This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/0/CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.mft
File:                     CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.mft (raw, json)
Hash identifier:          MQkF3GV+seT7940Pp+tJLucHiV6/Rl5/11BEX8JhPg8=
Subject key identifier:   B6:BC:35:B6:26:FB:61:65:AA:66:9F:15:E9:31:65:2B:F0:DB:7E:0D
Authority key identifier: CE:45:A6:1B:A7:2E:BD:B5:F6:C7:0F:59:C7:30:86:C8:BF:46:EA:26
Certificate issuer:       /CN=ce45a61ba72ebdb5f6c70f59c73086c8bf46ea26
Certificate serial:       2EF47B6E5BD1A580A072A3827BAF5485EB1BB1B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zkWmG6cuvbX2xw9ZxzCGyL9G6iY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/0/CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.mft
Manifest number:          01DB
Signing time:             Mon 05 Jan 2026 02:14:27 +0000
Manifest this update:     Mon 05 Jan 2026 02:09:27 +0000
Manifest next update:     Tue 06 Jan 2026 02:15:27 +0000
Files and hashes:         1: CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.crl (hash: 6DYW6mXsIL4AX5F1chDopiqtPWVPzfDykEY/SmFpgXk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:f4:7b:6e:5b:d1:a5:80:a0:72:a3:82:7b:af:54:85:eb:1b:b1:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce45a61ba72ebdb5f6c70f59c73086c8bf46ea26
        Validity
            Not Before: Jan  5 02:09:27 2026 GMT
            Not After : Jan  6 02:15:27 2026 GMT
        Subject: CN=B6BC35B626FB6165AA669F15E931652BF0DB7E0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d5:8f:ce:16:21:1a:18:a2:da:bf:cc:d5:43:
                    a9:bc:6b:29:8e:b6:01:e3:a4:25:a1:06:08:7e:d6:
                    e8:f9:66:8a:92:d2:16:3e:ad:68:be:7f:4d:e4:08:
                    5c:8c:d1:55:12:3a:55:a8:a4:7f:35:84:85:4f:f1:
                    3d:d7:43:49:d7:88:e5:e8:6d:ef:a6:b0:94:76:82:
                    d5:80:f8:eb:45:01:e1:c6:7a:0b:25:36:58:a0:d2:
                    88:dc:bc:38:ca:ee:5b:5c:45:06:0d:e0:62:38:79:
                    7d:7c:94:78:03:1f:7f:b9:bb:60:05:fc:11:dd:b5:
                    51:4c:09:26:6a:7b:89:bf:93:e8:90:9e:32:39:5d:
                    30:f5:d5:2d:83:46:e3:49:f6:ac:b1:bb:57:be:98:
                    16:75:a0:5a:58:e9:62:13:3b:25:87:5b:5e:4b:d3:
                    18:77:61:12:f4:75:0e:5e:34:5e:4f:e3:f8:0e:16:
                    37:ca:0d:78:32:cc:7e:ec:c1:11:7d:61:2a:a5:96:
                    89:5c:2d:7f:e3:9a:26:fb:13:c4:65:64:ac:00:0b:
                    dc:d7:ea:97:c0:23:d6:ca:2b:42:4f:55:8f:4c:21:
                    d0:bb:7e:ee:b4:d4:4f:f7:97:8e:fb:89:d0:cc:3d:
                    42:86:5e:d3:5c:89:c1:de:bf:42:cb:fc:cc:b8:bd:
                    f6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:BC:35:B6:26:FB:61:65:AA:66:9F:15:E9:31:65:2B:F0:DB:7E:0D
            X509v3 Authority Key Identifier:
                keyid:CE:45:A6:1B:A7:2E:BD:B5:F6:C7:0F:59:C7:30:86:C8:BF:46:EA:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/0/CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkWmG6cuvbX2xw9ZxzCGyL9G6iY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/0/CE45A61BA72EBDB5F6C70F59C73086C8BF46EA26.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:d5:9b:ba:ae:50:94:55:c2:36:0c:9f:75:26:0d:99:d6:f2:
         bd:61:cf:c8:50:73:c4:74:74:79:3e:b6:3a:9c:79:ef:ee:0f:
         ae:3a:29:ed:91:5a:07:b2:27:b6:eb:6f:32:0f:a9:82:00:36:
         46:9f:5a:4b:90:42:e4:99:11:f2:2b:e0:03:b4:af:fc:76:2f:
         b7:98:13:a2:a1:e7:22:0a:4b:1a:e2:fc:c7:8f:70:99:f6:0d:
         53:94:49:8a:7b:ae:b3:8b:f0:51:12:bd:51:02:b1:79:e0:7c:
         07:95:58:4e:8a:44:2b:b7:a6:ff:93:6c:9a:d3:7c:56:3a:5b:
         cb:c4:3f:88:1a:75:ff:04:3e:6c:d4:13:e8:43:81:5e:09:1d:
         4d:17:1d:b0:4e:d3:64:bf:36:bc:e1:53:5a:02:71:36:3b:11:
         2d:0c:84:04:64:75:3a:4f:3d:3f:d4:5f:2d:6c:14:b3:8d:6d:
         94:b0:37:5c:d5:48:85:c1:a8:b0:81:4e:29:f6:c2:cd:e5:d8:
         b8:10:cd:af:24:6c:74:b1:60:9a:02:a6:ab:f7:80:f5:e2:d7:
         23:20:cc:6c:ee:0b:92:85:31:3a:ae:bd:55:d9:26:62:59:1b:
         4a:46:d9:b6:c3:7b:c2:ae:28:ff:75:ff:6f:93:57:ee:98:6a:
         be:2f:44:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 15:47:11 2026 by rpki-client