This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft
File:                     B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft (raw, json)
Hash identifier:          5GbBcnasEAqZpRSkM2BBqaESK7PC7CF4Ou0/lrhqePw=
Subject key identifier:   C3:96:15:51:B8:7C:5B:BB:AD:F5:51:CD:35:26:C1:68:A1:3D:87:08
Authority key identifier: B3:B9:36:0C:0D:DA:3D:68:8F:4D:BE:53:E2:B6:D3:CE:F4:7F:E8:25
Certificate issuer:       /CN=b3b9360c0dda3d688f4dbe53e2b6d3cef47fe825
Certificate serial:       12A40DFF08BDAC79930F10956D5907B484CF745D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s7k2DA3aPWiPTb5T4rbTzvR_6CU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft
Manifest number:          02FF
Signing time:             Wed 12 Nov 2025 03:38:49 +0000
Manifest this update:     Wed 12 Nov 2025 03:33:49 +0000
Manifest next update:     Thu 13 Nov 2025 04:30:49 +0000
Files and hashes:         1: B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.crl (hash: +jTtmX/OGz++UUZPD8R3k5RoDiBvAxfX0fNYzKmINq8=)
                          2: AS215956.asa (hash: ucHv2FQnl2KJinSUsASgO1/usMeiJ+1dIwJYSf0kpKE=)
                          3: 323030313a3637633a3638383a3a2f34382d3438203d3e20323135393536.roa (hash: 9LWLJC/CS8sOfArHPeCb8VXjodevg9GVDezV1/woQjw=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:a4:0d:ff:08:bd:ac:79:93:0f:10:95:6d:59:07:b4:84:cf:74:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3b9360c0dda3d688f4dbe53e2b6d3cef47fe825
        Validity
            Not Before: Nov 12 03:33:49 2025 GMT
            Not After : Nov 13 04:30:49 2025 GMT
        Subject: CN=C3961551B87C5BBBADF551CD3526C168A13D8708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e6:58:2b:d3:b5:7e:f4:f1:8e:a9:03:3f:a7:
                    62:33:68:ee:22:eb:dc:75:55:4e:81:15:c0:06:2a:
                    1b:20:94:7c:9c:57:f2:38:dd:9a:98:92:7b:ce:16:
                    2a:eb:bd:3d:a5:ec:ad:36:da:7e:db:68:1e:df:cf:
                    69:11:77:0c:70:da:b3:20:ed:4a:da:bd:53:d1:37:
                    e8:b8:fa:90:5a:40:fb:d7:ca:34:d8:b6:0c:26:2b:
                    27:05:eb:89:a3:71:76:85:e3:83:5b:64:96:e5:09:
                    83:15:49:3a:fc:1b:a5:52:56:81:90:e7:35:37:dd:
                    60:58:ff:c4:37:bf:d4:ec:cc:47:15:ac:45:28:c5:
                    59:29:a7:97:2d:e8:53:c2:fd:72:df:1a:af:f0:69:
                    d9:59:08:2c:ad:56:be:fc:c3:a2:1d:99:4a:a5:04:
                    3e:7e:65:69:53:01:dd:3a:7e:35:38:b1:fb:33:5c:
                    52:74:48:5b:3c:cf:c7:a4:a2:19:c9:10:50:8d:1a:
                    6d:0d:63:70:20:4b:80:e8:75:6c:3f:e7:5b:37:42:
                    2f:ee:35:86:d4:0d:45:21:6e:cf:38:06:a9:20:9a:
                    b2:62:36:5a:ad:2e:ca:7f:c2:32:7d:7d:59:1b:90:
                    36:eb:0c:cd:9c:b6:1c:82:01:46:22:ef:6f:3f:42:
                    8f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:96:15:51:B8:7C:5B:BB:AD:F5:51:CD:35:26:C1:68:A1:3D:87:08
            X509v3 Authority Key Identifier:
                keyid:B3:B9:36:0C:0D:DA:3D:68:8F:4D:BE:53:E2:B6:D3:CE:F4:7F:E8:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7k2DA3aPWiPTb5T4rbTzvR_6CU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/0/B3B9360C0DDA3D688F4DBE53E2B6D3CEF47FE825.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:d2:23:79:09:3b:15:a0:da:01:fb:3a:81:7e:36:71:1e:87:
         f8:cb:85:d4:e3:e6:ff:85:e0:22:90:6d:03:92:13:4a:47:d3:
         ce:6a:7a:4c:e4:98:e2:13:43:1d:3e:b1:ed:eb:bd:eb:c1:f1:
         1c:9f:d7:dc:c6:f2:e5:e8:92:61:46:f1:da:17:d9:66:8e:9e:
         c5:b9:aa:6c:86:8c:f9:61:77:5f:e6:47:0c:c3:a8:72:7a:94:
         7f:de:b7:ee:8c:2a:d6:1a:37:51:f6:70:04:46:45:60:74:ae:
         13:9f:a6:51:57:00:a0:af:01:9b:1d:99:6a:95:cf:7f:ab:c1:
         5d:24:e4:c6:ab:65:6a:7d:35:bb:7c:a9:bd:77:61:d0:2e:bc:
         ec:51:93:78:77:31:77:f5:24:96:3f:50:07:1d:df:61:cb:f5:
         e2:26:86:f3:c1:b5:0a:34:eb:a3:1d:c8:4c:23:62:d7:39:b5:
         2b:a7:2c:c4:24:f0:cf:bd:2c:28:30:61:83:90:99:44:fb:c1:
         a9:f8:4c:8d:23:00:34:fb:ee:7a:1e:fb:da:5b:be:69:67:84:
         da:cf:9d:e4:48:5f:d9:85:d3:1b:a7:53:8a:97:87:ab:db:8b:
         87:dc:8e:a7:ed:04:cc:63:20:66:5f:a9:f6:3c:a9:d4:54:ce:
         99:2c:7e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----