This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.mft
File:                     D74983C1FABA0CC1566F0601AFE11423E11B5171.mft (raw, json)
Hash identifier:          lpLfMigZdr/aUb+prl1xrA119C57/K2sPrwJmqUCxU0=
Subject key identifier:   38:C8:B4:18:B9:D4:52:FE:C7:E7:49:19:75:BD:3B:20:5B:15:FC:C3
Authority key identifier: D7:49:83:C1:FA:BA:0C:C1:56:6F:06:01:AF:E1:14:23:E1:1B:51:71
Certificate issuer:       /CN=4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c
Certificate serial:       4F78425AAF125043CD9076286C46157F4E11BABA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.mft
Manifest number:          0459
Signing time:             Thu 06 Nov 2025 00:05:23 +0000
Manifest this update:     Thu 06 Nov 2025 00:00:23 +0000
Manifest next update:     Fri 07 Nov 2025 02:44:23 +0000
Files and hashes:         1: 323630323a666137613a3a2f34302d3438203d3e203539393933.roa (hash: Lb+C3YJn54LxtUf0GyCu85JPoRsStAp6WFsAuvX2G+E=)
                          2: D74983C1FABA0CC1566F0601AFE11423E11B5171.crl (hash: +z8wekFcx+n1QDA8qQtF/nVJAf5ru529Pe95jX0ISHo=)
                          3: 32332e3135332e3233322e302f32342d3234203d3e203539393933.roa (hash: Xa94VPXxaKxQavq41HUhZQOU53EjRewYZdqWNPMbOkI=)
                          4: 323630323a666137613a3a2f34302d3438203d3e203537383730.roa (hash: WU0v1HqJ/fqmNqhafLrxAogIKJhoumuR2P22AE0ROAU=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:78:42:5a:af:12:50:43:cd:90:76:28:6c:46:15:7f:4e:11:ba:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c
        Validity
            Not Before: Nov  6 00:00:23 2025 GMT
            Not After : Nov  7 02:44:23 2025 GMT
        Subject: CN=38C8B418B9D452FEC7E7491975BD3B205B15FCC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d2:dc:7d:dd:ef:e0:90:d6:bf:60:62:d4:e4:
                    99:c2:54:0d:16:6e:55:6e:7c:d7:cc:98:23:4a:10:
                    8c:93:0a:b0:11:f9:5b:95:59:e4:c0:da:3a:e0:40:
                    f6:3a:79:19:f7:60:f8:87:0a:16:cc:06:6c:73:12:
                    88:2b:a7:12:f7:97:62:c6:05:fe:15:20:c1:32:f6:
                    0f:79:5a:99:3e:fe:3e:3e:2e:5f:16:f7:af:9c:87:
                    d5:45:ca:21:b6:44:db:ba:24:6a:ec:ff:2b:10:20:
                    63:18:1a:f6:0e:be:33:22:8d:9b:a0:64:63:03:84:
                    81:92:04:2e:45:2b:77:63:68:98:92:65:8f:ca:56:
                    5c:c3:a2:a9:1f:48:15:94:da:6b:78:3f:60:b1:13:
                    b9:0f:e6:32:2f:6a:48:12:0a:47:af:a8:27:7c:7f:
                    b7:e2:2c:1f:06:f8:66:af:4c:14:54:5c:bf:7d:e1:
                    67:d6:da:83:0f:61:c4:3e:c2:d7:07:c4:bc:e1:fe:
                    3d:c9:2b:98:e4:c8:94:cf:0c:36:5c:cb:fa:d8:67:
                    ff:29:c4:be:d2:8c:d4:80:cc:09:29:24:37:c4:70:
                    8f:19:28:df:52:88:36:a2:5a:c1:cc:a7:dd:c6:9f:
                    e4:5d:8c:c8:4e:83:fb:4c:30:62:41:5e:c0:35:2f:
                    d6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:C8:B4:18:B9:D4:52:FE:C7:E7:49:19:75:BD:3B:20:5B:15:FC:C3
            X509v3 Authority Key Identifier:
                keyid:D7:49:83:C1:FA:BA:0C:C1:56:6F:06:01:AF:E1:14:23:E1:1B:51:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/4b43c64a680efdc51a00463172b8f5aff945e0733fc49c2e4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/7/D74983C1FABA0CC1566F0601AFE11423E11B5171.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:d3:ef:2e:c0:20:8e:89:e4:dc:6e:d5:4f:dc:41:21:eb:fd:
         1f:ec:8f:b5:de:89:d9:03:c6:d5:7f:c7:e1:e1:e2:5f:09:d8:
         d7:3d:29:f6:2b:07:50:37:94:2d:ab:b0:60:7a:c9:c8:bb:95:
         fb:44:5e:e6:fa:fd:40:07:3c:38:80:fd:a4:ee:de:e8:fc:9c:
         75:d0:3c:3b:01:e5:7d:ad:d0:98:97:6f:60:9a:75:ce:5c:bb:
         85:8e:f9:92:81:24:63:65:18:ae:b9:6b:f2:95:a3:22:94:64:
         44:6f:a0:15:e8:4d:2b:ee:46:4b:02:39:0c:38:8c:e1:c6:26:
         b8:f4:dd:e9:ae:e9:b9:5f:98:5a:e9:cb:68:cb:8c:73:67:31:
         e8:e6:f9:65:4f:a6:a0:ec:93:ad:f6:3d:cc:46:b2:76:d8:a6:
         83:4a:fb:ae:3f:d2:27:d8:e6:a3:c8:9f:1b:76:5e:28:d2:ab:
         8a:d5:d1:a3:24:38:02:d5:f1:30:62:e4:2a:d7:bc:44:8a:82:
         37:12:bb:f6:de:95:9b:ee:73:5d:41:fe:06:91:c7:4f:e1:8d:
         32:0a:91:92:5a:38:0e:54:62:ee:9d:35:ef:79:94:3e:b3:2b:
         0e:24:43:79:0b:c9:82:36:e7:1d:e0:74:b7:ea:87:bc:06:bb:
         d7:38:9a:5c
-----BEGIN CERTIFICATE-----
MIIF1zCCBL+gAwIBAgIUT3hCWq8SUEPNkHYobEYVf04RurowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNGI0M2M2NGE2ODBlZmRjNTFhMDA0NjMxNzJiOGY1YWZm
OTQ1ZTA3MzNmYzQ5YzJlNGMwHhcNMjUxMTA2MDAwMDIzWhcNMjUxMTA3MDI0NDIz
WjAzMTEwLwYDVQQDEygzOEM4QjQxOEI5RDQ1MkZFQzdFNzQ5MTk3NUJEM0IyMDVC
MTVGQ0MzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3tLcfd3v4JDW
v2Bi1OSZwlQNFm5VbnzXzJgjShCMkwqwEflblVnkwNo64ED2OnkZ92D4hwoWzAZs
cxKIK6cS95dixgX+FSDBMvYPeVqZPv4+Pi5fFvevnIfVRcohtkTbuiRq7P8rECBj
GBr2Dr4zIo2boGRjA4SBkgQuRSt3Y2iYkmWPylZcw6KpH0gVlNpreD9gsRO5D+Yy
L2pIEgpHr6gnfH+34iwfBvhmr0wUVFy/feFn1tqDD2HEPsLXB8S84f49ySuY5MiU
zww2XMv62Gf/KcS+0ozUgMwJKSQ3xHCPGSjfUog2olrBzKfdxp/kXYzIToP7TDBi
QV7ANS/WTwIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFDjItBi51FL+x+dJGXW9OyBb
FfzDMB8GA1UdIwQYMBaAFNdJg8H6ugzBVm8GAa/hFCPhG1FxMA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2FlNmVkZWVjLTA4YmEtNGNkZS04OTc5
LTRmYWVhNGIxYmMxMi83L0Q3NDk4M0MxRkFCQTBDQzE1NjZGMDYwMUFGRTExNDIz
RTExQjUxNzEuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2Mt
NGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMTUwZTk4ZC04MGU5LTQ1ZjYtYmM2My02
YjQwYTNkNTllOWMvNGI0M2M2NGE2ODBlZmRjNTFhMDA0NjMxNzJiOGY1YWZmOTQ1
ZTA3MzNmYzQ5YzJlNGMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH
MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
YWU2ZWRlZWMtMDhiYS00Y2RlLTg5NzktNGZhZWE0YjFiYzEyLzcvRDc0OTgzQzFG
QUJBMENDMTU2NkYwNjAxQUZFMTE0MjNFMTFCNTE3MS5tZnQwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA
MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAIvT7y7A
II6J5Nxu1U/cQSHr/R/sj7XeidkDxtV/x+Hh4l8J2Nc9KfYrB1A3lC2rsGB6yci7
lftEXub6/UAHPDiA/aTu3uj8nHXQPDsB5X2t0JiXb2Cadc5cu4WO+ZKBJGNlGK65
a/KVoyKUZERvoBXoTSvuRksCOQw4jOHGJrj03emu6blfmFrpy2jLjHNnMejm+WVP
pqDsk632PcxGsnbYpoNK+64/0ifY5qPInxt2XijSq4rV0aMkOALV8TBi5CrXvESK
gjcSu/belZvuc11B/gaRx0/hjTIKkZJaOA5UYu6dNe95lD6zKw4kQ3kLyYI25x3g
dLfqh7wGu9c4mlw=
-----END CERTIFICATE-----
Generated at Sun Dec 14 11:38:32 2025 by rpki-client