This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/1/B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.mft
File:                     B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.mft (raw, json)
Hash identifier:          PzdlYbs2yV+r3x9c3ZM6nDvaJPeeS4LQuHs/Zf9MLu0=
Subject key identifier:   8A:72:38:C3:BF:8A:C7:5C:82:8E:4E:30:96:59:CB:F5:66:19:5F:58
Authority key identifier: B7:D2:E8:6F:D3:DA:15:BD:13:4C:A2:15:5C:3A:9F:DA:71:8B:37:49
Certificate issuer:       /CN=B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749
Certificate serial:       9E446E3727272A67B414C885F9F56F640FD793
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/1/B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.mft
Manifest number:          B1
Signing time:             Sat 30 Aug 2025 09:28:15 +0000
Manifest this update:     Sat 30 Aug 2025 09:23:15 +0000
Manifest next update:     Sun 31 Aug 2025 11:12:15 +0000
Files and hashes:         1: B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.crl (hash: ZqcqeXl0S9W3lDefc8oetQ1JrFXkJnftLsm97qDotl0=)
                          2: 326131343a373538303a6330303a3a2f34302d3438203d3e20313531313934.roa (hash: IcJMioVXTHIBW9dWRoa7QtI8OxLl1FTCXI6aJvTPxUg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            9e:44:6e:37:27:27:2a:67:b4:14:c8:85:f9:f5:6f:64:0f:d7:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749
        Validity
            Not Before: Aug 30 09:23:15 2025 GMT
            Not After : Aug 31 11:12:15 2025 GMT
        Subject: CN=8A7238C3BF8AC75C828E4E309659CBF566195F58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d8:8c:49:ae:4c:b3:ba:85:8b:95:74:01:0d:
                    f7:02:9b:d4:37:a3:33:93:b4:b8:db:b2:44:01:c7:
                    46:39:d9:2f:b9:b7:a9:e7:b9:d1:b7:1b:d0:1f:00:
                    6a:79:b8:65:47:59:50:0f:db:6c:6b:c8:f6:e4:6a:
                    12:7e:01:c2:ce:10:d3:26:f2:a8:54:61:6c:c7:35:
                    f1:9f:85:0a:61:3a:b7:ab:52:e0:e3:67:67:8d:4a:
                    03:a3:3e:36:89:e3:ce:30:5f:ac:39:13:59:0d:f4:
                    1c:8b:fe:18:99:3f:41:e1:8e:e0:b5:95:f2:e4:fd:
                    e7:69:45:2b:f2:93:c6:39:ab:f5:79:d1:4b:27:bc:
                    8f:25:7c:73:79:13:f4:fd:e8:65:e2:42:5a:f9:89:
                    b3:44:03:3f:4e:2f:9f:73:f7:72:eb:67:c3:90:0c:
                    1a:98:b6:aa:5f:aa:eb:eb:ab:98:f8:4c:6b:1f:3b:
                    37:b8:c1:c1:1c:94:23:eb:68:31:bb:de:9f:12:f4:
                    d0:1e:62:45:e8:32:97:1a:89:27:e8:30:99:90:09:
                    b4:69:df:36:8f:57:4a:9e:6b:d4:9d:6a:8e:09:27:
                    cb:8a:95:e6:55:70:91:21:89:00:a8:d2:8d:f4:42:
                    a3:e4:c0:6d:6d:63:c1:61:ce:80:e4:4b:4a:76:ee:
                    c9:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:72:38:C3:BF:8A:C7:5C:82:8E:4E:30:96:59:CB:F5:66:19:5F:58
            X509v3 Authority Key Identifier:
                keyid:B7:D2:E8:6F:D3:DA:15:BD:13:4C:A2:15:5C:3A:9F:DA:71:8B:37:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/1/B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/1/B7D2E86FD3DA15BD134CA2155C3A9FDA718B3749.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:96:e5:bf:15:da:81:c7:0f:e2:09:0b:d5:d8:c5:ed:58:ef:
         10:c3:43:60:bd:36:80:4a:19:b3:ac:26:67:46:9c:d0:5f:c1:
         22:8b:50:d2:1f:01:06:9f:11:ac:31:a8:dc:6c:c7:8a:8c:58:
         59:0a:17:73:6b:8c:fc:6e:8f:51:ae:36:ef:02:8d:2f:35:07:
         2a:f0:85:c7:09:77:cb:04:7e:fa:ea:d3:d4:25:bb:fe:67:bc:
         b1:65:ef:69:d7:ba:e2:34:94:91:88:2f:6e:c7:e9:bf:59:c7:
         7b:4f:14:e1:02:04:3b:26:65:4a:09:a3:22:c9:a8:a3:e5:92:
         03:f0:b4:83:2d:9f:88:19:58:5c:71:88:b0:5b:69:47:3b:f0:
         bf:f2:2e:68:59:0c:38:c7:d6:e3:59:d9:f1:d4:8b:25:ca:f4:
         cb:6b:1a:4e:c9:c5:7e:22:fc:f2:1e:34:d7:87:09:44:17:10:
         e8:07:b7:93:d5:22:18:56:5b:40:16:44:0c:63:ee:e2:d1:44:
         51:c8:c7:da:f9:b6:1b:6f:4f:79:e5:85:66:06:98:b7:10:73:
         65:29:7e:5b:88:6c:22:ff:98:5b:b6:05:06:bd:c2:f7:f1:67:
         1c:4b:ea:f3:96:98:f3:bf:e0:2a:c6:f8:13:3b:24:2a:4f:80:
         f9:f4:e7:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 17:50:18 2025 by rpki-client