This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ef2d9b6c-a420-4452-8141-33a81fd0a0bb/1/27E35648A7D9E7CCD41AC0B14FDD7341D3545CDF.mft
File:                     27E35648A7D9E7CCD41AC0B14FDD7341D3545CDF.mft (raw, json)
Hash identifier:          7OtLGI9pM5HxVotCvcGb6/sX4jviOgmLE+wjeudyfys=
Subject key identifier:   0E:A7:07:31:03:F8:EC:F6:64:04:19:FA:FC:B3:30:EE:BF:BA:D8:10
Authority key identifier: 27:E3:56:48:A7:D9:E7:CC:D4:1A:C0:B1:4F:DD:73:41:D3:54:5C:DF
Certificate issuer:       /CN=27e35648a7d9e7ccd41ac0b14fdd7341d3545cdf
Certificate serial:       588DC1D6056578803C192C0F3EE95456F506FD88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J-NWSKfZ58zUGsCxT91zQdNUXN8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ef2d9b6c-a420-4452-8141-33a81fd0a0bb/1/27E35648A7D9E7CCD41AC0B14FDD7341D3545CDF.mft
Manifest number:          02
Signing time:             Sun 29 Dec 2024 03:43:29 +0000
Manifest this update:     Sun 29 Dec 2024 03:38:29 +0000
Manifest next update:     Mon 30 Dec 2024 05:27:29 +0000
Files and hashes:         1: 323030313a3637633a6438303a3a2f34382d3438203d3e20323034303132.roa (hash: 4dXY2EVyaiRBDsqp2Ej9SNGFQzc3YOtH+5lc/nJyqLQ=)
                          2: 27E35648A7D9E7CCD41AC0B14FDD7341D3545CDF.crl (hash: ygHr7xGVKE5hEgqp7Auu5KFgPf5FcQNP1sAac5/Gx8k=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:8d:c1:d6:05:65:78:80:3c:19:2c:0f:3e:e9:54:56:f5:06:fd:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27e35648a7d9e7ccd41ac0b14fdd7341d3545cdf
        Validity
            Not Before: Dec 29 03:38:29 2024 GMT
            Not After : Dec 30 05:27:29 2024 GMT
        Subject: CN=0EA7073103F8ECF6640419FAFCB330EEBFBAD810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:76:3b:a5:d6:26:ff:ad:91:c8:7b:1d:ae:d7:
                    ab:d5:b9:03:2c:68:14:ff:af:b8:c0:71:3e:fc:a6:
                    35:4e:6e:83:a1:22:b3:43:02:31:b3:d3:67:e2:05:
                    ba:bf:10:97:fc:93:ec:69:b0:77:39:7b:fb:0b:2f:
                    56:40:65:3d:d7:cd:f6:27:63:54:35:2d:6e:0b:ed:
                    49:74:8b:e6:f5:5e:d6:c0:d4:ec:1e:cf:4d:64:84:
                    bb:8f:6c:f4:b7:7a:1d:60:8d:f9:c1:16:e6:5a:53:
                    f4:00:46:b8:cc:0f:cd:34:1e:7e:59:37:79:7b:de:
                    97:cf:6b:8f:04:a9:6d:d5:b6:48:3e:30:26:18:32:
                    c8:1d:5f:41:80:fa:51:99:ad:ab:5f:d6:6c:30:ac:
                    86:81:32:0c:2c:54:af:70:9a:6d:a8:75:52:e4:11:
                    86:a0:35:84:32:c0:60:c9:72:fe:29:0c:92:e7:1b:
                    b7:42:32:60:ac:be:b9:67:9a:2a:94:35:56:ce:c0:
                    f1:d9:91:8e:33:e5:ef:19:2d:ee:41:6f:6a:a2:b0:
                    66:69:26:17:f2:42:4d:51:9a:29:46:41:3a:f7:95:
                    43:1b:bf:2c:22:a4:25:82:96:d9:27:a1:86:48:a9:
                    d5:75:14:bc:ba:19:98:e1:6e:a1:7b:3e:3d:90:01:
                    66:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:A7:07:31:03:F8:EC:F6:64:04:19:FA:FC:B3:30:EE:BF:BA:D8:10
            X509v3 Authority Key Identifier:
                keyid:27:E3:56:48:A7:D9:E7:CC:D4:1A:C0:B1:4F:DD:73:41:D3:54:5C:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ef2d9b6c-a420-4452-8141-33a81fd0a0bb/1/27E35648A7D9E7CCD41AC0B14FDD7341D3545CDF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-NWSKfZ58zUGsCxT91zQdNUXN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ef2d9b6c-a420-4452-8141-33a81fd0a0bb/1/27E35648A7D9E7CCD41AC0B14FDD7341D3545CDF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:68:c7:18:3e:ea:d4:f0:39:fc:bd:24:fb:77:70:12:fc:5a:
         2c:6e:87:d5:9c:53:3f:56:83:9b:9e:41:76:80:3d:eb:ff:aa:
         c9:10:74:0f:a6:8d:45:0a:b4:8d:69:65:be:21:39:c4:e8:94:
         bc:0d:6e:48:76:02:75:4f:8a:72:63:66:b7:4a:16:4f:50:e6:
         ea:c1:18:51:ac:d0:73:bf:f5:3c:d1:46:b2:81:93:e1:2f:9c:
         ca:9d:30:89:90:ae:b1:27:1f:b4:1c:65:57:59:10:8d:c0:84:
         8d:6f:1b:f2:ea:ad:8d:b6:c6:9b:61:3f:f2:37:eb:35:83:79:
         c4:d3:e3:63:34:d4:3f:b4:fa:e1:1f:d0:c7:5c:79:32:15:8c:
         30:79:c4:84:df:86:b8:fd:a1:6f:cf:6f:be:f7:f1:ff:0d:a8:
         d0:73:ef:b7:08:e0:5d:a0:d4:1e:39:d3:43:28:29:81:46:98:
         a8:64:43:8a:3c:96:fe:d7:5e:83:ab:ec:37:34:bf:09:1c:1a:
         7c:26:e0:3d:4b:37:27:b3:63:79:ef:30:4f:20:d1:68:16:4c:
         fe:a4:e9:6b:57:e6:fb:84:7e:ac:9f:f1:9d:8b:61:68:74:71:
         f8:57:9c:6b:fd:a1:ac:2e:b5:92:df:cb:ba:e7:b9:97:63:64:
         c9:e7:2e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----