This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft
File:                     25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft (raw, json)
Hash identifier:          nk/dj9dKABzoGo/0MuWHp19VzIMxm6MW2jbLyAnK+BM=
Subject key identifier:   D4:2E:51:DA:65:55:89:BD:CF:18:4B:6B:92:3F:63:61:1A:06:D5:97
Authority key identifier: 25:BB:54:20:55:39:8C:AC:21:DB:24:07:FD:8E:7D:79:5A:10:F5:ED
Certificate issuer:       /CN=25bb542055398cac21db2407fd8e7d795a10f5ed
Certificate serial:       4F3C3A05D576FB408B5EB7AB5F635E9D80DB9122
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JbtUIFU5jKwh2yQH_Y59eVoQ9e0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft
Manifest number:          0107
Signing time:             Tue 18 Nov 2025 14:48:32 +0000
Manifest this update:     Tue 18 Nov 2025 14:43:32 +0000
Manifest next update:     Wed 19 Nov 2025 17:15:32 +0000
Files and hashes:         1: 25BB542055398CAC21DB2407FD8E7D795A10F5ED.crl (hash: AlhaiDk+GNoT+RPFBu+rmEGfE+cNfU0Cy6RMphGSFgc=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:3c:3a:05:d5:76:fb:40:8b:5e:b7:ab:5f:63:5e:9d:80:db:91:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25bb542055398cac21db2407fd8e7d795a10f5ed
        Validity
            Not Before: Nov 18 14:43:32 2025 GMT
            Not After : Nov 19 17:15:32 2025 GMT
        Subject: CN=D42E51DA655589BDCF184B6B923F63611A06D597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ed:3b:36:3c:f2:97:58:92:bb:69:00:31:d0:
                    5e:5b:d5:6c:f2:81:ba:5c:91:aa:a7:e1:04:7d:d1:
                    cb:9e:18:b1:fb:0e:58:59:6d:f9:79:e3:85:2c:79:
                    99:f7:ec:cb:54:3e:81:6b:c5:07:cb:78:8e:d4:80:
                    61:06:8e:85:16:d9:af:2a:07:5b:82:2b:88:fb:aa:
                    e8:f2:fc:7b:ac:0e:d6:aa:a3:54:3b:96:6f:78:7f:
                    09:4a:b8:a2:c4:ae:2e:2f:47:d0:4d:9b:c8:32:07:
                    33:d1:64:3a:79:4d:a3:c7:ae:91:a1:9d:e7:35:80:
                    11:07:c2:11:cd:07:26:37:b3:9c:44:42:49:7c:fb:
                    9a:b2:64:73:b0:d7:75:89:e8:11:d4:93:c9:71:21:
                    b5:9d:f5:d0:a4:bb:b3:d2:03:1f:36:13:a8:0a:63:
                    fe:68:31:c6:87:ec:bb:c9:1c:85:46:1a:a6:61:43:
                    a1:4f:fd:63:12:c7:09:79:e7:42:88:68:2d:ab:53:
                    3c:60:71:5d:3f:52:96:7b:2b:90:96:99:87:f1:66:
                    e3:9e:8b:5a:4d:08:b4:b8:6b:92:f9:86:9b:f5:ce:
                    96:0f:c3:db:e6:a9:4d:07:06:94:3c:0b:be:87:cc:
                    9a:87:d0:45:58:36:14:d8:24:d5:0a:41:81:46:9b:
                    93:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:2E:51:DA:65:55:89:BD:CF:18:4B:6B:92:3F:63:61:1A:06:D5:97
            X509v3 Authority Key Identifier:
                keyid:25:BB:54:20:55:39:8C:AC:21:DB:24:07:FD:8E:7D:79:5A:10:F5:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbtUIFU5jKwh2yQH_Y59eVoQ9e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/1/25BB542055398CAC21DB2407FD8E7D795A10F5ED.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:91:2a:9b:2d:89:19:3b:3d:de:6a:4b:56:0f:79:6e:27:bb:
         a6:65:09:6b:4e:85:bf:79:cb:b8:43:2c:95:db:76:ba:2d:54:
         7b:95:e9:78:5e:56:84:4a:5c:60:ff:ab:d8:b7:7a:f9:0b:c4:
         9a:30:46:95:34:03:2b:ee:b2:d1:36:a7:a1:3f:56:cd:d4:90:
         27:ec:51:80:0d:73:d9:34:67:17:da:d3:c4:2a:0b:d0:74:e8:
         be:fe:45:00:71:15:e6:06:7b:ca:f9:ff:27:a3:19:4f:eb:a5:
         9f:bd:18:87:69:c4:72:c5:55:84:99:92:51:45:37:c8:8d:af:
         71:f5:de:e6:ae:99:ee:96:7f:b8:4a:5a:bb:63:07:68:96:8c:
         62:9d:2d:a8:d4:ab:1a:09:a2:ba:51:62:0d:d6:6b:f2:55:57:
         3d:51:e7:25:5a:39:c4:32:d9:c1:a9:6a:39:db:35:87:ea:9c:
         0a:50:aa:fc:ff:83:fb:e8:2e:82:d7:9a:41:f8:75:0b:73:57:
         d3:37:99:b6:e2:44:4f:ab:dc:b9:33:db:ed:2a:7f:d5:31:d3:
         bb:ab:3e:50:c8:9f:ba:4e:2a:f8:86:88:43:66:22:83:29:12:
         43:7a:c8:4b:d4:b2:c9:1b:04:d7:27:d6:2b:b5:be:fa:4b:f6:
         48:e3:d6:fd
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUTzw6BdV2+0CLXrerX2NenYDbkSIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjViYjU0MjA1NTM5OGNhYzIxZGIyNDA3ZmQ4ZTdkNzk1
YTEwZjVlZDAeFw0yNTExMTgxNDQzMzJaFw0yNTExMTkxNzE1MzJaMDMxMTAvBgNV
BAMTKEQ0MkU1MURBNjU1NTg5QkRDRjE4NEI2QjkyM0Y2MzYxMUEwNkQ1OTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX7Ts2PPKXWJK7aQAx0F5b1Wzy
gbpckaqn4QR90cueGLH7DlhZbfl544UseZn37MtUPoFrxQfLeI7UgGEGjoUW2a8q
B1uCK4j7qujy/HusDtaqo1Q7lm94fwlKuKLEri4vR9BNm8gyBzPRZDp5TaPHrpGh
nec1gBEHwhHNByY3s5xEQkl8+5qyZHOw13WJ6BHUk8lxIbWd9dCku7PSAx82E6gK
Y/5oMcaH7LvJHIVGGqZhQ6FP/WMSxwl550KIaC2rUzxgcV0/UpZ7K5CWmYfxZuOe
i1pNCLS4a5L5hpv1zpYPw9vmqU0HBpQ8C76HzJqH0EVYNhTYJNUKQYFGm5NXAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU1C5R2mVVib3PGEtrkj9jYRoG1ZcwHwYDVR0j
BBgwFoAUJbtUIFU5jKwh2yQH/Y59eVoQ9e0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWJkMzA2YjQtZTVjMy00OGY5LWIyZWUtMzZhOWJkZGVk
OGM0LzEvMjVCQjU0MjA1NTM5OENBQzIxREIyNDA3RkQ4RTdENzk1QTEwRjVFRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0pidFVJRlU1akt3aDJ5UUhfWTU5ZVZv
UTllMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYmQzMDZiNC1l
NWMzLTQ4ZjktYjJlZS0zNmE5YmRkZWQ4YzQvMS8yNUJCNTQyMDU1Mzk4Q0FDMjFE
QjI0MDdGRDhFN0Q3OTVBMTBGNUVELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFJEqmy2JGTs93mpLVg95
bie7pmUJa06Fv3nLuEMsldt2ui1Ue5XpeF5WhEpcYP+r2Ld6+QvEmjBGlTQDK+6y
0TanoT9WzdSQJ+xRgA1z2TRnF9rTxCoL0HTovv5FAHEV5gZ7yvn/J6MZT+uln70Y
h2nEcsVVhJmSUUU3yI2vcfXe5q6Z7pZ/uEpau2MHaJaMYp0tqNSrGgmiulFiDdZr
8lVXPVHnJVo5xDLZwalqOds1h+qcClCq/P+D++gugteaQfh1C3NX0zeZtuJET6vc
uTPb7Sp/1THTu6s+UMifuk4q+IaIQ2YigykSQ3rIS9SyyRsE1yfWK7W++kv2SOPW
/Q==
-----END CERTIFICATE-----