This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/1/F3CC3769D8FD66E30F3BA6B926481F664C7FED13.mft
File:                     F3CC3769D8FD66E30F3BA6B926481F664C7FED13.mft (raw, json)
Hash identifier:          1TY5JV51217yv3Ih0qZWE0rACrkUan1NaRY9LJqD3Fo=
Subject key identifier:   1D:D0:2C:C8:51:A7:C6:1F:E5:B8:F6:FF:8F:DE:5B:4D:E0:81:FB:B0
Authority key identifier: F3:CC:37:69:D8:FD:66:E3:0F:3B:A6:B9:26:48:1F:66:4C:7F:ED:13
Certificate issuer:       /CN=F3CC3769D8FD66E30F3BA6B926481F664C7FED13
Certificate serial:       3E1E63B8DE8611E2F8ED8707006CEF36F4BCE9FF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/F3CC3769D8FD66E30F3BA6B926481F664C7FED13.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/1/F3CC3769D8FD66E30F3BA6B926481F664C7FED13.mft
Manifest number:          A8
Signing time:             Fri 19 Dec 2025 22:53:45 +0000
Manifest this update:     Fri 19 Dec 2025 22:48:45 +0000
Manifest next update:     Sun 21 Dec 2025 00:38:45 +0000
Files and hashes:         1: 326131343a373538303a3765303a3a2f34382d3438203d3e20323134353334.roa (hash: RRkb0bnNKnbeFbaERnfQOBi5pO2OGjCSeplsy38bpxQ=)
                          2: F3CC3769D8FD66E30F3BA6B926481F664C7FED13.crl (hash: 36/ZCVLJYJkniQHsI/ObC7w/FtR2lmv5ltdWkhWIWvQ=)
                          3: 326131343a373538303a3765303a3a2f34342d3438203d3e20323131353735.roa (hash: eIcNuMQVK00NVTttAcCUkEiDTJRni4+mtCPYV/BBYmk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:1e:63:b8:de:86:11:e2:f8:ed:87:07:00:6c:ef:36:f4:bc:e9:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3CC3769D8FD66E30F3BA6B926481F664C7FED13
        Validity
            Not Before: Dec 19 22:48:45 2025 GMT
            Not After : Dec 21 00:38:45 2025 GMT
        Subject: CN=1DD02CC851A7C61FE5B8F6FF8FDE5B4DE081FBB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f0:1b:6e:32:fa:ed:fc:f5:ea:e7:03:bb:93:
                    44:7f:d6:ed:30:b0:c9:2d:de:4a:41:dd:26:ae:c0:
                    98:a4:02:38:10:79:cd:74:f4:50:84:ba:e4:67:fd:
                    d9:d0:0f:d5:6d:98:d2:d5:97:7d:ab:42:65:33:28:
                    95:ac:69:2e:7b:cf:43:9a:f1:34:3e:0b:27:dc:d0:
                    49:75:95:e0:9f:33:9c:43:58:90:2b:55:a6:17:fb:
                    1f:6c:1f:7c:e8:3a:9a:9e:54:4f:46:06:ef:1a:d0:
                    b0:90:85:5b:19:f9:b6:e0:b4:53:2f:20:de:ff:5d:
                    32:c5:25:ce:86:70:53:be:41:39:5f:de:bc:a6:24:
                    c1:d9:0e:88:37:89:c1:a1:81:ae:df:8e:25:1e:12:
                    0e:fe:5a:1e:d3:c4:20:d4:96:04:bc:38:2e:9a:e0:
                    b1:6d:bf:84:a5:23:cb:b9:f1:4e:7c:16:9f:98:54:
                    9f:2c:0a:af:3e:f3:4f:4e:0d:4d:d9:49:e7:f0:ba:
                    5f:f8:ee:18:a8:e4:c6:4b:8e:17:56:a1:14:8e:f7:
                    5d:23:f0:ab:d7:53:f8:43:b2:a4:86:b1:1d:ae:dd:
                    35:0a:4e:c4:ce:ac:c6:04:74:2a:e8:dc:6b:b4:83:
                    37:bf:8a:07:36:83:31:83:8b:42:20:85:1b:7f:00:
                    63:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:D0:2C:C8:51:A7:C6:1F:E5:B8:F6:FF:8F:DE:5B:4D:E0:81:FB:B0
            X509v3 Authority Key Identifier:
                keyid:F3:CC:37:69:D8:FD:66:E3:0F:3B:A6:B9:26:48:1F:66:4C:7F:ED:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/1/F3CC3769D8FD66E30F3BA6B926481F664C7FED13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/c6fd4ea1-a266-4dea-b48a-15da35452109/2/F3CC3769D8FD66E30F3BA6B926481F664C7FED13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/981f9782-898e-4b83-95e6-4ff4ab75c9dc/1/F3CC3769D8FD66E30F3BA6B926481F664C7FED13.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:c7:7d:2a:99:3b:a6:2f:e3:35:59:80:7c:9b:23:61:a7:ca:
         d5:24:5e:7f:e2:03:97:07:df:2b:b6:7e:36:40:e0:69:5b:51:
         24:06:7b:74:a6:2b:37:5c:fa:8c:3a:a9:8b:a0:e1:fe:54:99:
         b4:fc:69:08:83:48:14:fd:4f:94:92:4e:37:ac:dd:70:cd:f1:
         6c:ce:42:95:3c:00:69:9b:ae:f5:e4:27:ab:17:85:bf:d6:45:
         e6:f4:32:74:e9:cc:ad:9b:a3:74:ca:bc:5d:a3:42:1e:6f:ee:
         63:cd:87:24:43:e4:a6:84:76:84:be:dc:15:07:68:76:f0:6c:
         4b:47:97:8d:63:86:1f:f0:55:03:08:6b:ee:9f:87:e7:93:e4:
         82:d8:c6:8e:1d:8c:e1:76:1c:09:9d:cc:17:6e:39:f9:49:97:
         12:d0:f8:bc:06:e7:0a:f4:58:b9:8e:37:b8:c8:6a:48:34:d0:
         ee:13:9b:74:03:5c:75:46:97:4c:e1:56:99:4c:e5:a4:98:7f:
         5b:00:61:d6:ab:29:ae:a9:d7:54:d7:8b:c4:bd:b6:70:54:a5:
         17:0b:86:af:20:4a:4f:81:7b:74:e3:02:12:d4:e8:67:e1:21:
         b9:0d:dc:a6:5d:84:e1:62:31:54:5a:05:97:77:b8:9c:d9:25:
         4d:44:c5:ff
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUPh5juN6GEeL47YcHAGzvNvS86f8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjNDQzM3NjlEOEZENjZFMzBGM0JBNkI5MjY0ODFGNjY0
QzdGRUQxMzAeFw0yNTEyMTkyMjQ4NDVaFw0yNTEyMjEwMDM4NDVaMDMxMTAvBgNV
BAMTKDFERDAyQ0M4NTFBN0M2MUZFNUI4RjZGRjhGREU1QjRERTA4MUZCQjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt8BtuMvrt/PXq5wO7k0R/1u0w
sMkt3kpB3SauwJikAjgQec109FCEuuRn/dnQD9VtmNLVl32rQmUzKJWsaS57z0Oa
8TQ+Cyfc0El1leCfM5xDWJArVaYX+x9sH3zoOpqeVE9GBu8a0LCQhVsZ+bbgtFMv
IN7/XTLFJc6GcFO+QTlf3rymJMHZDog3icGhga7fjiUeEg7+Wh7TxCDUlgS8OC6a
4LFtv4SlI8u58U58Fp+YVJ8sCq8+809ODU3ZSefwul/47hio5MZLjhdWoRSO910j
8KvXU/hDsqSGsR2u3TUKTsTOrMYEdCro3Gu0gze/igc2gzGDi0IghRt/AGNfAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUHdAsyFGnxh/luPb/j95bTeCB+7AwHwYDVR0j
BBgwFoAU88w3adj9ZuMPO6a5JkgfZkx/7RMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTgxZjk3ODItODk4ZS00YjgzLTk1ZTYtNGZmNGFiNzVj
OWRjLzEvRjNDQzM3NjlEOEZENjZFMzBGM0JBNkI5MjY0ODFGNjY0QzdGRUQxMy5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jNmZkNGVhMS1hMjY2LTRk
ZWEtYjQ4YS0xNWRhMzU0NTIxMDkvMi9GM0NDMzc2OUQ4RkQ2NkUzMEYzQkE2Qjky
NjQ4MUY2NjRDN0ZFRDEzLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
Lzk4MWY5NzgyLTg5OGUtNGI4My05NWU2LTRmZjRhYjc1YzlkYy8xL0YzQ0MzNzY5
RDhGRDY2RTMwRjNCQTZCOTI2NDgxRjY2NEM3RkVEMTMubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCKx30q
mTumL+M1WYB8myNhp8rVJF5/4gOXB98rtn42QOBpW1EkBnt0pis3XPqMOqmLoOH+
VJm0/GkIg0gU/U+Ukk43rN1wzfFszkKVPABpm6715CerF4W/1kXm9DJ06cytm6N0
yrxdo0Ieb+5jzYckQ+SmhHaEvtwVB2h28GxLR5eNY4Yf8FUDCGvun4fnk+SC2MaO
HYzhdhwJncwXbjn5SZcS0Pi8BucK9Fi5jje4yGpINNDuE5t0A1x1RpdM4VaZTOWk
mH9bAGHWqymuqddU14vEvbZwVKUXC4avIEpPgXt04wIS1Ohn4SG5DdymXYThYjFU
WgWXd7ic2SVNRMX/
-----END CERTIFICATE-----