This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_6f516320509b4d2d93ef2d5610f5f230/0/F5D54631B7091E1F4B8B02E70FF76F073F8B2320.mft
File:                     F5D54631B7091E1F4B8B02E70FF76F073F8B2320.mft (raw, json)
Hash identifier:          gm3ghVoFVZ5/0iXT45ke0rwe4bKpFB3kuTQtJ6vmrjk=
Subject key identifier:   21:5F:92:E1:B2:32:71:D6:28:F5:CF:8F:DD:5E:5C:21:AC:86:66:EC
Authority key identifier: F5:D5:46:31:B7:09:1E:1F:4B:8B:02:E7:0F:F7:6F:07:3F:8B:23:20
Certificate issuer:       /CN=F5D54631B7091E1F4B8B02E70FF76F073F8B2320
Certificate serial:       3ECFE72886135EAADA6DB9C412811CC2C25837D7
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/F5D54631B7091E1F4B8B02E70FF76F073F8B2320.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_6f516320509b4d2d93ef2d5610f5f230/0/F5D54631B7091E1F4B8B02E70FF76F073F8B2320.mft
Manifest number:          01B5
Signing time:             Sun 25 Jan 2026 15:31:57 +0000
Manifest this update:     Sun 25 Jan 2026 15:26:57 +0000
Manifest next update:     Mon 26 Jan 2026 17:32:57 +0000
Files and hashes:         1: F5D54631B7091E1F4B8B02E70FF76F073F8B2320.crl (hash: TRyD6IFU0R8xPqY6l4ms+ESDRENsMmSyOkWtDeCzkBw=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_6f516320509b4d2d93ef2d5610f5f230/0/F5D54631B7091E1F4B8B02E70FF76F073F8B2320.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_6f516320509b4d2d93ef2d5610f5f230/0/F5D54631B7091E1F4B8B02E70FF76F073F8B2320.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/F5D54631B7091E1F4B8B02E70FF76F073F8B2320.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:cf:e7:28:86:13:5e:aa:da:6d:b9:c4:12:81:1c:c2:c2:58:37:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5D54631B7091E1F4B8B02E70FF76F073F8B2320
        Validity
            Not Before: Jan 25 15:26:57 2026 GMT
            Not After : Jan 26 17:32:57 2026 GMT
        Subject: CN=215F92E1B23271D628F5CF8FDD5E5C21AC8666EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:65:11:46:6c:e5:87:33:d0:f8:f0:5b:c4:55:
                    87:71:18:f5:79:c7:89:f0:57:13:f5:de:ef:46:56:
                    dd:8e:bd:51:99:2e:e2:d1:d2:eb:db:2b:a3:e5:f9:
                    61:25:3f:63:47:8f:2e:ba:e6:dd:41:fa:d8:99:a5:
                    bd:ec:11:32:48:95:67:6a:a0:58:16:2f:02:49:74:
                    dc:2b:fa:51:3b:a3:67:09:3f:0c:91:6a:c8:70:c6:
                    5d:6a:04:ec:b3:f7:80:d2:48:3d:cd:dd:57:39:c5:
                    ac:e6:40:01:70:b6:1b:4b:df:b9:5c:36:83:2c:02:
                    1f:c9:2e:23:bd:c8:6d:bb:5d:b8:bb:2c:3c:b5:81:
                    9c:d0:ee:f7:d8:17:f5:f9:d0:fb:51:e2:a3:78:29:
                    6a:03:f5:02:54:2e:ab:c7:77:cc:e4:34:7e:44:1b:
                    81:85:31:78:70:aa:23:28:6c:1c:5a:52:90:fa:95:
                    61:ed:a0:f6:ad:23:c7:b7:14:c9:9b:dd:87:22:c3:
                    2a:48:d6:6c:d9:23:26:d0:c8:b5:ce:14:98:fd:8a:
                    30:ee:1e:67:86:b9:b4:11:c5:ca:a2:99:bf:09:25:
                    9d:b0:d0:bb:e0:09:78:58:ba:85:2b:0e:00:57:74:
                    e6:d4:3a:7e:4b:0e:e7:72:7b:f3:0a:ed:7d:26:b9:
                    2a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:5F:92:E1:B2:32:71:D6:28:F5:CF:8F:DD:5E:5C:21:AC:86:66:EC
            X509v3 Authority Key Identifier:
                keyid:F5:D5:46:31:B7:09:1E:1F:4B:8B:02:E7:0F:F7:6F:07:3F:8B:23:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_6f516320509b4d2d93ef2d5610f5f230/0/F5D54631B7091E1F4B8B02E70FF76F073F8B2320.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/F5D54631B7091E1F4B8B02E70FF76F073F8B2320.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_6f516320509b4d2d93ef2d5610f5f230/0/F5D54631B7091E1F4B8B02E70FF76F073F8B2320.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:3f:e0:82:e5:d2:21:bc:1b:07:20:9f:08:1f:b4:49:2f:b9:
         d9:7f:49:c2:b3:e5:9b:20:4e:13:d7:d1:b3:5e:a1:99:a3:26:
         87:dd:4d:9e:30:d0:ab:bd:a7:b0:75:98:3f:69:93:e0:b4:38:
         c9:36:bc:06:85:d9:da:63:fe:9d:09:27:a6:3a:34:1d:cd:bb:
         56:d3:6e:92:9c:c9:b6:55:05:43:23:20:a6:78:5e:92:4f:6e:
         b6:e0:1a:8d:20:f9:28:f1:a9:c8:ed:8f:98:3d:90:90:1a:04:
         8d:8c:f0:f7:a6:ec:42:05:52:55:1b:b6:db:dc:7e:21:6b:52:
         d4:9a:fd:1f:40:41:bc:8e:23:53:3b:49:e2:56:72:6d:2e:c8:
         70:ad:e6:55:3d:93:d0:ac:48:d5:61:c0:39:3a:f6:42:97:8d:
         6f:23:a1:06:0e:28:79:3f:2a:7d:97:8f:06:9e:3c:f9:6a:40:
         e8:8f:70:f5:f7:27:39:fe:41:3d:f6:bd:a5:ce:9a:4e:1f:23:
         6a:bb:51:3c:fd:d6:bb:02:93:72:79:ab:e5:58:4f:56:30:1b:
         7d:e3:65:29:47:6f:12:8a:a4:b1:89:af:c0:38:c1:89:bf:a9:
         c1:5d:eb:e7:84:1f:0e:99:c6:5a:ba:60:e2:e2:be:b3:24:a1:
         2f:53:d5:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:49:47 2026 by rpki-client