This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft
File:                     6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft (raw, json)
Hash identifier:          Q8ySmtuKbg86Wx099VYUYmU7kLkvanYyklui4u1BT84=
Subject key identifier:   13:96:83:B0:28:54:BD:AD:E6:36:56:26:74:5E:C4:6D:8D:60:EB:78
Authority key identifier: 6D:94:B9:D7:B7:C1:8A:7A:49:7A:7E:9F:5E:2E:22:97:D5:47:86:D3
Certificate issuer:       /CN=6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3
Certificate serial:       40EE6D3038EBE5CC72E702F1EBBE1CC54F56C5FA
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft
Manifest number:          01FA
Signing time:             Sun 25 Jan 2026 11:39:10 +0000
Manifest this update:     Sun 25 Jan 2026 11:34:10 +0000
Manifest next update:     Mon 26 Jan 2026 12:34:10 +0000
Files and hashes:         1: 6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.crl (hash: XlAQitQ+d6/mxqD1CX+NzuSIA9bpsFXysuDATIDk1Io=)
                          2: 326131313a663263303a666661303a3a2f34342d3438203d3e20323134353133.roa (hash: V7a7LRqWRSavnh0Ifl2d/PovkOzhE52bZJXDIw2uFaM=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 12:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:ee:6d:30:38:eb:e5:cc:72:e7:02:f1:eb:be:1c:c5:4f:56:c5:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3
        Validity
            Not Before: Jan 25 11:34:10 2026 GMT
            Not After : Jan 26 12:34:10 2026 GMT
        Subject: CN=139683B02854BDADE6365626745EC46D8D60EB78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1c:57:24:f4:07:aa:6c:bf:c2:bf:cc:f2:a0:
                    96:c6:02:f9:67:07:bb:2f:11:2c:c3:1d:90:47:e1:
                    44:9f:b9:47:67:01:e7:54:0c:b8:f3:7e:ad:ed:28:
                    2a:cc:c1:3c:4f:82:ea:3f:22:99:b2:18:0a:82:0b:
                    7f:9e:66:b4:47:ad:3a:a9:42:01:7f:77:91:e2:f5:
                    d9:18:fc:83:df:5b:ca:27:e7:c5:8c:0a:67:b6:6e:
                    cd:ee:34:fa:bf:5c:6d:0b:16:4b:21:08:44:2c:55:
                    f7:6b:d6:dc:33:58:cb:b2:37:9a:c0:42:b5:55:2c:
                    9c:f8:c7:5c:45:fe:a0:1c:a0:6f:6b:e4:fb:fd:05:
                    d4:d2:18:c2:15:33:d7:3e:23:78:84:f8:7f:56:32:
                    a6:95:9e:09:31:7b:e7:e8:b1:c2:e0:e4:39:91:85:
                    24:8a:53:b1:26:9d:86:71:c8:5a:71:17:87:29:e2:
                    bf:73:d6:55:d5:cb:c4:e8:bd:73:91:fb:4b:b0:9c:
                    ac:ef:06:02:88:df:46:e0:92:62:14:c1:28:f2:d4:
                    2f:11:2c:d7:01:f0:28:39:fb:b7:d0:28:97:a4:ef:
                    ef:e9:e9:77:ec:8b:18:b5:1e:0f:a5:81:0e:06:5e:
                    6e:0a:f9:ba:d8:16:49:b6:d6:e2:e5:70:cc:f6:e0:
                    27:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:96:83:B0:28:54:BD:AD:E6:36:56:26:74:5E:C4:6D:8D:60:EB:78
            X509v3 Authority Key Identifier:
                keyid:6D:94:B9:D7:B7:C1:8A:7A:49:7A:7E:9F:5E:2E:22:97:D5:47:86:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:8b:d3:e5:d8:6a:16:0f:0d:56:f6:03:06:73:85:f3:b9:06:
         c2:2b:d6:d6:13:b5:21:a5:ae:dd:91:bd:a5:9c:56:98:61:ff:
         8d:22:63:c1:fc:1e:cc:16:fd:f8:42:e4:15:ac:6b:ea:3f:4b:
         04:27:23:52:98:86:94:47:d6:11:b2:00:29:98:d6:28:e9:8f:
         1f:50:18:8a:4d:f0:f4:55:c7:1c:a7:86:0a:29:6e:ae:7a:c2:
         8d:9c:c1:84:3d:3d:0b:2f:90:34:e4:a6:d2:74:ab:a3:dc:41:
         24:f0:2e:95:52:bc:6e:96:94:ed:8d:4d:62:03:1f:12:29:1a:
         2e:b4:fa:0e:6c:39:56:60:22:f0:74:78:92:df:f1:4a:47:2c:
         4d:7b:5e:67:7f:f4:17:d8:ef:ca:43:d0:e1:a6:07:4f:bd:57:
         98:0c:d9:7a:eb:77:b9:39:aa:30:1b:3c:bb:c5:c9:d9:f1:a5:
         a6:1a:9b:da:17:dd:a1:13:eb:dc:fa:17:d3:4d:fe:0b:34:83:
         28:78:9d:06:e0:70:d4:e5:74:43:30:2c:ac:3c:a0:99:e5:d4:
         b6:7d:2f:d7:dd:b1:d7:d8:ff:1e:bb:d1:78:51:a8:7d:4a:b9:
         c8:d9:a9:23:d7:78:3e:32:50:7a:34:09:0c:1a:ae:60:43:ca:
         25:21:1f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:52:45 2026 by rpki-client