This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/FB64D48D941F2F324279CF863188D26D2056D11D.mft
File:                     FB64D48D941F2F324279CF863188D26D2056D11D.mft (raw, json)
Hash identifier:          zrt9lraH9R2ZD82cffQDDblwjbTvm4LHcsDOAB+4rrE=
Subject key identifier:   85:14:D5:53:80:6F:0E:5F:C4:5C:EB:C6:2C:50:9E:3A:63:86:F1:F1
Authority key identifier: FB:64:D4:8D:94:1F:2F:32:42:79:CF:86:31:88:D2:6D:20:56:D1:1D
Certificate issuer:       /CN=fb64d48d941f2f324279cf863188d26d2056d11d
Certificate serial:       264FCCB3664B39B7AC2E2523105C10DD30A4182B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-2TUjZQfLzJCec-GMYjSbSBW0R0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/FB64D48D941F2F324279CF863188D26D2056D11D.mft
Manifest number:          0398
Signing time:             Tue 16 Dec 2025 01:24:37 +0000
Manifest this update:     Tue 16 Dec 2025 01:19:37 +0000
Manifest next update:     Wed 17 Dec 2025 04:50:37 +0000
Files and hashes:         1: FB64D48D941F2F324279CF863188D26D2056D11D.crl (hash: JYDvzx7FlZgz4fri10vKreFV6bA8Bvl7KGymj9Bk5qc=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:4f:cc:b3:66:4b:39:b7:ac:2e:25:23:10:5c:10:dd:30:a4:18:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb64d48d941f2f324279cf863188d26d2056d11d
        Validity
            Not Before: Dec 16 01:19:37 2025 GMT
            Not After : Dec 17 04:50:37 2025 GMT
        Subject: CN=8514D553806F0E5FC45CEBC62C509E3A6386F1F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:54:8a:cd:a6:d6:67:f8:aa:08:e4:15:c1:80:
                    cd:89:9f:12:bf:ce:4d:e1:e7:92:90:0a:f9:48:a7:
                    66:39:b3:00:67:b3:64:85:dd:23:7c:b6:ab:4e:45:
                    0d:ab:20:5d:62:3d:86:c8:7f:75:0e:39:64:d6:2b:
                    49:6a:9e:e3:4f:22:73:37:e7:6b:0c:ea:79:ea:a8:
                    9b:e6:f5:b3:f8:01:f3:6b:5b:34:88:fd:f0:b0:05:
                    75:3f:8e:67:c8:41:7e:0c:fa:96:66:59:6a:46:e3:
                    0e:82:9a:92:eb:73:c7:95:94:af:01:e0:62:51:ec:
                    dc:2f:63:e1:63:1c:8a:81:e3:8d:84:b8:07:1a:5b:
                    7f:a1:48:c3:c9:3d:e9:79:ad:cf:c1:50:8d:7d:62:
                    5e:af:1b:f7:0c:fc:43:8f:5b:97:26:1e:64:1c:97:
                    72:6b:fb:77:73:83:98:37:91:e3:79:57:59:cb:c9:
                    77:82:01:2c:52:8c:67:ad:d8:c4:88:92:19:54:e3:
                    f9:e0:4c:47:25:36:23:21:e2:77:c6:af:98:15:d0:
                    8c:45:59:f0:1c:80:46:5e:84:f0:f5:c1:10:3b:ed:
                    ad:9c:88:6b:da:8a:0a:c8:1e:71:c9:c2:dc:ef:75:
                    bd:86:2a:f6:c3:98:67:e1:31:0b:5b:66:52:fc:24:
                    26:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:14:D5:53:80:6F:0E:5F:C4:5C:EB:C6:2C:50:9E:3A:63:86:F1:F1
            X509v3 Authority Key Identifier:
                keyid:FB:64:D4:8D:94:1F:2F:32:42:79:CF:86:31:88:D2:6D:20:56:D1:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/FB64D48D941F2F324279CF863188D26D2056D11D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-2TUjZQfLzJCec-GMYjSbSBW0R0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/FB64D48D941F2F324279CF863188D26D2056D11D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:75:1c:bc:21:86:e5:21:c8:06:f4:24:8c:44:8b:ac:45:a2:
         0e:e4:61:72:86:2a:4f:bd:0a:ff:6a:a8:42:3a:e1:f8:32:6c:
         33:27:00:dc:7f:07:5b:b2:f6:f1:a5:7e:8e:e5:1b:57:89:b2:
         c6:d7:b7:de:48:a6:71:d6:6a:0e:e1:41:84:64:2d:52:34:51:
         0f:fb:52:82:e9:2e:12:3c:12:aa:ff:60:60:b6:cd:f4:60:6f:
         7f:87:2e:be:87:3b:2f:4e:4d:36:04:93:0c:c8:ef:a3:02:c4:
         13:ff:cf:c4:5a:ec:f0:01:63:49:23:9c:3a:2f:c6:41:2d:42:
         bd:3f:52:9d:d0:c9:98:76:a4:95:a2:4f:e9:af:fe:55:29:f3:
         ae:6c:96:35:ea:e1:4a:e9:08:2d:60:28:4f:37:d4:00:48:a3:
         9a:85:28:d3:8c:1f:a1:3a:f6:df:32:2a:eb:b7:d6:1f:21:6c:
         78:00:f7:b9:e8:fb:75:8f:01:3a:3f:74:0a:9e:05:2a:93:8d:
         11:a7:af:dc:eb:9c:94:07:68:c5:a2:99:52:19:9f:4e:91:ea:
         e7:86:15:1d:20:ee:46:65:22:64:7e:ed:7b:cd:e9:c0:68:70:
         a9:fb:c0:90:8a:64:c4:7d:10:4e:ef:3f:df:41:d2:83:6d:b8:
         5a:48:27:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----