This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft
File:                     B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft (raw, json)
Hash identifier:          aTrdbyH+hpXp6LsjuVBzpdx2KVPXJ8PF9BpWxHU2y9U=
Subject key identifier:   F5:2E:8F:D4:8E:FC:A8:98:CC:76:C6:92:C5:A8:89:20:8D:B4:E8:93
Authority key identifier: B2:17:28:4E:A3:D5:38:44:B2:AF:52:70:AB:BA:A3:10:5B:8B:3F:45
Certificate issuer:       /CN=B217284EA3D53844B2AF5270ABBAA3105B8B3F45
Certificate serial:       21F74A990245AC65E06831FF753EBFA0CB43620A
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft
Manifest number:          BC
Signing time:             Sat 15 Nov 2025 16:20:10 +0000
Manifest this update:     Sat 15 Nov 2025 16:15:10 +0000
Manifest next update:     Sun 16 Nov 2025 19:55:10 +0000
Files and hashes:         1: 326130613a363034303a396630303a3a2f34302d3438203d3e203531303139.roa (hash: 4Q4ROZYT81dIJHSkpaekI4Sbj95kc4xrlA3BgHVle7s=)
                          2: B217284EA3D53844B2AF5270ABBAA3105B8B3F45.crl (hash: vox5yRhoeXXBZJvNUQkEZuPpCzHCGtq1JV3MfwhZw54=)
                          3: 326130613a363034303a313330303a3a2f34302d3438203d3e203531303139.roa (hash: wn+vtltLdcEkhCOvzx/4fvtvh6EcQrGmjXhUFly5CfQ=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:f7:4a:99:02:45:ac:65:e0:68:31:ff:75:3e:bf:a0:cb:43:62:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B217284EA3D53844B2AF5270ABBAA3105B8B3F45
        Validity
            Not Before: Nov 15 16:15:10 2025 GMT
            Not After : Nov 16 19:55:10 2025 GMT
        Subject: CN=F52E8FD48EFCA898CC76C692C5A889208DB4E893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d0:54:74:1e:37:5d:c7:5f:00:a5:0e:05:34:
                    36:47:cb:3b:42:3a:65:3f:8b:1f:ad:a3:a3:66:ec:
                    46:3f:09:55:ce:e1:47:65:13:a3:8c:e1:d1:93:b0:
                    8a:4c:12:e5:f9:e5:8c:cb:a1:90:36:a3:b7:6f:75:
                    a6:09:97:38:84:6b:9d:31:04:de:b8:98:a4:4e:42:
                    8f:9a:1f:83:2d:30:c5:26:06:ee:f5:ed:c9:68:40:
                    f7:c6:5c:4b:14:ee:8d:b5:8e:c1:55:9e:22:7a:f4:
                    7c:73:87:6e:68:01:28:b3:4b:a5:3e:21:71:c7:55:
                    5a:17:d7:c1:84:50:b2:2b:c9:6d:fb:0c:ea:a0:e1:
                    92:fc:a6:24:09:bd:d3:99:84:e7:d9:61:6b:78:23:
                    c4:39:f9:ca:58:9a:e5:84:0c:04:a4:c5:b8:ae:6a:
                    a2:a4:f6:5c:87:57:17:ab:c6:d4:9a:00:a6:65:85:
                    3f:5c:54:61:61:61:30:ab:83:11:a2:6e:55:d5:6e:
                    c7:b4:8e:4b:b1:3c:f0:40:09:24:3c:38:1e:cb:c8:
                    d6:75:07:c3:f5:37:36:1b:b0:2b:28:01:48:e8:dd:
                    4b:f7:ee:d1:18:45:ab:58:cb:b8:70:d1:8c:2f:0a:
                    85:c9:6f:7f:08:e2:58:2b:0b:87:3f:47:bf:21:01:
                    33:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:2E:8F:D4:8E:FC:A8:98:CC:76:C6:92:C5:A8:89:20:8D:B4:E8:93
            X509v3 Authority Key Identifier:
                keyid:B2:17:28:4E:A3:D5:38:44:B2:AF:52:70:AB:BA:A3:10:5B:8B:3F:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/5/B217284EA3D53844B2AF5270ABBAA3105B8B3F45.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:4b:34:18:48:c8:d3:b5:2e:2b:1d:ff:e3:28:7c:89:e2:24:
         54:50:e1:d3:5c:f1:7d:81:3d:6c:1f:4d:9f:94:67:e5:e3:c7:
         c0:ff:51:8a:1b:24:ef:31:30:1a:d3:79:79:8d:a9:96:fa:7f:
         09:3f:70:60:ea:8f:64:5f:34:7b:94:e2:db:1f:e1:8b:1f:ab:
         29:bb:4a:6f:c1:ce:7d:f9:21:9f:a1:1e:43:79:f6:be:f4:02:
         6f:7e:44:74:58:8b:49:3b:dc:9e:1a:fa:b9:3b:55:31:2f:16:
         50:c4:d9:a6:cb:84:09:70:fc:6c:1e:ad:db:12:ef:d9:28:46:
         69:33:0f:76:64:4d:96:b2:97:88:a9:a2:a9:05:56:3d:a9:4b:
         52:ad:c7:ee:6e:52:c9:49:a7:dc:5a:05:14:a8:0d:24:17:b9:
         83:2d:28:d3:64:06:83:db:9a:33:96:7b:7b:16:e3:bf:94:47:
         80:a5:6d:7d:9e:e0:ae:06:01:63:c5:b3:ca:3e:03:01:7d:e6:
         b0:0f:b4:94:33:55:58:4e:83:bf:57:52:09:ba:ad:ad:0f:1d:
         ec:fd:f1:4d:68:22:f6:bf:a1:9b:05:c6:6f:d4:a9:d1:c0:5e:
         71:c3:37:bc:06:c3:04:c7:20:cd:33:05:fc:80:55:f7:05:cd:
         c5:e2:79:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----