This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/0/6D0EF2AC1D235D1B50ED776E6CE4C3CB36AF062F.mft
File:                     6D0EF2AC1D235D1B50ED776E6CE4C3CB36AF062F.mft (raw, json)
Hash identifier:          TTnEzbhjL7sJqi7AOEv+/MDe66u2boE5orbpXuGzerU=
Subject key identifier:   F5:E7:F3:CF:86:7E:F3:4C:A7:4E:D5:C7:6C:9C:B8:28:5C:D8:AD:35
Authority key identifier: 6D:0E:F2:AC:1D:23:5D:1B:50:ED:77:6E:6C:E4:C3:CB:36:AF:06:2F
Certificate issuer:       /CN=6D0EF2AC1D235D1B50ED776E6CE4C3CB36AF062F
Certificate serial:       248ADC9E52676314C56A79A9D9EB60B854269C7F
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D0EF2AC1D235D1B50ED776E6CE4C3CB36AF062F.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/0/6D0EF2AC1D235D1B50ED776E6CE4C3CB36AF062F.mft
Manifest number:          0292
Signing time:             Fri 05 Dec 2025 18:57:32 +0000
Manifest this update:     Fri 05 Dec 2025 18:52:32 +0000
Manifest next update:     Sat 06 Dec 2025 20:04:32 +0000
Files and hashes:         1: 6D0EF2AC1D235D1B50ED776E6CE4C3CB36AF062F.crl (hash: Qg5NfbjmveiEtq9cFwWIsa4wx3e0g5DbZNIUft0JSXo=)
                          2: 326131313a663263303a666663353a3a2f34382d3438203d3e20323136323534.roa (hash: hG/rGAEu7qZDpLo6NztH1q2JrgmXtISMQ8wh/gNWEd0=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/0/6D0EF2AC1D235D1B50ED776E6CE4C3CB36AF062F.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/0/6D0EF2AC1D235D1B50ED776E6CE4C3CB36AF062F.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D0EF2AC1D235D1B50ED776E6CE4C3CB36AF062F.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 20:04:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:8a:dc:9e:52:67:63:14:c5:6a:79:a9:d9:eb:60:b8:54:26:9c:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D0EF2AC1D235D1B50ED776E6CE4C3CB36AF062F
        Validity
            Not Before: Dec  5 18:52:32 2025 GMT
            Not After : Dec  6 20:04:32 2025 GMT
        Subject: CN=F5E7F3CF867EF34CA74ED5C76C9CB8285CD8AD35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7f:3c:16:02:0c:f1:30:e7:49:33:0c:b4:82:
                    fc:6b:02:a6:6c:c9:e1:55:89:7e:ac:86:d0:e9:c4:
                    0a:34:1b:20:74:22:d5:bc:27:87:b6:bd:70:f7:cd:
                    c0:5c:d2:cf:6f:9e:32:00:8c:05:c1:e3:5c:46:b8:
                    2a:47:0d:c8:fa:dc:de:0a:01:37:56:4c:83:bd:fa:
                    a7:cf:63:a9:f3:dc:e6:6a:e9:c4:e0:7d:c0:ca:45:
                    f4:cb:d3:42:6e:bd:b1:a2:fb:12:7d:c4:c3:38:30:
                    f8:f2:a2:73:fb:b3:5c:71:7b:d9:08:a5:15:b0:17:
                    02:d9:c7:f5:2e:69:92:c5:59:0d:5c:77:96:bf:5c:
                    65:55:d4:8c:27:55:53:b7:7d:c4:f7:2d:96:45:f4:
                    55:32:e4:91:f9:bc:7f:47:0f:47:19:16:2d:dd:bc:
                    85:eb:50:e0:41:f9:ec:7f:4c:df:7a:a0:36:83:b2:
                    8e:67:16:07:da:6a:87:e0:3a:6f:a3:88:49:9c:ea:
                    7d:d2:51:92:8b:33:85:96:74:00:1b:06:d1:2b:d9:
                    4c:29:2c:6b:c8:96:ae:5e:37:85:0e:a8:08:e3:d3:
                    14:97:c6:f5:7b:a9:73:7b:82:a5:98:4a:38:5e:0f:
                    ef:d4:2d:15:5d:32:84:a7:53:40:2f:26:f2:5d:f2:
                    00:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:E7:F3:CF:86:7E:F3:4C:A7:4E:D5:C7:6C:9C:B8:28:5C:D8:AD:35
            X509v3 Authority Key Identifier:
                keyid:6D:0E:F2:AC:1D:23:5D:1B:50:ED:77:6E:6C:E4:C3:CB:36:AF:06:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/0/6D0EF2AC1D235D1B50ED776E6CE4C3CB36AF062F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D0EF2AC1D235D1B50ED776E6CE4C3CB36AF062F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/0/6D0EF2AC1D235D1B50ED776E6CE4C3CB36AF062F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:84:34:36:02:72:c9:7d:94:23:0e:f9:51:a4:21:c6:7e:fb:
         c0:8d:de:e0:01:65:a4:23:c9:51:8b:fe:66:9a:09:e2:f4:90:
         c2:f9:70:13:29:ef:1a:28:8b:2f:8d:30:5a:18:28:d0:66:94:
         b2:98:a1:d8:1a:00:4e:44:1b:b2:49:43:19:3b:9d:69:8c:c9:
         c9:f7:f4:48:91:f3:5d:9b:ec:a5:66:18:d7:31:ed:58:7c:20:
         e5:ac:05:aa:7b:e8:04:26:60:67:bd:fb:5d:c6:91:fa:e0:7c:
         f2:97:8d:ce:a8:1b:10:6d:66:b6:55:48:53:51:a4:06:fb:66:
         db:14:3c:ee:c7:24:59:cd:0e:3c:fb:ae:43:41:ff:15:c3:52:
         60:2f:1e:9d:b4:e3:6f:1b:ba:c1:ff:2e:d3:14:f3:2c:35:df:
         5f:02:86:03:0a:fe:8a:5f:74:b4:16:9c:f1:ae:59:d3:de:9f:
         10:d5:ba:a2:65:ea:14:7f:c2:ee:39:ee:c9:9e:cb:f2:6c:b5:
         83:67:75:27:f2:25:8a:66:75:ad:95:4a:64:5c:24:ae:36:bd:
         d3:55:2b:7f:61:cb:88:e7:87:82:6a:ef:88:52:05:14:f4:b0:
         6f:cd:90:3d:f9:bc:80:b7:f1:54:c8:1f:a3:15:ef:89:2a:8c:
         5b:e0:a8:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:59:40 2025 by rpki-client