This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/02a9e8a5-c8f4-47b3-80c9-f1e02a8aaa89/0/FA9B54C77884D87579E661822CB46BEDD39FA5D3.mft
File:                     FA9B54C77884D87579E661822CB46BEDD39FA5D3.mft (raw, json)
Hash identifier:          nGoMcEQr1JJZrlT6jFP1GTQh9eWfJx+GG6u7ccC+zuQ=
Subject key identifier:   60:24:40:FE:E4:1B:06:64:1E:60:A0:89:8C:2A:91:B1:01:7B:3C:6E
Authority key identifier: FA:9B:54:C7:78:84:D8:75:79:E6:61:82:2C:B4:6B:ED:D3:9F:A5:D3
Certificate issuer:       /CN=FA9B54C77884D87579E661822CB46BEDD39FA5D3
Certificate serial:       4143C22FE593475A9FA4CAB0686791E3D9569F4F
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/FA9B54C77884D87579E661822CB46BEDD39FA5D3.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/02a9e8a5-c8f4-47b3-80c9-f1e02a8aaa89/0/FA9B54C77884D87579E661822CB46BEDD39FA5D3.mft
Manifest number:          44
Signing time:             Sat 17 Jan 2026 16:11:02 +0000
Manifest this update:     Sat 17 Jan 2026 16:06:02 +0000
Manifest next update:     Sun 18 Jan 2026 19:13:02 +0000
Files and hashes:         1: FA9B54C77884D87579E661822CB46BEDD39FA5D3.crl (hash: JFf8JwLIqndZhGg1thvDdw3ZLKfRxAGWfywneFk2dNs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:43:c2:2f:e5:93:47:5a:9f:a4:ca:b0:68:67:91:e3:d9:56:9f:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA9B54C77884D87579E661822CB46BEDD39FA5D3
        Validity
            Not Before: Jan 17 16:06:02 2026 GMT
            Not After : Jan 18 19:13:02 2026 GMT
        Subject: CN=602440FEE41B06641E60A0898C2A91B1017B3C6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:6c:6a:83:7a:e6:49:72:9f:a1:17:91:44:4a:
                    13:84:87:53:1c:e0:14:11:83:52:b7:64:72:a7:ae:
                    6a:7d:68:9d:40:82:97:ba:bf:82:39:40:cd:77:ef:
                    52:d2:51:2f:f9:3a:32:f8:0b:61:a4:57:ce:f8:ee:
                    5b:8b:bb:43:ee:27:be:71:ae:13:92:c4:a0:34:1a:
                    93:82:39:10:4d:c0:90:e0:ff:d4:cd:39:d0:fa:02:
                    fd:ab:be:6e:0d:f2:29:e0:c2:c3:69:11:20:b5:ab:
                    aa:15:24:10:bb:d8:34:34:59:a0:22:78:dd:b1:ee:
                    79:cf:fa:63:f4:1c:66:bc:b8:4f:c5:db:f3:aa:5d:
                    1a:14:4f:23:da:b1:db:57:9f:23:c7:0d:63:9b:c9:
                    20:04:9a:c6:af:52:47:64:08:2d:1e:28:92:cd:e3:
                    fe:e2:76:ca:aa:6a:d5:d5:32:e5:7a:15:69:5c:1e:
                    b4:d5:31:ef:71:40:a5:4a:0b:42:ae:bc:36:c8:a3:
                    80:61:2a:63:cb:30:ab:1a:8a:b7:8d:79:3b:d2:c9:
                    23:11:63:ca:df:45:b8:21:41:ba:1b:c5:33:16:0b:
                    c5:b2:ee:5a:c1:b7:45:38:ab:81:43:60:b1:23:9d:
                    39:db:25:0f:d9:ac:59:b0:51:d4:cc:d3:b1:8b:41:
                    34:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:24:40:FE:E4:1B:06:64:1E:60:A0:89:8C:2A:91:B1:01:7B:3C:6E
            X509v3 Authority Key Identifier:
                keyid:FA:9B:54:C7:78:84:D8:75:79:E6:61:82:2C:B4:6B:ED:D3:9F:A5:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/02a9e8a5-c8f4-47b3-80c9-f1e02a8aaa89/0/FA9B54C77884D87579E661822CB46BEDD39FA5D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/FA9B54C77884D87579E661822CB46BEDD39FA5D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/02a9e8a5-c8f4-47b3-80c9-f1e02a8aaa89/0/FA9B54C77884D87579E661822CB46BEDD39FA5D3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:34:77:f6:66:25:a3:af:28:fd:f2:ca:2f:b3:9e:de:13:04:
         1e:22:4b:84:a6:d7:bd:1f:70:45:a3:54:6d:fb:fc:91:fb:b7:
         d3:04:21:ef:fa:99:34:1b:83:35:d9:4e:cb:43:91:02:80:32:
         71:e4:80:f0:e0:9e:3d:0b:3e:c3:75:3c:b6:00:51:21:88:d2:
         36:2f:4a:9e:8d:e5:8d:1b:96:f3:bd:f7:4e:8a:67:2b:65:ee:
         66:c2:98:5b:4a:36:6f:fa:07:df:b6:3b:b5:05:0c:ce:93:0d:
         66:bb:e2:72:76:21:ba:25:56:4b:8f:77:74:83:e7:33:80:9d:
         be:c8:14:10:63:57:0f:d3:a4:99:18:cf:1b:c8:cb:df:52:6e:
         62:da:f8:80:6d:f1:2a:3b:7d:b5:7f:0a:52:c9:f9:8a:ff:88:
         28:38:3f:95:ec:14:cb:ae:28:64:2f:73:d6:c1:b3:92:7d:8c:
         c7:8b:ef:b1:09:38:ba:2c:75:fb:25:f8:1c:bf:e0:1e:47:ac:
         a3:08:c3:9f:34:9f:a9:b6:68:76:f5:6b:99:31:2c:72:43:19:
         d2:56:c6:2d:26:eb:cb:0a:c5:fd:08:14:f0:d9:22:7e:d6:5b:
         66:1c:5a:4e:c8:cb:ab:a6:d4:d1:ec:b9:ef:e5:f7:44:a9:ab:
         6f:71:a8:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----