This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.mft
File:                     D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.mft (raw, json)
Hash identifier:          hKHcnP72Pk9za+Kfe4XPpdw+4pe+GG6a5GTigP9dFA0=
Subject key identifier:   EF:6F:21:3E:62:14:A3:28:3D:FF:40:74:AA:B8:62:ED:C0:BB:EE:F6
Authority key identifier: D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44
Certificate issuer:       /CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
Certificate serial:       4FA1965BCBB8837D2D6DAAEBD205290A5EE28CC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.mft
Manifest number:          0510
Signing time:             Fri 07 Nov 2025 00:07:38 +0000
Manifest this update:     Fri 07 Nov 2025 00:02:38 +0000
Manifest next update:     Sat 08 Nov 2025 02:57:38 +0000
Files and hashes:         1: 37382e32342e3132332e302f32342d3234203d3e2037303138.roa (hash: yLm71OTqDFRdyl2jt+hmsZQmui0MjgACYd0QbV3wZ9U=)
                          2: 39332e39322e31382e302f32342d3234203d3e203534333339.roa (hash: WMxtcl2Ju6TLrgTtLUBAyAfGF8Gn9pZV9umXAbbzoJo=)
                          3: 34352e38362e39322e302f32342d3234203d3e20323039313831.roa (hash: gFPXsCrn7VghMZpPQmlNius+Qe9koRj6iqpgIDQpOY8=)
                          4: 37382e32342e3132342e302f32342d3234203d3e20343031383338.roa (hash: VrnH5tIT+SOLQ0xUmgz8lDea4v1K04gWY5bP4L4H/fY=)
                          5: 34352e38362e39342e302f32342d3234203d3e2039303039.roa (hash: gq03q2PZTenb5MfLZJOhv7nheUzD9xSGdvhncjMBFfc=)
                          6: 37382e32342e3132352e302f32342d3234203d3e203534333339.roa (hash: 8J7vWDZA6CwD0N0heCZfxarZkaHc987rZNDTEoRqJuw=)
                          7: 37382e32342e3132332e302f32342d3234203d3e20343031383338.roa (hash: XbX1Gid500oTFj6vAef29FZUEz5FTkMATGNQOQiD6pY=)
                          8: 37382e32342e3132352e302f32342d3234203d3e20343031383338.roa (hash: qgaqtIbvWlmZK0f99yeifoHSkIPhxGYhski+5gJ4Rv4=)
                          9: 39332e39322e32312e302f32342d3234203d3e203631333137.roa (hash: fW+zXQmtdqPL01ivRHM0ry5dwDotUJmdzQHE3ZemyUE=)
                          10: 39332e39322e32302e302f32342d3234203d3e2035353131.roa (hash: 7VcdQni9NXqci+IjZbxirF6Td9GD5nyYwAr4qpAAeg4=)
                          11: 37382e32342e3132322e302f32342d3234203d3e20343031383338.roa (hash: QSDJ1+8SgpwSggscxtnEW0fE8nG/Mt5ZyXJ/C5BJhqQ=)
                          12: 37382e32342e3132312e302f32342d3234203d3e203631333137.roa (hash: PNy4BBOReJ4B4LRwKHBjnzscIyK0n1F3JT7zrSI8uHw=)
                          13: 39332e39322e32322e302f32332d3234203d3e203534333339.roa (hash: 88A6WN8qi/A8Ut9i/zPgFdBiGIl+iAKvU5wxlPcUnB8=)
                          14: 39332e39322e31392e302f32342d3234203d3e203631333137.roa (hash: bCly8plczaq5qd0H9MlQ1Z8xZKSunOI/jFWKgR1UqBg=)
                          15: 37382e32342e3132322e302f32342d3234203d3e2037303138.roa (hash: RiGLyTpjx/lhYnZMR/g3INSwpo5JHGzbqqOnRRhQZa8=)
                          16: D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.crl (hash: FdRqT1xOXdXFE9T2HdL7QAyjKAFileeJ8yWKgbN3rpE=)
                          17: 37382e32342e3132362e302f32332d3234203d3e203131343236.roa (hash: daBRkHJPjnP4DyHn4IivnK1qaHgtIwZJtESS0iOn6Xk=)
                          18: 37382e32342e3132342e302f32342d3234203d3e203534333339.roa (hash: Jmas5KP8U8YtPnq0n93kzfbv6wwue5du0IC/hUNUQy4=)
                          19: 39332e39322e32322e302f32332d3234203d3e20343031383338.roa (hash: ZR3NimLfDuSVrHX3TIHZtfUL9Oft/y6YDT0lI8Ay4iU=)
                          20: 39332e39322e31382e302f32342d3234203d3e20343031383338.roa (hash: UH0UP25o3U70TKOGCO5ZzwtVViIjPRoBTmf/0ZejDTc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:a1:96:5b:cb:b8:83:7d:2d:6d:aa:eb:d2:05:29:0a:5e:e2:8c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
        Validity
            Not Before: Nov  7 00:02:38 2025 GMT
            Not After : Nov  8 02:57:38 2025 GMT
        Subject: CN=EF6F213E6214A3283DFF4074AAB862EDC0BBEEF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:5f:2c:5b:34:89:3a:6c:a9:6b:9c:e7:92:45:
                    90:04:37:73:41:32:25:19:37:87:2b:b0:15:7b:74:
                    96:9f:99:78:f3:03:84:31:28:19:bb:06:9b:76:ed:
                    7d:ca:7e:87:89:ae:16:a7:92:49:bc:f0:b5:e7:51:
                    04:81:87:56:99:40:9d:e1:af:8b:8c:f8:0f:41:ad:
                    f6:76:c8:dc:e6:0b:3f:4a:06:82:34:22:10:15:a2:
                    3f:11:1b:97:9a:98:e1:42:1a:0e:43:a2:07:75:38:
                    bd:bc:5d:06:af:3c:eb:2b:94:86:72:8c:1f:9d:49:
                    ba:94:1f:95:68:c9:67:58:ee:b8:50:98:8e:ba:fa:
                    e7:25:4f:a6:09:b6:99:77:fa:08:6a:1f:79:49:ac:
                    db:4a:2a:bd:75:fb:42:c7:6a:9d:cd:99:35:b9:85:
                    9c:45:36:ee:e3:74:25:50:4c:63:ca:13:9b:8d:01:
                    63:cb:77:49:9c:51:81:43:f9:9a:39:d2:1a:c1:bf:
                    75:7e:d0:68:8a:02:39:5c:a0:6f:40:4a:d0:d6:73:
                    3b:da:6c:fc:e6:2f:58:f8:7f:6b:c2:0b:f5:7d:e0:
                    01:95:b3:ca:0d:37:61:20:4d:dc:61:35:72:7d:b7:
                    54:6f:b7:da:82:8e:c2:72:34:48:ee:a3:fb:2d:d5:
                    71:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:6F:21:3E:62:14:A3:28:3D:FF:40:74:AA:B8:62:ED:C0:BB:EE:F6
            X509v3 Authority Key Identifier:
                keyid:D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:d6:59:1f:ec:e9:1b:3a:4f:80:02:47:81:be:03:10:3e:9b:
         34:88:a9:45:d6:49:da:c8:a6:52:12:51:31:8b:9f:54:d3:69:
         11:a9:4e:17:5a:7b:40:f7:91:f6:3b:d7:6f:3e:8a:49:59:9d:
         3a:3e:c7:ae:ae:c6:a6:eb:b9:c1:26:a2:92:3c:43:36:2f:73:
         51:4e:da:e7:c0:42:fd:8a:03:ae:1c:ef:b3:62:cb:7b:fd:55:
         4a:b3:74:97:57:01:db:f1:0b:6a:fb:34:dc:76:27:fe:41:72:
         7b:47:a4:6f:2f:4e:30:ef:57:32:1b:cf:11:3a:9d:57:1d:ae:
         2b:af:02:9e:a6:c4:26:13:ed:6e:97:ba:a0:ae:08:1c:a2:6f:
         a1:ab:9f:57:89:cf:13:b0:07:ba:55:09:a3:07:20:db:b4:c4:
         56:dc:6b:e4:05:0c:8f:85:0d:4f:b5:2f:ab:74:f9:16:f2:d0:
         3d:a4:fd:46:0e:08:a8:4b:85:fd:97:eb:96:d7:8d:d2:89:b0:
         93:09:6b:1f:b8:f8:71:a8:9a:6f:31:6e:7a:1d:b2:e7:c0:8d:
         bc:02:48:f7:50:f6:4d:59:ac:6c:f7:a6:dc:11:10:cd:7b:47:
         ef:5e:b4:1a:49:53:ae:01:b0:b4:f2:71:41:94:ed:90:79:d9:
         e0:21:f0:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 11:10:12 2025 by rpki-client