This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/0/B50D92304CA867525C648A07380EA065FD352DEC.mft
File:                     B50D92304CA867525C648A07380EA065FD352DEC.mft (raw, json)
Hash identifier:          6UaBLQNqgAlfS3V9bSXp0AVRbFSE9gJ6XaSWeAHc6jk=
Subject key identifier:   A1:0C:74:A2:A0:09:9C:A0:AA:88:8B:D7:F0:E9:C3:37:8C:DD:57:05
Authority key identifier: B5:0D:92:30:4C:A8:67:52:5C:64:8A:07:38:0E:A0:65:FD:35:2D:EC
Certificate issuer:       /CN=B50D92304CA867525C648A07380EA065FD352DEC
Certificate serial:       4C432D02C599195D0A2AEB6E10C7F0CF94EAF630
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B50D92304CA867525C648A07380EA065FD352DEC.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/0/B50D92304CA867525C648A07380EA065FD352DEC.mft
Manifest number:          0298
Signing time:             Sat 06 Dec 2025 05:58:20 +0000
Manifest this update:     Sat 06 Dec 2025 05:53:20 +0000
Manifest next update:     Sun 07 Dec 2025 08:40:20 +0000
Files and hashes:         1: 326131313a663263303a666666353a3a2f34382d3438203d3e20323037383835.roa (hash: jMfNBauLsuyKF1Bnrr2mTN5g8wCiId2FE0DDlamIixc=)
                          2: B50D92304CA867525C648A07380EA065FD352DEC.crl (hash: 0wzlNYdx+cC9KAYdwS4S8AO9wy6lFRvOYXjKfacJJnM=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/0/B50D92304CA867525C648A07380EA065FD352DEC.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/0/B50D92304CA867525C648A07380EA065FD352DEC.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B50D92304CA867525C648A07380EA065FD352DEC.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:43:2d:02:c5:99:19:5d:0a:2a:eb:6e:10:c7:f0:cf:94:ea:f6:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B50D92304CA867525C648A07380EA065FD352DEC
        Validity
            Not Before: Dec  6 05:53:20 2025 GMT
            Not After : Dec  7 08:40:20 2025 GMT
        Subject: CN=A10C74A2A0099CA0AA888BD7F0E9C3378CDD5705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0c:15:6b:52:16:bb:fe:bf:4b:4c:d5:38:b4:
                    ca:af:46:ae:4e:28:6f:c5:80:7f:0b:15:39:9a:5d:
                    b0:a4:17:f4:96:a6:2a:57:56:72:60:a2:f6:1a:4b:
                    55:ca:ad:1d:12:9a:d4:7c:63:2d:94:4e:f6:1c:80:
                    15:35:a9:e6:ee:43:22:f8:74:43:17:05:26:6d:52:
                    b2:dd:7b:28:00:07:c7:fa:ad:c9:8e:0a:60:91:69:
                    07:95:7b:0d:93:fb:2b:e3:1d:00:8f:72:98:7a:70:
                    ff:fa:c8:30:ae:65:cf:98:22:46:b6:22:09:d8:e4:
                    b4:0c:08:4a:de:b2:16:86:0b:5f:af:71:a3:7d:aa:
                    75:4b:8d:f8:fa:1b:5e:36:be:c3:63:79:a2:77:16:
                    1a:c2:3f:35:f9:36:4f:b2:c1:fd:2e:ac:d4:ea:73:
                    87:3c:25:77:fc:7f:97:26:fc:e4:2b:b2:21:cf:5f:
                    64:19:f0:54:e9:cd:33:3d:3f:57:30:37:c0:94:87:
                    4c:2b:e0:cb:9b:e7:47:34:c9:85:8b:c5:d7:8d:c3:
                    3a:1f:6f:ad:64:ce:6b:ee:78:50:0b:85:8a:4c:f7:
                    08:17:8c:2c:b8:3a:13:59:70:cc:9b:61:93:dd:13:
                    63:21:9d:a5:0b:6c:ee:85:00:8e:85:f6:74:e6:fd:
                    ee:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:0C:74:A2:A0:09:9C:A0:AA:88:8B:D7:F0:E9:C3:37:8C:DD:57:05
            X509v3 Authority Key Identifier:
                keyid:B5:0D:92:30:4C:A8:67:52:5C:64:8A:07:38:0E:A0:65:FD:35:2D:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/0/B50D92304CA867525C648A07380EA065FD352DEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B50D92304CA867525C648A07380EA065FD352DEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/0/B50D92304CA867525C648A07380EA065FD352DEC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:09:1e:10:3b:0c:58:6e:8f:5e:20:e4:4f:08:ab:5f:50:1a:
         fd:6c:14:97:00:f0:89:e2:68:14:58:db:70:ca:ee:f1:c7:dd:
         1e:85:87:90:d8:f2:fc:67:a2:83:00:7e:fa:a6:cd:7c:bb:53:
         2b:95:d1:87:91:cf:12:46:e2:fd:d8:55:00:59:cf:7f:01:76:
         dd:6c:cf:d0:91:bc:57:60:34:1c:a2:6e:32:19:23:75:5a:1e:
         55:c2:5d:a4:fb:ec:5a:3f:b8:af:88:59:9f:1e:98:41:e4:1b:
         00:0f:3e:3d:13:5a:73:81:63:84:d4:07:73:31:a7:48:75:d1:
         6d:72:ac:0f:25:49:b3:2d:83:81:9e:29:a8:29:0e:35:26:42:
         3a:e8:47:47:08:2c:ee:1f:06:21:19:0b:f4:9b:3a:cc:82:9f:
         d1:42:da:70:09:b5:a6:05:a0:c9:7e:4e:72:e2:32:aa:b8:8e:
         0b:b9:cf:e0:0e:2b:b8:dd:7a:7f:3b:ac:d9:97:e5:32:d6:9c:
         2f:53:6d:be:a3:64:d6:eb:02:77:7b:cb:0d:c5:8f:f0:97:07:
         0e:bc:2b:11:0c:e4:a9:d7:b9:b5:a4:78:eb:53:3b:b6:91:a9:
         f1:86:84:59:a1:5e:74:30:02:ba:38:1d:74:4d:c0:be:22:c4:
         26:e7:c0:50
-----BEGIN CERTIFICATE-----
MIIFbjCCBFagAwIBAgIUTEMtAsWZGV0KKutuEMfwz5Tq9jAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjUwRDkyMzA0Q0E4Njc1MjVDNjQ4QTA3MzgwRUEwNjVG
RDM1MkRFQzAeFw0yNTEyMDYwNTUzMjBaFw0yNTEyMDcwODQwMjBaMDMxMTAvBgNV
BAMTKEExMEM3NEEyQTAwOTlDQTBBQTg4OEJEN0YwRTlDMzM3OENERDU3MDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiDBVrUha7/r9LTNU4tMqvRq5O
KG/FgH8LFTmaXbCkF/SWpipXVnJgovYaS1XKrR0SmtR8Yy2UTvYcgBU1qebuQyL4
dEMXBSZtUrLdeygAB8f6rcmOCmCRaQeVew2T+yvjHQCPcph6cP/6yDCuZc+YIka2
IgnY5LQMCEreshaGC1+vcaN9qnVLjfj6G142vsNjeaJ3FhrCPzX5Nk+ywf0urNTq
c4c8JXf8f5cm/OQrsiHPX2QZ8FTpzTM9P1cwN8CUh0wr4Mub50c0yYWLxdeNwzof
b61kzmvueFALhYpM9wgXjCy4OhNZcMybYZPdE2MhnaULbO6FAI6F9nTm/e41AgMB
AAGjggJ4MIICdDAdBgNVHQ4EFgQUoQx0oqAJnKCqiIvX8OnDN4zdVwUwHwYDVR0j
BBgwFoAUtQ2SMEyoZ1JcZIoHOA6gZf01LewwDgYDVR0PAQH/BAQDAgeAMIGPBgNV
HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv
cmVwby9ycGtpX2NhXzVkOGY1N2NiODNhMTQ0ZWRhYzRiNTViMWE4OGIzNGQ2LzAv
QjUwRDkyMzA0Q0E4Njc1MjVDNjQ4QTA3MzgwRUEwNjVGRDM1MkRFQy5jcmwwgZ4G
CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz
LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh
MC1mMGQwMmMwM2EyYzYvNy9CNTBEOTIzMDRDQTg2NzUyNUM2NDhBMDczODBFQTA2
NUZEMzUyREVDLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty
c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzVkOGY1
N2NiODNhMTQ0ZWRhYzRiNTViMWE4OGIzNGQ2LzAvQjUwRDkyMzA0Q0E4Njc1MjVD
NjQ4QTA3MzgwRUEwNjVGRDM1MkRFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF
BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHQJHhA7DFhuj14g5E8I
q19QGv1sFJcA8IniaBRY23DK7vHH3R6Fh5DY8vxnooMAfvqmzXy7UyuV0YeRzxJG
4v3YVQBZz38Bdt1sz9CRvFdgNByibjIZI3VaHlXCXaT77Fo/uK+IWZ8emEHkGwAP
Pj0TWnOBY4TUB3Mxp0h10W1yrA8lSbMtg4GeKagpDjUmQjroR0cILO4fBiEZC/Sb
OsyCn9FC2nAJtaYFoMl+TnLiMqq4jgu5z+AOK7jden87rNmX5TLWnC9Tbb6jZNbr
And7yw3Fj/CXBw68KxEM5KnXubWkeOtTO7aRqfGGhFmhXnQwAro4HXRNwL4ixCbn
wFA=
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:51:33 2025 by rpki-client