This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft
File:                     8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft (raw, json)
Hash identifier:          063+5xUgh/uyyZySWlgCSzhKLFYDbW/AmW+iNr31QMI=
Subject key identifier:   F0:8F:64:E9:94:2C:F6:6B:9F:CA:86:BE:13:CD:5F:40:DB:10:1D:1C
Authority key identifier: 8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
Certificate issuer:       /CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Certificate serial:       09CA16A330574B78A541FA4B695BEDCD1F85E5AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft
Manifest number:          0332
Signing time:             Thu 18 Dec 2025 04:42:31 +0000
Manifest this update:     Thu 18 Dec 2025 04:37:31 +0000
Manifest next update:     Fri 19 Dec 2025 06:38:31 +0000
Files and hashes:         1: 39312e3139302e3135372e302f32342d3234203d3e20323130383330.roa (hash: uxCs+vRLf89Iqe2Vg3VmQVaqgZcbd6t3ZZRDH3hDvaY=)
                          2: 34352e39352e38302e302f32332d3234203d3e20383334.roa (hash: KBlnTmJTjtkN7635frU4KVMJE9hjrxjj/MnRirqH9PE=)
                          3: 3231322e3130332e34362e302f32332d3234203d3e20383334.roa (hash: KXdSlEyWgzgk/M6Mp4m4zNoDfJwL8UmNysyOArD47tw=)
                          4: 8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl (hash: yDgqzJ0vDPPpOgWVBC0VSvmObyfsnQtPn8IKcfZA2o4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:ca:16:a3:30:57:4b:78:a5:41:fa:4b:69:5b:ed:cd:1f:85:e5:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
        Validity
            Not Before: Dec 18 04:37:31 2025 GMT
            Not After : Dec 19 06:38:31 2025 GMT
        Subject: CN=F08F64E9942CF66B9FCA86BE13CD5F40DB101D1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:1e:ee:26:0c:d4:f1:d3:df:d2:32:a3:7b:8b:
                    40:90:94:e8:1f:a2:8b:6b:4a:a7:da:ff:7e:bb:3c:
                    75:af:bf:0c:7f:3b:e1:8d:0f:ac:71:b0:b3:4f:f3:
                    98:63:5c:b4:92:99:de:6d:58:6e:43:b7:cb:ca:da:
                    b5:b4:9a:3b:36:14:4b:64:75:6b:9b:2a:da:13:de:
                    32:a0:40:69:7e:ef:73:33:49:ef:76:89:bd:a5:4d:
                    45:5f:a2:82:2e:dc:54:5c:2c:71:86:59:da:30:36:
                    d8:cb:bb:a7:1a:35:7f:15:59:b3:eb:30:b8:a4:c9:
                    7d:dd:e8:ce:b0:56:ec:71:c8:07:b4:ed:b1:59:a3:
                    90:ed:14:2e:1b:be:62:9f:61:e0:c8:26:eb:cc:b6:
                    5d:b9:b3:cd:24:f5:9d:bf:01:63:ed:61:b8:b6:41:
                    1d:d9:d3:00:73:7e:05:b1:02:53:08:3f:d2:a5:7b:
                    2d:3f:e4:b1:76:f7:fd:e9:52:b8:4f:4a:03:66:2c:
                    a3:85:4e:aa:f4:20:d6:26:da:26:ce:01:7e:27:d0:
                    1b:49:f2:cf:63:cc:c4:28:ab:a3:65:dd:87:f5:dc:
                    fc:ad:f2:04:ee:81:63:34:7b:b7:85:7c:70:ed:db:
                    e7:69:92:97:17:f5:a1:f5:0a:4e:d6:94:b7:9f:7f:
                    a1:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:8F:64:E9:94:2C:F6:6B:9F:CA:86:BE:13:CD:5F:40:DB:10:1D:1C
            X509v3 Authority Key Identifier:
                keyid:8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:42:88:4b:78:ec:24:55:e5:9d:25:3d:3c:5c:bc:2d:d1:e1:
         ef:7f:fa:22:e2:61:35:87:dc:10:c1:e0:a3:49:80:9a:63:a3:
         c8:f9:a5:5a:2c:a2:0c:88:6a:33:3c:5b:47:87:d7:33:49:06:
         1d:ea:36:63:14:d4:ba:fa:3f:10:b7:62:cc:b5:a0:a9:03:c0:
         98:dd:43:71:16:e9:5f:17:fe:a1:8c:02:fb:f3:98:2f:0f:66:
         80:9a:d8:1d:da:e9:55:97:c2:4d:5f:42:56:ec:3b:aa:6a:6f:
         c5:71:4b:ba:ee:fd:ff:ca:23:84:38:74:c1:88:4c:16:6d:cd:
         0a:1e:c4:9b:29:fc:7b:b7:6f:48:ec:4e:c2:0a:73:3d:06:66:
         7f:19:6a:83:dd:6b:81:56:96:e7:0b:5f:a6:1b:14:d1:fb:5e:
         25:45:31:e5:19:99:cf:a4:15:57:89:51:b3:fb:d8:f4:89:93:
         a4:12:90:54:a7:f6:8e:53:42:ed:1d:30:45:d8:9a:72:85:c3:
         22:5a:57:5f:5b:1d:bd:59:3f:27:35:37:a2:11:b6:59:51:9d:
         08:a0:a9:02:83:99:05:5e:40:9e:df:f1:4c:ba:f2:71:e3:8e:
         9a:3b:af:80:8d:28:45:1e:06:97:d2:5d:c9:d9:bb:67:32:3f:
         1b:1e:cf:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----