This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/5/5A96B8985A8E62FB1094248D3B5B4A3BB24369EC.mft
File:                     5A96B8985A8E62FB1094248D3B5B4A3BB24369EC.mft (raw, json)
Hash identifier:          b41cdNiVODXmaIfbRE7IxbqJW0QfTm4gtI5RUz7j5To=
Subject key identifier:   7F:42:B3:FE:B5:06:A0:CF:86:92:1C:98:25:27:AE:1B:B3:6B:4E:A8
Authority key identifier: 5A:96:B8:98:5A:8E:62:FB:10:94:24:8D:3B:5B:4A:3B:B2:43:69:EC
Certificate issuer:       /CN=5A96B8985A8E62FB1094248D3B5B4A3BB24369EC
Certificate serial:       3D73E815440536DD87682DBE387EB2804DC6891B
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/5A96B8985A8E62FB1094248D3B5B4A3BB24369EC.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/5/5A96B8985A8E62FB1094248D3B5B4A3BB24369EC.mft
Manifest number:          065F
Signing time:             Sat 20 Dec 2025 12:00:02 +0000
Manifest this update:     Sat 20 Dec 2025 11:55:02 +0000
Manifest next update:     Sun 21 Dec 2025 15:14:02 +0000
Files and hashes:         1: 323630323a666261313a3961303a3a2f34342d3438203d3e203532303235.roa (hash: ZXZMZ9+Z/7+D+VEV0PLFcNdUm8TVrWvVyVPEX7lC69k=)
                          2: 5A96B8985A8E62FB1094248D3B5B4A3BB24369EC.crl (hash: OeYYTdMcSog5RgWxDXTpNv1ijEAW9jNTeydAfn83QBQ=)
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/5/5A96B8985A8E62FB1094248D3B5B4A3BB24369EC.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/5/5A96B8985A8E62FB1094248D3B5B4A3BB24369EC.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/5A96B8985A8E62FB1094248D3B5B4A3BB24369EC.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/6BEC1AED6508BB07511B01B177551792DAEB2C90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/cbec634b07f50f3e80423a7c111ae9213b506b78bf9924ad42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21/c13035cd-c46d-421c-b9e0-e6d4dd336d21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c13035cd-c46d-421c-b9e0-e6d4dd336d21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 11:35:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:73:e8:15:44:05:36:dd:87:68:2d:be:38:7e:b2:80:4d:c6:89:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A96B8985A8E62FB1094248D3B5B4A3BB24369EC
        Validity
            Not Before: Dec 20 11:55:02 2025 GMT
            Not After : Dec 21 15:14:02 2025 GMT
        Subject: CN=7F42B3FEB506A0CF86921C982527AE1BB36B4EA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:62:99:71:19:56:15:95:51:7d:05:73:de:37:
                    5e:3f:62:23:56:a9:16:c6:67:60:8f:fd:c5:62:78:
                    30:a5:d2:2f:df:5a:fa:26:57:57:98:56:6f:61:00:
                    14:2e:f5:67:e5:92:a3:e8:bd:87:c9:ae:fb:6e:6c:
                    d3:1f:e1:98:74:0d:b5:2d:f1:d3:4e:4f:25:0b:8a:
                    d4:85:34:c9:32:59:21:5f:80:24:a3:db:5b:23:fb:
                    26:fe:15:f1:9f:b3:76:48:c4:0a:bf:c7:ae:52:0e:
                    57:14:32:8f:4b:13:9c:31:9d:fd:f9:26:bf:d0:ae:
                    8c:48:18:45:5e:a7:7f:90:bf:2c:43:ab:70:cf:2e:
                    fa:fd:50:61:6b:38:8f:8d:16:fc:1d:2b:88:ce:54:
                    c5:29:82:86:26:44:54:7c:2a:4c:8c:97:b7:15:e7:
                    e1:36:31:20:24:cd:8c:6e:24:19:df:23:ca:f2:98:
                    7c:76:26:f1:86:35:bf:bb:53:88:75:2c:f7:63:59:
                    33:fd:a8:70:c0:ee:8c:43:9b:20:b7:3e:5e:9f:f9:
                    33:b3:bd:75:26:07:7c:1c:57:52:a4:34:42:0a:70:
                    16:7c:44:52:1d:79:c6:b6:21:42:eb:61:ed:54:89:
                    92:81:61:9e:c5:29:03:50:75:0f:3d:df:8a:de:9b:
                    56:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:42:B3:FE:B5:06:A0:CF:86:92:1C:98:25:27:AE:1B:B3:6B:4E:A8
            X509v3 Authority Key Identifier:
                keyid:5A:96:B8:98:5A:8E:62:FB:10:94:24:8D:3B:5B:4A:3B:B2:43:69:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/5/5A96B8985A8E62FB1094248D3B5B4A3BB24369EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/2/5A96B8985A8E62FB1094248D3B5B4A3BB24369EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/5/5A96B8985A8E62FB1094248D3B5B4A3BB24369EC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:75:b1:48:e5:0b:06:ff:c7:6a:66:a5:82:e9:42:fd:68:25:
         c3:46:f9:3d:b3:d4:a0:d9:26:44:ca:a8:cd:28:d0:e3:38:e5:
         92:fb:9d:24:b8:bc:76:f0:4a:7a:e1:2e:ea:44:df:a6:2b:a3:
         23:16:e0:c9:b8:8e:a1:78:06:ce:b4:ee:77:14:3b:16:23:83:
         ca:72:39:12:d7:09:0f:50:77:30:63:76:8d:83:18:e7:0a:5b:
         1f:fd:33:c9:b7:c1:73:69:bf:74:89:54:64:1e:b0:8b:b7:46:
         85:a6:2e:70:54:84:4f:af:97:51:ef:6a:83:db:da:b4:d3:59:
         b9:27:ab:e0:ac:3e:cd:2c:45:26:86:39:fd:03:a4:17:df:74:
         c0:b4:dc:cf:a9:7a:8a:7e:7c:27:f9:9f:d5:02:f2:c5:b8:a8:
         91:ac:bc:4f:8c:a4:10:67:fe:3e:5f:b5:8b:a6:53:a6:be:44:
         cc:eb:f8:8c:fb:5b:04:9d:a5:84:cf:b3:f5:34:c3:74:12:e4:
         7b:2c:b2:ef:64:06:5f:6d:c8:e3:53:8e:21:91:62:f7:72:b8:
         39:ef:85:54:5d:ed:16:7c:62:7f:54:33:02:b0:d1:1b:25:43:
         05:d5:89:3e:74:7d:d6:7e:fd:8f:5e:11:09:09:4d:ff:36:a2:
         69:0b:71:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 21:49:42 2025 by rpki-client