This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1138842c-2919-4ca2-9501-e9aaeb6a29f5/0/0B79AD21B8CADBA7A18A49F28BBB52B772404034.mft
File:                     0B79AD21B8CADBA7A18A49F28BBB52B772404034.mft (raw, json)
Hash identifier:          5JBeZqHYAdnfBIPB00SbOHqWJirxIXzq3GeHhwLFs6w=
Subject key identifier:   45:40:1D:C8:7D:4B:BB:46:A3:91:CF:9E:41:83:7C:0C:A6:C7:51:3C
Authority key identifier: 0B:79:AD:21:B8:CA:DB:A7:A1:8A:49:F2:8B:BB:52:B7:72:40:40:34
Certificate issuer:       /CN=0b79ad21b8cadba7a18a49f28bbb52b772404034
Certificate serial:       1CA98D269C5F4AABC15C2571FEB33F36A9DCAA8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C3mtIbjK26ehiknyi7tSt3JAQDQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1138842c-2919-4ca2-9501-e9aaeb6a29f5/0/0B79AD21B8CADBA7A18A49F28BBB52B772404034.mft
Manifest number:          01
Signing time:             Sat 10 Jan 2026 13:14:59 +0000
Manifest this update:     Sat 10 Jan 2026 13:09:59 +0000
Manifest next update:     Sun 11 Jan 2026 13:19:59 +0000
Files and hashes:         1: 0B79AD21B8CADBA7A18A49F28BBB52B772404034.crl (hash: /gi2TRA9uzrI94kJSnlmstFxDa8ibfBo40RiU1SUPoc=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:a9:8d:26:9c:5f:4a:ab:c1:5c:25:71:fe:b3:3f:36:a9:dc:aa:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b79ad21b8cadba7a18a49f28bbb52b772404034
        Validity
            Not Before: Jan 10 13:09:59 2026 GMT
            Not After : Jan 11 13:19:59 2026 GMT
        Subject: CN=45401DC87D4BBB46A391CF9E41837C0CA6C7513C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f7:f3:3e:ee:09:fc:b8:61:30:9f:cf:ce:4a:
                    39:57:c0:76:dc:d8:4d:f2:11:fa:5e:4c:df:cd:1b:
                    25:e2:2c:2f:e5:15:e8:e8:12:9c:b2:a5:93:e4:ca:
                    0d:0f:48:81:7f:e6:bb:07:0d:58:1b:3f:02:2b:d4:
                    f7:43:ca:a5:df:34:9a:98:6a:74:5a:62:b4:08:18:
                    3f:eb:a6:98:70:64:ce:e7:2c:00:df:5d:a6:5e:52:
                    00:52:21:68:27:b8:6d:bc:f2:93:6c:7f:1c:f7:83:
                    a3:8f:3d:43:a1:b2:d4:61:b9:63:b9:b5:ab:6b:f5:
                    0c:48:5d:20:f5:65:66:55:38:40:b5:a7:54:92:71:
                    85:52:bf:4c:3d:87:77:87:34:ec:86:4c:0c:84:8f:
                    42:66:d6:ce:d6:53:0e:e4:37:24:f3:7a:94:dd:bd:
                    fd:61:72:0a:15:15:02:cd:68:b8:19:7f:c4:9d:5d:
                    41:7c:4c:ab:0f:2d:62:84:50:5f:72:47:e2:47:0e:
                    cb:86:51:5c:05:f3:7c:a6:73:da:c6:c0:ba:7d:74:
                    ba:e5:3d:15:26:b1:91:6e:ec:4c:3b:a3:62:1b:10:
                    e6:de:50:71:38:e3:1f:b7:39:e1:c3:04:32:51:a7:
                    c7:39:85:9f:3c:51:6b:15:ab:55:7c:45:5c:40:46:
                    cc:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:40:1D:C8:7D:4B:BB:46:A3:91:CF:9E:41:83:7C:0C:A6:C7:51:3C
            X509v3 Authority Key Identifier:
                keyid:0B:79:AD:21:B8:CA:DB:A7:A1:8A:49:F2:8B:BB:52:B7:72:40:40:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1138842c-2919-4ca2-9501-e9aaeb6a29f5/0/0B79AD21B8CADBA7A18A49F28BBB52B772404034.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C3mtIbjK26ehiknyi7tSt3JAQDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1138842c-2919-4ca2-9501-e9aaeb6a29f5/0/0B79AD21B8CADBA7A18A49F28BBB52B772404034.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:a7:95:1a:aa:8f:ce:4c:78:65:7b:10:b2:24:1a:9f:e1:c4:
         b2:a1:4f:f1:95:0b:3b:db:b8:ee:1f:b5:de:35:e6:c8:b2:bd:
         f2:af:90:1b:73:72:ee:94:65:1a:4f:05:f2:6a:60:7e:82:32:
         0e:1a:95:e6:c2:6a:17:2a:bc:ed:cb:72:7b:0e:6b:15:f0:c0:
         c9:e8:14:96:80:88:de:f5:87:bf:bb:d6:86:45:33:d5:db:33:
         00:f2:e2:c4:a9:ba:95:8f:51:22:1a:14:e0:9b:46:5f:3d:83:
         fb:b7:35:80:bd:fa:87:e2:4c:05:b8:ee:cf:39:1d:4e:59:94:
         6a:0d:fc:eb:3c:90:bf:ed:7b:0d:91:32:74:28:2d:6d:03:da:
         ec:99:c0:d2:7f:fc:63:79:0d:92:b7:4e:53:ac:7e:8e:88:2d:
         d0:08:76:03:f8:e0:99:b6:0c:fb:d2:e6:72:5f:a4:e5:12:57:
         7e:f0:a6:62:91:a4:94:d4:36:26:86:0b:a1:78:d9:75:07:9b:
         a4:b5:38:9f:c2:01:c4:96:f2:ce:36:79:51:19:87:7f:a7:be:
         95:97:91:62:61:45:5e:0d:43:ff:2c:81:4a:2b:6e:c2:93:f2:
         c5:31:a0:9e:03:2b:70:a8:fe:06:33:04:7f:2a:20:63:27:4e:
         6e:87:57:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----