This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
File:                     0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft (raw, json)
Hash identifier:          TTixPDpKcKSIFcAnFUG4AyNLFUu1moNBC4ZqgwH5wxs=
Subject key identifier:   5B:75:67:B0:75:3B:D0:A9:98:23:D6:E5:40:DC:66:34:6B:D7:3C:22
Authority key identifier: 0C:DB:32:D6:25:3F:BA:FE:07:37:8A:1A:30:94:6A:73:AE:C7:E3:D4
Certificate issuer:       /CN=0cdb32d6253fbafe07378a1a30946a73aec7e3d4
Certificate serial:       457D0D5AEB8DF5119D7E89CC375D88791C5DA8C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft
Manifest number:          0290
Signing time:             Sat 07 Feb 2026 03:04:01 +0000
Manifest this update:     Sat 07 Feb 2026 02:59:01 +0000
Manifest next update:     Sun 08 Feb 2026 04:16:01 +0000
Files and hashes:         1: 0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl (hash: MKShyIO0Gs9EoiJsp5v2dZ2AHNi+JU3wsbyoD7BSWI0=)
                          2: AS215084.asa (hash: wR2fAzUZv/jQXrAyasmXbzG2yVFO62Oxv2uJxp48f5o=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:7d:0d:5a:eb:8d:f5:11:9d:7e:89:cc:37:5d:88:79:1c:5d:a8:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cdb32d6253fbafe07378a1a30946a73aec7e3d4
        Validity
            Not Before: Feb  7 02:59:01 2026 GMT
            Not After : Feb  8 04:16:01 2026 GMT
        Subject: CN=5B7567B0753BD0A99823D6E540DC66346BD73C22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:32:12:8b:5d:3e:00:3f:1a:bc:7f:1f:83:25:
                    b6:6e:ae:4e:89:e5:4c:35:7b:e5:d0:b9:4b:8c:57:
                    82:9c:0b:0c:09:5e:0f:b5:aa:4c:97:0d:c5:54:34:
                    6f:f3:86:8e:9d:63:89:45:42:03:cd:2f:9b:10:fc:
                    23:3b:7e:a1:30:a5:68:a1:b4:df:c8:2e:f0:27:f5:
                    10:c0:d4:3b:90:9c:24:78:d8:ad:c7:01:3d:79:6f:
                    2e:cf:b7:93:19:2a:6c:5e:16:a5:47:1a:f9:f0:a9:
                    3c:53:10:c4:a4:7f:09:2d:62:9a:99:32:71:51:68:
                    27:7e:f8:d3:da:5d:f1:31:7f:80:ab:10:5c:c0:d9:
                    59:15:11:fe:02:b3:21:d8:cc:5c:3d:04:cd:ae:e0:
                    8e:37:9b:7b:dd:02:72:91:a4:93:91:89:10:9d:78:
                    61:b3:8e:3c:0d:00:1c:54:d6:f1:1a:78:da:11:35:
                    06:19:73:81:97:79:3b:0a:d6:32:c3:2f:7c:fb:f0:
                    4f:0c:dc:a8:84:9e:9e:3d:46:4b:b2:1a:8f:65:f6:
                    27:9b:07:a0:aa:a7:be:d5:7d:01:00:f6:96:b8:13:
                    7b:07:7f:c5:ac:4d:1d:c1:be:00:d3:e7:40:e3:a0:
                    73:63:b1:20:2e:81:30:3e:9d:99:32:bb:25:15:00:
                    d3:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:75:67:B0:75:3B:D0:A9:98:23:D6:E5:40:DC:66:34:6B:D7:3C:22
            X509v3 Authority Key Identifier:
                keyid:0C:DB:32:D6:25:3F:BA:FE:07:37:8A:1A:30:94:6A:73:AE:C7:E3:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNsy1iU_uv4HN4oaMJRqc67H49Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/0/0CDB32D6253FBAFE07378A1A30946A73AEC7E3D4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:24:3f:3f:4f:44:58:f7:30:60:b6:af:bc:63:6e:c7:63:8c:
         3e:fc:09:2f:d7:c1:14:93:c9:b1:a3:58:a1:18:1f:78:3b:72:
         3d:de:e9:6b:7c:d5:98:8f:fb:de:4a:96:37:01:0b:35:66:f7:
         2e:d8:d8:97:06:ac:b7:81:06:a0:d9:2c:d1:1a:e2:5f:3a:3c:
         9c:ea:72:8d:dc:5a:1c:77:b3:07:87:98:01:c8:5d:c5:31:98:
         a0:91:de:59:22:b3:61:1c:0b:14:f4:8c:41:1b:65:b8:66:5a:
         df:68:06:9a:b4:45:13:38:0a:27:0f:28:b2:fd:fc:1a:52:b8:
         ac:0c:cb:b0:c9:c9:c4:33:25:78:7a:00:d4:f1:b2:fb:a7:7d:
         20:fd:81:04:98:98:82:9a:66:c9:15:72:b4:4c:4f:ec:53:07:
         c4:45:2e:91:de:0a:ce:2a:70:49:03:b3:07:c6:22:8a:11:a2:
         b2:a4:1a:1a:ae:9a:d6:4a:72:0c:16:44:02:20:ba:86:58:ca:
         c6:84:7b:93:ef:b0:af:98:a9:d1:41:2e:05:36:48:b8:c3:a7:
         e2:27:b6:4a:b2:16:67:10:83:3c:3f:f2:c8:6d:11:57:75:97:
         05:62:dc:c6:fd:22:9f:5a:91:3d:df:19:32:3f:c9:fd:4f:57:
         a6:66:d1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----