo2FwUjxcM/0z5ejA=)
                          7: 3130332e34392e3133312e302f32342d3234203d3e20323133373131.roa (hash: 0KQImRtVxQSlo2IkiWEm4Ta1ecdBVyx0gErMixeusbs=)
                          8: 3130332e34392e3132382e302f32342d3234203d3e20313534303439.roa (hash: RP7fF4ljaFnG1QBw6wHJTYmQiSzsC+UtOPXQULgrH/c=)
                          9: 34332e3233302e38342e302f32342d3234203d3e203633313939.roa (hash: mN7VhJyGfS7zh6TYiLbpihJCInKpBaTwITIrbKnSr78=)
                          10: 33312e32322e3130382e302f32342d3234203d3e203432383331.roa (hash: 8yRIzyX7kSL5wlZucsqrW2Cnq9iyHa3XujSoVf8z1CY=)
                          11: 33312e32322e3131302e302f32342d3234203d3e20323038393035.roa (hash: GDspqRij6MiNPh7udQ2b5uDlkV2tbpp6r9PQ/alfk6o=)
                          12: 33312e32322e3130342e302f32342d3234203d3e20313938303230.roa (hash: 2c/Q6mL57WPxOvD74dnFYEhVwjt0QpjY04YbOcxeQJ8=)
                          13: 34332e3233302e38362e302f32332d3234203d3e2033343931.roa (hash: BqbUmbythNNYP4WqssroNY2sOPvoyuRgXIRAVuIytpA=)
                          14: 3130332e34392e3133312e302f32342d3234203d3e20313437323631.roa (hash: gI3QMk1nxnVJ3ar9nDADeDjafrF5rxSYgoW75rlLkBk=)
                          15: C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl (hash: veYt7YNzjt/Iprxt6id1rRODjBWIQeZADpHY1GoqqoM=)
                          16: 34332e3233302e38342e302f32342d3234203d3e203235313938.roa (hash: D5rxpe/mz9cZbwkoouLs3Io8a9VjYwAhmSHGosd1BJQ=)
                          17: 3130332e34392e3133302e302f32342d3234203d3e20383334.roa (hash: BeVzuWN/0Qvsq9GYvTx4ZuaACwAjnMKfoJ2e9z9vYwU=)
                          18: 33312e32322e3130352e302f32342d3234203d3e20323135303236.roa (hash: CEnX1eNlwK6zTbdiivvYtvATObcHBs1ojc6GAmrJxmA=)
                          19: 3130332e34392e3132392e302f32342d3234203d3e20313533373836.roa (hash: 8ciOgQf/5f2kkiTl0Q7pGFYfq76YJlE+KlbE9/JeEuM=)
                          20: 33312e32322e3131312e302f32342d3234203d3e20323135333535.roa (hash: brok2XUOzC0OAQs7efh1lP/TIOrHW70pJohRfs3tgEM=)
                          21: 34332e3233302e38352e302f32342d3234203d3e20323131343430.roa (hash: hoZQSGqkvoyh+Fwe28UicpO6RAJD80P7rklT/Di/mQU=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:2e:1b:a6:03:3b:7a:11:21:ff:47:48:b7:ac:aa:93:ec:1d:86:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
        Validity
            Not Before: Jan 25 11:40:24 2026 GMT
            Not After : Jan 26 14:45:24 2026 GMT
        Subject: CN=ACA40C053F45CC99166213D331B81BD924BE7D85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f5:8a:b3:8e:3f:93:de:60:3a:97:60:7f:b4:
                    e8:d6:43:e4:1f:fb:ed:66:7c:5c:4d:30:fd:99:6e:
                    30:4d:25:dc:36:b7:4f:1b:06:5a:4d:ef:87:91:26:
                    3d:18:04:ef:48:9f:09:ba:c3:0c:ba:9f:c6:33:fb:
                    b8:e4:36:b6:7f:a7:4c:f3:1e:c9:b5:65:df:9b:88:
                    16:cf:3c:7a:4b:5b:10:44:a7:a3:77:73:a9:90:56:
                    3c:68:29:21:3d:a1:37:29:27:40:09:49:47:b9:42:
                    68:22:7b:ed:5e:f6:74:ba:60:ad:2d:39:2f:ec:1b:
                    f4:13:9c:37:57:20:d9:ce:42:9c:a5:0b:a2:b2:62:
                    d9:9c:52:ee:88:9a:27:e7:f9:73:85:86:0b:d0:2d:
                    78:f9:65:27:68:da:f8:65:48:9c:3b:fb:ed:ee:b5:
                    be:8c:95:c7:e9:17:68:2a:51:31:c8:fe:52:68:aa:
                    12:d4:46:4e:bf:11:7e:2a:7e:aa:2c:a8:7e:a5:e4:
                    7f:19:2f:71:13:5d:c1:60:15:f7:d8:4b:2c:63:ee:
                    cc:7d:8a:aa:db:78:2f:31:ce:a7:16:ed:1c:2f:d2:
                    c7:56:40:db:fd:0c:07:1c:de:b3:2c:28:be:51:65:
                    2e:e5:2c:b9:5c:d2:9a:09:ff:b5:2d:a4:1a:0d:19:
                    3c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:A4:0C:05:3F:45:CC:99:16:62:13:D3:31:B8:1B:D9:24:BE:7D:85
            X509v3 Authority Key Identifier:
                keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:6c:a4:53:a1:c6:eb:d8:fa:6f:4b:df:60:6f:2d:a0:c9:f7:
         94:68:25:c6:f6:f8:5f:f9:74:76:dc:a6:fa:12:0c:bf:75:54:
         17:6c:04:72:da:ae:eb:91:ea:43:4a:d0:83:94:6e:2c:7a:cf:
         da:30:6a:0a:63:ad:23:2a:84:ee:05:0e:ba:47:a4:c4:92:59:
         95:72:c1:9d:ff:fc:a3:c7:e1:d6:e4:7d:7f:c8:06:fd:3f:f4:
         c5:8a:f6:09:01:69:c5:31:1b:ee:e7:39:9f:40:bc:bf:b6:a2:
         cc:96:43:2d:93:34:78:cb:a3:6a:a4:c1:01:81:b4:01:e5:48:
         1e:a9:83:76:d0:b3:a0:9a:49:dd:cd:09:5d:a6:39:09:a2:aa:
         9e:af:c3:3b:5c:03:22:4c:c4:f0:be:ef:ab:3e:f1:68:a0:8b:
         a8:5d:7d:99:43:0e:5c:eb:17:49:66:dc:e6:c8:85:90:57:6f:
         14:4e:72:00:2a:f8:20:e2:0d:e0:25:69:7e:56:f6:d5:b9:ec:
         7a:5f:df:63:b7:43:7d:c3:8b:b2:49:a4:8d:74:14:f4:df:ce:
         b8:0d:b7:d6:84:b9:9e:ac:46:f8:fd:91:98:64:89:4f:62:aa:
         cf:b2:2d:46:eb:2d:ab:1c:4a:f9:d2:f7:28:59:a9:b1:9e:b9:
         48:98:19:af
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUQC4bpgM7ehEh/0dIt6yqk+wdhsUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzc3MGY0MzM1OGI5N2JhMGFhOWJkYzYyYmJkNTExZTkw
YWVhYjI5ZDAeFw0yNjAxMjUxMTQwMjRaFw0yNjAxMjYxNDQ1MjRaMDMxMTAvBgNV
BAMTKEFDQTQwQzA1M0Y0NUNDOTkxNjYyMTNEMzMxQjgxQkQ5MjRCRTdEODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+9Yqzjj+T3mA6l2B/tOjWQ+Qf
++1mfFxNMP2ZbjBNJdw2t08bBlpN74eRJj0YBO9Inwm6wwy6n8Yz+7jkNrZ/p0zz
Hsm1Zd+biBbPPHpLWxBEp6N3c6mQVjxoKSE9oTcpJ0AJSUe5Qmgie+1e9nS6YK0t
OS/sG/QTnDdXINnOQpylC6KyYtmcUu6Imifn+XOFhgvQLXj5ZSdo2vhlSJw7++3u
tb6MlcfpF2gqUTHI/lJoqhLURk6/EX4qfqosqH6l5H8ZL3ETXcFgFffYSyxj7sx9
iqrbeC8xzqcW7Rwv0sdWQNv9DAcc3rMsKL5RZS7lLLlc0poJ/7UtpBoNGTxxAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUrKQMBT9FzJkWYhPTMbgb2SS+fYUwHwYDVR0j
BBgwFoAUx3D0M1i5e6Cqm9xiu9UR6Qrqsp0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWFmZWJkYjQtNmYwYi00MDRiLTk4ZTItYTI2YmU5NGE2
NjIwLzAvQzc3MEY0MzM1OEI5N0JBMEFBOUJEQzYyQkJENTExRTkwQUVBQjI5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3gzRDBNMWk1ZTZDcW05eGl1OVVSNlFy
cXNwMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lYWZlYmRiNC02
ZjBiLTQwNGItOThlMi1hMjZiZTk0YTY2MjAvMC9DNzcwRjQzMzU4Qjk3QkEwQUE5
QkRDNjJCQkQ1MTFFOTBBRUFCMjlELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXGykU6HG69j6b0vfYG8t
oMn3lGglxvb4X/l0dtym+hIMv3VUF2wEctqu65HqQ0rQg5RuLHrP2jBqCmOtIyqE
7gUOukekxJJZlXLBnf/8o8fh1uR9f8gG/T/0xYr2CQFpxTEb7uc5n0C8v7aizJZD
LZM0eMujaqTBAYG0AeVIHqmDdtCzoJpJ3c0JXaY5CaKqnq/DO1wDIkzE8L7vqz7x
aKCLqF19mUMOXOsXSWbc5siFkFdvFE5yACr4IOIN4CVpflb21bnsel/fY7dDfcOL
skmkjXQU9N/OuA231oS5nqxG+P2RmGSJT2Kqz7ItRustqxxK+dL3KFmpsZ65SJgZ
rw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:32:15 2026 by rpki-client