This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.mft
File:                     946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.mft (raw, json)
Hash identifier:          hN1yDCEUu6ltjLCf9bDP+tXQuc+GmhW/Lp7yNJ2xhUM=
Subject key identifier:   B0:FF:E1:EB:07:D7:ED:E5:0C:BB:3B:24:6B:47:0F:4C:64:32:90:F5
Authority key identifier: 94:6D:E1:5D:34:BE:AE:24:E2:9E:A1:6A:3F:E1:E6:59:1B:27:AD:9C
Certificate issuer:       /CN=946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C
Certificate serial:       5EDFCA650B5E73BFF60A17439B2170389F84400A
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.mft
Manifest number:          F6
Signing time:             Tue 18 Nov 2025 10:43:32 +0000
Manifest this update:     Tue 18 Nov 2025 10:38:32 +0000
Manifest next update:     Wed 19 Nov 2025 13:12:32 +0000
Files and hashes:         1: 946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.crl (hash: MUwKrNrppV20k4q4J0qQMB0KTI/dTgE7flT7qqfvqk0=)
                          2: 326131343a373538343a333030303a3a2f34382d3438203d3e20313532333638.roa (hash: MnToG5/hHH9Scp/i63sn6+7U3FU6WhprF2dCg9QmzZ4=)
                          3: 326131343a373538343a333030323a3a2f34382d3438203d3e203530313034.roa (hash: Crxg8Afd9H4uvcM/AEMgGkuEVpajXoOdPvRiA2PLFc4=)
                          4: 326131343a373538343a333030313a3a2f34382d3438203d3e20313532333638.roa (hash: RycjpThYIZhrgAMUdYbKLisjcTcczyRyV0B6ob/yXcs=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:df:ca:65:0b:5e:73:bf:f6:0a:17:43:9b:21:70:38:9f:84:40:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C
        Validity
            Not Before: Nov 18 10:38:32 2025 GMT
            Not After : Nov 19 13:12:32 2025 GMT
        Subject: CN=B0FFE1EB07D7EDE50CBB3B246B470F4C643290F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8d:33:cc:46:f6:c8:1f:71:8a:65:06:43:5f:
                    58:1a:14:4b:a2:99:1c:19:93:8c:f7:88:c6:bc:e1:
                    26:78:e1:3f:72:dc:28:d7:1a:20:29:22:d5:61:b5:
                    58:e4:4d:85:6d:15:4c:4e:c3:70:16:84:74:3c:0b:
                    4f:0e:e1:ca:1b:34:55:11:2d:ac:9d:96:12:00:41:
                    fa:6e:ab:20:4c:19:59:c0:e6:f2:7f:53:4e:a1:e1:
                    8c:65:d0:4c:65:26:b5:88:ff:18:38:f2:ae:ab:fb:
                    bc:11:c2:af:29:4e:f2:61:6f:a8:66:51:d3:2a:08:
                    cf:f7:43:93:14:51:7b:c5:9d:b7:3d:54:e0:dc:1d:
                    67:57:cc:5e:a3:b6:83:1e:36:c3:d0:d1:a4:9d:4f:
                    b3:b1:f3:46:89:49:43:45:9a:23:40:7f:01:cd:c1:
                    f2:82:3c:d0:cc:df:f6:9c:98:79:e2:da:d1:df:8b:
                    ba:bd:b5:c1:16:8d:0a:63:a8:1b:b3:a3:8e:8c:74:
                    e2:bc:4a:ed:6f:4a:b4:cc:a6:5a:c1:d4:06:52:12:
                    ca:97:21:57:3b:f3:49:80:e8:7c:2c:1a:58:25:87:
                    2a:90:73:3f:a8:ee:95:ba:31:93:3a:54:26:1a:05:
                    8e:35:37:2f:05:2e:da:71:7a:e9:0e:cf:c4:93:d0:
                    9a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:FF:E1:EB:07:D7:ED:E5:0C:BB:3B:24:6B:47:0F:4C:64:32:90:F5
            X509v3 Authority Key Identifier:
                keyid:94:6D:E1:5D:34:BE:AE:24:E2:9E:A1:6A:3F:E1:E6:59:1B:27:AD:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:51:5a:d3:96:d7:b1:7b:f3:18:59:bb:19:9f:c8:c4:fd:5b:
         16:3d:45:4a:94:0b:3c:34:8d:8e:dc:0f:ad:52:19:a2:41:61:
         50:48:50:7f:ac:dc:ef:fc:5c:da:0b:44:32:55:1f:73:6a:c4:
         25:e8:8b:38:45:cc:1c:9f:ea:8d:8a:fa:43:96:97:df:49:99:
         1c:9d:bd:f6:3a:97:d8:6e:31:1b:cb:9a:ed:d4:18:39:e3:39:
         1b:3b:c8:20:c1:06:b8:73:2d:32:15:49:cb:57:f9:9e:53:00:
         70:c8:eb:00:bf:ae:e4:7c:9b:88:3b:62:a6:fd:a4:53:7f:68:
         fb:74:ac:fc:4a:1a:39:18:43:98:0c:5d:91:72:e1:1c:c5:ca:
         26:a8:ed:1f:9b:f5:bb:99:d2:6e:d2:35:03:6c:d4:94:13:0e:
         89:cd:10:22:84:3a:f1:f3:7e:84:ef:49:2f:ac:c1:3f:db:a5:
         48:c9:19:e2:94:fe:fa:2b:5d:6b:69:4f:04:3e:07:af:87:cf:
         dd:8b:a6:39:64:70:f9:3a:b9:d8:74:ea:87:7f:05:8e:81:a4:
         6f:fa:62:61:ec:ce:5a:09:cb:e3:9b:70:65:51:15:5b:56:74:
         34:74:3c:7a:8b:3b:1b:42:6f:91:13:29:77:d1:3e:60:00:3c:
         c4:7d:de:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----