This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft
File:                     8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft (raw, json)
Hash identifier:          y9g+N6hYE+uTDECUFtjfbNaQkSfD6Q95dJW2XdWgU4A=
Subject key identifier:   9B:8F:DE:F1:48:84:04:D5:2C:97:88:4D:B6:16:5D:A4:38:7C:59:C3
Authority key identifier: 8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C
Certificate issuer:       /CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C
Certificate serial:       7C6A35ED21D50BE5F36EB5519BBB578C7594A98E
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft
Manifest number:          02BC
Signing time:             Wed 17 Dec 2025 08:07:34 +0000
Manifest this update:     Wed 17 Dec 2025 08:02:34 +0000
Manifest next update:     Thu 18 Dec 2025 10:14:34 +0000
Files and hashes:         1: 326131343a373538313a343836303a3a2f34342d3438203d3e20313531353434.roa (hash: XJo8jS2djpRteJlKSIzBy0GSOcq3Jj/2wBDjV1PmcuQ=)
                          2: 326131343a373538313a343535353a3a2f34382d3438203d3e20323136333735.roa (hash: JVdP0q01IdpmOHNHM/8N7QIeZGO9fY1B0zhs290wioo=)
                          3: 326131343a373538313a343331303a3a2f34342d3438203d3e20323135313731.roa (hash: z2fbMMdTRhRUpcDHMD2rvY/J1s4P2i8N3FhzYltODNc=)
                          4: 326131343a373538313a343731303a3a2f34342d3438203d3e20313439363930.roa (hash: rLVUcUxyRgJtw6VSAGlKyA8uqmBel4P5gDB+BMhpgCc=)
                          5: 326131343a373538313a343835633a3a2f34382d3438203d3e20313431303637.roa (hash: 9VIFUmaELJ+SuXK7+C+ONAUKoDB5ufOLiduhS88tcKE=)
                          6: 326131343a373538313a343535303a3a2f34342d3438203d3e20323136333735.roa (hash: 33Hc4k2qb/SFtHgCtF148ZPS40TPUk0mIWne3Kl1fjs=)
                          7: 326131343a373538313a343635303a3a2f34342d3438203d3e20313335363539.roa (hash: 3t/0qmEuc7HUJ6jbuOuPnmd3ve4/XpcLhj4VdVBS4pk=)
                          8: 326131343a373538313a343833303a3a2f34342d3438203d3e20323135323231.roa (hash: j14pv+Fih0N85ic38d12TDY0uRhDLdNY7cvkmnI17jw=)
                          9: 326131343a373538313a343835663a3a2f34382d3438203d3e20323135333739.roa (hash: LiQaiw5undZF8O9ZPrbB+SuBZXPDpvcvnNafAQKgteo=)
                          10: 326131343a373538313a343332303a3a2f34342d3438203d3e2039343232.roa (hash: gQv5NI8fa+cTBzk0tpepQG6QGKXWkVIlxityrSNAUjQ=)
                          11: 326131343a373538313a343832303a3a2f34342d3438203d3e20323135323233.roa (hash: 8fwqZHGyIJyFYdJn0gwpv+qKZFLFFwexw2Z/QOknvfY=)
                          12: 326131343a373538313a343835303a3a2f34342d3438203d3e20323135333739.roa (hash: mgbh+id7sfJxNC8FBIA9w2AVClblyfoF7d8LLx0Ph9g=)
                          13: 326131343a373538313a343030303a3a2f33362d3438203d3e203434383137.roa (hash: 06Oq8kkXsOv0rKoRYz/dx2UXUSYf9kyOjrjjxWn2c2o=)
                          14: 326131343a373538313a343835653a3a2f34382d3438203d3e20323134363737.roa (hash: iHR6gaBLhEeuJStOmjFzEe4Moo+lPwxxC1xTUcqx6g4=)
                          15: 8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl (hash: AXcPxmHpk3poqd9bV4udxypVG5KSPwom1U1jBBXx5yg=)
                          16: 326131343a373538313a343536303a3a2f34342d3438203d3e20323135313731.roa (hash: QP4KPs363lKNvbDMC91nWR64EDb9a5wYXaiiUC4k7Hs=)
                          17: 326131343a373538313a343834303a3a2f34342d3438203d3e20323135323839.roa (hash: IeK6ZG/g9V25xfR3xKZZdyq5xuMwonnHdhMMCLRMWBo=)
                          18: 326131343a373538313a343934303a3a2f34342d3434203d3e20323135313731.roa (hash: 7nhFTtPjQhKd1Ac2yjZIA1kYzFwc8dF19rkGkZd+QFk=)
                          19: 326131343a373538313a343534303a3a2f34342d3438203d3e203434383137.roa (hash: lL21MUDpM3YDFXY+VNPjMEqMt9/EFafQb01ArsWLAjk=)
                          20: 326131343a373538313a343934303a3a2f34342d3438203d3e20313335363539.roa (hash: isp+v1bbWY3zX+eoFLAf4eK3r9/zMrMmocZ2PNCW2Rw=)
                          21: 326131343a373538313a343831303a3a2f34342d3438203d3e20323135363734.roa (hash: HscFYsQcMtvjpDQJk86+k68Lr7MoMlx0VU02QHyOcGk=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:6a:35:ed:21:d5:0b:e5:f3:6e:b5:51:9b:bb:57:8c:75:94:a9:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C
        Validity
            Not Before: Dec 17 08:02:34 2025 GMT
            Not After : Dec 18 10:14:34 2025 GMT
        Subject: CN=9B8FDEF1488404D52C97884DB6165DA4387C59C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:09:ea:1b:a4:ff:22:10:d3:9c:74:d5:1e:7d:
                    79:6c:ba:64:f6:bc:e3:db:e1:ec:21:46:50:96:9f:
                    98:fb:23:ae:7c:3b:e3:3d:7f:09:2f:21:c6:4c:d4:
                    51:7a:91:52:a8:ee:2d:83:da:75:24:35:9c:39:26:
                    9c:59:5e:b6:e1:63:aa:00:78:26:47:76:93:b4:eb:
                    88:03:ff:79:db:83:fe:ec:88:31:10:af:3d:51:00:
                    56:75:75:29:c5:e4:16:6d:89:fd:90:61:e8:cd:dc:
                    68:8b:86:d6:d8:08:96:fc:95:dc:d4:fa:7f:c4:c9:
                    ce:85:03:99:f7:3d:4e:6d:fc:c9:3f:aa:03:aa:ee:
                    78:6e:e4:e3:0c:11:ce:47:ae:5b:a1:85:41:38:e6:
                    8a:a5:b0:a2:7f:77:90:08:12:0c:35:62:8b:26:b8:
                    ba:c9:5d:db:70:7a:52:6b:d5:0b:ca:1a:1b:70:6a:
                    f2:44:5e:01:e7:75:88:cb:e3:a6:db:3d:7a:43:e8:
                    20:8f:af:f4:0a:40:83:d7:2c:07:7b:94:74:7c:31:
                    c3:79:cd:b8:ea:35:9e:80:5e:95:16:98:1f:e7:fa:
                    9d:c6:17:46:63:d4:39:7a:e6:a8:19:72:6d:ab:e3:
                    d2:6e:95:b5:44:e5:d6:70:90:2a:82:27:24:dc:3d:
                    ca:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:8F:DE:F1:48:84:04:D5:2C:97:88:4D:B6:16:5D:A4:38:7C:59:C3
            X509v3 Authority Key Identifier:
                keyid:8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:b5:ac:3d:c0:fc:a4:1e:58:be:51:b4:9b:d8:d9:38:83:2f:
         e0:41:be:3c:a3:f1:44:2e:da:c0:26:ae:e8:6c:f2:84:0d:77:
         73:74:b0:87:05:b6:34:97:54:29:5c:a9:18:20:d1:84:0b:6d:
         dc:bb:66:fe:49:cc:70:5d:ea:a7:0e:a3:14:c5:e2:7c:56:ae:
         94:a0:d1:b1:7e:7a:28:53:61:e2:85:4a:fd:28:fa:8f:77:40:
         74:f0:62:b1:72:f5:aa:9c:30:95:9e:12:ab:76:28:41:81:f8:
         92:67:7b:a4:60:d1:4d:75:c2:e4:27:63:dd:92:c7:1f:03:a7:
         ac:9a:27:06:8d:70:4f:a2:23:97:6c:43:8d:19:f6:83:8e:b0:
         da:f8:d0:94:00:a0:03:17:b1:3c:72:97:06:65:31:a2:da:f5:
         12:a6:01:33:52:24:92:39:36:8a:c0:ef:62:54:0a:f8:ab:d0:
         0b:e6:6b:4e:e2:4f:4e:86:5a:6c:52:9a:ca:e7:92:78:63:e8:
         52:69:45:70:7c:60:2e:fc:e5:42:65:1e:c9:eb:9a:00:70:0f:
         96:e8:6a:db:19:a3:47:fe:ec:15:af:fb:2a:0c:c6:7d:b8:d0:
         d7:3d:5e:21:ca:66:1e:ff:80:e9:f3:f3:b7:a9:10:ee:19:e1:
         46:54:eb:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 07:51:45 2025 by rpki-client