This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/1/8BD4F7EBFF9763C061D537B8A1D0872D70697632.mft
File:                     8BD4F7EBFF9763C061D537B8A1D0872D70697632.mft (raw, json)
Hash identifier:          AUy4G2NIv2Hf9i6oiVpgMrvQTeEuljxZWmfWbQkDgAs=
Subject key identifier:   E7:E1:D2:98:8C:77:84:D6:F1:D6:C0:74:E8:F1:8D:88:64:F7:B8:08
Authority key identifier: 8B:D4:F7:EB:FF:97:63:C0:61:D5:37:B8:A1:D0:87:2D:70:69:76:32
Certificate issuer:       /CN=8BD4F7EBFF9763C061D537B8A1D0872D70697632
Certificate serial:       4A063B9E7E20B0734E41B4A23A78CC02E942D939
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8BD4F7EBFF9763C061D537B8A1D0872D70697632.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/1/8BD4F7EBFF9763C061D537B8A1D0872D70697632.mft
Manifest number:          94
Signing time:             Sun 14 Dec 2025 09:06:02 +0000
Manifest this update:     Sun 14 Dec 2025 09:01:02 +0000
Manifest next update:     Mon 15 Dec 2025 11:47:02 +0000
Files and hashes:         1: 326131343a373538333a663566303a3a2f34342d3438203d3e20323135373532.roa (hash: CQeQBv1si6HjY/pqPKCiw+E43BXtrCR5FS8uJNoFCsQ=)
                          2: 326131343a373538333a663530303a3a2f34382d3438203d3e20323133363035.roa (hash: 9/oPKwR86cNPm2ExAL4kDJvYHegTDwwsjfTcMTofdOY=)
                          3: 326131343a373538333a663532613a3a2f34382d3438203d3e20323133363035.roa (hash: aV7gG9d5Jm1xL7quU3kvraReedZSPl0atIf2oiaL4bI=)
                          4: 8BD4F7EBFF9763C061D537B8A1D0872D70697632.crl (hash: 1D94LU+1NFUXKIMCje/3B2FmKV0ON4KIdYPv7JiArIE=)
                          5: 326131343a373538333a663532613a3a2f34382d3438203d3e20323130343430.roa (hash: ZdNC5XbbwwexZ9fJQgyFujAFE+pNtA0LnoesNkwLRvA=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:06:3b:9e:7e:20:b0:73:4e:41:b4:a2:3a:78:cc:02:e9:42:d9:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BD4F7EBFF9763C061D537B8A1D0872D70697632
        Validity
            Not Before: Dec 14 09:01:02 2025 GMT
            Not After : Dec 15 11:47:02 2025 GMT
        Subject: CN=E7E1D2988C7784D6F1D6C074E8F18D8864F7B808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c0:71:99:61:73:db:5d:76:1a:2d:37:a1:43:
                    c3:d8:e2:18:9c:56:7b:0a:b8:1d:66:54:40:e8:e6:
                    80:7d:45:14:42:93:a1:91:88:96:d5:01:33:f6:d6:
                    4c:e2:ef:e6:69:ff:6b:90:86:3e:4a:9d:a2:46:ec:
                    1c:ff:63:e4:01:05:c8:8b:1c:7e:08:05:0e:f6:15:
                    1b:17:b0:8d:07:d5:e9:20:33:fd:47:9e:7a:11:a4:
                    fa:34:7c:70:3e:8e:4e:8d:92:72:52:40:7e:88:82:
                    8a:cd:7c:6b:31:e6:8c:24:16:1a:34:df:6a:66:1e:
                    2a:9b:d1:6f:5a:91:37:0d:18:34:84:28:77:be:95:
                    13:b2:f2:71:d2:0f:34:6b:0a:f3:d4:96:42:56:99:
                    8c:4b:cf:ec:e3:3e:6d:1a:0f:55:6b:53:41:c9:c4:
                    f3:3b:f4:6f:c1:8b:7b:c0:aa:e1:d9:c6:1b:c7:9a:
                    39:53:71:fe:e6:db:43:d9:3e:9e:7d:66:a8:56:db:
                    ed:40:52:e3:8c:c5:60:ab:77:d4:ff:8e:8f:e0:36:
                    6f:1e:31:d9:d9:71:df:41:16:f1:ef:47:39:19:45:
                    7d:6d:9a:3b:a5:03:49:b4:1d:37:8c:6e:d1:71:17:
                    33:d4:c1:d2:32:2d:1a:4e:b7:2f:d2:d0:4c:bb:fa:
                    b7:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:E1:D2:98:8C:77:84:D6:F1:D6:C0:74:E8:F1:8D:88:64:F7:B8:08
            X509v3 Authority Key Identifier:
                keyid:8B:D4:F7:EB:FF:97:63:C0:61:D5:37:B8:A1:D0:87:2D:70:69:76:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/1/8BD4F7EBFF9763C061D537B8A1D0872D70697632.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8BD4F7EBFF9763C061D537B8A1D0872D70697632.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/87d8db71-a5be-464c-a8b9-8b7b374ae3fa/1/8BD4F7EBFF9763C061D537B8A1D0872D70697632.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:cc:a0:88:6a:fe:a2:45:cd:3e:45:d3:ab:84:96:15:e0:bd:
         41:ae:b9:77:29:5d:f8:5a:17:9b:5f:f6:5b:6b:1e:f6:4c:30:
         dc:18:36:33:5b:7e:a5:5e:7a:ca:f9:20:1b:8d:c3:09:3d:25:
         37:63:3b:cf:7b:6e:bb:f0:d7:c9:9d:ef:44:3a:d5:22:9e:95:
         0b:83:0f:c9:08:9d:17:dd:12:5b:01:f5:9a:31:ab:ec:27:bf:
         25:ef:0d:34:6a:3e:53:31:02:36:46:2f:8a:3a:6d:60:43:b6:
         bc:dc:e6:76:8c:bc:c2:03:99:6f:58:c8:5c:3d:75:9a:f9:3a:
         7e:02:2d:61:2d:26:a0:2a:98:47:17:18:c6:51:39:3d:a6:c9:
         ff:e1:70:29:f5:95:73:6d:10:0a:a6:fd:a1:bf:42:95:be:64:
         7a:c8:46:ed:9c:4d:59:87:b5:91:e8:e8:a4:9a:48:79:20:67:
         da:bc:eb:c7:cc:d5:b7:1d:1f:0f:5a:88:0e:13:29:92:f2:f2:
         4e:ef:d6:1e:fb:53:58:c9:40:4c:13:d0:19:97:49:ea:79:16:
         38:54:ec:c3:54:f9:5f:52:8d:87:75:7d:fe:d5:be:9b:e5:27:
         cd:b0:84:0b:2d:d5:60:f8:13:94:b4:03:d9:2b:f3:0c:a6:02:
         85:83:84:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----