This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/1/0F5FF499BA58BAFD47B7E71D4EF8014EED5158A2.mft
File:                     0F5FF499BA58BAFD47B7E71D4EF8014EED5158A2.mft (raw, json)
Hash identifier:          nXTRjD2t91sPLqo1TeqEIfzfOoFgaLQHf7bRQdqOEbU=
Subject key identifier:   32:7B:CC:16:99:EB:45:54:A0:D0:D3:5B:82:B0:3C:B3:5C:3C:9C:B5
Authority key identifier: 0F:5F:F4:99:BA:58:BA:FD:47:B7:E7:1D:4E:F8:01:4E:ED:51:58:A2
Certificate issuer:       /CN=0f5ff499ba58bafd47b7e71d4ef8014eed5158a2
Certificate serial:       198338ECE64BCE41DBED265831490850DA01117D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D1_0mbpYuv1Ht-cdTvgBTu1RWKI.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/1/0F5FF499BA58BAFD47B7E71D4EF8014EED5158A2.mft
Manifest number:          14
Signing time:             Sun 25 Jan 2026 04:54:10 +0000
Manifest this update:     Sun 25 Jan 2026 04:49:10 +0000
Manifest next update:     Mon 26 Jan 2026 08:27:10 +0000
Files and hashes:         1: 0F5FF499BA58BAFD47B7E71D4EF8014EED5158A2.crl (hash: in0KXTLsLAwUEJ39ci0qHxI/YwIDgsdtm7fVakAETQE=)
                          2: AS216141.asa (hash: tKUT71CvFzE99EA+puSjEl5I+oivrnpIZr6U9MCSChg=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/1/0F5FF499BA58BAFD47B7E71D4EF8014EED5158A2.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/1/0F5FF499BA58BAFD47B7E71D4EF8014EED5158A2.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D1_0mbpYuv1Ht-cdTvgBTu1RWKI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:83:38:ec:e6:4b:ce:41:db:ed:26:58:31:49:08:50:da:01:11:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f5ff499ba58bafd47b7e71d4ef8014eed5158a2
        Validity
            Not Before: Jan 25 04:49:10 2026 GMT
            Not After : Jan 26 08:27:10 2026 GMT
        Subject: CN=327BCC1699EB4554A0D0D35B82B03CB35C3C9CB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:be:3d:2c:7f:33:31:5d:87:56:db:84:b6:2b:
                    83:d6:da:d6:e7:f0:ca:21:62:87:8e:99:e3:6c:a9:
                    22:87:7a:2e:d8:f1:84:7d:c3:e4:15:d1:c2:f6:47:
                    6e:d8:ce:98:50:58:54:b8:76:a7:60:59:bb:30:2c:
                    54:b9:62:f4:1b:a3:e3:c2:3d:96:b4:e8:85:8d:12:
                    07:3b:50:56:47:f8:e6:23:ca:6a:b0:f1:07:b8:3d:
                    ff:9b:f6:30:c8:2d:dd:a4:5b:6b:84:66:b0:d4:73:
                    d2:fe:02:38:fc:4e:2b:73:36:2a:bf:66:58:ac:38:
                    77:29:3c:85:1d:48:fe:5c:ef:1d:cc:49:4d:3d:e7:
                    e2:9d:37:1a:0b:ea:fa:01:ed:ce:bf:e2:a5:46:60:
                    95:bd:12:24:c5:28:cc:55:62:c2:ec:e1:8f:f4:4d:
                    53:8b:8a:f4:d2:88:82:34:88:22:51:6d:7d:81:7e:
                    94:c2:44:c5:75:b6:e1:16:83:67:62:bd:e2:54:76:
                    df:65:47:f4:0c:56:c4:5a:45:13:7a:b2:99:a7:14:
                    7e:2b:89:c6:59:44:aa:bf:10:2e:1c:7d:99:02:6f:
                    3d:45:56:31:ff:6b:b5:cf:99:a0:a8:b5:f7:2e:e5:
                    8c:d1:80:99:0a:e9:35:e7:8f:2d:22:74:a2:ed:9c:
                    00:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:7B:CC:16:99:EB:45:54:A0:D0:D3:5B:82:B0:3C:B3:5C:3C:9C:B5
            X509v3 Authority Key Identifier:
                keyid:0F:5F:F4:99:BA:58:BA:FD:47:B7:E7:1D:4E:F8:01:4E:ED:51:58:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/1/0F5FF499BA58BAFD47B7E71D4EF8014EED5158A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1_0mbpYuv1Ht-cdTvgBTu1RWKI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/1/0F5FF499BA58BAFD47B7E71D4EF8014EED5158A2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:eb:6b:bd:e7:71:99:5b:6a:f7:27:f0:ca:54:01:e1:51:39:
         b1:d9:37:99:ff:0e:33:42:20:db:25:e5:77:44:5e:2c:72:71:
         bd:68:77:e2:2a:25:b1:e9:3f:66:50:92:d6:ee:35:cc:a9:7c:
         98:ba:b8:98:83:5a:56:4e:96:ea:e4:32:6d:11:46:65:00:2f:
         3e:3a:89:ba:42:7c:8b:55:19:6b:af:25:64:de:da:6b:91:35:
         69:1f:6a:bd:69:b7:f2:c8:1c:89:44:a7:8f:cc:86:4e:95:22:
         5c:b3:0a:d5:3b:17:37:1f:0f:69:d0:c4:5f:00:b8:56:8b:d0:
         7b:bb:b6:8a:83:d7:0d:cc:13:df:7e:1b:83:10:9b:0d:9f:f6:
         cf:ce:38:9c:c5:bd:03:16:9b:f9:46:ea:23:a7:d4:08:ee:65:
         b6:56:d4:1b:51:c7:b4:43:d3:69:a2:c0:f7:ab:d3:65:62:15:
         1a:d8:75:9d:19:a7:fb:b3:ee:0b:b9:34:8f:53:c4:70:a4:60:
         38:61:ea:8b:94:6b:c4:d3:f8:25:8d:bf:33:54:ef:1b:c8:81:
         67:8b:9b:28:f1:ab:02:ca:90:06:20:61:af:86:d5:fa:f7:6b:
         8a:e0:aa:d2:00:ed:dc:b8:e1:e9:d8:3c:0a:7d:39:b2:b7:0a:
         54:b4:62:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:34:26 2026 by rpki-client