This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.mft
File:                     5ABE2F609996476AAFE146BC5A72429B0B205FC0.mft (raw, json)
Hash identifier:          gjYHpYZ/P9boLyaWQTw0+C8QrhfrDQv+71JrTavo0AM=
Subject key identifier:   AE:30:F5:4F:F4:F4:FF:97:17:4B:B6:67:FE:35:43:F8:14:EA:50:69
Authority key identifier: 5A:BE:2F:60:99:96:47:6A:AF:E1:46:BC:5A:72:42:9B:0B:20:5F:C0
Certificate issuer:       /CN=5ABE2F609996476AAFE146BC5A72429B0B205FC0
Certificate serial:       66F35B3F6F2F2F56AE22A86F62A7F37652306650
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/5ABE2F609996476AAFE146BC5A72429B0B205FC0.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.mft
Manifest number:          0292
Signing time:             Sat 06 Dec 2025 11:29:13 +0000
Manifest this update:     Sat 06 Dec 2025 11:24:13 +0000
Manifest next update:     Sun 07 Dec 2025 12:32:13 +0000
Files and hashes:         1: 5ABE2F609996476AAFE146BC5A72429B0B205FC0.crl (hash: Na8nRIWbmHnod0zkylgiKtkxVp0TbpkJfH2Ahh70o78=)
                          2: 326131313a663263303a666666373a3a2f34382d3438203d3e20323039323435.roa (hash: Fb1/PRkI0lrTKbp777DJ9P81eGra7/CB0uA9Vm+bs1w=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/5ABE2F609996476AAFE146BC5A72429B0B205FC0.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 07:35:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:f3:5b:3f:6f:2f:2f:56:ae:22:a8:6f:62:a7:f3:76:52:30:66:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ABE2F609996476AAFE146BC5A72429B0B205FC0
        Validity
            Not Before: Dec  6 11:24:13 2025 GMT
            Not After : Dec  7 12:32:13 2025 GMT
        Subject: CN=AE30F54FF4F4FF97174BB667FE3543F814EA5069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a0:82:9b:3c:63:ce:51:bc:37:e8:33:7f:57:
                    2e:3f:98:db:43:c2:e3:38:d4:66:83:fd:e5:a1:a7:
                    87:5c:9f:7a:2a:26:6d:10:b8:be:2d:53:cb:65:36:
                    80:e8:86:b4:a5:ef:9e:07:f4:6b:e9:c9:a8:e9:b1:
                    39:b7:46:e4:f8:90:88:ef:e1:5a:bd:14:3e:8c:ea:
                    28:21:5a:81:fc:93:80:2b:12:20:f3:79:62:af:68:
                    a1:27:76:c4:e1:0b:cb:b5:28:10:8c:0b:29:86:be:
                    38:22:35:61:0d:ec:bd:cf:0e:d0:0b:3b:8b:c7:83:
                    e6:2f:61:b5:5e:a0:8a:3d:27:77:46:97:19:a3:5a:
                    88:f9:8e:3e:b2:83:05:40:bb:32:9a:c7:ac:1a:2f:
                    cc:0a:0c:b7:1e:c4:e7:7c:ac:ae:3b:34:c8:a0:b8:
                    35:a3:c6:6f:1f:a7:01:0f:75:dd:29:3d:a6:2f:ef:
                    f4:4f:ae:d7:5d:56:84:b6:b8:e2:3c:1a:7a:92:d9:
                    5d:74:31:b0:9e:a5:9b:23:bf:73:2a:d5:d7:b1:da:
                    f0:6b:af:60:b8:0e:34:96:c6:3f:2d:e9:ce:f6:99:
                    04:af:9e:0e:64:f0:2a:08:dd:14:9c:1a:24:50:67:
                    85:15:76:f5:af:87:b2:36:7d:f7:47:d4:c1:b3:4a:
                    3e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:30:F5:4F:F4:F4:FF:97:17:4B:B6:67:FE:35:43:F8:14:EA:50:69
            X509v3 Authority Key Identifier:
                keyid:5A:BE:2F:60:99:96:47:6A:AF:E1:46:BC:5A:72:42:9B:0B:20:5F:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/5ABE2F609996476AAFE146BC5A72429B0B205FC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:42:bf:01:9a:a2:2b:0b:57:82:16:90:b5:06:68:6f:ad:3d:
         55:f6:2a:91:eb:40:8f:9e:78:4c:0a:e9:05:65:35:44:94:92:
         c4:f7:d4:1f:d1:b1:5c:b5:71:1f:ce:df:6f:2e:ee:92:d2:13:
         0f:dd:f3:86:43:79:40:9a:ee:e4:7a:10:68:7a:72:ac:71:21:
         41:12:77:d1:91:be:78:90:5f:d9:f3:b9:b5:2c:7d:95:bd:7d:
         43:ca:8d:57:4a:86:c7:31:1b:8d:5f:eb:70:3e:95:a8:13:51:
         31:77:4e:97:d2:25:d5:ed:b8:e3:57:89:ed:4a:90:11:14:51:
         5a:c4:f5:1b:85:3b:5c:2d:6a:7c:1e:b1:82:00:90:e8:9d:51:
         6b:25:82:88:3b:94:24:f3:b6:95:da:f0:85:42:45:d2:57:16:
         b1:d1:71:85:ee:2b:0c:47:b6:da:a1:fe:67:2c:6a:6a:50:1f:
         57:6e:a3:9d:e2:c0:c6:6f:13:c6:10:f0:cd:d2:3d:72:34:06:
         67:59:d4:11:96:6e:ef:9c:f5:2f:24:72:99:b2:85:7c:2d:e6:
         db:70:15:ff:27:95:aa:15:71:b5:6b:c2:3d:21:53:65:d9:76:
         a9:bf:da:8a:39:84:67:aa:0f:8d:fd:56:6f:bf:81:32:45:bd:
         74:75:87:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:09:12 2025 by rpki-client