This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/1/16151D7763E4E6BC44887A7873C442580A952833.mft
File:                     16151D7763E4E6BC44887A7873C442580A952833.mft (raw, json)
Hash identifier:          Fw1po6wTZymSffLtOIk7ud5cbeKxgGsVo3f0e4QjKjM=
Subject key identifier:   78:B8:F2:3F:05:AA:86:DA:3D:B0:45:2E:CD:E5:14:2F:C6:5F:0C:CA
Authority key identifier: 16:15:1D:77:63:E4:E6:BC:44:88:7A:78:73:C4:42:58:0A:95:28:33
Certificate issuer:       /CN=16151d7763e4e6bc44887a7873c442580a952833
Certificate serial:       6C00B676914FEA800B1A12DE5BACF0A76B5D2236
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FhUdd2Pk5rxEiHp4c8RCWAqVKDM.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/1/16151D7763E4E6BC44887A7873C442580A952833.mft
Manifest number:          0294
Signing time:             Fri 05 Dec 2025 16:47:20 +0000
Manifest this update:     Fri 05 Dec 2025 16:42:20 +0000
Manifest next update:     Sat 06 Dec 2025 17:14:20 +0000
Files and hashes:         1: AS205789.asa (hash: Qzff0maeB5+cpe8E67bbTtMCUs1MUvsaRwXsYj8uY5w=)
                          2: 16151D7763E4E6BC44887A7873C442580A952833.crl (hash: 9a8bsyBtpOeyfBt48UnjZRkTI5AX4kcWb+EQLZAhPRw=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/1/16151D7763E4E6BC44887A7873C442580A952833.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/1/16151D7763E4E6BC44887A7873C442580A952833.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FhUdd2Pk5rxEiHp4c8RCWAqVKDM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 17:14:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:00:b6:76:91:4f:ea:80:0b:1a:12:de:5b:ac:f0:a7:6b:5d:22:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16151d7763e4e6bc44887a7873c442580a952833
        Validity
            Not Before: Dec  5 16:42:20 2025 GMT
            Not After : Dec  6 17:14:20 2025 GMT
        Subject: CN=78B8F23F05AA86DA3DB0452ECDE5142FC65F0CCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:77:a8:c7:c8:b4:e7:08:96:ed:45:9a:c3:30:
                    7c:7f:28:00:c2:4e:a7:49:9f:06:be:41:08:d9:bf:
                    06:3f:17:73:6e:7d:d4:9b:cd:d6:5e:21:59:0d:91:
                    d1:70:b9:aa:6a:93:4e:da:ed:59:7c:30:64:92:33:
                    f2:a6:c6:78:54:2b:c9:b6:06:3d:c5:7c:90:3f:9c:
                    29:45:de:4e:15:1a:96:13:a6:31:24:5e:22:02:40:
                    ee:ee:5f:ad:24:0e:aa:69:12:f4:80:97:80:e0:f2:
                    b9:a3:27:09:cf:8c:a5:ed:da:16:c9:fd:3e:41:59:
                    d2:e1:dd:48:6c:cd:37:27:77:ef:a7:e7:dd:35:09:
                    8c:c1:59:21:d3:b4:ef:ff:5c:3f:ad:75:c3:28:37:
                    0e:3a:28:0f:a3:73:ba:d6:b9:27:83:58:43:e6:36:
                    9f:11:56:14:89:3c:0e:de:43:00:bf:0f:bd:58:f6:
                    a8:43:da:6d:d1:db:bf:4c:25:d9:d3:c3:7b:0b:9d:
                    23:0d:e5:c6:1c:31:77:55:b2:70:78:f5:ed:07:ae:
                    e8:b9:ec:59:0b:33:85:b2:33:24:a3:7f:ae:4e:bc:
                    22:de:16:51:ba:5a:ae:5c:dd:5b:53:d5:8b:e9:ab:
                    92:90:e7:1e:33:b6:2e:4b:fe:e0:e1:7a:f9:d2:77:
                    2c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:B8:F2:3F:05:AA:86:DA:3D:B0:45:2E:CD:E5:14:2F:C6:5F:0C:CA
            X509v3 Authority Key Identifier:
                keyid:16:15:1D:77:63:E4:E6:BC:44:88:7A:78:73:C4:42:58:0A:95:28:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/1/16151D7763E4E6BC44887A7873C442580A952833.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FhUdd2Pk5rxEiHp4c8RCWAqVKDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/1/16151D7763E4E6BC44887A7873C442580A952833.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:d1:05:71:1e:a4:54:2f:2c:90:95:6c:40:90:31:61:fe:a9:
         20:ae:cf:c7:4d:73:74:8b:e3:6f:28:8d:c2:8b:51:0f:ff:8f:
         6a:40:5a:7a:d6:b3:ed:2e:e4:aa:15:ee:68:96:f2:51:c2:4c:
         7a:4f:01:d7:b4:36:a5:e5:f9:11:04:31:a2:3b:93:24:20:0e:
         64:be:33:b1:c1:0f:c0:1c:c5:dd:2b:c8:90:7e:35:36:b3:c1:
         1e:bb:5d:0a:37:1f:56:92:f6:0c:4c:f1:f4:b6:4d:ee:01:6b:
         c5:a2:ac:40:a8:2e:e1:05:44:2e:eb:d3:37:55:16:8f:25:1b:
         4a:46:9f:7f:63:1b:d9:48:aa:f4:7d:14:ae:d5:5a:2b:e3:20:
         34:40:65:8c:fc:67:97:ed:ff:a4:04:bd:3a:8f:1c:4c:fe:1c:
         1f:54:71:07:a3:81:24:34:11:7a:9c:55:82:dc:92:f2:ef:25:
         7f:9b:a8:7a:8b:d7:c6:b8:59:2d:20:65:c2:16:f8:aa:47:73:
         26:ba:17:58:2c:55:b8:56:b6:f1:61:9c:f1:a3:4f:ac:2c:ad:
         4d:80:f1:00:52:bb:96:d0:da:ed:bb:50:8a:3b:90:cf:dd:64:
         9c:6c:38:d1:2f:fb:11:3f:13:4a:71:22:a1:f5:a3:be:48:ef:
         ec:1a:d8:6c
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUbAC2dpFP6oALGhLeW6zwp2tdIjYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTYxNTFkNzc2M2U0ZTZiYzQ0ODg3YTc4NzNjNDQyNTgw
YTk1MjgzMzAeFw0yNTEyMDUxNjQyMjBaFw0yNTEyMDYxNzE0MjBaMDMxMTAvBgNV
BAMTKDc4QjhGMjNGMDVBQTg2REEzREIwNDUyRUNERTUxNDJGQzY1RjBDQ0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/d6jHyLTnCJbtRZrDMHx/KADC
TqdJnwa+QQjZvwY/F3NufdSbzdZeIVkNkdFwuapqk07a7Vl8MGSSM/KmxnhUK8m2
Bj3FfJA/nClF3k4VGpYTpjEkXiICQO7uX60kDqppEvSAl4Dg8rmjJwnPjKXt2hbJ
/T5BWdLh3UhszTcnd++n5901CYzBWSHTtO//XD+tdcMoNw46KA+jc7rWuSeDWEPm
Np8RVhSJPA7eQwC/D71Y9qhD2m3R279MJdnTw3sLnSMN5cYcMXdVsnB49e0Hrui5
7FkLM4WyMySjf65OvCLeFlG6Wq5c3VtT1Yvpq5KQ5x4zti5L/uDhevnSdyyPAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUeLjyPwWqhto9sEUuzeUUL8ZfDMowHwYDVR0j
BBgwFoAUFhUdd2Pk5rxEiHp4c8RCWAqVKDMwDgYDVR0PAQH/BAQDAgeAMIGPBgNV
HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv
cmVwby9ycGtpX2NhXzBhNDYzN2RmNWJhNzQzZmVhMWI0ODJiZTgyMzU4MThmLzEv
MTYxNTFENzc2M0U0RTZCQzQ0ODg3QTc4NzNDNDQyNTgwQTk1MjgzMy5jcmwwZAYI
KwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9ERUZBVUxUL0ZoVWRkMlBrNXJ4RWlIcDRjOFJDV0FxVktETS5j
ZXIwgZoGCCsGAQUFBwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9ycGtp
LXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9jYV8wYTQ2MzdkZjViYTc0M2Zl
YTFiNDgyYmU4MjM1ODE4Zi8xLzE2MTUxRDc3NjNFNEU2QkM0NDg4N0E3ODczQzQ0
MjU4MEE5NTI4MzMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB
BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASg
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB10QVxHqRULyyQlWxAkDFh/qkgrs/HTXN0
i+NvKI3Ci1EP/49qQFp61rPtLuSqFe5olvJRwkx6TwHXtDal5fkRBDGiO5MkIA5k
vjOxwQ/AHMXdK8iQfjU2s8Eeu10KNx9WkvYMTPH0tk3uAWvFoqxAqC7hBUQu69M3
VRaPJRtKRp9/YxvZSKr0fRSu1Vor4yA0QGWM/GeX7f+kBL06jxxM/hwfVHEHo4Ek
NBF6nFWC3JLy7yV/m6h6i9fGuFktIGXCFviqR3MmuhdYLFW4VrbxYZzxo0+sLK1N
gPEAUruW0Nrtu1CKO5DP3WScbDjRL/sRPxNKcSKh9aO+SO/sGths
-----END CERTIFICATE-----
Generated at Sat Dec 6 05:52:17 2025 by rpki-client