This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/27851163005F59C06E35A8FD365F96356EB34971.mft
File:                     27851163005F59C06E35A8FD365F96356EB34971.mft (raw, json)
Hash identifier:          sd04oEXd5wkdn07I6LpZJer6ek3VTSeZc8NX2y1zstk=
Subject key identifier:   E2:A1:B5:2A:F7:8E:78:3D:50:71:4E:2D:B5:8F:B0:66:F7:33:6F:0F
Authority key identifier: 27:85:11:63:00:5F:59:C0:6E:35:A8:FD:36:5F:96:35:6E:B3:49:71
Certificate issuer:       /CN=27851163005f59c06e35a8fd365f96356eb34971
Certificate serial:       26BBA0BD53912C97E8C4CFC42BD1418832045AA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J4URYwBfWcBuNaj9Nl-WNW6zSXE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/27851163005F59C06E35A8FD365F96356EB34971.mft
Manifest number:          0199
Signing time:             Wed 26 Nov 2025 01:55:33 +0000
Manifest this update:     Wed 26 Nov 2025 01:50:33 +0000
Manifest next update:     Thu 27 Nov 2025 02:31:33 +0000
Files and hashes:         1: 323030313a3637633a6638633a3a2f34382d3438203d3e20323132383535.roa (hash: prfcq9YIMAg2ry1iZCXqsMkFnalbT+MPZdyoUmwmw6g=)
                          2: 39332e3135372e3134302e302f32342d3234203d3e20323132383535.roa (hash: hdp9Cx8dMbvUUOjRrqy1XfSIVtsUnXM8OZnay1usHT4=)
                          3: 27851163005F59C06E35A8FD365F96356EB34971.crl (hash: gsr73cuEfxtkJ5M2Vt7RGoyEZjItQ3r9tuEmvaikqUw=)
                          4: AS212855.asa (hash: T3YdrgEJ1P9IU1IPBHUKuz7lJiYzWWWbNO7fDdrADAU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:bb:a0:bd:53:91:2c:97:e8:c4:cf:c4:2b:d1:41:88:32:04:5a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27851163005f59c06e35a8fd365f96356eb34971
        Validity
            Not Before: Nov 26 01:50:33 2025 GMT
            Not After : Nov 27 02:31:33 2025 GMT
        Subject: CN=E2A1B52AF78E783D50714E2DB58FB066F7336F0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ce:8a:25:13:70:25:c9:86:8e:48:1e:7e:1f:
                    dd:26:a9:c5:e0:6f:40:ba:c0:bd:12:73:b4:6a:82:
                    af:e0:10:f2:97:00:4a:24:ae:0a:fc:ca:38:ca:9d:
                    e2:39:6a:43:3f:6e:d0:6b:54:4e:7f:9f:45:0c:73:
                    f9:ac:9f:ef:b2:15:a8:4e:26:1f:04:d9:60:28:c0:
                    56:cb:d3:35:41:c8:83:ad:30:75:d2:a4:79:4e:8c:
                    44:e8:2f:af:e4:15:ff:a5:c6:9b:21:72:7c:be:a7:
                    f3:a3:ed:65:23:e3:fb:cb:ca:bc:76:ca:ed:da:92:
                    2e:d9:4a:1c:17:73:41:60:29:70:14:cb:84:10:5f:
                    65:91:99:a0:4c:96:e6:4e:17:bd:4a:87:7c:77:cb:
                    9e:8a:7f:4e:f4:08:0b:b7:f5:dc:87:eb:47:f1:15:
                    e0:22:3d:67:70:7b:9a:f5:05:c0:55:f6:81:13:5c:
                    63:24:00:30:66:25:02:6f:11:85:b6:df:de:c7:b0:
                    f4:29:58:b8:58:c2:1f:c6:26:13:4c:86:a8:50:69:
                    42:d1:84:aa:02:a3:dd:f8:07:5b:9b:af:15:98:6b:
                    d5:17:a5:cb:ab:4b:bd:54:9a:d0:9c:f5:a5:16:2b:
                    ce:26:fe:d2:a9:26:1e:43:6c:37:99:d3:3e:40:dc:
                    2c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:A1:B5:2A:F7:8E:78:3D:50:71:4E:2D:B5:8F:B0:66:F7:33:6F:0F
            X509v3 Authority Key Identifier:
                keyid:27:85:11:63:00:5F:59:C0:6E:35:A8:FD:36:5F:96:35:6E:B3:49:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/27851163005F59C06E35A8FD365F96356EB34971.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4URYwBfWcBuNaj9Nl-WNW6zSXE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3eafc32b-ec03-4319-b1c6-3c1c4727e06f/0/27851163005F59C06E35A8FD365F96356EB34971.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:67:cc:5f:4a:f6:4d:e4:2d:fb:8f:5d:d1:3e:8a:af:bc:5f:
         5e:61:0a:ad:e7:d7:27:17:0d:6e:35:69:6e:ee:63:23:55:20:
         8e:93:49:d7:81:b8:74:09:b0:9d:ac:e0:e1:eb:bc:5d:84:a4:
         f5:5a:06:cf:e3:7e:11:4b:73:d5:dd:ea:9d:8d:44:ef:72:c4:
         79:b5:fc:09:4c:6f:5e:60:b0:e0:99:87:64:ce:41:b6:3c:07:
         15:7e:17:b9:81:41:7e:d7:65:22:80:3d:eb:f8:bc:b1:36:3f:
         10:b6:d8:9c:00:f7:6f:b6:a7:ca:9e:f0:cd:64:46:0c:bc:b9:
         81:1d:32:15:f1:64:e9:9a:de:7e:08:4f:f9:6e:9b:66:91:87:
         a1:ea:94:25:72:da:27:45:34:f5:bf:dc:b7:6f:d4:1c:6b:46:
         b1:6b:ac:80:83:d5:23:d2:d8:ec:db:37:52:1b:35:74:0d:fd:
         f1:51:03:eb:a4:18:d0:54:e1:ba:3b:ed:b9:f7:7a:e7:2e:4e:
         18:44:57:35:54:e5:09:8e:42:ba:85:ac:26:ae:59:26:1a:24:
         b3:2a:24:2a:4d:a4:cd:e8:7e:89:dd:ee:c8:7f:d8:ec:7d:59:
         4b:8f:f3:7e:42:2a:76:06:32:51:ff:62:17:d5:30:04:c9:ad:
         23:f3:d0:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----