This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/9/46EF3896348D5F15EAE53B1980903A18328E4126.mft
File:                     46EF3896348D5F15EAE53B1980903A18328E4126.mft (raw, json)
Hash identifier:          AqdNd9PKrfECsSccBUT4Fdyv9mb/oOnpdDf3zjz36iE=
Subject key identifier:   72:60:CD:BC:2E:16:FD:E2:45:F7:B7:C3:AB:5C:90:28:C1:5D:B1:A6
Authority key identifier: 46:EF:38:96:34:8D:5F:15:EA:E5:3B:19:80:90:3A:18:32:8E:41:26
Certificate issuer:       /CN=46EF3896348D5F15EAE53B1980903A18328E4126
Certificate serial:       7DEE8F43450D0D5A31284765B67211B40B281FD5
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/46EF3896348D5F15EAE53B1980903A18328E4126.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/9/46EF3896348D5F15EAE53B1980903A18328E4126.mft
Manifest number:          D3
Signing time:             Sat 22 Nov 2025 06:00:02 +0000
Manifest this update:     Sat 22 Nov 2025 05:55:02 +0000
Manifest next update:     Sun 23 Nov 2025 09:06:02 +0000
Files and hashes:         1: 326130353a646663313a3530303a3a2f34302d3430203d3e203532303235.roa (hash: oiy30LDb7vTdVDftfrDltIplyhMOoStMOIgMHNj+sTc=)
                          2: 46EF3896348D5F15EAE53B1980903A18328E4126.crl (hash: cfu2Kbj5Khvfn7gR7nu0+7rmPo71hJVV8ruyaArW/CI=)
                          3: 326130353a646663313a3430303a3a2f34302d3430203d3e203532303235.roa (hash: 6ND8wDi/Ae2QJCAFqNwb9p7utV06LRSlH0HvemX13Fg=)
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/9/46EF3896348D5F15EAE53B1980903A18328E4126.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/9/46EF3896348D5F15EAE53B1980903A18328E4126.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/46EF3896348D5F15EAE53B1980903A18328E4126.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Nov 2025 09:06:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:ee:8f:43:45:0d:0d:5a:31:28:47:65:b6:72:11:b4:0b:28:1f:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46EF3896348D5F15EAE53B1980903A18328E4126
        Validity
            Not Before: Nov 22 05:55:02 2025 GMT
            Not After : Nov 23 09:06:02 2025 GMT
        Subject: CN=7260CDBC2E16FDE245F7B7C3AB5C9028C15DB1A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:48:29:1d:cb:b0:0e:fb:2a:b1:96:4a:ca:7a:
                    04:af:e6:1f:40:30:43:76:8b:b9:a4:ff:de:d4:b5:
                    bf:b5:0b:28:c9:bf:8c:4c:43:72:fa:1d:a2:df:cb:
                    1c:d4:fd:31:f9:ae:b6:74:bf:81:ae:0c:a8:ae:a5:
                    86:0c:5f:6e:a8:7f:06:6f:b4:56:51:68:23:0c:4b:
                    86:82:a8:cd:b1:d8:50:72:92:7c:cd:2a:3a:60:91:
                    80:b1:1d:30:ca:4e:2f:f8:36:c1:0f:3c:e4:4b:3f:
                    4d:e8:b1:59:97:28:82:40:69:d6:31:69:12:c4:b1:
                    91:2d:01:14:ea:bb:13:96:ed:ef:43:25:82:76:f7:
                    ae:d3:46:d3:50:6f:40:a5:7f:55:56:4e:03:59:df:
                    1d:82:69:67:ab:f3:7a:9b:ee:fc:14:b4:cd:6e:c2:
                    72:d4:6d:16:6e:14:da:82:82:51:dc:78:de:8c:32:
                    26:fc:9e:2d:e7:fe:2e:78:30:fa:3e:9d:a0:ca:30:
                    72:e8:9e:e6:e7:1a:7e:83:eb:93:c9:d7:8b:75:9f:
                    6e:25:2e:23:bc:98:b7:0e:50:0e:fd:29:e9:50:c7:
                    ee:68:03:e4:33:8e:0e:09:08:3d:f6:56:55:dc:ec:
                    a9:bc:f2:f6:41:8d:97:d9:1e:72:71:0e:f0:de:a5:
                    d9:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:60:CD:BC:2E:16:FD:E2:45:F7:B7:C3:AB:5C:90:28:C1:5D:B1:A6
            X509v3 Authority Key Identifier:
                keyid:46:EF:38:96:34:8D:5F:15:EA:E5:3B:19:80:90:3A:18:32:8E:41:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/9/46EF3896348D5F15EAE53B1980903A18328E4126.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/46EF3896348D5F15EAE53B1980903A18328E4126.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/9/46EF3896348D5F15EAE53B1980903A18328E4126.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:9b:4a:60:9f:d1:1c:db:4e:9b:69:e1:09:41:21:19:22:31:
         bd:8a:98:71:3e:d1:c7:27:fb:f8:f9:ff:57:5b:25:d9:52:7d:
         bc:04:12:00:e9:b1:fe:92:b9:d8:3d:9d:a4:ee:88:cc:2f:0c:
         af:c8:69:86:95:ec:ea:fb:93:8e:8e:39:96:b3:e7:2a:ce:55:
         02:ed:c5:53:2f:14:0f:8a:09:d1:8e:f1:ce:74:a9:af:b5:c6:
         39:64:4e:a3:51:bf:63:e7:38:45:f3:c5:e0:f2:c5:d4:19:ba:
         71:2e:db:7f:88:16:05:a0:b5:93:fb:76:7e:a8:ef:e6:cf:0a:
         7f:e8:ef:c1:10:b9:80:09:bd:38:8c:b3:e5:54:be:f7:21:67:
         fd:fa:35:56:89:8d:dc:cf:0d:ed:7f:5f:ba:43:5c:3b:12:ce:
         bf:ea:cb:5d:ac:1d:67:e9:61:9d:44:8f:33:42:52:a8:3c:7c:
         91:50:14:73:e8:e8:1e:d8:8a:59:4a:f9:c4:e0:9c:a9:7c:9f:
         f2:6a:64:23:74:8a:72:9f:bb:e6:0c:d1:75:66:b8:04:2c:8f:
         4c:65:7b:2e:dd:da:44:94:ef:3f:7b:1d:a9:fb:6b:3d:7b:7b:
         30:5b:27:5e:e1:02:1f:52:e1:cc:c0:5e:76:5a:03:8b:07:ab:
         06:2d:83:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:57:10 2025 by rpki-client