This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/0/61D9F4B7CF8D860603082E07FDCA08518E16AAFB.mft
File:                     61D9F4B7CF8D860603082E07FDCA08518E16AAFB.mft (raw, json)
Hash identifier:          8uwlsnBV642ZXzXITODNqf1BqdhVCncFF/KY9XUSLqk=
Subject key identifier:   3F:2F:69:E6:43:5E:AB:A2:F7:0C:BB:4C:84:D9:60:43:BA:82:C5:5B
Authority key identifier: 61:D9:F4:B7:CF:8D:86:06:03:08:2E:07:FD:CA:08:51:8E:16:AA:FB
Certificate issuer:       /CN=61D9F4B7CF8D860603082E07FDCA08518E16AAFB
Certificate serial:       56F368B02EA56CD6C86CB9A40961384C3D0BD4BA
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/61D9F4B7CF8D860603082E07FDCA08518E16AAFB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/0/61D9F4B7CF8D860603082E07FDCA08518E16AAFB.mft
Manifest number:          33
Signing time:             Sat 17 Jan 2026 01:02:14 +0000
Manifest this update:     Sat 17 Jan 2026 00:57:14 +0000
Manifest next update:     Sun 18 Jan 2026 03:58:14 +0000
Files and hashes:         1: 326130663a316363353a6330303a3a2f34342d3434203d3e20313337393038.roa (hash: ATZc214+3GX48p6REnIm7Qjen5IkiQYJugGYiQlSRpg=)
                          2: 326130663a316363353a6330303a3a2f34302d3430203d3e20323038373534.roa (hash: Q5Z/wqUBwWhM8mRyojjN6NpV/xV/IzhUzgKoHX5P1HU=)
                          3: 61D9F4B7CF8D860603082E07FDCA08518E16AAFB.crl (hash: HleHj63eWGwAoe727MvHvlsOgGsKOYrhyDf9XQhXY0k=)
                          4: 326130663a316363353a6330303a3a2f34342d3434203d3e20323038373534.roa (hash: mUKzjFEmFF1ij8QbpLMbpWWOoy5ByjLtax5R3U4hZ9o=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:f3:68:b0:2e:a5:6c:d6:c8:6c:b9:a4:09:61:38:4c:3d:0b:d4:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61D9F4B7CF8D860603082E07FDCA08518E16AAFB
        Validity
            Not Before: Jan 17 00:57:14 2026 GMT
            Not After : Jan 18 03:58:14 2026 GMT
        Subject: CN=3F2F69E6435EABA2F70CBB4C84D96043BA82C55B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:67:25:b8:31:77:dd:af:10:84:bb:ce:e4:fb:
                    55:af:81:a7:f5:a3:a7:31:dc:f2:4a:88:36:52:49:
                    f8:80:0b:1c:49:44:4b:f8:fd:67:0d:bc:c0:ba:92:
                    1a:23:ac:ba:5b:18:1c:3b:af:32:99:80:75:7f:3f:
                    bc:02:bd:63:db:ee:4e:22:6a:c9:a2:7f:39:5e:fd:
                    13:79:a8:1e:9f:29:f0:8c:5f:a9:08:58:81:bd:92:
                    e9:37:58:c5:63:55:f4:68:37:84:89:00:2d:ea:b2:
                    d0:42:86:c7:c9:9c:40:3e:19:e1:0f:d8:b7:a4:81:
                    c4:22:fc:6d:69:80:18:d9:6b:66:7a:24:55:52:8e:
                    cf:e6:44:5a:69:2e:e0:97:a5:e3:7a:1b:49:8b:bd:
                    63:e3:81:5c:97:79:35:62:b0:91:d8:45:99:a1:d0:
                    09:52:23:58:14:55:b8:e4:90:2c:76:42:dc:fc:87:
                    a3:a8:bc:0b:15:92:59:15:8c:61:70:0f:e9:ab:f5:
                    ae:10:87:a3:5b:d2:c8:c4:2b:6a:0d:99:07:41:3e:
                    62:9d:39:2a:17:e6:8f:05:81:13:1f:a0:e3:25:6a:
                    b3:78:51:80:c7:fe:e2:33:ae:53:85:0f:2c:1b:d0:
                    fe:d1:c0:0b:ea:c3:e5:cb:a1:2e:e6:f3:0a:1d:e0:
                    a0:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:2F:69:E6:43:5E:AB:A2:F7:0C:BB:4C:84:D9:60:43:BA:82:C5:5B
            X509v3 Authority Key Identifier:
                keyid:61:D9:F4:B7:CF:8D:86:06:03:08:2E:07:FD:CA:08:51:8E:16:AA:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/0/61D9F4B7CF8D860603082E07FDCA08518E16AAFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/61D9F4B7CF8D860603082E07FDCA08518E16AAFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f812d3ef-c5fc-45b0-954a-8a52210c2e90/0/61D9F4B7CF8D860603082E07FDCA08518E16AAFB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:b5:cf:31:7c:df:49:b6:62:70:48:78:ae:89:82:02:e9:c0:
         68:85:47:c3:34:8d:9d:3c:d0:73:09:3a:4c:62:03:07:dc:2f:
         54:75:b2:9a:99:b6:6d:fb:b0:7a:18:f3:46:27:49:5b:03:3a:
         43:0e:06:26:22:f5:ea:9a:aa:cb:89:78:16:88:21:f6:23:55:
         df:cb:9e:cd:68:6c:b3:68:f4:3d:ff:20:cf:bf:df:a3:bc:ec:
         f7:0a:7c:1a:6e:1d:11:94:25:8d:33:9d:41:36:7d:68:72:08:
         c9:f4:c6:76:6d:b6:a8:20:55:4a:df:19:e2:7c:e2:30:f6:68:
         63:23:6e:21:c9:c4:ad:3e:1a:c9:ee:7f:76:12:93:5f:26:a7:
         af:76:90:64:0d:16:6f:24:76:00:06:ea:c1:f8:b4:06:e3:c3:
         65:e8:d5:ef:3c:31:f5:87:57:a5:f8:90:a3:59:09:fb:18:c7:
         57:1e:5f:b4:83:75:b1:9b:28:a9:7d:bc:66:f4:fa:87:e5:15:
         e1:d9:85:a2:92:64:e2:4d:63:61:f2:ce:f3:b1:85:16:72:71:
         11:a6:ef:64:c2:31:fa:8a:1f:8c:fa:49:1b:49:bc:6c:dc:3d:
         7b:23:2b:5b:79:2e:e7:1d:a0:8f:4e:cf:43:0c:f1:b8:35:76:
         9e:0f:10:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----