This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/2/7657DDAA0EC784E5517D769FF91F5C35434A9408.mft
File:                     7657DDAA0EC784E5517D769FF91F5C35434A9408.mft (raw, json)
Hash identifier:          /XBQt/2du2DS+h0Of5Mm4AHq6E7rVV5c4Bv3LgWc4LU=
Subject key identifier:   BA:E1:D2:78:39:83:0E:3C:F2:89:8E:E5:6D:74:AE:CE:3C:AA:24:F0
Authority key identifier: 76:57:DD:AA:0E:C7:84:E5:51:7D:76:9F:F9:1F:5C:35:43:4A:94:08
Certificate issuer:       /CN=7657DDAA0EC784E5517D769FF91F5C35434A9408
Certificate serial:       76D19F871113D1602BEF4FDBD0FC1E8938B8A912
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/7657DDAA0EC784E5517D769FF91F5C35434A9408.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/2/7657DDAA0EC784E5517D769FF91F5C35434A9408.mft
Manifest number:          19
Signing time:             Sat 17 Jan 2026 03:39:13 +0000
Manifest this update:     Sat 17 Jan 2026 03:34:13 +0000
Manifest next update:     Sun 18 Jan 2026 06:05:13 +0000
Files and hashes:         1: 326130663a316363353a326430313a3a2f34382d3438203d3e20323134393535.roa (hash: dkoJT5raOa4KuZRrr6+6zluQh8ya5UfNDP5wUsDhGEc=)
                          2: 326130663a316363353a326430323a3a2f34382d3438203d3e20323134393535.roa (hash: FN+4cFdttDrIetz9Bql2VXZN1xEcsdaGWfeYP0n78ck=)
                          3: 7657DDAA0EC784E5517D769FF91F5C35434A9408.crl (hash: XUCueoDy1Rv566rvMlYqbbiISs5uqY9QUizju58jtMA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:d1:9f:87:11:13:d1:60:2b:ef:4f:db:d0:fc:1e:89:38:b8:a9:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7657DDAA0EC784E5517D769FF91F5C35434A9408
        Validity
            Not Before: Jan 17 03:34:13 2026 GMT
            Not After : Jan 18 06:05:13 2026 GMT
        Subject: CN=BAE1D27839830E3CF2898EE56D74AECE3CAA24F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d7:d9:7c:f9:5b:22:c0:12:fc:42:67:b2:5f:
                    7c:6e:e4:c5:ea:7e:4a:99:37:54:b8:68:a4:20:30:
                    b3:86:28:05:fe:76:78:2b:bb:5c:9c:71:fa:27:03:
                    68:68:e3:03:50:8c:c6:77:cd:16:81:5c:a0:da:b5:
                    4d:df:46:7e:1d:8b:65:95:f3:8e:0c:b5:3b:8a:d4:
                    5b:dd:bc:bc:93:c4:b0:b0:27:8e:32:13:71:e5:31:
                    0b:9b:10:44:43:d0:e2:31:25:88:65:03:f1:07:29:
                    e6:18:88:b5:09:50:9d:4c:0b:23:de:a6:ce:c3:52:
                    2b:c7:7a:83:84:e3:1c:f7:cf:11:3e:8a:1c:dd:ae:
                    4a:78:40:8e:59:c4:e1:5e:c6:cc:c3:bc:12:63:3a:
                    a8:93:91:47:d8:da:b7:66:2f:6d:1b:30:b9:65:d4:
                    df:eb:30:24:78:6a:f1:91:8b:f3:6a:0b:c7:50:80:
                    a4:f9:ef:dc:29:11:d0:84:d7:ae:d1:bf:30:bb:61:
                    7b:bb:40:85:a5:44:84:c9:f7:43:2d:8a:8f:11:9f:
                    56:b1:46:98:4d:8d:e2:4a:04:cb:92:81:86:b5:aa:
                    15:4a:b7:f7:d6:72:83:5e:69:71:46:5a:3c:69:63:
                    71:31:7e:93:0f:a2:bf:ba:c8:21:0f:30:87:c2:c5:
                    66:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:E1:D2:78:39:83:0E:3C:F2:89:8E:E5:6D:74:AE:CE:3C:AA:24:F0
            X509v3 Authority Key Identifier:
                keyid:76:57:DD:AA:0E:C7:84:E5:51:7D:76:9F:F9:1F:5C:35:43:4A:94:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/2/7657DDAA0EC784E5517D769FF91F5C35434A9408.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/7657DDAA0EC784E5517D769FF91F5C35434A9408.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3f99e66d-4c7b-4130-91d5-4fbd84357792/2/7657DDAA0EC784E5517D769FF91F5C35434A9408.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:1d:72:2a:f9:29:57:d9:db:01:f7:fe:d9:2a:4f:ce:54:f9:
         88:8a:57:09:b5:67:d4:f1:63:77:02:ab:f0:70:91:00:78:3e:
         2a:21:4a:4d:f3:c8:12:fd:3b:93:8a:06:2f:a1:c3:f0:87:a9:
         c2:f1:07:9f:86:68:c5:98:a2:14:c1:1c:31:4a:24:5e:72:37:
         95:a3:fe:6b:9f:7d:01:1e:97:b2:07:d3:ba:8c:68:30:35:de:
         84:a3:8d:42:b0:5b:96:a3:bf:de:1f:be:4b:f3:50:36:b6:d5:
         23:c3:37:c2:ed:3d:87:3a:54:04:95:0f:7e:5a:7b:25:b3:bb:
         46:df:fb:c0:05:3a:46:92:80:17:9c:17:bc:a4:fc:86:ed:ba:
         55:1d:06:97:87:91:09:7b:22:cb:99:37:0e:c0:93:07:a7:69:
         32:09:6e:8a:19:77:25:29:71:aa:a3:3c:3e:9b:eb:08:7a:0e:
         dc:8a:3d:c8:10:b1:66:44:41:4a:c5:98:14:0e:93:0f:bc:16:
         52:3d:19:bc:7a:b8:78:a6:11:3e:fc:e6:bd:46:df:36:5d:54:
         de:15:6e:4b:4f:e1:ec:ac:b2:a9:ba:4d:22:6b:bf:43:6e:02:
         fc:e1:0b:07:2d:16:76:ab:47:7d:e5:32:c2:13:e0:d9:75:8d:
         3d:fc:56:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----