This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/1/567688FC99CFF14E0DF7422720EA89CA16377899.mft
File:                     567688FC99CFF14E0DF7422720EA89CA16377899.mft (raw, json)
Hash identifier:          QSlLZGeIabvKRw/fAgL7hCRzI1+q8gjWhnkl1vJcEno=
Subject key identifier:   74:8A:66:50:F0:31:EC:B5:5B:56:6E:0F:21:38:9F:1C:92:00:C2:A0
Authority key identifier: 56:76:88:FC:99:CF:F1:4E:0D:F7:42:27:20:EA:89:CA:16:37:78:99
Certificate issuer:       /CN=567688fc99cff14e0df7422720ea89ca16377899
Certificate serial:       03A635ED45F34261E01CC8618C274519E7148163
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VnaI_JnP8U4N90InIOqJyhY3eJk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/1/567688FC99CFF14E0DF7422720EA89CA16377899.mft
Manifest number:          52
Signing time:             Wed 10 Jan 2024 20:51:59 +0000
Manifest this update:     Wed 10 Jan 2024 20:46:59 +0000
Manifest next update:     Fri 12 Jan 2024 00:22:59 +0000
Files and hashes:         1: 567688FC99CFF14E0DF7422720EA89CA16377899.crl (hash: Sm0/ZyBBdk58pYv3yOGjYLNROj3K73Z6Z9u8VSDiLF4=)
                          2: 3137362e3131382e3136302e302f32322d3234203d3e203230343733.roa (hash: SDz+cI5DNmg1rltVw/C96h7yRNZ4t3ftkUryrA7tGbk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:a6:35:ed:45:f3:42:61:e0:1c:c8:61:8c:27:45:19:e7:14:81:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=567688fc99cff14e0df7422720ea89ca16377899
        Validity
            Not Before: Jan 10 20:46:59 2024 GMT
            Not After : Jan 12 00:22:59 2024 GMT
        Subject: CN=748A6650F031ECB55B566E0F21389F1C9200C2A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:67:3a:06:54:ac:56:1f:f9:28:65:ef:c8:18:
                    85:a4:58:4b:80:b8:e0:b9:5b:b2:cb:56:56:71:59:
                    54:ae:77:76:5c:2b:19:d7:ed:4b:25:97:d5:80:72:
                    2f:d6:13:ce:41:f3:b0:29:0e:c9:65:fd:50:c8:ca:
                    16:dd:44:60:13:de:c0:93:0a:9b:d5:03:d1:96:3a:
                    f0:3b:53:bc:54:d0:3c:d5:30:e4:01:db:cd:55:cc:
                    df:58:d6:be:7b:c7:f0:76:6a:11:97:ed:c5:59:4b:
                    e6:7f:65:c9:65:6e:3c:ab:c4:db:46:27:9b:3a:aa:
                    a7:b4:72:11:84:7e:eb:d7:e4:15:e5:db:a3:c2:db:
                    00:62:89:93:6e:18:89:ec:d3:14:cb:48:81:f0:39:
                    b2:33:6c:08:87:06:a7:6c:8c:6c:73:4e:46:a3:43:
                    4d:16:af:94:af:da:d2:72:ab:a1:50:8a:99:36:f3:
                    30:a0:1c:1b:07:6d:bd:da:1b:9b:4b:47:ae:21:bc:
                    a4:10:65:8b:b4:24:b2:64:0f:ba:ac:7f:4f:ba:30:
                    6c:43:af:98:fd:d7:0a:fe:50:ea:a7:d0:5d:af:61:
                    a7:cd:1a:49:b0:a2:0c:d8:df:1f:f8:9a:61:a2:07:
                    0a:bc:ff:a2:70:b4:2d:9e:9c:68:b1:8b:87:39:84:
                    d0:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:8A:66:50:F0:31:EC:B5:5B:56:6E:0F:21:38:9F:1C:92:00:C2:A0
            X509v3 Authority Key Identifier:
                keyid:56:76:88:FC:99:CF:F1:4E:0D:F7:42:27:20:EA:89:CA:16:37:78:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/1/567688FC99CFF14E0DF7422720EA89CA16377899.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VnaI_JnP8U4N90InIOqJyhY3eJk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f9235055-1904-44b4-998b-ff1c9e311c49/1/567688FC99CFF14E0DF7422720EA89CA16377899.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:cf:53:e5:75:3b:62:70:6d:cd:d9:87:6b:79:bc:77:6d:04:
         69:d1:c3:05:7d:ea:d9:48:9c:2f:dd:53:13:e3:81:35:16:73:
         0b:3c:89:7e:41:13:d4:2b:1c:94:b3:69:fd:c8:d6:f6:2c:29:
         f0:d7:7b:8e:33:9d:22:93:2d:0b:5b:3a:61:86:1a:4e:a4:88:
         6f:52:00:75:6b:83:01:6a:f3:d6:8c:66:00:b0:34:14:d2:21:
         8d:b7:8f:c7:57:f5:af:57:33:95:e1:eb:8e:c3:bd:65:12:55:
         e1:60:13:70:0a:4c:f0:3a:a7:2b:27:cd:6e:62:d5:2a:dc:d0:
         df:37:22:29:ab:cf:d2:20:a8:17:6b:68:2d:c4:e0:be:fe:91:
         ac:cc:2c:bb:f0:47:cf:a0:16:55:e2:c4:1e:66:5f:0e:cc:d3:
         cf:f6:12:ad:61:db:c6:f7:04:f6:06:5e:19:56:03:34:9b:c0:
         57:94:17:ab:f3:c5:7f:20:d2:4b:43:aa:71:a2:a2:ac:6d:19:
         f7:c2:2a:19:a1:1c:78:b5:41:e4:81:d5:5f:ea:98:c3:f1:90:
         b9:dd:83:31:db:44:21:72:e2:8c:f1:d7:71:ab:d0:ff:9c:a5:
         f5:89:5d:59:f6:9a:b1:7b:f0:6c:23:9c:ec:53:aa:00:f9:a6:
         f4:5c:f0:c0
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUA6Y17UXzQmHgHMhhjCdFGecUgWMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTY3Njg4ZmM5OWNmZjE0ZTBkZjc0MjI3MjBlYTg5Y2Ex
NjM3Nzg5OTAeFw0yNDAxMTAyMDQ2NTlaFw0yNDAxMTIwMDIyNTlaMDMxMTAvBgNV
BAMTKDc0OEE2NjUwRjAzMUVDQjU1QjU2NkUwRjIxMzg5RjFDOTIwMEMyQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYZzoGVKxWH/koZe/IGIWkWEuA
uOC5W7LLVlZxWVSud3ZcKxnX7Usll9WAci/WE85B87ApDsll/VDIyhbdRGAT3sCT
CpvVA9GWOvA7U7xU0DzVMOQB281VzN9Y1r57x/B2ahGX7cVZS+Z/ZcllbjyrxNtG
J5s6qqe0chGEfuvX5BXl26PC2wBiiZNuGIns0xTLSIHwObIzbAiHBqdsjGxzTkaj
Q00Wr5Sv2tJyq6FQipk28zCgHBsHbb3aG5tLR64hvKQQZYu0JLJkD7qsf0+6MGxD
r5j91wr+UOqn0F2vYafNGkmwogzY3x/4mmGiBwq8/6JwtC2enGixi4c5hNApAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUdIpmUPAx7LVbVm4PITifHJIAwqAwHwYDVR0j
BBgwFoAUVnaI/JnP8U4N90InIOqJyhY3eJkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjkyMzUwNTUtMTkwNC00NGI0LTk5OGItZmYxYzllMzEx
YzQ5LzEvNTY3Njg4RkM5OUNGRjE0RTBERjc0MjI3MjBFQTg5Q0ExNjM3Nzg5OS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1ZuYUlfSm5QOFU0TjkwSW5JT3FKeWhZ
M2VKay5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mOTIzNTA1NS0x
OTA0LTQ0YjQtOTk4Yi1mZjFjOWUzMTFjNDkvMS81Njc2ODhGQzk5Q0ZGMTRFMERG
NzQyMjcyMEVBODlDQTE2Mzc3ODk5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW89T5XU7YnBtzdmHa3m8
d20EadHDBX3q2UicL91TE+OBNRZzCzyJfkET1CsclLNp/cjW9iwp8Nd7jjOdIpMt
C1s6YYYaTqSIb1IAdWuDAWrz1oxmALA0FNIhjbePx1f1r1czleHrjsO9ZRJV4WAT
cApM8DqnKyfNbmLVKtzQ3zciKavP0iCoF2toLcTgvv6RrMwsu/BHz6AWVeLEHmZf
DszTz/YSrWHbxvcE9gZeGVYDNJvAV5QXq/PFfyDSS0OqcaKirG0Z98IqGaEceLVB
5IHVX+qYw/GQud2DMdtEIXLijPHXcavQ/5yl9YldWfaasXvwbCOc7FOqAPmm9Fzw
wA==
-----END CERTIFICATE-----