This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft
File:                     16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft (raw, json)
Hash identifier:          5nQxsFT9A5NunpailhPM1apSETidAVWGCyfdyKRCeMw=
Subject key identifier:   05:86:DA:26:C0:E2:29:AE:0A:58:D5:03:0E:01:F2:E7:74:17:1B:A8
Authority key identifier: 16:58:9C:DE:5D:C3:33:9C:E7:BB:D4:BB:1C:7C:14:64:74:97:C9:56
Certificate issuer:       /CN=16589CDE5DC3339CE7BBD4BB1C7C14647497C956
Certificate serial:       30DAEA1A70A445594750B39D5A27FC4A6487A80B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft
Manifest number:          02D7
Signing time:             Sun 25 Jan 2026 09:47:48 +0000
Manifest this update:     Sun 25 Jan 2026 09:42:47 +0000
Manifest next update:     Mon 26 Jan 2026 13:10:47 +0000
Files and hashes:         1: 16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl (hash: 2ayDsx3sBU/QUT2ZELndHzlTQiVoPu2W2OM6uiMnJAE=)
                          2: 326131313a663263303a666666623a3a2f34382d3438203d3e20323033313035.roa (hash: oR5xdewUw9CCHlEGMS0Z24xgtiBxrNN/CytrFhUuC90=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:da:ea:1a:70:a4:45:59:47:50:b3:9d:5a:27:fc:4a:64:87:a8:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16589CDE5DC3339CE7BBD4BB1C7C14647497C956
        Validity
            Not Before: Jan 25 09:42:47 2026 GMT
            Not After : Jan 26 13:10:47 2026 GMT
        Subject: CN=0586DA26C0E229AE0A58D5030E01F2E774171BA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3a:13:11:44:1a:68:ed:fe:c6:8d:ea:91:e2:
                    b7:0c:55:f7:9d:a1:fa:fc:a0:8f:d2:12:12:b8:12:
                    4d:04:f2:f7:f7:5c:b5:b7:3f:28:80:fb:14:70:c0:
                    d2:db:ec:d8:a0:31:30:0e:45:50:c1:b1:df:87:6e:
                    23:cb:41:13:b8:19:8d:0b:a8:42:ab:11:6c:a3:e6:
                    f9:21:d0:6a:f9:84:14:04:1a:7f:cb:c5:1a:5c:cf:
                    f3:21:3e:ba:91:8b:db:5e:12:3b:2b:fd:2b:08:11:
                    5c:fb:1a:42:f3:12:b7:a4:fc:7b:c9:80:78:c4:5f:
                    58:b1:fe:71:b9:88:8d:ac:ed:b5:e7:c4:fb:63:d8:
                    ef:99:51:9e:3b:8d:b5:1c:f3:f6:28:d4:8b:c9:24:
                    81:f5:05:34:bd:f2:1b:61:cc:c2:ff:f1:d4:d3:43:
                    5a:62:3b:f1:da:4f:db:1d:c5:3d:77:8e:9b:f9:b9:
                    38:9f:59:fd:98:bc:bc:85:62:9f:16:50:85:ad:ec:
                    3c:9f:49:d3:57:82:bc:43:94:df:b5:93:f8:b2:22:
                    80:17:67:91:b0:f8:da:b0:15:e6:50:81:0c:8d:b0:
                    53:cd:9f:e8:fa:ff:f9:2c:9f:a6:8d:e2:1c:24:58:
                    78:8d:1b:51:c1:d8:f6:2b:38:69:09:81:d4:4a:b7:
                    cb:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:86:DA:26:C0:E2:29:AE:0A:58:D5:03:0E:01:F2:E7:74:17:1B:A8
            X509v3 Authority Key Identifier:
                keyid:16:58:9C:DE:5D:C3:33:9C:E7:BB:D4:BB:1C:7C:14:64:74:97:C9:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:b7:93:89:05:35:89:bf:04:b5:ab:e0:c8:e1:74:e0:be:41:
         89:5a:69:58:61:8d:3b:ca:45:d0:fd:e4:8b:c4:6c:07:d3:9c:
         96:2c:87:11:c0:52:ac:b8:76:44:d5:65:b0:3c:f3:dd:1b:37:
         7a:af:ed:8e:eb:cb:ba:ce:05:a8:3f:76:10:ab:7d:ab:aa:bd:
         c3:1a:0a:89:ed:80:4a:65:96:20:68:6d:ac:41:1d:c7:07:c7:
         61:5a:75:f9:50:b1:5c:91:47:3c:50:82:a5:1a:2c:e0:93:17:
         20:4d:13:d6:ee:f7:2c:05:95:b7:9c:b0:63:bd:6b:b9:e8:b5:
         be:58:67:24:da:d1:8e:73:26:cb:dd:6d:94:26:18:da:47:78:
         a8:1f:59:dd:53:12:4d:01:b7:ae:4f:24:0c:a6:b3:e5:4d:82:
         d9:1d:0d:67:74:db:4c:aa:b7:cb:8f:fc:32:47:54:47:fb:34:
         8f:af:0e:a4:db:54:ec:8e:39:d1:85:dc:88:68:4b:ea:5d:bb:
         05:10:4d:25:7d:c0:2b:a5:0b:bf:1d:22:99:d9:a1:8a:ad:27:
         46:3c:a9:cd:c5:cd:7a:3a:8e:5b:61:34:65:32:2c:1e:29:c5:
         a4:3d:8e:47:9c:9f:b2:88:12:99:48:73:3d:c1:b2:d9:d3:a8:
         9b:ed:a7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:10:12 2026 by rpki-client