This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/1/B692ED2FEFFD044C6DD7F20D70952648400A7744.mft
File:                     B692ED2FEFFD044C6DD7F20D70952648400A7744.mft (raw, json)
Hash identifier:          HxGNhtvVhHaC1PLSzMeVAbOz8Am7iSXMxmDmHA3TLac=
Subject key identifier:   0A:87:0F:02:62:34:5E:71:85:45:C3:3E:DC:98:D4:0E:DC:78:C5:6A
Authority key identifier: B6:92:ED:2F:EF:FD:04:4C:6D:D7:F2:0D:70:95:26:48:40:0A:77:44
Certificate issuer:       /CN=b692ed2feffd044c6dd7f20d70952648400a7744
Certificate serial:       5B7DFCDB2F5680C87BD3F705379F9BA5E72311C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tpLtL-_9BExt1_INcJUmSEAKd0Q.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/1/B692ED2FEFFD044C6DD7F20D70952648400A7744.mft
Manifest number:          0294
Signing time:             Fri 05 Dec 2025 18:37:29 +0000
Manifest this update:     Fri 05 Dec 2025 18:32:29 +0000
Manifest next update:     Sat 06 Dec 2025 19:06:29 +0000
Files and hashes:         1: B692ED2FEFFD044C6DD7F20D70952648400A7744.crl (hash: REa7bXNxqVSA6sEAi5lEZe9QTy+/Vrtt6WDapLHS8PQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/1/B692ED2FEFFD044C6DD7F20D70952648400A7744.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/1/B692ED2FEFFD044C6DD7F20D70952648400A7744.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tpLtL-_9BExt1_INcJUmSEAKd0Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 19:06:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:7d:fc:db:2f:56:80:c8:7b:d3:f7:05:37:9f:9b:a5:e7:23:11:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b692ed2feffd044c6dd7f20d70952648400a7744
        Validity
            Not Before: Dec  5 18:32:29 2025 GMT
            Not After : Dec  6 19:06:29 2025 GMT
        Subject: CN=0A870F0262345E718545C33EDC98D40EDC78C56A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:bf:9a:17:cb:b4:11:34:1e:87:12:d4:3d:a6:
                    82:42:50:d2:d5:fd:a7:34:03:f5:bc:5c:a7:4a:eb:
                    a6:dc:8f:a8:e1:47:83:c8:a6:72:9a:5b:d8:06:96:
                    9c:64:ce:d5:86:66:2c:06:ac:f3:c1:88:fa:97:aa:
                    40:09:d9:dd:c3:7f:12:c0:b5:f6:46:f6:3f:4c:8d:
                    4f:34:31:fc:5e:4e:b1:d7:fd:df:73:b0:34:b9:2e:
                    ab:b6:af:4a:1f:dc:75:88:75:73:f7:de:1e:52:99:
                    21:71:87:cb:e9:9c:d7:e9:00:42:ab:fb:a4:61:b7:
                    cc:e1:9c:da:d4:32:0e:e0:7d:52:ed:28:d3:13:dc:
                    ed:46:3a:6f:39:38:7b:fd:6d:25:db:44:57:10:ff:
                    9d:e9:95:1b:07:ef:02:53:20:ed:23:ec:fd:f5:7b:
                    f7:80:ac:20:c0:eb:cb:ce:06:fe:57:f2:a7:6b:5b:
                    e3:25:a7:e4:51:c6:22:63:9f:a8:92:1f:05:5f:5f:
                    78:f9:b3:a1:e5:4b:06:02:66:54:90:31:91:af:8a:
                    57:e8:d8:cf:8b:89:76:81:b4:c3:e6:3c:6e:01:72:
                    0f:c4:fa:d4:76:85:99:6f:48:e1:2b:8b:20:30:5b:
                    f1:05:e8:01:eb:ce:7a:bf:f3:d1:73:fb:87:44:4b:
                    f1:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:87:0F:02:62:34:5E:71:85:45:C3:3E:DC:98:D4:0E:DC:78:C5:6A
            X509v3 Authority Key Identifier:
                keyid:B6:92:ED:2F:EF:FD:04:4C:6D:D7:F2:0D:70:95:26:48:40:0A:77:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/1/B692ED2FEFFD044C6DD7F20D70952648400A7744.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpLtL-_9BExt1_INcJUmSEAKd0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/1/B692ED2FEFFD044C6DD7F20D70952648400A7744.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:e7:97:d7:ef:a1:99:71:ea:e1:bd:af:b8:4e:60:60:55:b2:
         8e:b4:24:ca:01:4d:e6:c7:65:48:2e:64:61:ac:64:cc:11:85:
         00:df:fe:45:29:6d:ec:99:78:da:7d:bb:6a:be:17:db:3b:75:
         19:50:a7:32:ed:66:df:75:34:2e:e1:1d:e5:f7:a9:91:2b:34:
         63:5c:f3:e9:66:ac:be:33:dd:0c:d0:b9:6a:92:62:cd:b9:b0:
         4e:81:fc:59:44:1f:3d:e6:e2:bd:b7:66:65:c6:31:57:d3:ff:
         99:05:79:a1:c7:f8:b3:c4:66:d7:a5:17:e8:3d:fd:43:ea:90:
         a4:10:55:39:76:c1:77:ac:e0:67:90:67:20:5b:cf:24:de:8f:
         01:2e:95:11:66:19:5c:e2:a1:1d:89:19:8f:df:fa:9d:5c:6c:
         e4:54:24:22:9e:66:a8:0c:9a:83:58:03:98:e3:ea:2d:4a:46:
         f6:8d:84:42:bc:a9:c4:f4:1e:ae:5c:1b:43:ef:0d:b7:37:fe:
         cc:29:88:71:1f:55:24:19:f6:45:33:bb:7e:90:c8:97:b0:04:
         67:b3:8f:81:65:ce:09:ef:be:56:cf:bb:91:26:db:5a:b6:a4:
         7d:26:bb:47:b7:cd:d6:79:ff:7b:23:85:22:fb:68:5c:8a:8e:
         4b:af:2c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:10:06 2025 by rpki-client