This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bfbe5957-324b-4d45-9b5b-d091cc750589/0/83666A3E14FA71085B875F98C756DDE1C40FC6BB.mft
File:                     83666A3E14FA71085B875F98C756DDE1C40FC6BB.mft (raw, json)
Hash identifier:          4Sk6h5lyGr87pRvSlsI/jsH0ekPWrpC34VzIn0bwOes=
Subject key identifier:   12:70:24:2B:0B:84:57:A5:5E:C7:B7:67:FD:87:20:03:66:6F:CC:05
Authority key identifier: 83:66:6A:3E:14:FA:71:08:5B:87:5F:98:C7:56:DD:E1:C4:0F:C6:BB
Certificate issuer:       /CN=83666a3e14fa71085b875f98c756dde1c40fc6bb
Certificate serial:       7012F54468184F1BE0F0D1D718BE86B86196E2A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g2ZqPhT6cQhbh1-Yx1bd4cQPxrs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bfbe5957-324b-4d45-9b5b-d091cc750589/0/83666A3E14FA71085B875F98C756DDE1C40FC6BB.mft
Manifest number:          0102
Signing time:             Wed 26 Nov 2025 17:59:33 +0000
Manifest this update:     Wed 26 Nov 2025 17:54:33 +0000
Manifest next update:     Thu 27 Nov 2025 20:08:33 +0000
Files and hashes:         1: 83666A3E14FA71085B875F98C756DDE1C40FC6BB.crl (hash: 16/dbGkDr/I/dUN6+ZjahkdEdAgXFggXCAxsLlgZCaQ=)
                          2: AS213768.asa (hash: h3rS3JyeiVp8FsFljS/efb0MZnxctnTuSuQjoONj0XI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:12:f5:44:68:18:4f:1b:e0:f0:d1:d7:18:be:86:b8:61:96:e2:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83666a3e14fa71085b875f98c756dde1c40fc6bb
        Validity
            Not Before: Nov 26 17:54:33 2025 GMT
            Not After : Nov 27 20:08:33 2025 GMT
        Subject: CN=1270242B0B8457A55EC7B767FD872003666FCC05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e7:5f:bf:f7:b8:2f:2e:e7:b5:75:57:99:aa:
                    a9:fd:55:17:de:3a:a9:00:19:b3:59:b4:d2:4e:cf:
                    c5:68:50:17:64:a3:64:8d:42:69:1b:25:28:07:09:
                    84:db:cd:03:11:b6:88:37:46:07:f3:62:25:2f:f6:
                    22:3e:44:90:b0:20:83:85:05:7f:87:08:02:c4:82:
                    03:16:bc:e3:d5:50:25:80:e8:5b:d9:ff:73:f3:24:
                    78:02:7a:96:61:57:19:06:f3:19:65:ce:07:d5:3d:
                    3d:fe:c0:7b:be:d4:92:35:ce:1f:79:49:10:5c:3d:
                    ab:fe:aa:60:4d:da:af:8c:4a:fc:c0:f8:af:92:b2:
                    44:e9:78:2a:8d:0c:e8:ee:48:05:b3:8d:fc:94:73:
                    2f:cc:54:4c:bc:1b:a2:e6:05:b7:98:47:e4:78:9b:
                    80:4e:23:b6:54:83:38:53:bd:7f:a8:b5:47:b3:b1:
                    d1:de:85:46:d1:79:72:87:53:4c:81:23:c5:b9:02:
                    7d:2c:6e:fd:64:de:72:ba:93:1e:8f:16:5b:8d:59:
                    af:d8:00:be:07:97:44:c4:d9:90:00:fb:3d:81:7e:
                    c0:d9:98:c0:91:82:8d:83:ec:f7:f7:84:f1:83:0b:
                    4f:3d:68:ef:15:ab:96:69:9c:a3:94:58:8e:22:32:
                    30:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:70:24:2B:0B:84:57:A5:5E:C7:B7:67:FD:87:20:03:66:6F:CC:05
            X509v3 Authority Key Identifier:
                keyid:83:66:6A:3E:14:FA:71:08:5B:87:5F:98:C7:56:DD:E1:C4:0F:C6:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bfbe5957-324b-4d45-9b5b-d091cc750589/0/83666A3E14FA71085B875F98C756DDE1C40FC6BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2ZqPhT6cQhbh1-Yx1bd4cQPxrs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bfbe5957-324b-4d45-9b5b-d091cc750589/0/83666A3E14FA71085B875F98C756DDE1C40FC6BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e5:83:03:d8:50:ed:7d:80:04:37:9f:c4:39:3c:2c:58:5c:a4:
         13:b1:70:d3:b2:4b:72:4d:e0:8d:92:09:8f:ec:d4:6f:3a:40:
         62:95:4d:bb:8a:b1:a2:d4:ce:36:81:03:67:da:7a:98:12:48:
         5a:38:a0:48:58:d7:00:ff:30:e7:9c:79:89:92:6c:e0:0a:64:
         f4:a2:92:b2:d9:b9:fe:25:e8:62:83:aa:75:a1:1d:63:f8:1a:
         1f:76:66:f1:89:8a:58:fb:63:1e:3c:72:d4:a6:b3:26:59:5b:
         7b:ce:1e:de:8b:68:65:f4:d3:84:0e:25:8a:84:be:36:0b:d5:
         e0:c7:b9:74:a5:49:2e:5c:4c:c9:ec:84:32:93:1e:ac:6f:0c:
         ae:61:98:4e:6f:05:0a:7b:78:a5:7a:e3:75:50:be:c9:2e:f3:
         1a:88:df:89:82:38:df:62:c4:71:30:bd:41:ee:38:28:b5:04:
         0a:94:05:7f:de:81:df:97:54:9d:9a:88:f4:2e:e0:0a:3f:54:
         3a:ff:b5:cc:4a:fb:15:dc:41:78:6b:42:20:2c:8b:33:12:06:
         e1:5b:a9:ae:b4:40:19:55:48:c9:cc:d2:ec:b9:1a:76:29:5c:
         68:57:85:c3:29:f3:28:95:ff:f6:1b:d5:60:a4:67:0c:ab:ee:
         77:f4:05:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 10:05:58 2025 by rpki-client