This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft
File: 608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft (raw, json)
Hash identifier: L0lZZqOU2UH3MGVN4AN0sKis9XR+g6ki1vEPvNx7S2w=
Subject key identifier: 11:97:81:3C:EE:BB:7C:A8:21:AF:35:40:0F:62:7D:04:4E:46:25:EA
Authority key identifier: 60:8C:48:B9:A6:40:C1:4C:61:AA:D4:39:AB:1F:C4:4F:A2:A4:14:EA
Certificate issuer: /CN=608c48b9a640c14c61aad439ab1fc44fa2a414ea
Certificate serial: 5E4651A9A65401F65393A06F5E525EE8FE8E15B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIxIuaZAwUxhqtQ5qx_ET6KkFOo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft
Manifest number: FC
Signing time: Tue 16 Dec 2025 16:49:27 +0000
Manifest this update: Tue 16 Dec 2025 16:44:27 +0000
Manifest next update: Wed 17 Dec 2025 16:59:27 +0000
Files and hashes: 1: 608C48B9A640C14C61AAD439AB1FC44FA2A414EA.crl (hash: fBa19o8Fi4bSXM8DVIUObb+Mfkb0V+pJqsn6kYG2jiY=)
2: AS215375.asa (hash: LpUFum+e3/JZSud1FMmC87+zcGX6+jjYOpf3QCDbjko=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:46:51:a9:a6:54:01:f6:53:93:a0:6f:5e:52:5e:e8:fe:8e:15:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=608c48b9a640c14c61aad439ab1fc44fa2a414ea
Validity
Not Before: Dec 16 16:44:27 2025 GMT
Not After : Dec 17 16:59:27 2025 GMT
Subject: CN=1197813CEEBB7CA821AF35400F627D044E4625EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:88:4d:0b:a2:f0:20:c8:38:4b:39:c9:52:b7:
05:cd:52:44:3e:b7:96:88:53:b5:6a:d5:77:b2:c3:
a6:e1:64:3a:23:f0:94:d2:37:7c:c9:82:de:ac:c9:
7d:4c:2b:89:48:cf:54:c9:8b:89:18:bc:1d:86:c6:
5b:61:c1:1d:23:1b:ef:d0:7f:a8:68:45:b4:e8:db:
1c:4d:8c:9a:b7:1d:33:ec:b2:9f:6d:5e:38:09:18:
ed:dd:11:e0:19:76:27:49:e8:57:45:cd:78:2a:07:
68:e5:89:41:ce:1c:71:a3:eb:cf:34:35:38:c4:59:
22:5a:a2:2f:be:3e:d9:07:c6:57:cd:35:39:2b:5b:
2a:1a:aa:a5:43:0c:7b:99:e9:0f:34:09:34:42:c2:
6b:e1:ba:d4:79:53:bf:d7:ae:60:b7:85:2f:5d:1b:
ee:d5:3b:d2:e9:5d:bb:ad:51:1c:df:e9:2c:ee:88:
0b:4e:5f:b0:d8:ed:41:e1:a5:fb:1f:52:c5:16:ee:
a9:83:e9:ae:e9:89:18:b0:87:10:cd:39:2e:fc:a7:
51:29:f0:f4:ba:77:d5:83:54:8a:1b:5f:df:8e:41:
72:44:2c:9e:6b:7e:2e:9f:16:9b:8b:85:d3:e2:5e:
be:6c:54:43:6f:15:fe:55:52:59:8b:45:f2:c5:3c:
51:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:97:81:3C:EE:BB:7C:A8:21:AF:35:40:0F:62:7D:04:4E:46:25:EA
X509v3 Authority Key Identifier:
keyid:60:8C:48:B9:A6:40:C1:4C:61:AA:D4:39:AB:1F:C4:4F:A2:A4:14:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIxIuaZAwUxhqtQ5qx_ET6KkFOo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37460529-6992-4fc5-8a17-525b6b275556/0/608C48B9A640C14C61AAD439AB1FC44FA2A414EA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:3c:20:f8:24:33:48:ef:f6:c2:b6:fd:1b:77:c7:bd:be:e2:
e4:6a:32:6a:f9:24:c7:2c:b6:2b:6c:1a:00:c6:0f:0a:b4:4d:
51:07:73:65:c9:7e:f4:54:d4:e5:42:fb:7f:60:e7:6e:5d:f0:
d8:da:c0:c3:00:52:e2:47:12:3e:0f:9e:55:a1:16:08:c9:ab:
9f:97:96:7c:5b:14:34:50:d5:06:3d:aa:3b:6d:5b:5a:06:2b:
fb:5e:2e:83:a2:1b:46:b8:05:fb:d3:7f:a2:8f:e3:2d:93:d1:
6a:fa:9d:25:c8:c3:01:28:33:97:a5:83:bb:a8:f7:a4:a2:f0:
c0:92:15:ee:f4:5a:8f:cd:25:ee:51:e4:d7:04:10:f5:a7:cf:
ed:71:ab:51:01:61:dd:f4:3b:91:6b:6c:bd:26:ae:cb:6c:db:
3f:fb:39:cb:ab:51:67:6f:a7:be:8f:37:d8:cd:4a:85:28:ed:
20:ce:0e:c3:72:f9:b2:70:3c:1b:2f:ca:c2:59:b4:51:d8:b1:
c1:ed:d7:f9:0b:93:7a:67:f4:60:3a:ac:7e:7c:e3:77:cc:39:
30:39:a4:29:e2:0b:cb:44:15:b5:fe:1f:f8:0f:13:29:cc:9a:
e1:c9:e5:e3:e7:c5:d4:b7:3c:51:19:82:fb:84:38:28:93:de:
3f:3b:4a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 04:23:16 2025 by rpki-client