This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft
File:                     2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft (raw, json)
Hash identifier:          LQzCyYjixAfIg4XkzG7H3fdF1nYz2zh9Fq0LkA3mppE=
Subject key identifier:   69:E7:DA:F7:7A:35:B7:9D:AC:16:00:41:03:3E:B7:B1:8A:74:C7:AD
Authority key identifier: 2F:08:CE:CD:5E:57:CB:A0:E6:8B:CA:7F:74:01:BD:5E:DB:38:7F:B8
Certificate issuer:       /CN=2f08cecd5e57cba0e68bca7f7401bd5edb387fb8
Certificate serial:       61DCFD6044ED76B60CB457D175086B4083195259
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LwjOzV5Xy6Dmi8p_dAG9Xts4f7g.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft
Manifest number:          0430
Signing time:             Thu 18 Dec 2025 17:25:12 +0000
Manifest this update:     Thu 18 Dec 2025 17:20:12 +0000
Manifest next update:     Fri 19 Dec 2025 19:19:12 +0000
Files and hashes:         1: 2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.crl (hash: 3bYd1j5u2HROkceXglaF6O1ZntkYzUrTOXf3LlR3cho=)
                          2: AS205329.asa (hash: VGL8fNaLY3qFu9mP5r7NvYdgKqN6s2IJxTCOZNeTahk=)
                          3: 323030313a3637633a323830303a3a2f34382d3438203d3e20323035333239.roa (hash: FrtXdPIEsvn1iYUedtjAO8L9S5GjDxa5ywOB8CuN7A0=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:dc:fd:60:44:ed:76:b6:0c:b4:57:d1:75:08:6b:40:83:19:52:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f08cecd5e57cba0e68bca7f7401bd5edb387fb8
        Validity
            Not Before: Dec 18 17:20:12 2025 GMT
            Not After : Dec 19 19:19:12 2025 GMT
        Subject: CN=69E7DAF77A35B79DAC160041033EB7B18A74C7AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7f:89:dc:2c:57:49:e0:b0:fb:d7:64:6c:e3:
                    99:43:29:43:48:44:7f:bd:0a:78:04:b8:67:25:82:
                    c1:13:8b:31:5c:f2:2d:12:44:9f:8a:cd:65:1b:66:
                    3c:25:a6:d3:dc:56:ee:30:77:cc:55:5b:4c:d9:29:
                    54:56:c0:03:fd:08:3b:94:13:f0:1b:30:1a:e5:ce:
                    88:aa:cd:22:81:37:c3:4a:07:f8:f1:4a:0f:e5:91:
                    c6:64:94:84:f8:35:9d:66:8d:bc:f3:07:12:7e:e5:
                    4f:21:6b:eb:ae:df:86:8c:d0:3a:8f:f8:7b:d0:2c:
                    7e:6f:5c:a4:92:91:90:0e:2e:d3:86:4d:ab:04:91:
                    bb:81:67:68:33:91:bf:73:6d:a3:11:94:37:1f:ad:
                    e1:c6:b1:db:52:6e:04:14:20:f4:82:b4:03:d3:2f:
                    11:10:bd:f4:07:00:84:61:07:a7:aa:15:ac:7d:7d:
                    8d:9d:95:b5:14:cd:f6:b9:30:45:fd:c8:e6:60:7a:
                    c3:d8:bb:89:35:0e:7e:a8:74:3f:73:9a:d8:73:66:
                    2f:57:f9:fc:66:85:78:f2:ed:a6:80:3e:11:22:c7:
                    34:72:90:1a:19:bf:5d:cf:32:8d:2e:02:32:67:d2:
                    7f:8a:ab:d2:8c:78:38:42:52:1a:b6:5d:30:a6:cd:
                    c4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:E7:DA:F7:7A:35:B7:9D:AC:16:00:41:03:3E:B7:B1:8A:74:C7:AD
            X509v3 Authority Key Identifier:
                keyid:2F:08:CE:CD:5E:57:CB:A0:E6:8B:CA:7F:74:01:BD:5E:DB:38:7F:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LwjOzV5Xy6Dmi8p_dAG9Xts4f7g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/2/2F08CECD5E57CBA0E68BCA7F7401BD5EDB387FB8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:da:fc:0f:dc:82:53:cf:62:a8:b2:11:a0:af:ba:e6:d9:8f:
         ab:09:d8:d1:77:46:2a:75:15:e0:f3:d9:6c:d5:7c:7b:ce:bb:
         dc:d1:bc:4e:37:b3:46:e7:4d:17:85:87:43:93:30:77:08:11:
         0f:1b:6a:b2:2f:72:e1:48:24:3b:1e:98:cf:25:6f:f3:13:29:
         2b:6b:45:0d:33:87:fd:21:8c:5d:a3:c0:c2:86:95:26:51:61:
         85:e6:85:b8:d1:98:2b:02:72:d9:43:74:fe:99:54:ee:40:56:
         e9:71:a1:f7:0f:6b:e2:a5:c9:4e:c7:41:a5:ab:c5:fe:26:2b:
         3b:94:36:07:58:99:48:91:1f:d1:ee:26:af:d0:5e:d8:3c:db:
         aa:fb:84:b8:51:dc:d2:3d:25:42:b4:ed:56:61:67:e7:9c:9e:
         10:ff:7a:60:76:0d:87:25:f8:18:15:56:2e:f2:0d:0d:93:3f:
         16:38:e3:84:35:bf:4a:a6:a0:79:cc:1f:97:e1:93:f9:63:02:
         4c:56:50:a2:48:5d:fa:b9:bf:28:f6:cc:83:29:30:6a:80:44:
         56:2d:68:61:43:98:4a:ca:23:c8:35:a5:dc:87:20:a8:57:50:
         fe:80:51:32:c6:86:ca:2f:be:57:90:13:86:58:4e:7f:1b:40:
         55:57:ad:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----