This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.mft
File:                     0BCF853E803055C859EF10545EB1D58071242ACC.mft (raw, json)
Hash identifier:          BIAOTytK4UXq6JCj/+SYLPPvohV+AAQ0nZpMvRLjjaA=
Subject key identifier:   7A:D8:2F:87:2D:16:1D:87:C5:02:7C:AA:99:1D:C9:E2:4A:E7:CC:FF
Authority key identifier: 0B:CF:85:3E:80:30:55:C8:59:EF:10:54:5E:B1:D5:80:71:24:2A:CC
Certificate issuer:       /CN=0bcf853e803055c859ef10545eb1d58071242acc
Certificate serial:       68CBADDBC7D68D512A925D12FB50EF5639069EDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C8-FPoAwVchZ7xBUXrHVgHEkKsw.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.mft
Manifest number:          06D9
Signing time:             Mon 09 Feb 2026 12:00:02 +0000
Manifest this update:     Mon 09 Feb 2026 11:55:02 +0000
Manifest next update:     Tue 10 Feb 2026 14:36:02 +0000
Files and hashes:         1: AS52025.asa (hash: WrQOZoXW9XpF+3296oKtRS8KKfSGfK/Fs8AR2+7y+fI=)
                          2: 0BCF853E803055C859EF10545EB1D58071242ACC.crl (hash: GvM2NZkdaRp7NHTa14hmXHfaP7bqk33LqlDXQCwD5LA=)
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C8-FPoAwVchZ7xBUXrHVgHEkKsw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:36:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:cb:ad:db:c7:d6:8d:51:2a:92:5d:12:fb:50:ef:56:39:06:9e:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bcf853e803055c859ef10545eb1d58071242acc
        Validity
            Not Before: Feb  9 11:55:02 2026 GMT
            Not After : Feb 10 14:36:02 2026 GMT
        Subject: CN=7AD82F872D161D87C5027CAA991DC9E24AE7CCFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:6f:89:3b:0f:82:44:cc:0e:54:bd:e1:b3:b3:
                    f2:c5:06:f0:32:69:74:60:4d:ff:20:66:3e:a7:ad:
                    c5:0a:dc:44:20:df:a7:f1:1c:4e:a1:e2:60:5e:f8:
                    d0:17:27:90:5f:73:40:09:49:22:12:8e:81:b5:4c:
                    ed:f8:84:fc:ba:e0:c2:aa:a8:e9:07:b1:ff:88:ad:
                    cd:34:53:55:48:2f:e7:6e:79:14:71:9c:91:8d:73:
                    0b:39:16:5e:2f:5f:d9:6f:c4:44:19:8b:ec:51:02:
                    7d:c5:3a:37:86:58:4b:37:0f:a6:b1:06:7e:f1:92:
                    3c:e8:d4:ef:bf:65:36:b5:13:93:fd:4c:62:9b:96:
                    bf:e1:4b:5f:ac:d4:13:57:70:74:c4:5a:20:87:7d:
                    c1:e5:cb:c9:79:4d:1e:1f:85:cd:8c:cf:98:42:27:
                    2b:58:30:97:06:8f:79:d6:42:62:fc:14:55:f7:39:
                    80:ed:83:b2:8d:9d:1c:c0:f6:b1:88:03:22:f3:60:
                    ff:43:1d:ee:62:7a:ba:b9:fe:16:43:dd:63:48:18:
                    e8:7d:d4:38:39:6a:d7:a0:a6:4b:80:9b:52:ed:81:
                    11:f7:c1:a7:fb:9d:25:0d:7e:45:fd:82:db:2d:8f:
                    ab:ad:4c:1e:20:24:d8:19:d9:1a:c2:19:61:63:47:
                    b4:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:D8:2F:87:2D:16:1D:87:C5:02:7C:AA:99:1D:C9:E2:4A:E7:CC:FF
            X509v3 Authority Key Identifier:
                keyid:0B:CF:85:3E:80:30:55:C8:59:EF:10:54:5E:B1:D5:80:71:24:2A:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8-FPoAwVchZ7xBUXrHVgHEkKsw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/0/0BCF853E803055C859EF10545EB1D58071242ACC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:58:f7:0c:80:60:75:56:35:e3:fc:03:3b:e4:d1:e8:b7:55:
         62:7e:54:e1:1a:48:ea:89:b1:0d:47:03:66:53:fe:b1:4f:a1:
         a2:59:fe:03:cb:aa:f7:23:47:a4:0f:65:9c:ce:c2:43:19:06:
         79:b2:8b:08:56:16:c7:3e:1a:ce:82:81:6e:95:fe:df:61:64:
         46:a6:25:a6:be:3c:7a:ea:23:93:49:47:2c:6f:a7:aa:ba:64:
         23:34:8d:b1:98:76:24:96:7c:c7:89:2a:61:22:cc:1b:ba:10:
         0a:72:47:eb:39:7a:9f:9c:88:47:fe:e9:85:98:6e:7f:2f:7b:
         07:0c:d1:42:02:26:ba:e7:3d:a0:f8:f3:3f:95:e9:bd:e7:d0:
         4f:69:66:89:0f:7e:43:a3:1d:8a:a2:91:0c:34:8e:e7:fc:7d:
         f4:f4:83:34:1c:f4:e5:07:ca:01:73:88:04:22:3d:56:12:4a:
         72:85:b9:e1:cc:76:a8:e0:65:a4:91:3d:fb:11:d1:fe:ee:92:
         62:a1:ab:f7:f6:0e:29:6f:d4:27:a5:dc:3c:c9:0b:86:e6:5a:
         02:41:c0:07:6e:bd:cf:8b:6c:b3:d2:31:3c:79:32:f4:96:29:
         57:c7:3e:e7:2d:51:36:bf:f7:f8:8a:78:a9:bd:28:71:7b:65:
         9f:bd:7b:60
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIUaMut28fWjVEqkl0S+1DvVjkGntswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGJjZjg1M2U4MDMwNTVjODU5ZWYxMDU0NWViMWQ1ODA3
MTI0MmFjYzAeFw0yNjAyMDkxMTU1MDJaFw0yNjAyMTAxNDM2MDJaMDMxMTAvBgNV
BAMTKDdBRDgyRjg3MkQxNjFEODdDNTAyN0NBQTk5MURDOUUyNEFFN0NDRkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqb4k7D4JEzA5UveGzs/LFBvAy
aXRgTf8gZj6nrcUK3EQg36fxHE6h4mBe+NAXJ5Bfc0AJSSISjoG1TO34hPy64MKq
qOkHsf+Irc00U1VIL+dueRRxnJGNcws5Fl4vX9lvxEQZi+xRAn3FOjeGWEs3D6ax
Bn7xkjzo1O+/ZTa1E5P9TGKblr/hS1+s1BNXcHTEWiCHfcHly8l5TR4fhc2Mz5hC
JytYMJcGj3nWQmL8FFX3OYDtg7KNnRzA9rGIAyLzYP9DHe5ierq5/hZD3WNIGOh9
1Dg5ategpkuAm1LtgRH3waf7nSUNfkX9gtstj6utTB4gJNgZ2RrCGWFjR7SxAgMB
AAGjggH5MIIB9TAdBgNVHQ4EFgQUetgvhy0WHYfFAnyqmR3J4krnzP8wHwYDVR0j
BBgwFoAUC8+FPoAwVchZ7xBUXrHVgHEkKswwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvMC8wQkNGODUzRTgwMzA1NUM4NTlFRjEwNTQ1RUIxRDU4MDcx
MjQyQUNDLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8v
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvQzgtRlBvQXdWY2haN3hC
VVhySFZnSEVrS3N3LmNlcjB5BggrBgEFBQcBCwRtMGswaQYIKwYBBQUHMAuGXXJz
eW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJhZG94bmV0d29ya3MvMC8w
QkNGODUzRTgwMzA1NUM4NTlFRjEwNTQ1RUIxRDU4MDcxMjQyQUNDLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdlj3DIBgdVY14/wDO+TR6LdVYn5U4RpI6omxDUcDZlP+sU+holn+A8uq9yNH
pA9lnM7CQxkGebKLCFYWxz4azoKBbpX+32FkRqYlpr48euojk0lHLG+nqrpkIzSN
sZh2JJZ8x4kqYSLMG7oQCnJH6zl6n5yIR/7phZhufy97BwzRQgImuuc9oPjzP5Xp
vefQT2lmiQ9+Q6MdiqKRDDSO5/x99PSDNBz05QfKAXOIBCI9VhJKcoW54cx2qOBl
pJE9+xHR/u6SYqGr9/YOKW/UJ6XcPMkLhuZaAkHAB269z4tss9IxPHky9JYpV8c+
5y1RNr/3+Ip4qb0ocXtln717YA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:28:57 2026 by rpki-client