This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft
File:                     21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft (raw, json)
Hash identifier:          2XV9XYINRrAJPUSexnpc4xZS/mx4KnHBGy/Jn1Jto3c=
Subject key identifier:   35:02:A3:0C:12:52:C0:40:52:CD:2C:D3:84:82:F7:95:92:64:2D:B1
Authority key identifier: 21:B5:CB:0B:FB:54:18:3A:63:34:82:0D:70:4E:DB:F7:9B:04:CB:48
Certificate issuer:       /CN=21B5CB0BFB54183A6334820D704EDBF79B04CB48
Certificate serial:       6B4313F3A2688E2A4844548B25903ED723D34A0A
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft
Manifest number:          9B
Signing time:             Thu 27 Nov 2025 01:00:41 +0000
Manifest this update:     Thu 27 Nov 2025 00:55:41 +0000
Manifest next update:     Fri 28 Nov 2025 02:38:41 +0000
Files and hashes:         1: 326131343a373538303a6130313a3a2f34382d3438203d3e20323033393233.roa (hash: GOr6i79ogX9zrKCe8v7xdwWZZM6yOHiP597IK1UFVgk=)
                          2: 21B5CB0BFB54183A6334820D704EDBF79B04CB48.crl (hash: NsrtR/Xkf7xqGLIhD/fhpSm+D6Lu1HJSqX6X2aSkB5E=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:43:13:f3:a2:68:8e:2a:48:44:54:8b:25:90:3e:d7:23:d3:4a:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21B5CB0BFB54183A6334820D704EDBF79B04CB48
        Validity
            Not Before: Nov 27 00:55:41 2025 GMT
            Not After : Nov 28 02:38:41 2025 GMT
        Subject: CN=3502A30C1252C04052CD2CD38482F79592642DB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ab:ca:40:76:36:34:f0:9a:dc:6e:6b:0a:56:
                    22:0a:2a:44:1a:9a:45:55:19:a4:37:3f:3e:e3:bb:
                    5f:1c:a6:22:30:68:df:09:b9:a6:76:14:4c:b7:8b:
                    a3:c6:5d:96:a4:ff:12:03:2b:2a:66:d4:87:7d:3c:
                    a8:c0:c8:f4:84:f6:62:39:2d:ce:0a:3b:9e:12:b4:
                    e6:2e:76:ef:19:44:18:b5:32:d1:c0:17:9e:51:37:
                    f0:78:c8:5d:4c:45:e0:00:61:a1:dc:86:e5:45:a3:
                    36:f2:b6:4c:16:cc:4e:f3:71:b4:41:41:fa:64:02:
                    29:f3:4d:3a:88:f5:2a:e9:ba:ab:5b:d1:c9:5c:fe:
                    5e:30:04:71:8b:e6:fb:ad:2f:ce:fd:a6:01:5a:e2:
                    7a:91:d1:60:f2:f0:6e:42:67:91:23:4f:ef:21:6f:
                    eb:e8:c9:8c:a7:aa:93:14:fb:70:76:9a:b8:f5:44:
                    b0:c0:48:8a:79:da:4b:39:16:18:c4:5a:09:fc:47:
                    fc:34:ec:77:30:11:26:45:27:ed:7c:20:c6:6a:dc:
                    91:8c:ef:fc:59:1f:48:18:8a:64:96:e3:a0:8b:23:
                    ec:d8:e7:33:01:b9:30:5a:2d:e8:14:b7:56:22:f9:
                    04:ad:f4:9a:70:a2:2c:7c:c2:e1:bd:ea:7e:75:b0:
                    56:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:02:A3:0C:12:52:C0:40:52:CD:2C:D3:84:82:F7:95:92:64:2D:B1
            X509v3 Authority Key Identifier:
                keyid:21:B5:CB:0B:FB:54:18:3A:63:34:82:0D:70:4E:DB:F7:9B:04:CB:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40ca266a-df83-4bb2-8007-4f85b893dc70/0/21B5CB0BFB54183A6334820D704EDBF79B04CB48.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:67:9d:9b:93:a5:4a:d3:78:f7:fa:cc:f5:ce:b7:0a:de:dc:
         57:73:08:46:a7:a4:d4:e3:3d:5d:ca:9e:06:1a:03:dc:6d:ef:
         07:c5:62:d3:ab:99:d8:a2:22:d3:06:a2:1e:de:0d:7c:be:1d:
         c9:c5:21:06:39:1a:55:cc:bd:6d:99:32:75:13:85:a8:c4:3c:
         b3:74:1c:ff:01:01:12:41:2c:f1:46:f2:c7:05:04:12:51:ea:
         9f:45:c4:67:2c:26:dd:dc:f9:66:5c:64:ea:21:5b:ed:3b:e8:
         79:53:de:ac:94:48:65:a5:4b:56:f9:24:23:64:85:fa:86:fc:
         78:2f:4e:f8:b9:ac:35:24:85:64:a5:9c:a5:77:45:8c:fd:df:
         04:d8:68:6f:96:81:b0:81:03:bf:b6:91:e5:99:8c:80:c4:1d:
         51:e9:a4:2f:7e:72:24:a1:76:3c:66:00:14:73:51:85:cc:2e:
         c8:78:9d:0d:e8:f3:ed:a2:29:9c:10:07:65:84:0d:a6:ba:62:
         13:02:ee:b1:71:28:e4:17:03:38:d6:f9:a1:90:a5:5a:45:6f:
         7d:e1:5e:eb:60:9e:b4:ec:41:ef:05:19:1d:02:10:03:f9:6f:
         0f:d5:bc:96:fe:ab:cb:e9:01:1c:a2:97:a5:0b:c4:37:f7:2a:
         76:e6:0d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----