This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5a7c956c-22eb-4bb8-a327-ad97161295bc/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.mft
File:                     020F7ED217FC36532E6B045CFBCCDA68A6604620.mft (raw, json)
Hash identifier:          ktJvrWZM4gaoDYM3IFNwuap4FSpCuv9kMuhUZyvUNAs=
Subject key identifier:   39:ED:71:43:1A:89:90:CF:30:82:5F:51:5D:2C:5E:53:8B:14:42:05
Authority key identifier: 02:0F:7E:D2:17:FC:36:53:2E:6B:04:5C:FB:CC:DA:68:A6:60:46:20
Certificate issuer:       /CN=020F7ED217FC36532E6B045CFBCCDA68A6604620
Certificate serial:       5297C061CD7219F8F1769FFA46F4192B0F4CD21D
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/5a7c956c-22eb-4bb8-a327-ad97161295bc/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.mft
Manifest number:          AD
Signing time:             Fri 02 Jan 2026 23:30:46 +0000
Manifest this update:     Fri 02 Jan 2026 23:25:46 +0000
Manifest next update:     Sun 04 Jan 2026 01:42:46 +0000
Files and hashes:         1: 326131343a373538313a366662303a3a2f34342d3438203d3e20323136343332.roa (hash: cip9cJqKeyNrJhvNYpxl3IQ3uuVk6x6ccrH22pN5xrA=)
                          2: 326131343a373538313a366665303a3a2f34342d3438203d3e20323134383431.roa (hash: eJoFXZz3vH/PzqNzkkd4bWX4CpO0e/s0UWWhyH7ohGo=)
                          3: 326131343a373538313a366330303a3a2f34302d3438203d3e20313938393534.roa (hash: fPBlj/OX226nVSvX0NnbhELuUhpZ2u/Ytd/uYZbhMTA=)
                          4: 020F7ED217FC36532E6B045CFBCCDA68A6604620.crl (hash: fxtDCO0WIe2DX3MtrULedl3SfOp5fdbQHdDe1F69g3s=)
                          5: 326131343a373538313a366664303a3a2f34342d3438203d3e20323135393334.roa (hash: BfxFUd5DTechXRUy4Ex3ytqAtMEr8QPJBcDEM0dDVlg=)
                          6: 326131343a373538313a366663303a3a2f34342d3438203d3e20323037333839.roa (hash: k0slLXQGak8JfXgcycld4UCv11bkqqJyVwy8WgUs0W4=)
                          7: 326131343a373538313a366430303a3a2f34302d3438203d3e20323035333239.roa (hash: UAf2blctTo7ZlN86/McI15QZsGre1E35LEt/FhIBXBM=)
                          8: 326131343a373538313a363030303a3a2f33362d3438203d3e20323034383434.roa (hash: 9WwOZQ+czh53N90Wic7WKUZpN9yKrnRBc/mSIwdZviM=)
                          9: 326131343a373538313a366530303a3a2f34302d3438203d3e2039393233.roa (hash: xTMyG8vk7HfhKOphzDUHjsL1N+HXzTu0fnBjhyB6AKQ=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:97:c0:61:cd:72:19:f8:f1:76:9f:fa:46:f4:19:2b:0f:4c:d2:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=020F7ED217FC36532E6B045CFBCCDA68A6604620
        Validity
            Not Before: Jan  2 23:25:46 2026 GMT
            Not After : Jan  4 01:42:46 2026 GMT
        Subject: CN=39ED71431A8990CF30825F515D2C5E538B144205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:41:f9:bd:bd:bd:6f:8a:ec:d8:95:78:ad:04:
                    5b:9c:17:80:d5:e8:14:74:32:55:3e:cb:3d:1e:e8:
                    47:1d:63:a2:ef:dd:a1:b7:a7:31:1d:1b:d9:f5:04:
                    f8:49:a4:6f:e2:98:a6:3d:d5:9b:db:e8:b4:60:26:
                    69:c6:53:e9:aa:a0:47:f0:b4:ad:94:c6:18:d8:84:
                    e3:ae:c8:5e:d3:aa:bf:fe:f9:ac:eb:f4:07:f3:b8:
                    9a:a8:1e:bf:32:9e:c5:5c:34:92:27:d9:5c:81:ab:
                    15:2b:d6:69:10:93:e2:57:7a:dd:ee:39:9e:23:fc:
                    8b:a7:4f:86:93:36:f0:a0:da:ee:0b:7c:d1:c0:f2:
                    66:b4:ce:86:6d:58:c2:b7:0d:f8:03:17:51:9a:c2:
                    0c:00:b1:3b:b2:d4:09:6a:a3:f4:0f:c2:8f:c4:c0:
                    91:6a:de:a6:77:8a:fa:46:68:03:39:91:88:c7:b1:
                    69:5d:85:2f:7e:f6:bc:4d:06:23:df:7c:05:03:85:
                    9d:88:03:40:ed:59:5f:af:60:bf:36:b8:28:b9:7b:
                    6f:8f:b5:a4:f6:00:24:4f:38:f2:21:e3:30:c4:f6:
                    08:97:8a:28:0c:36:3f:f8:bc:79:5e:41:82:79:38:
                    bb:3e:a8:90:a7:4a:bb:71:27:b2:2d:98:a2:68:57:
                    5c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:ED:71:43:1A:89:90:CF:30:82:5F:51:5D:2C:5E:53:8B:14:42:05
            X509v3 Authority Key Identifier:
                keyid:02:0F:7E:D2:17:FC:36:53:2E:6B:04:5C:FB:CC:DA:68:A6:60:46:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/5a7c956c-22eb-4bb8-a327-ad97161295bc/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5a7c956c-22eb-4bb8-a327-ad97161295bc/0/020F7ED217FC36532E6B045CFBCCDA68A6604620.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:97:19:d5:40:17:02:88:7e:ee:e1:4d:43:dc:73:00:f4:4d:
         fd:5f:54:68:bb:ce:58:d1:dc:30:b2:d9:43:e3:27:d7:49:10:
         4f:ea:7f:b1:50:60:11:3b:96:b3:c5:1b:35:ee:d4:8b:51:28:
         0a:11:17:df:35:a9:1b:77:27:e7:12:88:9a:db:4a:2a:64:c0:
         06:b6:81:c4:f0:8e:ca:d5:83:ec:b6:78:2a:38:27:50:da:c7:
         00:71:fc:ce:30:b1:d2:5f:ff:cf:2d:23:c2:8b:8a:4e:e1:2c:
         87:0e:41:bf:63:18:87:4b:9b:ff:17:13:5c:5b:9e:7e:d2:88:
         d9:c1:08:fa:b8:6a:69:43:97:1f:22:36:5e:3d:5d:54:c8:bf:
         cc:f7:b2:82:74:02:91:e5:c3:db:03:7d:51:63:ab:cc:7d:7f:
         e4:c6:26:2c:7b:f4:76:4d:91:92:83:d3:01:c6:71:f9:b2:e8:
         b9:4f:51:10:a2:cd:63:57:4f:fa:da:27:bc:f0:12:5a:5c:11:
         43:b7:5a:85:49:97:f9:0f:b8:05:62:e2:4a:34:42:e8:2a:79:
         a6:ae:ed:72:48:e5:e5:fd:46:73:12:37:b1:c4:0f:4e:3a:e7:
         9d:53:15:d5:a8:21:20:a3:54:e5:e4:10:95:36:fb:db:1d:1d:
         5f:e5:6d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:29:02 2026 by rpki-client