This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/1/C1317314602AA094CAB6580F04A72AE45EA86C7C.mft
File:                     C1317314602AA094CAB6580F04A72AE45EA86C7C.mft (raw, json)
Hash identifier:          DB441E7Lr23zmgjz0O8kpXSXZ46fsw0uoGSHgsblat4=
Subject key identifier:   C8:41:3A:B4:AB:1D:55:EE:75:D5:9D:19:07:D4:19:51:7E:9B:65:A8
Authority key identifier: C1:31:73:14:60:2A:A0:94:CA:B6:58:0F:04:A7:2A:E4:5E:A8:6C:7C
Certificate issuer:       /CN=C1317314602AA094CAB6580F04A72AE45EA86C7C
Certificate serial:       15D001C022BB591BA31E9483E00A917C89F278AF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/C1317314602AA094CAB6580F04A72AE45EA86C7C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/1/C1317314602AA094CAB6580F04A72AE45EA86C7C.mft
Manifest number:          1D
Signing time:             Sat 17 Jan 2026 14:45:49 +0000
Manifest this update:     Sat 17 Jan 2026 14:40:49 +0000
Manifest next update:     Sun 18 Jan 2026 16:12:49 +0000
Files and hashes:         1: 326130663a316363363a623131303a3a2f34342d3438203d3e20313534313835.roa (hash: HiD4J128Va7Q1AByzTLpog3O2WDr6yNZZYUXXuIMAwo=)
                          2: 326130663a316363363a626162303a3a2f34342d3438203d3e20323034353335.roa (hash: J1f5z5UOw1u32UeegZK5T+63sV5ygAUmE2ntrWegqgM=)
                          3: 326130663a316363363a623130303a3a2f34342d3438203d3e20323034323131.roa (hash: gG4OLYz2W+FDfcpf0Ne6iYS4jvh1IpEoTqvP0Xsj/PE=)
                          4: C1317314602AA094CAB6580F04A72AE45EA86C7C.crl (hash: tolC2ja3G1Olj843TGIPm6NVitjv6kiOeCraOkDrR2Y=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:d0:01:c0:22:bb:59:1b:a3:1e:94:83:e0:0a:91:7c:89:f2:78:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1317314602AA094CAB6580F04A72AE45EA86C7C
        Validity
            Not Before: Jan 17 14:40:49 2026 GMT
            Not After : Jan 18 16:12:49 2026 GMT
        Subject: CN=C8413AB4AB1D55EE75D59D1907D419517E9B65A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c8:01:d0:01:ed:6c:f4:1a:29:f5:b6:ea:bc:
                    a8:de:e7:b7:b1:d1:26:83:ee:30:ec:11:84:04:96:
                    7d:78:3f:9d:2f:b0:b5:51:86:d2:03:58:97:ad:12:
                    26:ca:04:84:8a:dc:d7:34:36:9c:4e:1f:6a:c0:cc:
                    85:b2:81:c2:4c:29:e0:7e:4b:b6:61:d8:4f:68:82:
                    64:87:6d:68:5d:db:91:a4:a7:cc:c8:f8:f3:ba:f0:
                    07:49:57:66:84:4d:08:2e:37:b1:69:bc:83:2f:10:
                    7f:93:fc:20:7c:fe:2e:ad:97:d2:0d:92:30:0e:9c:
                    14:2e:12:47:75:e5:14:f4:5b:dc:5c:a6:ae:7d:c3:
                    6f:2c:1d:0b:b7:dc:9a:f6:26:fb:4b:7e:c8:e7:a4:
                    27:fb:0a:cf:33:8c:70:d1:0d:16:16:50:4f:f9:5b:
                    43:50:0f:f4:e5:e5:f7:77:94:f0:b4:36:59:d2:ed:
                    a5:38:04:38:d3:51:46:52:6a:e7:1f:cf:5f:ba:39:
                    1b:67:52:eb:99:cf:44:b2:b5:4e:95:3c:b0:5a:bc:
                    fa:83:22:45:80:73:27:36:e6:69:40:7e:d0:7f:14:
                    9b:f2:40:29:bc:39:5d:f2:21:53:a2:be:8e:d2:a7:
                    62:ec:64:91:60:04:cd:21:2f:1f:f8:5a:dc:05:88:
                    91:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:41:3A:B4:AB:1D:55:EE:75:D5:9D:19:07:D4:19:51:7E:9B:65:A8
            X509v3 Authority Key Identifier:
                keyid:C1:31:73:14:60:2A:A0:94:CA:B6:58:0F:04:A7:2A:E4:5E:A8:6C:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/1/C1317314602AA094CAB6580F04A72AE45EA86C7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/C1317314602AA094CAB6580F04A72AE45EA86C7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/092d16f2-9b46-4a11-ac59-42b3ddee1106/1/C1317314602AA094CAB6580F04A72AE45EA86C7C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:a2:9e:6a:43:94:37:3b:9b:15:2a:cf:13:19:f8:1e:7f:55:
         34:bd:10:66:32:94:17:e3:d2:04:2e:b2:b0:b7:44:6f:cb:47:
         f1:54:40:39:e0:41:c1:1d:ea:11:7c:da:f9:2f:e5:46:51:78:
         e0:57:9a:5c:b9:20:9d:54:87:e9:6e:aa:89:d5:6b:6b:ce:7c:
         4a:38:53:ff:3b:8b:e3:98:9c:8e:52:94:d6:b6:f1:be:bd:a2:
         90:d1:a2:05:4b:74:6f:6c:7a:b5:3c:8c:40:78:02:5e:1b:5a:
         9c:21:84:7e:ae:f2:0a:d8:60:10:18:c0:89:28:63:1c:35:22:
         c1:9a:ff:ab:3a:a9:04:b8:34:88:5c:dd:fe:a1:d1:f8:ec:36:
         f7:85:c8:93:88:dd:58:b9:17:4b:e0:d1:68:5a:5c:8b:ba:b2:
         39:63:a2:9b:6a:90:04:72:de:dc:8f:e7:40:a6:1f:30:6f:dc:
         74:a7:b8:58:a4:48:41:90:dc:dc:4c:de:19:91:d7:f1:a7:49:
         88:fa:38:76:21:29:ca:b0:03:bd:f7:e0:b6:89:92:0f:b1:ea:
         1d:d5:09:e6:d3:4e:6c:7d:9b:d8:23:5e:26:c3:64:a2:f5:77:
         72:8c:01:31:9c:2f:02:9c:82:b8:a2:8d:9e:73:e8:f6:7b:72:
         80:ad:c5:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----