This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.mft
File:                     D70A91D89E34C7A20009B1E160FB6C627063630C.mft (raw, json)
Hash identifier:          6G8v+zJDsNAVvPxr4thZg6h/hEmCUxbWU7/0UUlH52o=
Subject key identifier:   F8:E2:55:6F:A2:2E:2A:15:AA:24:EF:AD:D4:FD:DF:4C:77:2E:84:42
Authority key identifier: D7:0A:91:D8:9E:34:C7:A2:00:09:B1:E1:60:FB:6C:62:70:63:63:0C
Certificate issuer:       /CN=ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d
Certificate serial:       57C0AB57974B1AE0CE9BE8B631A9D113FBEFF09B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.mft
Manifest number:          029A
Signing time:             Thu 06 Nov 2025 00:05:23 +0000
Manifest this update:     Thu 06 Nov 2025 00:00:23 +0000
Manifest next update:     Fri 07 Nov 2025 03:23:23 +0000
Files and hashes:         1: 32332e3138332e3133362e302f32342d3234203d3e2030.roa (hash: swtuTdCu9qwtIFReZr0cVz+AYUZ4/a/i2nv3LPMJAJ8=)
                          2: 323630323a663838323a3a2f33362d3438203d3e20343031323138.roa (hash: Dizjuv2g3xNyGUDZ8X1oRA6GQacDJJP6dGAQzPkf04o=)
                          3: D70A91D89E34C7A20009B1E160FB6C627063630C.crl (hash: FeUXygJ6P3zOh+7KtkwQL2RHGKMTxXRMr3WttLPEQSI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:c0:ab:57:97:4b:1a:e0:ce:9b:e8:b6:31:a9:d1:13:fb:ef:f0:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d
        Validity
            Not Before: Nov  6 00:00:23 2025 GMT
            Not After : Nov  7 03:23:23 2025 GMT
        Subject: CN=F8E2556FA22E2A15AA24EFADD4FDDF4C772E8442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:af:b3:95:df:81:cb:34:40:2f:18:80:8e:77:
                    e6:a6:fd:0c:c7:80:a7:ee:36:cd:a2:07:b8:52:24:
                    06:da:01:a1:d0:2d:9c:a1:6c:ce:25:65:41:80:d6:
                    06:9b:fe:20:9a:ec:4a:98:7e:18:be:de:8b:7c:7a:
                    10:d6:a6:52:00:50:77:07:12:9c:4a:75:5a:2e:47:
                    84:43:ce:ed:2c:1c:7b:f8:84:52:ce:82:0a:4c:92:
                    be:f2:23:80:ab:49:98:67:55:ac:07:2d:c9:63:8a:
                    a8:c0:72:75:2a:d8:4e:aa:1a:ca:85:60:ca:d8:83:
                    1e:05:4e:4e:58:92:87:39:3c:cf:91:45:57:ae:e0:
                    eb:02:8e:35:5e:59:14:62:5d:4d:67:8d:7e:2e:9a:
                    14:f0:70:d5:05:68:8e:4c:5c:b1:73:11:ea:33:f8:
                    07:6d:ec:9e:58:d6:27:e6:23:b2:c2:a7:5d:e8:ec:
                    be:b1:cb:97:b2:d4:41:da:79:f5:4d:41:90:a5:36:
                    07:f2:46:99:e4:25:e9:bb:32:25:ad:3c:51:d2:ce:
                    e9:9f:dd:e7:1f:da:6b:2e:b9:37:91:52:ae:87:ce:
                    2d:0f:72:75:78:3f:f5:26:f0:a4:ac:bc:38:e3:3e:
                    96:ca:35:7d:0d:54:a3:af:7a:f1:c5:17:9a:d8:f5:
                    d4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:E2:55:6F:A2:2E:2A:15:AA:24:EF:AD:D4:FD:DF:4C:77:2E:84:42
            X509v3 Authority Key Identifier:
                keyid:D7:0A:91:D8:9E:34:C7:A2:00:09:B1:E1:60:FB:6C:62:70:63:63:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:c6:ce:c1:ab:78:8d:62:02:e8:f5:0f:9c:2f:5f:92:6d:8e:
         29:c2:e5:13:96:6f:b6:78:9f:e0:c4:1e:a3:f5:cf:01:c9:45:
         af:26:bb:98:9f:00:2a:04:0b:0d:fb:88:46:84:1f:76:dc:02:
         90:c2:50:e6:2a:fe:21:a9:cf:62:b2:39:04:47:b6:be:17:b9:
         7a:c4:ec:f6:9c:02:65:8a:bb:32:23:7b:87:e9:7d:db:de:94:
         96:4c:b9:9d:3d:3b:25:15:92:d9:56:0d:b8:99:f4:bb:18:00:
         78:d8:b1:92:dc:2d:64:58:af:e1:56:7e:ce:43:d6:58:c9:4c:
         53:86:f2:c0:db:53:4a:c1:87:91:ea:be:03:b4:13:44:ff:9b:
         d4:be:53:21:bf:37:cd:bc:43:e7:03:ff:52:db:16:98:fd:0a:
         bb:08:e2:94:bf:ea:9e:56:61:88:ae:3c:14:e6:b1:4a:be:36:
         33:fd:e9:32:1a:a9:41:f3:34:f1:ad:6c:03:1d:65:00:06:47:
         31:fe:70:2b:f2:73:a8:58:71:47:fc:0a:2a:82:19:6f:d4:81:
         f4:f4:f7:cf:0b:7d:3f:e0:55:ce:68:33:9d:83:12:74:09:38:
         d4:3d:6a:07:98:e8:74:7f:7b:2a:c0:12:04:c2:e3:0b:5f:cc:
         df:98:26:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----