This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft
File:                     6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft (raw, json)
Hash identifier:          WpfWj2byrIrjsvwr9hEHLD++gLbJ50AHRy+U5cFxZRM=
Subject key identifier:   B5:FC:3F:3E:D2:DA:4B:2E:B3:4E:84:7A:BC:3D:4D:7A:22:A4:CA:33
Authority key identifier: 6D:94:B9:D7:B7:C1:8A:7A:49:7A:7E:9F:5E:2E:22:97:D5:47:86:D3
Certificate issuer:       /CN=6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3
Certificate serial:       315E9B199B47E571EF430D7296498BB808E01F38
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft
Manifest number:          01B8
Signing time:             Sat 06 Dec 2025 10:04:03 +0000
Manifest this update:     Sat 06 Dec 2025 09:59:03 +0000
Manifest next update:     Sun 07 Dec 2025 12:47:03 +0000
Files and hashes:         1: 6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.crl (hash: EOq5jGHT9WNWAJZOiVElXHB5DKWPcoKAEwgdHcUmCN8=)
                          2: 326131313a663263303a666661303a3a2f34342d3438203d3e20323134353133.roa (hash: V7a7LRqWRSavnh0Ifl2d/PovkOzhE52bZJXDIw2uFaM=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 07:35:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:5e:9b:19:9b:47:e5:71:ef:43:0d:72:96:49:8b:b8:08:e0:1f:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3
        Validity
            Not Before: Dec  6 09:59:03 2025 GMT
            Not After : Dec  7 12:47:03 2025 GMT
        Subject: CN=B5FC3F3ED2DA4B2EB34E847ABC3D4D7A22A4CA33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ed:f4:07:e8:56:ec:76:6d:55:8d:75:29:b7:
                    76:4a:1e:60:ca:ea:ad:35:39:e0:6f:de:c9:95:6b:
                    4e:8f:f8:d6:31:c3:d2:50:15:14:00:0d:cc:5a:2b:
                    f6:ba:b3:bd:c1:f5:dd:98:b5:e4:08:1d:3c:c2:a7:
                    b1:bd:71:5b:d9:c8:fb:ae:19:32:a9:a0:14:c0:b0:
                    91:ae:75:bf:31:79:23:9b:f2:3c:12:80:28:0e:33:
                    f5:a6:5c:89:90:a6:24:b4:d2:3a:96:6c:29:e7:dd:
                    35:40:86:55:38:73:48:f9:c8:c2:d4:79:bd:24:f3:
                    34:eb:d3:ba:a0:22:74:91:96:77:43:27:aa:93:7d:
                    2d:c7:31:4b:18:25:8b:4a:bf:db:5c:3c:d5:08:45:
                    0d:66:f7:90:c9:54:f4:5d:bd:75:9e:e4:42:68:2c:
                    00:3e:64:bf:c5:37:0f:9f:e1:de:49:2b:77:c9:dd:
                    f1:50:8c:e9:91:f1:b8:aa:ff:4f:1c:fb:3d:1c:ee:
                    1d:e6:d8:d4:c2:9d:89:4d:25:90:5a:01:33:f4:33:
                    da:e7:e7:57:db:04:7f:78:bf:c7:f2:55:2d:c6:2b:
                    72:a8:69:89:1c:9d:fd:1f:df:4f:1b:94:8d:7d:52:
                    72:84:01:f9:3d:4f:0a:44:ba:7f:20:47:81:3f:6b:
                    18:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:FC:3F:3E:D2:DA:4B:2E:B3:4E:84:7A:BC:3D:4D:7A:22:A4:CA:33
            X509v3 Authority Key Identifier:
                keyid:6D:94:B9:D7:B7:C1:8A:7A:49:7A:7E:9F:5E:2E:22:97:D5:47:86:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_1ebfd53649204ee3b47a95c10457d583/0/6D94B9D7B7C18A7A497A7E9F5E2E2297D54786D3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:e7:aa:ad:6e:d4:99:58:d9:d6:71:9c:2b:ea:61:e7:2e:ca:
         4e:bd:d2:bd:27:5d:6e:76:c1:ee:6c:c4:4c:4f:bb:bd:fa:32:
         7c:68:bf:3e:e3:58:e8:de:35:87:a6:a7:ef:11:57:f7:4e:62:
         29:a9:1e:e6:fc:6e:81:83:88:aa:c9:3b:ad:a9:83:b0:f0:5b:
         28:b7:14:7f:1d:81:a4:71:0e:57:ed:a7:a6:c6:cb:db:fc:da:
         a8:c2:1d:7d:69:4a:64:ff:e3:7c:05:3e:11:99:0b:24:73:52:
         ce:30:06:f1:8c:90:23:86:da:a3:e9:a4:bc:e9:f5:67:66:54:
         16:36:29:7b:29:af:80:a7:74:dc:2e:e5:dc:f2:4b:a1:11:c5:
         56:71:f4:c0:c8:5e:5b:f1:93:b3:b0:ad:aa:4f:f1:41:5d:54:
         17:5c:12:66:71:b3:ad:df:19:ca:8b:92:8b:1f:34:b1:84:bb:
         15:7f:36:aa:df:b5:3c:22:50:e3:7a:89:b8:a4:83:11:ef:39:
         08:e5:90:9f:d7:be:23:7a:16:86:4d:39:03:70:2f:77:b4:c3:
         66:31:a0:4b:44:61:44:b1:6e:0c:9d:76:c9:85:51:3f:82:45:
         75:a2:55:27:f8:e0:4b:b2:b5:f1:d9:95:93:4b:c8:73:86:22:
         64:06:68:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:46:19 2025 by rpki-client