This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/2/AEEAEEFF1C1C26B1A008C22C843AB45DCAD157ED.mft
File:                     AEEAEEFF1C1C26B1A008C22C843AB45DCAD157ED.mft (raw, json)
Hash identifier:          zIQJwXplPslU85xbThiSq9N7WzWmVlHcCEbTAC+ZzKE=
Subject key identifier:   95:10:68:D6:C7:C7:7F:5D:3D:48:9E:74:B7:C9:3B:64:F3:E1:05:51
Authority key identifier: AE:EA:EE:FF:1C:1C:26:B1:A0:08:C2:2C:84:3A:B4:5D:CA:D1:57:ED
Certificate issuer:       /CN=AEEAEEFF1C1C26B1A008C22C843AB45DCAD157ED
Certificate serial:       22F98704FD1982BAC0CAC7009986B7232DE6A5A7
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/AEEAEEFF1C1C26B1A008C22C843AB45DCAD157ED.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/2/AEEAEEFF1C1C26B1A008C22C843AB45DCAD157ED.mft
Manifest number:          24
Signing time:             Sat 17 Jan 2026 08:03:09 +0000
Manifest this update:     Sat 17 Jan 2026 07:58:09 +0000
Manifest next update:     Sun 18 Jan 2026 08:42:09 +0000
Files and hashes:         1: 326130663a316363353a313032303a3a2f34342d3438203d3e20323136323939.roa (hash: AlcZIOoe3y3b/6BxVA/7iIDuAUyEtg7VTVemCl/0GJ4=)
                          2: 326130663a316363353a313030303a3a2f34382d3438203d3e20323136323939.roa (hash: to/XNiV+31bHlWV85twiWB79n/oQY5V6FHMoothOY/o=)
                          3: 326130663a316363353a313031303a3a2f34342d3438203d3e20323136323939.roa (hash: MXahPf9Lj2zVOENVBE4q+FEfvHiUAMJ2dGoOScL1QgA=)
                          4: AEEAEEFF1C1C26B1A008C22C843AB45DCAD157ED.crl (hash: 7JZTpzcuLL1T5Ado/U3yJHgmcb+OkmIGQ18mu5W/5iY=)
                          5: 326130663a316363353a326631303a3a2f34342d3438203d3e20323031333836.roa (hash: pBdcJZvRMeh4xUlwHoVjZ2H6JoMj65McebqGPnPWn5I=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:f9:87:04:fd:19:82:ba:c0:ca:c7:00:99:86:b7:23:2d:e6:a5:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEEAEEFF1C1C26B1A008C22C843AB45DCAD157ED
        Validity
            Not Before: Jan 17 07:58:09 2026 GMT
            Not After : Jan 18 08:42:09 2026 GMT
        Subject: CN=951068D6C7C77F5D3D489E74B7C93B64F3E10551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8d:1a:ee:84:b4:d4:c9:53:bb:3f:58:f6:f2:
                    c5:f1:5f:06:1f:a6:95:57:b0:12:20:f6:65:06:13:
                    52:24:60:b9:4c:f2:56:34:7f:c4:79:2b:6a:18:d8:
                    6a:e2:f3:ce:50:ad:44:07:8f:8d:82:53:01:59:ae:
                    1d:15:14:63:6a:a9:f7:5f:2b:01:2d:6c:9e:7f:31:
                    c4:2a:65:45:1c:83:f7:ad:12:c2:f1:fd:d2:10:62:
                    28:b0:91:e2:73:9a:0b:db:b3:e4:9c:39:3a:0d:b5:
                    19:22:ba:1b:0f:86:f6:ce:1c:5a:64:69:59:16:b6:
                    8d:99:9f:eb:bb:2a:11:94:9e:ef:9d:fb:ba:7b:c7:
                    c5:d4:89:be:e4:ea:67:b4:95:db:1c:2f:b1:32:2d:
                    9e:44:23:1a:6c:15:13:7c:7f:ad:2c:6c:38:2c:e9:
                    55:af:91:d6:b3:5a:85:2d:1d:1d:c8:5a:31:e8:59:
                    99:5a:e7:cc:bc:16:5b:d1:60:71:11:53:25:9c:ae:
                    69:b8:9a:36:37:8b:51:84:f5:7b:cb:7d:ee:b2:eb:
                    ea:bd:75:c7:7a:23:c6:83:e6:f0:1c:99:64:7a:fb:
                    9b:a2:8e:2a:5e:14:d8:4f:dc:dd:c2:5b:8b:24:a9:
                    c6:8f:ce:36:b3:b8:ea:d9:12:87:45:8b:d4:6a:f6:
                    cd:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:10:68:D6:C7:C7:7F:5D:3D:48:9E:74:B7:C9:3B:64:F3:E1:05:51
            X509v3 Authority Key Identifier:
                keyid:AE:EA:EE:FF:1C:1C:26:B1:A0:08:C2:2C:84:3A:B4:5D:CA:D1:57:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/2/AEEAEEFF1C1C26B1A008C22C843AB45DCAD157ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/AEEAEEFF1C1C26B1A008C22C843AB45DCAD157ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/52b84156-9597-44b4-bd24-65de2c355efc/2/AEEAEEFF1C1C26B1A008C22C843AB45DCAD157ED.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:8b:9d:c5:d1:be:cc:7e:57:39:16:25:53:4f:d1:c1:a9:e5:
         5d:27:60:94:75:1b:90:2e:ca:84:fa:e1:76:b8:d4:31:9c:76:
         a0:b2:aa:bc:f0:fb:dc:52:b1:2b:bd:87:da:23:34:70:af:a2:
         3a:a9:23:79:95:f7:41:5f:ff:7a:3b:01:be:d8:0c:c2:f7:8b:
         cd:34:c5:f4:49:96:50:c6:87:54:31:cf:04:74:cc:13:2e:c6:
         71:46:8a:de:02:d6:b0:a3:f1:dd:12:b5:ef:08:09:08:78:3b:
         db:da:0c:0b:86:b3:9e:82:70:91:46:ed:0e:60:bd:13:0c:2b:
         c7:39:f7:36:6b:c1:2c:7b:ce:fa:3d:dc:72:a1:91:68:13:8f:
         a6:45:ef:c5:34:15:6d:3b:97:19:9a:2b:0a:12:51:79:c8:e2:
         c4:d8:67:0c:97:2a:55:5c:26:6a:67:73:47:a8:80:13:83:ba:
         6d:b4:bd:a6:a9:1e:2e:24:fa:14:72:64:8d:51:7e:fe:66:39:
         b4:77:a8:dc:09:92:d3:f9:65:e3:be:05:48:94:7b:2f:3f:f6:
         ed:5a:97:0a:99:4c:7b:2f:29:45:95:57:09:1d:c1:40:f6:bf:
         9a:74:5c:a7:b0:bd:4f:c6:77:52:a4:4e:6b:bf:17:bf:85:ae:
         cd:50:f8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----