This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4b8b6036-532b-40c0-aff1-2ff24d8b3daf/1/8538B213F628D165A230ECF32A6C5E947689C211.mft
File:                     8538B213F628D165A230ECF32A6C5E947689C211.mft (raw, json)
Hash identifier:          3SfLjuabW2FP8JkpaB2PUuu1qSGZVeIpe0tD7+IMp8Q=
Subject key identifier:   F9:74:1D:BF:68:D1:AC:95:23:14:B8:BF:08:7B:EC:23:D0:44:42:69
Authority key identifier: 85:38:B2:13:F6:28:D1:65:A2:30:EC:F3:2A:6C:5E:94:76:89:C2:11
Certificate issuer:       /CN=8538B213F628D165A230ECF32A6C5E947689C211
Certificate serial:       2113551E3187DAA122F98E735A613446B3D9D4B2
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/8538B213F628D165A230ECF32A6C5E947689C211.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/4b8b6036-532b-40c0-aff1-2ff24d8b3daf/1/8538B213F628D165A230ECF32A6C5E947689C211.mft
Manifest number:          02
Signing time:             Sun 25 May 2025 06:19:02 +0000
Manifest this update:     Sun 25 May 2025 06:14:02 +0000
Manifest next update:     Mon 26 May 2025 06:48:02 +0000
Files and hashes:         1: 8538B213F628D165A230ECF32A6C5E947689C211.crl (hash: CDCRXUI4e33nafXmt6weaLZS8kSwmmrtp03+6MYYszU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:13:55:1e:31:87:da:a1:22:f9:8e:73:5a:61:34:46:b3:d9:d4:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8538B213F628D165A230ECF32A6C5E947689C211
        Validity
            Not Before: May 25 06:14:02 2025 GMT
            Not After : May 26 06:48:02 2025 GMT
        Subject: CN=F9741DBF68D1AC952314B8BF087BEC23D0444269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a5:0b:81:1b:6b:c5:0f:7d:16:0e:fe:d6:90:
                    f7:57:29:d0:24:46:07:1e:bb:50:6d:67:fa:2c:2a:
                    14:68:5f:55:8d:b5:40:c0:c2:b4:31:6b:e5:88:ee:
                    47:4d:f7:46:d0:ad:71:4b:c4:30:01:94:d2:b2:07:
                    b7:65:c1:e0:cd:0b:7d:d6:36:5b:c5:0e:bb:45:c3:
                    77:1d:b0:1e:ff:5c:24:45:05:17:a2:84:95:c8:93:
                    3a:38:a9:fc:40:90:31:db:0b:e1:de:9e:a6:4d:78:
                    aa:fb:ea:1a:db:07:de:2c:ae:4c:27:cb:4d:9a:0a:
                    76:47:06:0d:fd:95:00:35:a4:bc:2b:e6:36:f8:6f:
                    51:fb:10:48:26:64:12:68:bd:a0:f3:50:a4:10:16:
                    05:eb:ce:42:43:2c:31:5a:42:dd:54:68:68:1a:bf:
                    c5:24:dc:ae:cc:85:b8:3a:53:a6:4d:d8:8a:fb:94:
                    8d:6e:0f:04:35:b6:99:eb:84:38:dc:00:f5:f5:e9:
                    5d:da:80:41:e0:c4:f7:ff:38:57:86:f2:d0:06:06:
                    b8:75:46:27:97:6a:54:5a:92:e6:75:41:39:41:ed:
                    7f:9d:12:82:73:43:28:9b:ca:a7:f4:6a:c7:ad:cf:
                    73:c3:66:53:8e:2e:da:88:74:84:88:25:8c:f0:58:
                    fc:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:74:1D:BF:68:D1:AC:95:23:14:B8:BF:08:7B:EC:23:D0:44:42:69
            X509v3 Authority Key Identifier:
                keyid:85:38:B2:13:F6:28:D1:65:A2:30:EC:F3:2A:6C:5E:94:76:89:C2:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/4b8b6036-532b-40c0-aff1-2ff24d8b3daf/1/8538B213F628D165A230ECF32A6C5E947689C211.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/8538B213F628D165A230ECF32A6C5E947689C211.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4b8b6036-532b-40c0-aff1-2ff24d8b3daf/1/8538B213F628D165A230ECF32A6C5E947689C211.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:ea:6f:7d:89:34:ef:03:1a:ed:01:d8:46:b6:a2:2e:1e:3f:
         57:e8:2d:ab:39:45:b1:c0:72:9b:63:50:ff:b8:ae:d6:52:42:
         3e:7b:14:1b:03:90:77:55:79:57:86:65:a9:5c:41:34:32:52:
         91:34:3c:81:86:ed:f8:03:7e:10:f8:e7:b2:dc:04:df:0a:23:
         e1:9b:aa:bf:66:12:e2:1a:ab:4a:3e:0c:d4:7c:f8:06:18:81:
         68:f1:5d:d7:f8:c8:2c:f6:db:0b:5b:f2:73:d2:aa:b5:b3:de:
         d5:b9:52:c8:24:89:21:3a:fe:d5:7c:ea:73:fb:55:13:21:85:
         46:99:c8:30:f6:40:c8:24:43:70:4a:75:10:5e:e2:5c:17:ce:
         de:1c:e8:ba:9d:d4:01:36:fa:63:5f:ce:35:8a:40:5c:b1:ba:
         fd:e5:46:19:0d:b3:c1:39:48:51:be:28:d0:d5:be:0e:c2:c8:
         5f:96:b7:f5:d1:ed:0b:63:fa:01:01:b0:f9:1d:98:22:da:54:
         ce:13:26:4b:96:7b:1a:da:80:cd:d2:87:f8:76:bc:e1:07:de:
         03:29:46:2a:a3:c1:f1:04:db:6a:d7:ce:ee:c0:ff:fa:df:9b:
         68:ba:1f:a0:f2:94:96:ec:dc:7a:0c:85:b0:da:e0:81:a6:1d:
         20:2e:2b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----