This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.mft
File:                     64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.mft (raw, json)
Hash identifier:          k9cK4e0PW+5gd2R7T7+xnijnupMGa4qf6/GUrlo0cgE=
Subject key identifier:   93:92:47:CA:45:08:8A:8A:F8:EA:D1:56:AE:DC:8B:E0:77:5F:87:55
Authority key identifier: 64:D6:29:AA:3C:F3:8F:9F:77:0A:DB:BB:20:C6:DE:BD:0B:8C:DE:05
Certificate issuer:       /CN=64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05
Certificate serial:       7FD2DDF15CC762E0418AE56BD99F4C92E0C6235C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.mft
Manifest number:          31
Signing time:             Fri 05 Dec 2025 15:23:21 +0000
Manifest this update:     Fri 05 Dec 2025 15:18:21 +0000
Manifest next update:     Sat 06 Dec 2025 18:27:21 +0000
Files and hashes:         1: 64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.crl (hash: dXJ8rlWyo23QlHJErgAPLaUE0omJ25jMv06shGWiyfM=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:d2:dd:f1:5c:c7:62:e0:41:8a:e5:6b:d9:9f:4c:92:e0:c6:23:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05
        Validity
            Not Before: Dec  5 15:18:21 2025 GMT
            Not After : Dec  6 18:27:21 2025 GMT
        Subject: CN=939247CA45088A8AF8EAD156AEDC8BE0775F8755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:21:2d:45:b8:6c:7f:4c:31:ce:21:11:e8:80:
                    66:b1:f8:d4:59:9f:55:ec:e1:3b:ee:35:d2:90:be:
                    e5:2d:32:4a:c1:a6:59:ae:4c:f3:31:fd:44:cb:70:
                    c8:17:ec:15:34:94:41:f3:fa:14:4a:87:97:03:f3:
                    ee:68:fa:8e:88:6f:14:1f:39:5f:b6:73:15:b6:7c:
                    2b:48:51:a9:a2:89:a3:8f:31:5b:36:10:ab:df:db:
                    e4:09:4c:02:3a:c1:08:a6:d1:5f:22:73:0b:94:c9:
                    db:27:bb:9e:0c:77:92:80:21:a8:17:4c:66:d1:b1:
                    ff:7b:55:69:dc:a0:2f:00:cc:a4:7f:e6:0f:75:21:
                    11:b1:85:14:a8:76:26:50:17:f1:75:2b:3e:fb:56:
                    e3:35:9b:d0:6e:cb:94:1b:b3:7d:f9:b6:32:ec:88:
                    01:5c:bd:0b:c8:20:c2:0b:2e:af:f4:7d:7b:c3:0e:
                    6d:b3:35:44:60:68:50:b6:cf:1b:b7:84:c2:81:bd:
                    c2:bb:7f:d5:28:ab:4b:eb:4e:e1:47:7b:1e:b2:75:
                    73:ed:57:4a:16:37:ac:10:16:32:cf:38:af:ad:07:
                    fe:8f:7a:77:ff:c0:3a:5b:f5:df:9e:03:34:5a:fb:
                    b8:be:1a:b0:22:ce:a3:d3:85:dc:7d:2e:47:66:a4:
                    8f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:92:47:CA:45:08:8A:8A:F8:EA:D1:56:AE:DC:8B:E0:77:5F:87:55
            X509v3 Authority Key Identifier:
                keyid:64:D6:29:AA:3C:F3:8F:9F:77:0A:DB:BB:20:C6:DE:BD:0B:8C:DE:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/d9bd3888-9302-4b6f-a017-2b4bba5e57bb/1/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/2/64D629AA3CF38F9F770ADBBB20C6DEBD0B8CDE05.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:b1:bd:a0:c9:3e:90:bf:44:fe:ae:93:3f:d0:22:e8:b3:47:
         c8:7b:e5:a5:92:2b:98:48:67:a1:1f:1d:8f:14:37:d8:e5:7b:
         58:05:23:ec:0b:b3:d9:11:b5:0d:1b:78:3d:85:3c:28:e5:7b:
         49:c0:5a:93:c3:00:09:ec:7e:22:aa:5b:6c:55:9a:d9:a5:30:
         6c:24:d5:2d:1c:2d:ab:5a:1c:95:80:af:6b:6e:39:2e:70:ad:
         8f:16:a4:88:23:6e:a2:26:c5:ea:c4:ff:5c:81:cf:95:fe:b9:
         ff:5a:df:ba:d9:33:13:58:dc:5e:12:70:18:31:23:e5:37:72:
         16:bc:21:4a:26:fc:b4:5a:40:19:6e:17:d3:de:7f:5c:95:2b:
         5e:fd:93:8c:dc:6c:8c:ce:97:d7:8c:c5:fd:e4:7a:46:45:59:
         ec:e3:01:c4:d4:c6:dc:49:84:dc:36:fc:46:53:db:e1:94:46:
         3b:52:f8:37:9b:a3:64:1b:f4:f6:d2:4d:e2:5a:ca:ca:dd:bd:
         8d:94:b0:da:de:eb:88:71:4d:23:81:bb:07:40:f4:1f:65:5e:
         fb:d8:96:1d:68:f2:e4:4d:b2:24:a9:2d:9a:57:97:1e:73:ff:
         e9:e3:31:cb:d3:4a:32:19:76:43:0f:60:48:77:45:2f:1f:f2:
         eb:34:1f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----