This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
File:                     1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft (raw, json)
Hash identifier:          nIAfjMiMFm2omrwikxg6jyhVopQ2XZCeT/qHxn0A+L8=
Subject key identifier:   C1:F6:B8:C1:DA:AB:01:DC:F5:58:A9:00:CD:50:12:9B:D3:5E:D5:B1
Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77
Certificate issuer:       /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
Certificate serial:       68BFFC96F79A60DC271DD937790B288F0E12DB3B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
Manifest number:          0328
Signing time:             Sun 21 Dec 2025 07:46:19 +0000
Manifest this update:     Sun 21 Dec 2025 07:41:19 +0000
Manifest next update:     Mon 22 Dec 2025 08:45:19 +0000
Files and hashes:         1: 326130663a383563313a3766323a3a2f34382d3438203d3e20323135323432.roa (hash: sEiHLlrRoeeUa4AJCYCoXBnr24SESsEbTviJLVfMEys=)
                          2: 326130663a383563313a3766343a3a2f34382d3438203d3e20323135323432.roa (hash: Sqqkf1ajVYDwVw2KSKZnr/tFVnDaWUIPFwaxuN/hzVk=)
                          3: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl (hash: X1+y67puR4AofBNirgiW/+C4NHGsXiiQdgd+2aFyi/A=)
                          4: 326130663a383563313a3766313a3a2f34382d3438203d3e20323035343633.roa (hash: QtxzWf2JsAYGrlxsDmcE2oi7tthkDrQ3wvK+rgUOQxg=)
                          5: 326130663a383563313a3766303a3a2f34382d3438203d3e20323033353131.roa (hash: F6VJOi3vW8ih7gU8rCzD7A7gIu39IHtVGsLlId1ILkM=)
                          6: 326130663a383563313a3766613a3a2f34382d3438203d3e20323135323432.roa (hash: M4zqLtdUHSAbU4GatESAUlsOQgWU2zpPTfy3/5JmOsg=)
                          7: 326130663a383563313a3766373a3a2f34382d3438203d3e20323135323432.roa (hash: polxJUQuuGvo82QFQvRtgLcGzpMrITqZaH9JMW5PByU=)
                          8: 326130663a383563313a3766623a3a2f34382d3438203d3e20323135323432.roa (hash: 6RxmKyitzJl4tEe1yv4vU5lxANHGsLOEl2k3HSP2ddo=)
                          9: 326130663a383563313a3766383a3a2f34382d3438203d3e20323135323432.roa (hash: 7RQ0gXCWkNwXJyLVMAjMT4ifOZKJ140AG/jnIia+kz4=)
                          10: 326130663a383563313a3766353a3a2f34382d3438203d3e20323135373631.roa (hash: byQYxxoRiZMkalXd6RzudJTQa4Ua3fqFXKXTWNIB1fs=)
                          11: 326130663a383563313a3766393a3a2f34382d3438203d3e20323135323432.roa (hash: ZhIUpj5tVPDcWiQ+3SY61ZE9RRhM2AJ7zchpU/cGNbk=)
                          12: 326130663a383563313a3766333a3a2f34382d3438203d3e20323035343633.roa (hash: YxuKH5bQA8YI1bwf7mCp5od3hfadKIetOc5KHPtspsc=)
                          13: 326130663a383563313a3361323a3a2f34382d3438203d3e20323135323432.roa (hash: Gz7cU4OgmvLm8iR5sxlLJ8umD/eM2550DADKq1NdbVY=)
                          14: 326130663a383563313a3766363a3a2f34382d3438203d3e20323135323432.roa (hash: sqekG79xztP1stI8964y8O+ILcqcxMBKS5vM2N9Yeq4=)
                          15: 326130663a383563313a3730313a3a2f34382d3438203d3e20323033353131.roa (hash: Tk4tJu5bvTD5dR9NoM2pYvWxSXCc2/x84lQAlZZqzIs=)
                          16: 326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa (hash: LIVxcxtvoeze2S46mPqGSXeLOCk0JK2W2QKOiQjUdZQ=)
                          17: 326130663a383563313a3766313a3a2f34382d3438203d3e20323135313234.roa (hash: gq6me54MBqnqosS7iLksDmqAJs8yyfHwMXcZfgP1ijQ=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 04:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:bf:fc:96:f7:9a:60:dc:27:1d:d9:37:79:0b:28:8f:0e:12:db:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
        Validity
            Not Before: Dec 21 07:41:19 2025 GMT
            Not After : Dec 22 08:45:19 2025 GMT
        Subject: CN=C1F6B8C1DAAB01DCF558A900CD50129BD35ED5B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:7f:ab:3e:b5:86:09:e7:2d:af:19:42:6d:da:
                    b9:10:36:c2:07:6c:93:a0:ce:cf:2e:e1:f0:42:a5:
                    55:06:4c:d2:0f:8c:45:3e:29:b1:76:26:b7:90:a8:
                    2f:7c:07:1c:b9:c0:d4:49:b5:8e:c1:59:3f:6d:ce:
                    ca:32:ac:70:70:b8:b0:4c:e7:f4:63:63:04:e3:b0:
                    8a:01:49:67:f3:6c:03:e0:cc:a1:e4:e7:e8:ac:03:
                    d0:61:d6:92:34:cf:d1:eb:60:89:22:c7:14:39:a8:
                    e7:7e:9a:4a:96:58:91:14:4e:ce:cd:3d:14:c5:2c:
                    3f:87:4b:bd:67:15:40:fa:07:cc:89:3b:34:69:f1:
                    c7:3f:dc:58:31:f9:67:a3:7f:4d:1c:6c:99:e0:ed:
                    7b:f8:50:6b:bc:57:81:6d:68:9f:ed:69:02:77:dc:
                    cc:d5:af:44:4b:f9:8a:70:bb:bd:57:b1:b5:dd:13:
                    f4:4e:f6:e2:6d:84:03:4b:21:29:f5:72:14:90:19:
                    c4:a4:42:5d:20:00:87:d7:94:56:11:e0:2e:b1:00:
                    ff:14:b1:e5:59:a9:a2:92:9e:79:c1:6f:61:c4:d8:
                    6d:99:00:fd:05:69:2b:a5:9c:34:82:ad:d2:6b:32:
                    86:a2:a8:c6:ba:34:70:72:6c:65:66:65:a1:6e:44:
                    b9:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:F6:B8:C1:DA:AB:01:DC:F5:58:A9:00:CD:50:12:9B:D3:5E:D5:B1
            X509v3 Authority Key Identifier:
                keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:7d:aa:8d:ac:61:41:84:d1:76:8e:f2:93:4c:59:14:87:34:
         e8:43:dc:c6:46:ff:48:33:59:81:bd:ee:4b:22:14:86:9f:a6:
         16:66:fe:26:f2:52:15:18:6f:2d:f3:e1:a6:a7:0b:4f:11:43:
         b3:0a:f7:6e:8e:d1:ca:a3:ce:58:b9:b1:be:f9:2e:c1:7a:a1:
         47:a4:25:13:b0:9a:90:66:58:18:f9:6d:8a:62:fc:a9:85:99:
         e2:8e:ef:2c:65:c6:06:2a:28:3d:83:66:32:59:ea:c6:61:77:
         52:0a:c8:2d:61:33:9b:03:3e:5c:9d:9e:98:c2:54:40:25:3d:
         e2:65:f0:d1:85:e9:8f:84:5e:70:80:9d:29:f6:d6:7a:6c:19:
         68:a2:27:21:49:7f:67:96:ad:86:c6:0e:d7:aa:fc:3c:99:44:
         3f:13:d8:6d:84:1b:d2:e6:de:9e:8e:47:74:49:db:76:0b:93:
         b6:52:0a:eb:57:0d:bd:01:4c:d6:52:92:c5:35:45:f7:1e:bb:
         81:69:aa:61:47:73:2f:bb:b6:97:d0:e0:bd:27:a2:17:ce:b8:
         5f:89:6a:60:77:d4:19:98:2c:7b:6b:6d:94:ff:12:8b:f5:5a:
         ed:6e:4b:68:b9:82:46:14:9a:a3:22:64:d1:42:d8:31:13:44:
         99:3f:33:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 13:57:21 2025 by rpki-client