This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/0/5871B653F352BF45CA47D3E6EF8B5980437FA96E.mft
File:                     5871B653F352BF45CA47D3E6EF8B5980437FA96E.mft (raw, json)
Hash identifier:          QpqtGYNekqDmfgZNfBLX6M4dQSY7IN4FuIHT+bHgd5Q=
Subject key identifier:   88:18:8C:C6:AE:7B:1F:C0:10:5A:C4:12:87:F1:B3:41:B0:C5:72:E1
Authority key identifier: 58:71:B6:53:F3:52:BF:45:CA:47:D3:E6:EF:8B:59:80:43:7F:A9:6E
Certificate issuer:       /CN=5871b653f352bf45ca47d3e6ef8b5980437fa96e
Certificate serial:       2F32A2C9ECFF1E70C6864C44ED385680E93CBBD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WHG2U_NSv0XKR9Pm74tZgEN_qW4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/0/5871B653F352BF45CA47D3E6EF8B5980437FA96E.mft
Manifest number:          0A
Signing time:             Fri 10 Jan 2025 13:49:29 +0000
Manifest this update:     Fri 10 Jan 2025 13:44:29 +0000
Manifest next update:     Sat 11 Jan 2025 16:43:29 +0000
Files and hashes:         1: 38352e3131372e3233302e302f32342d3234203d3e20323037333838.roa (hash: H0fjuG9BaXSUJnbUiUuc2NH2CgEHouE/EPoQ+TIfGkM=)
                          2: 38352e3131372e3233312e302f32342d3234203d3e2039323332.roa (hash: QQJINO9I4oJqSbe5I9je48A8dSFRbl1PRcdDiTyPatI=)
                          3: 5871B653F352BF45CA47D3E6EF8B5980437FA96E.crl (hash: dCohKNvTFB/TC5x15sOnCK2qP0GVZhkbtjtSzmngjPI=)
                          4: 38352e3131372e3232382e302f32342d3234203d3e20323037333838.roa (hash: I14fctrRSCFvwJIkLp97vZXABreG93JFjlyQRevXjhw=)
                          5: 38352e3131372e3232392e302f32342d3234203d3e20383334.roa (hash: u4SYtAZbi541CMcOnP4uVSYrRQ2HcRThPIe7HQF4UN4=)
                          6: 3138352e3231332e3234392e302f32342d3234203d3e2039323332.roa (hash: SHgSicKzdo612bC/djyFvsSHdXboo37i6D87g5Tb9dU=)
                          7: 3138352e3231332e3234382e302f32342d3234203d3e2039323332.roa (hash: wNymsS049LVrW/E2XYrvfCsgvXtusEepwxn1VWQ+FSo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:32:a2:c9:ec:ff:1e:70:c6:86:4c:44:ed:38:56:80:e9:3c:bb:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5871b653f352bf45ca47d3e6ef8b5980437fa96e
        Validity
            Not Before: Jan 10 13:44:29 2025 GMT
            Not After : Jan 11 16:43:29 2025 GMT
        Subject: CN=88188CC6AE7B1FC0105AC41287F1B341B0C572E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3a:32:a2:12:37:78:4f:7d:75:7e:ce:af:9d:
                    f8:63:d9:f5:d2:a4:9d:b6:4b:42:38:80:ee:fb:63:
                    7c:47:a6:db:a5:98:1b:be:fd:6c:29:5f:a9:2f:39:
                    a4:69:78:3c:86:bd:61:d2:cd:7a:08:75:f6:d3:a6:
                    8b:a1:a2:a4:e6:09:b3:ca:5f:7e:4c:b4:51:5f:cf:
                    32:ba:4f:cd:1b:4c:85:ee:94:e1:c3:4c:26:89:3e:
                    fa:c0:7e:f9:78:2b:84:ac:76:50:a8:f4:47:5f:42:
                    4c:d3:60:0b:41:1f:1b:e3:02:9b:f2:06:8c:d8:58:
                    8c:ec:b1:be:b1:1f:f6:55:f5:92:a1:5d:32:3d:6d:
                    e1:91:60:6d:ae:9e:7d:f7:ac:a4:e6:de:f7:f9:f5:
                    51:1b:60:cf:de:49:1e:c2:87:47:cc:91:0e:f8:1c:
                    ec:bb:4a:5e:98:b5:4a:de:b5:89:f7:a7:83:db:c5:
                    37:c5:b3:9d:5d:5e:60:50:14:2e:c2:19:33:56:95:
                    0f:ec:89:f7:df:14:35:15:84:6a:43:95:08:4a:a2:
                    53:4f:0f:0c:14:fb:6f:3d:08:9a:9b:85:f3:8a:c8:
                    71:b7:4c:c9:5c:39:b6:6e:8e:ba:20:da:41:cf:12:
                    5f:6a:75:74:33:5e:de:98:06:40:03:b8:ae:2b:13:
                    c5:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:18:8C:C6:AE:7B:1F:C0:10:5A:C4:12:87:F1:B3:41:B0:C5:72:E1
            X509v3 Authority Key Identifier:
                keyid:58:71:B6:53:F3:52:BF:45:CA:47:D3:E6:EF:8B:59:80:43:7F:A9:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/0/5871B653F352BF45CA47D3E6EF8B5980437FA96E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WHG2U_NSv0XKR9Pm74tZgEN_qW4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8113dda6-7ade-445d-8c6e-448a78e48ca1/0/5871B653F352BF45CA47D3E6EF8B5980437FA96E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:3b:4c:18:28:09:f1:4e:14:3f:75:f1:fa:b9:79:a7:61:4f:
         a9:41:a4:a5:10:84:d6:4c:1c:e5:1b:4d:32:dc:3a:a3:31:41:
         44:ab:1a:b3:43:01:13:ee:d9:3c:56:eb:1b:9c:7a:99:ae:f6:
         03:69:3b:90:c2:b1:7a:6c:6f:0c:17:45:e9:61:fb:f1:72:56:
         d3:31:90:7e:14:b8:07:33:07:5a:fb:35:3e:06:7b:c3:10:a1:
         eb:30:c8:bf:f0:41:44:0b:c1:a3:e0:fa:cd:47:3d:d3:fb:58:
         2e:16:a8:8b:40:78:46:42:f0:d1:0e:f4:fc:f8:94:c6:f6:74:
         f7:1c:3e:5d:b5:a8:74:97:f3:02:56:fe:10:c8:ca:52:6f:41:
         00:fc:cd:03:9a:ca:37:43:42:d8:6c:91:d9:30:a5:c1:de:65:
         ac:02:2a:8d:fc:e4:0b:69:46:b5:ec:cf:db:ae:37:92:f0:eb:
         e2:d2:2e:f7:39:ba:8a:68:c2:89:87:ae:3d:f3:76:4c:16:39:
         78:db:51:0b:16:59:4a:09:49:48:ee:1f:a3:a2:3b:93:c1:25:
         41:35:4a:4c:46:25:e4:b6:0d:02:4c:2f:e5:3a:0b:ca:bc:40:
         d4:62:e2:19:e8:da:f7:2f:f3:85:6e:e8:9c:fc:61:fb:57:8b:
         2b:7c:e2:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----