This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/0/6482EA67DB858D1440DD67B955223E4341BA4E97.mft
File:                     6482EA67DB858D1440DD67B955223E4341BA4E97.mft (raw, json)
Hash identifier:          2em40ghYMpVqCz4bCNtoPxRTlfCcbZAmLOuIAFjNNuM=
Subject key identifier:   A0:C4:EB:73:84:7F:BE:17:51:17:42:3D:0E:13:E2:C9:88:D2:A6:9F
Authority key identifier: 64:82:EA:67:DB:85:8D:14:40:DD:67:B9:55:22:3E:43:41:BA:4E:97
Certificate issuer:       /CN=6482EA67DB858D1440DD67B955223E4341BA4E97
Certificate serial:       55237D9E2B1FFEAFF84E319B468413AF5D494A46
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6482EA67DB858D1440DD67B955223E4341BA4E97.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/0/6482EA67DB858D1440DD67B955223E4341BA4E97.mft
Manifest number:          0294
Signing time:             Fri 05 Dec 2025 19:32:37 +0000
Manifest this update:     Fri 05 Dec 2025 19:27:37 +0000
Manifest next update:     Sat 06 Dec 2025 21:42:37 +0000
Files and hashes:         1: 326131313a663263303a666666393a3a2f34382d3438203d3e20323034373235.roa (hash: MdiZ+9TbSNzfNPtu/3qU2TdQ6jBsbjIkWQpbqOwaXo4=)
                          2: 6482EA67DB858D1440DD67B955223E4341BA4E97.crl (hash: ntxRV+m/egkTpiymlj2yBPgo2m1MsR3fmnjOZV5ISok=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/0/6482EA67DB858D1440DD67B955223E4341BA4E97.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/0/6482EA67DB858D1440DD67B955223E4341BA4E97.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6482EA67DB858D1440DD67B955223E4341BA4E97.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 21:42:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:23:7d:9e:2b:1f:fe:af:f8:4e:31:9b:46:84:13:af:5d:49:4a:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6482EA67DB858D1440DD67B955223E4341BA4E97
        Validity
            Not Before: Dec  5 19:27:37 2025 GMT
            Not After : Dec  6 21:42:37 2025 GMT
        Subject: CN=A0C4EB73847FBE175117423D0E13E2C988D2A69F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:27:44:78:62:cc:37:7c:d4:42:1e:1f:ee:91:
                    25:62:4a:aa:e0:4b:78:14:b0:f5:01:6b:ee:23:79:
                    1a:e2:40:b9:7f:0e:88:f7:de:52:48:92:40:91:3b:
                    67:ef:1b:4a:5c:b9:2f:40:cd:3d:2e:71:3c:38:fc:
                    5e:9e:66:c2:8b:8b:7c:f5:82:87:7f:cd:b8:5b:3d:
                    79:c9:bc:79:a6:f1:d9:78:7b:75:f8:52:0a:94:af:
                    4d:05:c6:de:33:90:33:34:a8:74:05:db:cb:34:89:
                    16:5e:8a:a7:40:bd:5b:b5:ee:71:9b:a4:04:59:82:
                    70:10:37:a6:85:0e:0e:04:4e:dd:b8:06:05:1c:d8:
                    7c:f3:76:ae:22:da:df:8b:65:51:41:22:56:14:37:
                    42:89:1d:cc:b7:1a:f5:91:d0:42:69:c8:56:17:60:
                    0f:b2:8c:c7:fc:a5:f9:f5:2d:06:71:47:9c:17:ca:
                    c8:e3:c9:27:2e:b0:17:b1:8b:d4:11:64:a7:f9:01:
                    f6:aa:c5:27:c5:de:2b:5f:70:89:59:4c:51:a9:fa:
                    46:09:0d:fb:6d:69:9b:eb:27:e7:5d:75:a7:d1:6e:
                    7b:40:28:3f:e4:6b:64:b7:4c:20:33:e3:8c:e4:01:
                    03:3d:94:16:7d:7b:af:ad:5f:e0:20:fa:a1:83:09:
                    ac:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:C4:EB:73:84:7F:BE:17:51:17:42:3D:0E:13:E2:C9:88:D2:A6:9F
            X509v3 Authority Key Identifier:
                keyid:64:82:EA:67:DB:85:8D:14:40:DD:67:B9:55:22:3E:43:41:BA:4E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/0/6482EA67DB858D1440DD67B955223E4341BA4E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6482EA67DB858D1440DD67B955223E4341BA4E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/0/6482EA67DB858D1440DD67B955223E4341BA4E97.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:46:57:98:10:af:46:27:be:e2:b9:7d:18:6b:d7:af:e9:03:
         e1:cf:29:73:b8:fb:2a:cf:d1:8a:dd:bb:da:99:5f:06:9e:9d:
         5a:a8:4a:59:f1:b9:0b:7d:46:0f:98:8f:7e:26:c7:2f:bc:71:
         a5:92:50:81:51:66:aa:3e:b4:7a:9d:18:ff:7c:cf:e6:0e:77:
         a1:ff:97:d8:d6:b8:72:8a:45:bf:61:6a:3f:1e:ff:fc:0e:b7:
         71:f5:d6:33:93:10:26:3e:2d:0c:c1:ec:3f:1c:c5:85:25:af:
         bf:87:e3:58:ba:69:4b:98:71:1f:68:a3:18:a5:3b:e7:67:11:
         7c:8e:2d:de:71:79:5c:b8:d3:c4:75:6d:d3:aa:e5:17:e3:21:
         ba:97:9e:ea:c3:31:39:48:04:cb:fe:f2:7d:bc:06:f7:2c:42:
         84:dc:5c:ad:84:86:8a:e9:35:8c:0e:f9:9e:a3:58:ab:c4:10:
         ad:83:47:bc:a1:5e:4b:d4:4d:c7:7b:8e:b8:b0:e0:fb:02:e4:
         27:0c:b1:59:dd:f7:99:59:ca:fb:f3:e9:01:09:33:67:a6:bc:
         09:34:06:42:25:ad:5c:c7:95:f9:f4:dd:03:82:b1:c7:2e:ac:
         3a:19:96:80:bf:53:42:04:70:5b:9e:06:dd:27:a7:6c:83:0d:
         92:9d:a5:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:02:55 2025 by rpki-client