This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/2/514B8293389DEFDD9849D045DD45ECCF576747FA.mft
File:                     514B8293389DEFDD9849D045DD45ECCF576747FA.mft (raw, json)
Hash identifier:          GxUUHq5D3Em5FopwbbyVWbL8+0E5m9hDk4YwxuxxSTE=
Subject key identifier:   B8:ED:14:DD:A4:6D:78:EC:89:9C:01:E3:9B:91:EF:FE:E8:66:7A:C4
Authority key identifier: 51:4B:82:93:38:9D:EF:DD:98:49:D0:45:DD:45:EC:CF:57:67:47:FA
Certificate issuer:       /CN=514B8293389DEFDD9849D045DD45ECCF576747FA
Certificate serial:       28EA89279C43D9A7D57492A00D0C1CAFC4CFC949
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/514B8293389DEFDD9849D045DD45ECCF576747FA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/2/514B8293389DEFDD9849D045DD45ECCF576747FA.mft
Manifest number:          36
Signing time:             Sat 17 Jan 2026 05:12:41 +0000
Manifest this update:     Sat 17 Jan 2026 05:07:41 +0000
Manifest next update:     Sun 18 Jan 2026 06:55:41 +0000
Files and hashes:         1: 514B8293389DEFDD9849D045DD45ECCF576747FA.crl (hash: yCYznoTgFI2UpSfuyIFgakJjyX/ATEUOcDZ4eJogYjA=)
                          2: 326130663a316363353a313630303a3a2f34302d3438203d3e20313939333130.roa (hash: oRud3MAKc35BhPQ/dECbRR4jBQu+j+D0nvvbv3UFhqw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:ea:89:27:9c:43:d9:a7:d5:74:92:a0:0d:0c:1c:af:c4:cf:c9:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=514B8293389DEFDD9849D045DD45ECCF576747FA
        Validity
            Not Before: Jan 17 05:07:41 2026 GMT
            Not After : Jan 18 06:55:41 2026 GMT
        Subject: CN=B8ED14DDA46D78EC899C01E39B91EFFEE8667AC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6e:3e:4d:64:04:2b:c2:a9:3a:ea:f5:6f:04:
                    20:29:ca:d8:fd:68:c6:1c:e1:f3:82:bd:12:74:eb:
                    45:8d:18:cc:28:d0:ae:46:dc:80:a9:8e:2e:0d:47:
                    58:58:60:2c:d4:91:ec:93:93:0f:ef:a6:51:17:ef:
                    c2:62:20:cd:d4:98:55:58:f3:e4:4e:e4:62:cf:7e:
                    fd:42:8b:06:87:66:72:d4:33:77:6d:4b:8a:35:4e:
                    62:9b:67:9a:93:fc:8e:ee:78:49:5f:fa:6d:34:0c:
                    80:90:28:53:af:bd:8f:b6:b0:f0:44:36:8b:2a:8f:
                    42:6c:82:ba:8d:0e:19:a7:ef:c6:20:3d:4e:6c:21:
                    93:cb:22:69:df:96:61:57:91:ab:7f:33:36:da:7f:
                    24:0b:1e:43:f1:28:37:03:8e:2f:fe:3e:fd:51:10:
                    43:60:7e:2f:10:38:14:14:fc:b6:55:73:4f:c7:f2:
                    c3:c8:93:c4:1d:86:4a:48:27:74:23:94:d1:b0:e2:
                    41:a6:6b:23:19:39:f0:9d:a8:84:dc:c4:80:98:a7:
                    49:80:8a:17:1c:6a:94:fa:67:63:39:8d:a4:f3:e3:
                    d0:36:b5:09:e2:fa:12:66:a5:5c:62:cc:81:a1:93:
                    58:93:76:00:20:e3:48:34:1a:b5:0d:b5:75:9e:98:
                    61:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:ED:14:DD:A4:6D:78:EC:89:9C:01:E3:9B:91:EF:FE:E8:66:7A:C4
            X509v3 Authority Key Identifier:
                keyid:51:4B:82:93:38:9D:EF:DD:98:49:D0:45:DD:45:EC:CF:57:67:47:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/2/514B8293389DEFDD9849D045DD45ECCF576747FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/514B8293389DEFDD9849D045DD45ECCF576747FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0157647c-91d6-4a04-8a91-d15385d1fab2/2/514B8293389DEFDD9849D045DD45ECCF576747FA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:e6:b3:01:97:b9:09:8e:4a:27:7a:9e:f9:46:7b:f8:6a:34:
         8d:f5:1c:62:fd:f7:ec:61:02:80:35:df:2c:74:f1:9a:a6:bf:
         74:c1:e2:7e:b6:30:d3:fb:b5:33:9c:20:b4:7e:52:35:83:cf:
         d3:d3:b0:86:c9:7d:ee:b4:3b:0a:e4:69:0c:0f:73:e3:ab:ff:
         57:90:ca:a5:3c:c5:3b:cd:85:a1:bb:81:70:c7:36:18:93:0a:
         ef:a9:7d:e3:20:76:f9:8c:6f:51:8e:a1:81:0c:8b:de:76:2d:
         80:75:7a:90:49:88:7f:92:57:6a:a4:9a:0e:bb:a0:c2:65:27:
         c7:d3:b0:92:53:31:4d:fd:8a:31:25:19:f8:01:f7:28:f3:b7:
         8c:3b:a4:3c:d2:1c:ec:13:f1:48:c9:a9:2e:59:bc:66:1f:c2:
         a0:c9:ff:fa:8e:cd:6e:0e:a0:5d:bc:d2:09:83:7c:70:04:6f:
         63:9a:4a:13:d1:83:bc:4f:cd:00:29:2b:b9:5b:bb:99:e2:5e:
         cf:7b:5d:3f:a0:10:82:71:8a:fa:3b:c3:1a:1c:6d:19:59:6c:
         db:7b:70:da:9f:d1:d1:93:4a:39:e0:a9:5a:8e:62:b1:bf:11:
         0e:9c:45:73:94:74:7a:68:68:fc:ec:90:34:ce:b7:83:6e:7a:
         49:95:ac:0c
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUKOqJJ5xD2afVdJKgDQwcr8TPyUkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTE0QjgyOTMzODlERUZERDk4NDlEMDQ1REQ0NUVDQ0Y1
NzY3NDdGQTAeFw0yNjAxMTcwNTA3NDFaFw0yNjAxMTgwNjU1NDFaMDMxMTAvBgNV
BAMTKEI4RUQxNEREQTQ2RDc4RUM4OTlDMDFFMzlCOTFFRkZFRTg2NjdBQzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCybj5NZAQrwqk66vVvBCApytj9
aMYc4fOCvRJ060WNGMwo0K5G3ICpji4NR1hYYCzUkeyTkw/vplEX78JiIM3UmFVY
8+RO5GLPfv1CiwaHZnLUM3dtS4o1TmKbZ5qT/I7ueElf+m00DICQKFOvvY+2sPBE
Nosqj0JsgrqNDhmn78YgPU5sIZPLImnflmFXkat/MzbafyQLHkPxKDcDji/+Pv1R
EENgfi8QOBQU/LZVc0/H8sPIk8QdhkpIJ3QjlNGw4kGmayMZOfCdqITcxICYp0mA
ihccapT6Z2M5jaTz49A2tQni+hJmpVxizIGhk1iTdgAg40g0GrUNtXWemGGjAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUuO0U3aRteOyJnAHjm5Hv/uhmesQwHwYDVR0j
BBgwFoAUUUuCkzid792YSdBF3UXsz1dnR/owDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDE1NzY0N2MtOTFkNi00YTA0LThhOTEtZDE1Mzg1ZDFm
YWIyLzIvNTE0QjgyOTMzODlERUZERDk4NDlEMDQ1REQ0NUVDQ0Y1NzY3NDdGQS5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMjZlYjEzNi00ZmU1LTRl
NjEtYTRkOC1mMzQ1ZjUyYmMyNWQvMC81MTRCODI5MzM4OURFRkREOTg0OUQwNDVE
RDQ1RUNDRjU3Njc0N0ZBLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzAxNTc2NDdjLTkxZDYtNGEwNC04YTkxLWQxNTM4NWQxZmFiMi8yLzUxNEI4Mjkz
Mzg5REVGREQ5ODQ5RDA0NURENDVFQ0NGNTc2NzQ3RkEubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCj5rMB
l7kJjkonep75Rnv4ajSN9Rxi/ffsYQKANd8sdPGapr90weJ+tjDT+7UznCC0flI1
g8/T07CGyX3utDsK5GkMD3Pjq/9XkMqlPMU7zYWhu4FwxzYYkwrvqX3jIHb5jG9R
jqGBDIvedi2AdXqQSYh/kldqpJoOu6DCZSfH07CSUzFN/YoxJRn4Afco87eMO6Q8
0hzsE/FIyakuWbxmH8Kgyf/6js1uDqBdvNIJg3xwBG9jmkoT0YO8T80AKSu5W7uZ
4l7Pe10/oBCCcYr6O8MaHG0ZWWzbe3Dan9HRk0o54KlajmKxvxEOnEVzlHR6aGj8
7JA0zreDbnpJlawM
-----END CERTIFICATE-----