This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.mft
File:                     6578E79662000496EB1540D8BD8FA65ED8D63A62.mft (raw, json)
Hash identifier:          +sDq1gSHmgzLxM7e8n9sCFY7bpFZjPUDdxWJxz026ZU=
Subject key identifier:   80:05:CA:28:6F:F9:86:06:1B:AD:AB:EB:FD:3E:CF:DD:78:35:BA:EB
Authority key identifier: 65:78:E7:96:62:00:04:96:EB:15:40:D8:BD:8F:A6:5E:D8:D6:3A:62
Certificate issuer:       /CN=6578E79662000496EB1540D8BD8FA65ED8D63A62
Certificate serial:       396B04AAE4DDCF002D32F41928299EF9B152E387
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6578E79662000496EB1540D8BD8FA65ED8D63A62.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.mft
Manifest number:          85
Signing time:             Tue 18 Nov 2025 12:28:32 +0000
Manifest this update:     Tue 18 Nov 2025 12:23:32 +0000
Manifest next update:     Wed 19 Nov 2025 14:49:32 +0000
Files and hashes:         1: 38352e3135352e3232372e302f32342d3234203d3e203332323030.roa (hash: u3B6KKBKIUk9SO5JxQD+EeR9cSC3pRMQPnPBIW/RPYA=)
                          2: 38352e3135352e3232372e302f32342d3234203d3e203530313034.roa (hash: ocAxx23XjwXyOYOHcEuZaqgQEocGKpcgw1PpjzeOLXQ=)
                          3: 6578E79662000496EB1540D8BD8FA65ED8D63A62.crl (hash: FTmnBok3B8Ja72yFeVbGNBabbHqRHNoW+e2iPT2XiTc=)
                          4: 326130363a613030353a6432643a3a2f34382d3438203d3e203530313034.roa (hash: CAs4yn2E+Z/tR5i90G5tFQhJLWheBQDwrBHMrZXdGBo=)
                          5: 326130363a613030353a6432643a3a2f34382d3438203d3e20313532333638.roa (hash: 52mHsWa4VgNp8igpY75YRE/bqiZx2ZdwnVE8gr1/unY=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:6b:04:aa:e4:dd:cf:00:2d:32:f4:19:28:29:9e:f9:b1:52:e3:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6578E79662000496EB1540D8BD8FA65ED8D63A62
        Validity
            Not Before: Nov 18 12:23:32 2025 GMT
            Not After : Nov 19 14:49:32 2025 GMT
        Subject: CN=8005CA286FF986061BADABEBFD3ECFDD7835BAEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:80:21:ff:e3:39:00:77:8e:0f:58:e3:65:4a:
                    40:4f:43:3e:c5:db:c8:66:16:03:a9:36:c8:23:01:
                    da:b6:ac:7f:3d:f3:50:41:47:f7:d2:04:6b:5c:11:
                    00:cf:d2:d8:00:e0:19:9b:68:b5:9d:2a:c2:a4:96:
                    65:7a:f9:99:68:c5:8d:34:0c:e2:6d:9b:33:cd:96:
                    5e:47:31:60:95:c8:8f:7d:9a:81:19:bc:5d:91:72:
                    f5:6e:90:ce:99:3c:ae:af:df:8f:19:ba:1d:6a:14:
                    e0:8d:43:3a:35:0e:ed:03:21:09:9d:ba:e1:74:c9:
                    36:99:7a:bf:52:ae:79:44:8c:de:71:74:87:03:e3:
                    53:9e:48:1e:b2:9d:3c:78:69:05:ad:51:3d:4b:60:
                    37:93:5c:f9:c8:ce:83:9e:6d:bc:66:56:0d:e4:5d:
                    d1:09:22:42:e8:74:38:25:51:38:6f:29:fe:77:7b:
                    1a:e8:56:9f:2f:0f:bb:4a:f9:0a:e6:0d:10:a1:a1:
                    f8:1b:9e:a0:a5:bd:e8:63:4d:38:69:bd:60:08:f6:
                    a5:42:4f:50:87:bd:50:0f:f0:2b:d5:1e:d5:59:8c:
                    a1:5d:d7:e6:03:7b:92:db:80:29:73:18:c4:d4:35:
                    0e:98:74:8c:f3:cf:3d:d4:ec:3b:fb:54:ae:a2:5f:
                    9d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:05:CA:28:6F:F9:86:06:1B:AD:AB:EB:FD:3E:CF:DD:78:35:BA:EB
            X509v3 Authority Key Identifier:
                keyid:65:78:E7:96:62:00:04:96:EB:15:40:D8:BD:8F:A6:5E:D8:D6:3A:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6578E79662000496EB1540D8BD8FA65ED8D63A62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:73:06:eb:29:8f:88:1e:1e:2a:dc:45:53:e0:79:06:8c:0f:
         d1:c9:30:2b:5f:4a:ab:ef:3a:a3:db:b4:ae:28:b7:4e:f3:88:
         31:76:1f:14:35:88:1f:86:b8:45:84:af:2d:0c:9f:32:b9:90:
         c5:b9:aa:54:16:3d:f8:b6:5d:4c:77:62:27:f6:33:39:72:5c:
         36:f6:f1:2d:18:fc:72:db:5b:12:c1:26:27:10:0b:6c:7c:b4:
         8d:aa:e9:18:57:ba:38:b9:ca:df:36:74:10:f6:d2:f4:6d:2c:
         8a:56:d0:5a:4e:36:09:cb:bc:c2:17:5c:d1:22:df:bf:09:e7:
         24:5f:20:52:8c:cb:3e:ce:24:4c:71:cd:c8:7c:2e:1a:bc:50:
         9f:20:05:74:c4:90:70:10:49:4e:d2:94:d6:c9:c1:e7:1a:c5:
         05:62:98:69:14:8e:28:15:a5:a4:79:3c:ae:3e:87:6a:4c:29:
         04:d6:ab:8c:85:95:7b:ee:58:43:6d:66:06:da:a3:37:e6:29:
         15:da:cd:1c:24:e8:8b:de:d0:14:fe:88:3f:4d:a5:99:64:07:
         92:c1:c4:e1:db:84:90:d8:4c:41:a4:ea:0c:0a:1a:5b:50:18:
         4d:a9:8a:3c:9d:2c:48:9d:56:a9:87:9d:6e:f7:2c:75:36:d4:
         2b:82:b1:ee
-----BEGIN CERTIFICATE-----
MIIFbTCCBFWgAwIBAgIUOWsEquTdzwAtMvQZKCme+bFS44cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjU3OEU3OTY2MjAwMDQ5NkVCMTU0MEQ4QkQ4RkE2NUVE
OEQ2M0E2MjAeFw0yNTExMTgxMjIzMzJaFw0yNTExMTkxNDQ5MzJaMDMxMTAvBgNV
BAMTKDgwMDVDQTI4NkZGOTg2MDYxQkFEQUJFQkZEM0VDRkRENzgzNUJBRUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvgCH/4zkAd44PWONlSkBPQz7F
28hmFgOpNsgjAdq2rH8981BBR/fSBGtcEQDP0tgA4BmbaLWdKsKklmV6+ZloxY00
DOJtmzPNll5HMWCVyI99moEZvF2RcvVukM6ZPK6v348Zuh1qFOCNQzo1Du0DIQmd
uuF0yTaZer9SrnlEjN5xdIcD41OeSB6ynTx4aQWtUT1LYDeTXPnIzoOebbxmVg3k
XdEJIkLodDglUThvKf53exroVp8vD7tK+QrmDRChofgbnqClvehjTThpvWAI9qVC
T1CHvVAP8CvVHtVZjKFd1+YDe5LbgClzGMTUNQ6YdIzzzz3U7Dv7VK6iX51LAgMB
AAGjggJ3MIICczAdBgNVHQ4EFgQUgAXKKG/5hgYbravr/T7P3Xg1uuswHwYDVR0j
BBgwFoAUZXjnlmIABJbrFUDYvY+mXtjWOmIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWJkMzA2YjQtZTVjMy00OGY5LWIyZWUtMzZhOWJkZGVk
OGM0LzgvNjU3OEU3OTY2MjAwMDQ5NkVCMTU0MEQ4QkQ4RkE2NUVEOEQ2M0E2Mi5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzcvNjU3OEU3OTY2MjAwMDQ5NkVCMTU0MEQ4QkQ4RkE2NUVEOEQ2
M0E2Mi5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYmQzMDZiNC1l
NWMzLTQ4ZjktYjJlZS0zNmE5YmRkZWQ4YzQvOC82NTc4RTc5NjYyMDAwNDk2RUIx
NTQwRDhCRDhGQTY1RUQ4RDYzQTYyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjXMG6ymPiB4eKtxFU+B5
BowP0ckwK19Kq+86o9u0rii3TvOIMXYfFDWIH4a4RYSvLQyfMrmQxbmqVBY9+LZd
THdiJ/YzOXJcNvbxLRj8cttbEsEmJxALbHy0jarpGFe6OLnK3zZ0EPbS9G0silbQ
Wk42Ccu8whdc0SLfvwnnJF8gUozLPs4kTHHNyHwuGrxQnyAFdMSQcBBJTtKU1snB
5xrFBWKYaRSOKBWlpHk8rj6HakwpBNarjIWVe+5YQ21mBtqjN+YpFdrNHCToi97Q
FP6IP02lmWQHksHE4duEkNhMQaTqDAoaW1AYTamKPJ0sSJ1WqYedbvcsdTbUK4Kx
7g==
-----END CERTIFICATE-----