This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.mft
File:                     31586760843F668A816117EA02F6F30FE8F9C359.mft (raw, json)
Hash identifier:          y3Y1qFDDrUeZluP5ZomWX563BJE3cQ5cHHDIbOcnJ9w=
Subject key identifier:   96:05:9E:A9:85:F7:26:2B:49:8D:1C:D7:A8:72:74:81:B1:0C:26:A8
Authority key identifier: 31:58:67:60:84:3F:66:8A:81:61:17:EA:02:F6:F3:0F:E8:F9:C3:59
Certificate issuer:       /CN=31586760843F668A816117EA02F6F30FE8F9C359
Certificate serial:       5FF9607637DEF313F7E10BF6EA57B42537AC33A8
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/31586760843F668A816117EA02F6F30FE8F9C359.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.mft
Manifest number:          0294
Signing time:             Sat 06 Dec 2025 06:13:22 +0000
Manifest this update:     Sat 06 Dec 2025 06:08:22 +0000
Manifest next update:     Sun 07 Dec 2025 07:10:22 +0000
Files and hashes:         1: 326131313a663263303a666638303a3a2f34382d3438203d3e20323134353738.roa (hash: K6ERbHzYMOmGY8zVjajZjctj/rooDOMsKI1zpR886Vs=)
                          2: 31586760843F668A816117EA02F6F30FE8F9C359.crl (hash: t9JNGsL8dz1UATXiRxX8EP3b56cIt3ZXCjErntYqOTg=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/31586760843F668A816117EA02F6F30FE8F9C359.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 07:10:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:f9:60:76:37:de:f3:13:f7:e1:0b:f6:ea:57:b4:25:37:ac:33:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31586760843F668A816117EA02F6F30FE8F9C359
        Validity
            Not Before: Dec  6 06:08:22 2025 GMT
            Not After : Dec  7 07:10:22 2025 GMT
        Subject: CN=96059EA985F7262B498D1CD7A8727481B10C26A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7a:01:59:f0:57:fc:46:a1:22:49:e0:8e:6c:
                    09:c8:a9:fd:84:b9:c5:3f:1d:f4:4e:35:5b:34:3e:
                    9a:73:73:90:32:fd:06:d3:2b:81:d6:c9:76:b5:8e:
                    13:c5:f7:f7:aa:4f:95:1f:95:30:b7:86:41:48:06:
                    da:65:74:55:1c:a4:8c:86:58:49:0e:de:c4:b5:4f:
                    1b:35:ca:e0:1d:bc:fb:bd:bd:25:96:ff:e3:5c:dd:
                    2e:a0:79:40:aa:16:87:c4:9c:d5:41:4a:6f:16:a1:
                    80:63:a4:b4:83:09:b8:60:1e:4b:df:5f:0f:5f:7d:
                    fe:36:7a:6a:31:7b:d6:63:b6:7c:0f:82:d4:d8:bf:
                    81:8c:7b:41:4b:0a:87:f9:17:5c:95:d4:76:b9:c4:
                    a1:15:47:d7:3e:af:44:b9:8c:69:a8:29:3c:92:e1:
                    7b:04:7b:f7:df:35:0a:43:88:39:2b:5d:c0:0c:54:
                    4e:94:83:c3:63:14:7d:62:16:60:da:ac:84:19:71:
                    31:e4:22:23:4e:7c:89:49:30:13:ff:60:44:fd:a6:
                    11:83:5e:69:d8:1c:d3:c6:c1:85:b9:f1:77:0c:47:
                    ee:54:37:19:a4:de:18:2a:92:81:88:1a:4e:91:96:
                    c2:ca:3b:1b:29:fa:d1:b2:56:67:db:76:12:15:77:
                    83:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:05:9E:A9:85:F7:26:2B:49:8D:1C:D7:A8:72:74:81:B1:0C:26:A8
            X509v3 Authority Key Identifier:
                keyid:31:58:67:60:84:3F:66:8A:81:61:17:EA:02:F6:F3:0F:E8:F9:C3:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/31586760843F668A816117EA02F6F30FE8F9C359.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:26:c1:49:46:b8:e4:4f:4e:44:67:1b:98:76:0b:dc:7c:00:
         2d:ff:b9:73:4c:b7:c5:ce:32:c6:df:e3:99:a0:b4:99:19:3d:
         29:a9:8b:fa:de:9d:e6:79:71:19:a1:9d:a2:3f:91:b3:ca:5e:
         66:b7:83:4e:b8:eb:f5:3b:97:92:4e:60:c8:c1:f7:58:d2:fb:
         b3:14:52:b2:38:36:80:68:f6:47:3b:16:6d:45:f7:4c:c3:67:
         43:8d:0f:4e:a1:0e:ab:9a:d7:92:f6:53:c5:37:95:01:99:63:
         a5:0f:9f:03:1d:4e:dd:33:4b:22:79:69:4d:34:e9:85:07:58:
         58:94:21:be:30:1e:07:4d:12:ec:e1:4c:c0:52:1b:da:ca:5a:
         21:cb:60:c6:79:90:43:91:75:98:d9:8c:1b:fc:8c:e5:8f:0e:
         23:9d:73:d7:4f:2c:e0:63:de:25:79:e7:7d:9e:e0:ff:13:0d:
         ba:ad:3d:21:b5:f4:3b:e3:e9:78:9a:16:e5:72:61:c1:b0:c0:
         99:20:dd:4b:4c:07:38:5b:ff:4e:b9:88:65:e9:65:4d:19:5b:
         76:ee:90:b2:d5:04:66:25:32:85:f5:fd:5c:e2:a5:42:cc:c2:
         dc:cb:3b:e6:b3:17:cc:36:60:f4:85:69:13:b3:1b:57:46:48:
         0f:c0:d2:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:38:17 2025 by rpki-client