This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/01b20176-76b9-4000-a6e6-ba547b524143/0/84101CECAA6A71465DCF665D716279A008341EA4.mft
File:                     84101CECAA6A71465DCF665D716279A008341EA4.mft (raw, json)
Hash identifier:          pRfRLoxJjI8+9F1xbxqukGNe53d2Q6LXkjzL0wv1dZ8=
Subject key identifier:   DA:56:ED:48:2E:0B:68:0B:3B:11:16:67:5E:CB:5C:B9:12:0B:C5:B7
Authority key identifier: 84:10:1C:EC:AA:6A:71:46:5D:CF:66:5D:71:62:79:A0:08:34:1E:A4
Certificate issuer:       /CN=84101cecaa6a71465dcf665d716279a008341ea4
Certificate serial:       3CD8087DD8F8BD16A2D7874268F9343C7F93B1DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hBAc7KpqcUZdz2ZdcWJ5oAg0HqQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/01b20176-76b9-4000-a6e6-ba547b524143/0/84101CECAA6A71465DCF665D716279A008341EA4.mft
Manifest number:          F7
Signing time:             Fri 10 Oct 2025 08:13:53 +0000
Manifest this update:     Fri 10 Oct 2025 08:08:53 +0000
Manifest next update:     Sat 11 Oct 2025 11:24:53 +0000
Files and hashes:         1: 84101CECAA6A71465DCF665D716279A008341EA4.crl (hash: wQBGtrby6OdjB0qZ4Vq+y6H5zyXrJ2bj0xP2u65UQRU=)
                          2: AS216311.asa (hash: Dmw7omaWtWOpKd5S/DPOujGFLODAQcprPtQE3Nwf75E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:d8:08:7d:d8:f8:bd:16:a2:d7:87:42:68:f9:34:3c:7f:93:b1:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84101cecaa6a71465dcf665d716279a008341ea4
        Validity
            Not Before: Oct 10 08:08:53 2025 GMT
            Not After : Oct 11 11:24:53 2025 GMT
        Subject: CN=DA56ED482E0B680B3B1116675ECB5CB9120BC5B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6f:9b:eb:1f:fb:91:28:52:9b:b7:6c:6f:32:
                    47:44:b8:9c:b6:83:2c:90:70:25:3d:b9:6f:80:91:
                    cc:51:82:67:8f:17:ba:d1:0d:3e:20:ab:69:5f:52:
                    d7:a4:e4:75:88:08:ea:6d:d3:58:a2:9e:af:fd:48:
                    a6:a4:f2:53:34:9d:d9:47:30:e2:2a:77:c4:f7:95:
                    6c:6f:65:90:75:b6:3a:01:ed:75:01:19:9e:4f:e2:
                    9d:fd:94:08:dd:ae:70:a9:38:f4:16:d4:2f:cb:2f:
                    b7:01:b2:ec:93:c9:87:f9:78:85:2f:fc:50:f5:4e:
                    ba:4a:aa:d2:0c:df:66:8d:72:48:b0:58:e4:f2:81:
                    cd:4b:5c:61:d3:19:78:14:f2:f4:4e:27:5c:b3:88:
                    a3:48:d4:58:b3:23:29:35:c5:03:d0:45:6a:13:da:
                    7a:a2:ea:cc:82:91:10:c2:90:83:c8:da:4f:19:dc:
                    84:35:04:b8:4d:ca:61:13:d5:a9:66:44:ff:34:62:
                    2b:c2:51:60:48:5b:d4:66:18:2c:f3:1f:93:4a:ab:
                    84:17:c0:c1:4f:05:f7:83:98:dd:e3:f4:83:71:cc:
                    27:40:f4:16:bc:a3:d6:9d:6f:9e:8d:d2:0f:27:62:
                    7e:30:60:28:b2:ec:5c:ca:dd:cb:99:b2:16:98:c0:
                    1f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:56:ED:48:2E:0B:68:0B:3B:11:16:67:5E:CB:5C:B9:12:0B:C5:B7
            X509v3 Authority Key Identifier:
                keyid:84:10:1C:EC:AA:6A:71:46:5D:CF:66:5D:71:62:79:A0:08:34:1E:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/01b20176-76b9-4000-a6e6-ba547b524143/0/84101CECAA6A71465DCF665D716279A008341EA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hBAc7KpqcUZdz2ZdcWJ5oAg0HqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/01b20176-76b9-4000-a6e6-ba547b524143/0/84101CECAA6A71465DCF665D716279A008341EA4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:d6:c8:ef:8f:ec:b8:dc:07:c9:38:21:48:ff:fd:6c:b7:32:
         5c:cb:9b:3a:94:f6:c2:f5:b8:2e:d9:a0:46:38:3a:4c:67:8d:
         86:12:d8:ce:e3:34:20:1c:ed:ea:c7:69:22:68:84:f6:95:a6:
         fc:c7:dd:7f:78:ed:41:e1:76:f1:2b:f1:56:c2:eb:e4:97:0d:
         c9:ca:5e:d9:c6:cb:8a:e5:bb:c3:4b:0b:94:c5:55:fb:3c:d0:
         71:a2:40:86:8b:68:a0:79:56:76:a1:9d:44:ef:9f:14:9b:29:
         b7:22:d6:85:eb:12:92:94:b5:04:c2:2f:c4:e8:3d:f6:d6:b2:
         ea:ed:fd:5f:05:e4:ed:94:41:2d:68:a7:eb:d4:3e:a8:13:69:
         45:44:93:66:3b:cd:1a:80:6f:cc:13:76:1d:75:c1:1a:37:8e:
         f5:f1:1e:b3:5d:34:e5:0a:69:19:e7:33:b8:f3:e7:79:48:c3:
         bd:5f:58:9a:e2:6f:27:fa:44:44:b7:7e:61:5b:b6:c8:1f:7e:
         6d:de:a3:a7:ff:b0:88:d8:7e:97:cb:ed:31:e4:6b:7e:53:ee:
         52:d7:25:a0:62:dd:44:1b:f9:f4:b6:d9:f3:7e:24:17:09:8f:
         e1:b4:41:75:5c:39:aa:39:00:5d:37:6d:0c:8f:ef:71:a0:74:
         23:43:7c:84
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUPNgIfdj4vRai14dCaPk0PH+Tsd0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODQxMDFjZWNhYTZhNzE0NjVkY2Y2NjVkNzE2Mjc5YTAw
ODM0MWVhNDAeFw0yNTEwMTAwODA4NTNaFw0yNTEwMTExMTI0NTNaMDMxMTAvBgNV
BAMTKERBNTZFRDQ4MkUwQjY4MEIzQjExMTY2NzVFQ0I1Q0I5MTIwQkM1QjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkb5vrH/uRKFKbt2xvMkdEuJy2
gyyQcCU9uW+AkcxRgmePF7rRDT4gq2lfUtek5HWICOpt01iinq/9SKak8lM0ndlH
MOIqd8T3lWxvZZB1tjoB7XUBGZ5P4p39lAjdrnCpOPQW1C/LL7cBsuyTyYf5eIUv
/FD1TrpKqtIM32aNckiwWOTygc1LXGHTGXgU8vROJ1yziKNI1FizIyk1xQPQRWoT
2nqi6syCkRDCkIPI2k8Z3IQ1BLhNymET1almRP80YivCUWBIW9RmGCzzH5NKq4QX
wMFPBfeDmN3j9INxzCdA9Ba8o9adb56N0g8nYn4wYCiy7FzK3cuZshaYwB/JAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU2lbtSC4LaAs7ERZnXstcuRILxbcwHwYDVR0j
BBgwFoAUhBAc7KpqcUZdz2ZdcWJ5oAg0HqQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMDFiMjAxNzYtNzZiOS00MDAwLWE2ZTYtYmE1NDdiNTI0
MTQzLzAvODQxMDFDRUNBQTZBNzE0NjVEQ0Y2NjVENzE2Mjc5QTAwODM0MUVBNC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2hCQWM3S3BxY1VaZHoyWmRjV0o1b0Fn
MEhxUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wMWIyMDE3Ni03
NmI5LTQwMDAtYTZlNi1iYTU0N2I1MjQxNDMvMC84NDEwMUNFQ0FBNkE3MTQ2NURD
RjY2NUQ3MTYyNzlBMDA4MzQxRUE0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANtbI74/suNwHyTghSP/9
bLcyXMubOpT2wvW4LtmgRjg6TGeNhhLYzuM0IBzt6sdpImiE9pWm/Mfdf3jtQeF2
8SvxVsLr5JcNycpe2cbLiuW7w0sLlMVV+zzQcaJAhotooHlWdqGdRO+fFJsptyLW
hesSkpS1BMIvxOg99tay6u39XwXk7ZRBLWin69Q+qBNpRUSTZjvNGoBvzBN2HXXB
GjeO9fEes1005QppGeczuPPneUjDvV9YmuJvJ/pERLd+YVu2yB9+bd6jp/+wiNh+
l8vtMeRrflPuUtcloGLdRBv59LbZ834kFwmP4bRBdVw5qjkAXTdtDI/vcaB0I0N8
hA==
-----END CERTIFICATE-----