This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.mft
File:                     879280A7D9E6DDDDCCB29E9A77819D5CE3823185.mft (raw, json)
Hash identifier:          wD9G65FYceG+faBk7/2f9RSXTcUB8bHPDj5bUuBB1As=
Subject key identifier:   B7:0B:9B:E1:2A:EB:50:4F:BE:61:2C:12:B4:80:6B:35:CD:BF:D4:50
Authority key identifier: 87:92:80:A7:D9:E6:DD:DD:CC:B2:9E:9A:77:81:9D:5C:E3:82:31:85
Certificate issuer:       /CN=879280A7D9E6DDDDCCB29E9A77819D5CE3823185
Certificate serial:       549276F14563A006E3EC8CC2AF978E9BDB3F820B
Authority info access:    rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.mft
Manifest number:          18
Signing time:             Sun 25 Jan 2026 04:25:30 +0000
Manifest this update:     Sun 25 Jan 2026 04:20:30 +0000
Manifest next update:     Mon 26 Jan 2026 05:25:30 +0000
Files and hashes:         1: 326130623a346530373a6330303a3a2f33382d3438203d3e20323135373630.roa (hash: YPrQ7rMdq3JvlF7MZ9xUnQFGrFDCIgYUVgYATMFPJvs=)
                          2: 326130623a346530373a6330313a3a2f34382d3438203d3e20333936393832.roa (hash: amuSE4i9t9DaOJdYKo1/xaDKOQ7B4vsylmXS8WFFM8U=)
                          3: 326130623a346530373a6330303a3a2f33382d3438203d3e203134363138.roa (hash: iEYO5puyDd3JtuHWApK94siOE8CIhNdp34ccmJr583Q=)
                          4: 326130623a346530373a6330303a3a2f33382d3338203d3e203331383938.roa (hash: NzwfYz1RcrTw4DN+eHbiSUaQcCM+wfLgTJxkGWBbKjU=)
                          5: 879280A7D9E6DDDDCCB29E9A77819D5CE3823185.crl (hash: qafcmu7dTojkh74S7nyEY2b1W6cJZZHx+I94UWBwH2E=)
                          6: 326130623a346530373a6330303a3a2f33382d3338203d3e20333936393832.roa (hash: khFQaDJH0Dxp6+y0T5GtiIZzJKeSYsTI8bMAtlaM5bY=)
                          7: 326130623a346530373a6330303a3a2f33382d3438203d3e203136353039.roa (hash: pYwWKSR7kRM0KTnORj3mN0CwUdnav79KeLH8+zaHrio=)
                          8: 326130623a346530373a6330313a3a2f34382d3438203d3e20323135373630.roa (hash: VZ809t+f84r83LSHeKOdVeXGx5vzv/VPIXYrF+SljkQ=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.mft
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.cer
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 01:58:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:92:76:f1:45:63:a0:06:e3:ec:8c:c2:af:97:8e:9b:db:3f:82:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=879280A7D9E6DDDDCCB29E9A77819D5CE3823185
        Validity
            Not Before: Jan 25 04:20:30 2026 GMT
            Not After : Jan 26 05:25:30 2026 GMT
        Subject: CN=B70B9BE12AEB504FBE612C12B4806B35CDBFD450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e3:f4:45:83:11:45:17:bc:1d:f7:7b:bd:29:
                    9d:76:d6:b3:55:11:bc:d1:95:ea:a1:a3:3c:d9:09:
                    0d:1f:48:6f:04:c5:98:e0:54:ad:69:f7:d4:65:f7:
                    1b:76:e4:81:26:b1:9f:f5:7d:8e:15:21:f4:9a:b6:
                    0b:f7:ac:94:df:43:28:18:5e:86:df:7a:66:3c:ff:
                    3f:a5:3b:fc:a3:1c:a9:14:c9:33:df:b8:8c:1c:6e:
                    4d:23:4b:de:8a:20:7c:2d:a7:a8:58:45:79:70:f3:
                    ea:ab:e3:3f:64:4f:da:a5:60:c0:46:0b:fd:8a:54:
                    d3:78:5d:5c:e1:ce:f0:d2:ee:50:2b:d7:93:af:36:
                    30:fc:90:b3:db:60:28:ec:14:59:16:cc:85:62:f5:
                    9d:80:31:d4:28:37:00:96:86:4e:b6:b1:cb:ca:6a:
                    cf:6a:68:97:68:58:53:34:af:83:24:39:8a:09:23:
                    54:91:4c:83:d3:5d:32:b6:b4:ba:21:8a:37:a8:27:
                    1c:b9:12:db:ad:0d:5c:00:91:12:52:b8:6d:b0:8c:
                    28:80:63:2f:32:99:2c:16:0a:81:90:dd:77:17:14:
                    43:bf:25:72:8c:4c:f1:d3:9b:74:53:33:05:a9:e4:
                    1b:b4:5d:57:0b:c2:3c:5a:86:22:07:c0:eb:b3:e3:
                    e7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:0B:9B:E1:2A:EB:50:4F:BE:61:2C:12:B4:80:6B:35:CD:BF:D4:50
            X509v3 Authority Key Identifier:
                keyid:87:92:80:A7:D9:E6:DD:DD:CC:B2:9E:9A:77:81:9D:5C:E3:82:31:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7d92558-258e-4b44-ad16-8c1022c46d03/1/879280A7D9E6DDDDCCB29E9A77819D5CE3823185.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:cf:1f:d4:cc:53:43:ad:34:35:b8:03:b4:a6:0a:b5:63:2b:
         0d:1e:28:4c:3b:b4:47:33:f5:63:35:0e:06:e0:b7:9d:1b:2b:
         48:f7:f0:97:97:8f:6c:86:3b:79:0c:52:90:41:0c:f5:af:a7:
         f4:95:ec:53:8a:05:1a:21:6a:1b:79:ae:c1:07:be:25:f5:d1:
         2e:06:42:d2:f3:68:27:21:e3:0c:36:5c:d6:d6:4e:b4:c8:f9:
         4b:4e:5e:2f:34:8a:e8:4c:27:20:84:07:24:45:b9:3b:1c:99:
         09:f3:73:70:6a:0e:7c:3e:e4:b9:fd:0b:10:47:d0:ba:da:7b:
         12:30:51:01:a7:a7:2b:ce:0a:fe:53:82:ea:e6:a7:d3:f6:ef:
         fc:b9:89:36:a1:36:67:9b:64:b5:fb:3b:20:6a:df:77:69:7e:
         7a:38:d8:cf:b5:77:93:c7:41:61:e9:05:41:14:a2:70:8e:31:
         16:06:2e:3a:89:1f:dd:a1:9f:1d:91:5b:94:be:b0:de:bf:4e:
         1f:45:af:a4:6d:75:6c:e1:f8:99:f2:bb:03:e3:1e:ed:7f:1b:
         88:0d:19:d4:8a:93:c7:5b:0e:55:3d:5a:59:78:e0:b1:08:17:
         52:f1:53:cd:b3:58:28:e2:af:52:1f:0f:dd:f2:22:1c:1c:8d:
         82:2f:be:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:02:56 2026 by rpki-client