This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/0/D2EA6280FF27EA14BC73A6B267953CA1E6F9F507.mft
File:                     D2EA6280FF27EA14BC73A6B267953CA1E6F9F507.mft (raw, json)
Hash identifier:          KLJaxZB2Kyi17je22PGhUJhuNUEh9gQolInrV+UYTkI=
Subject key identifier:   82:06:B9:7B:69:F3:53:09:6C:11:EB:15:43:95:26:D8:35:38:34:44
Authority key identifier: D2:EA:62:80:FF:27:EA:14:BC:73:A6:B2:67:95:3C:A1:E6:F9:F5:07
Certificate issuer:       /CN=d2ea6280ff27ea14bc73a6b267953ca1e6f9f507
Certificate serial:       7EAD7516F3F3E024A6AAF39B4460C533F6A1990C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0upigP8n6hS8c6ayZ5U8oeb59Qc.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/0/D2EA6280FF27EA14BC73A6B267953CA1E6F9F507.mft
Manifest number:          AE
Signing time:             Sun 14 Dec 2025 11:36:02 +0000
Manifest this update:     Sun 14 Dec 2025 11:31:02 +0000
Manifest next update:     Mon 15 Dec 2025 14:51:02 +0000
Files and hashes:         1: AS213605.asa (hash: PImq/STj5z7YefC4o48yxpoEJB63kxHkwnSeGf51b4A=)
                          2: D2EA6280FF27EA14BC73A6B267953CA1E6F9F507.crl (hash: X7fgFXnPkaMRqN34+U9B9lcy984j9PYRB0Oe6JJbmsw=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:ad:75:16:f3:f3:e0:24:a6:aa:f3:9b:44:60:c5:33:f6:a1:99:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2ea6280ff27ea14bc73a6b267953ca1e6f9f507
        Validity
            Not Before: Dec 14 11:31:02 2025 GMT
            Not After : Dec 15 14:51:02 2025 GMT
        Subject: CN=8206B97B69F353096C11EB15439526D835383444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:99:d3:8f:1c:d1:e4:fb:b6:a0:77:89:04:12:
                    c8:78:f6:41:7a:17:34:78:14:d4:a5:78:3f:90:b3:
                    c0:b4:db:78:d3:ab:50:83:d5:2f:3e:b1:f9:ea:d7:
                    29:32:71:ec:2f:b2:b6:37:a7:34:67:ec:1e:0b:5a:
                    b9:d0:48:3d:a9:c8:39:9d:ed:27:4e:24:98:2f:80:
                    a7:db:fd:9e:ba:5c:8c:f4:63:fd:c1:81:61:ff:0b:
                    45:27:b3:2d:7f:d6:c9:d4:50:20:90:48:0a:98:30:
                    32:18:1c:7a:c6:1a:19:71:e9:a5:b6:0b:f3:a7:1d:
                    c1:94:55:82:b6:88:6d:d6:b2:64:64:34:7a:63:ef:
                    16:86:ba:cb:fe:7b:59:b5:13:6e:a9:7f:ef:3f:9a:
                    fe:70:9a:d8:21:24:80:62:96:65:5e:17:db:2f:3c:
                    45:fc:01:28:67:ea:15:c3:81:23:3a:f3:0c:23:ad:
                    db:d3:f5:ff:63:e4:7b:70:53:a2:e1:b4:a6:7b:eb:
                    41:26:3f:8b:74:00:1b:69:23:7d:92:a5:c2:e0:d6:
                    51:a2:50:db:b4:01:26:d6:3b:6a:dc:07:9c:71:68:
                    86:8e:bd:57:66:2f:cd:78:99:bb:34:86:08:19:8c:
                    42:e5:3f:ab:76:90:5a:f7:6c:f4:e7:3e:17:57:a8:
                    c0:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:06:B9:7B:69:F3:53:09:6C:11:EB:15:43:95:26:D8:35:38:34:44
            X509v3 Authority Key Identifier:
                keyid:D2:EA:62:80:FF:27:EA:14:BC:73:A6:B2:67:95:3C:A1:E6:F9:F5:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/0/D2EA6280FF27EA14BC73A6B267953CA1E6F9F507.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0upigP8n6hS8c6ayZ5U8oeb59Qc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/0/D2EA6280FF27EA14BC73A6B267953CA1E6F9F507.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:8a:38:e9:94:d6:61:6b:ef:0b:e5:cc:d2:6c:f1:42:80:a1:
         2d:17:1f:b9:60:2e:75:93:a2:bc:aa:21:40:f7:25:d3:98:95:
         b3:ba:7d:90:27:11:91:49:e5:a7:1e:72:4a:aa:85:4d:35:8a:
         9f:ac:ce:e6:19:da:ce:03:1e:23:3b:27:f8:22:df:62:40:ec:
         ba:b3:22:a8:b4:26:b4:ac:05:a1:bb:c0:ee:69:3a:1f:44:01:
         61:a6:ac:ac:84:9e:2a:6c:68:d5:74:7f:f8:5e:3e:30:27:8e:
         4a:34:87:08:ab:69:6b:5b:ed:38:91:90:fa:ed:ad:23:b8:fe:
         cc:d9:af:da:ab:29:1b:38:ef:ed:bf:f1:56:d6:59:7a:3f:05:
         b0:a1:99:a2:d5:64:30:3a:1d:78:26:fc:9f:68:8e:37:7b:65:
         4c:7a:b2:4b:ca:fb:50:5f:23:2c:1d:f5:a4:0b:1a:4b:0a:fd:
         df:1f:13:a3:f9:82:4d:81:02:b1:8e:c2:10:94:cb:5f:53:40:
         d6:4d:52:48:9f:8e:67:e2:7d:a0:c4:f9:ea:3c:70:65:81:8a:
         2e:4d:8f:0d:ae:3a:e9:60:ed:3f:cb:72:98:fa:df:3e:09:64:
         2f:b3:91:f9:f4:55:34:94:a7:b8:ef:47:ed:a4:82:f6:44:a2:
         86:03:46:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----