This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/1/165AE96D6A2E9A42B7FF7F1B1958413AE593D181.mft
File:                     165AE96D6A2E9A42B7FF7F1B1958413AE593D181.mft (raw, json)
Hash identifier:          aNVI2gJqHM7R4AG0VPFRHAEfsQAtvLuvuEX4XGI2/hM=
Subject key identifier:   74:2F:34:C2:BA:45:4A:B5:8E:D5:AA:65:7E:AA:81:E4:99:8D:46:FD
Authority key identifier: 16:5A:E9:6D:6A:2E:9A:42:B7:FF:7F:1B:19:58:41:3A:E5:93:D1:81
Certificate issuer:       /CN=165ae96d6a2e9a42b7ff7f1b1958413ae593d181
Certificate serial:       0D727AA46372F1A0BC5FEE38FAB3BB94AB7A1EF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FlrpbWoumkK3_38bGVhBOuWT0YE.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/1/165AE96D6A2E9A42B7FF7F1B1958413AE593D181.mft
Manifest number:          0295
Signing time:             Fri 05 Dec 2025 11:01:35 +0000
Manifest this update:     Fri 05 Dec 2025 10:56:35 +0000
Manifest next update:     Sat 06 Dec 2025 12:20:35 +0000
Files and hashes:         1: 165AE96D6A2E9A42B7FF7F1B1958413AE593D181.crl (hash: mZwjNbJZ9+6W1X2tbAMXa75qWQ7EeX7eahi4m+QAHyU=)
                          2: AS212245.asa (hash: Tl7AFn5qU0JzGSHvNhoFySTYThSVH7NiT4mJ+9GeULc=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/1/165AE96D6A2E9A42B7FF7F1B1958413AE593D181.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/1/165AE96D6A2E9A42B7FF7F1B1958413AE593D181.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FlrpbWoumkK3_38bGVhBOuWT0YE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 12:20:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:72:7a:a4:63:72:f1:a0:bc:5f:ee:38:fa:b3:bb:94:ab:7a:1e:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=165ae96d6a2e9a42b7ff7f1b1958413ae593d181
        Validity
            Not Before: Dec  5 10:56:35 2025 GMT
            Not After : Dec  6 12:20:35 2025 GMT
        Subject: CN=742F34C2BA454AB58ED5AA657EAA81E4998D46FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:66:c0:f9:ea:49:74:26:33:39:ba:b2:15:e6:
                    18:a2:8c:83:e9:56:5d:7f:9e:f5:af:db:e0:6f:a7:
                    b3:ca:3f:26:fe:59:71:6f:3a:fc:8d:44:e9:11:94:
                    61:dd:72:7a:ba:20:df:22:ad:a4:c1:0e:ed:f4:25:
                    06:72:dd:3a:eb:78:71:d7:a3:90:dd:8a:9a:3e:a0:
                    0b:53:25:1c:ba:71:84:e9:2d:a0:ef:e3:32:ed:d4:
                    d2:dd:be:2a:c2:04:03:4a:a1:aa:22:c5:f8:c5:7a:
                    71:14:11:0c:a3:3f:09:a9:6d:25:60:aa:a5:fd:ef:
                    77:a5:d2:cf:7f:75:aa:cc:32:77:c4:1d:7b:2d:30:
                    48:b6:d8:60:1f:95:a7:6d:51:eb:c5:52:16:22:d0:
                    dc:de:60:1a:9d:fa:ef:e1:33:1f:03:42:a9:6a:ff:
                    c8:33:76:82:db:e1:23:3e:81:2f:53:13:a3:6e:34:
                    f0:f2:f5:77:9b:03:89:44:57:45:93:fd:30:ad:f5:
                    d0:aa:fa:72:e8:34:db:ca:4e:22:58:f6:b6:60:54:
                    30:ef:30:a3:da:b7:ac:76:fa:31:ce:1f:fd:54:17:
                    f4:be:b3:82:2d:74:aa:80:95:27:bf:31:67:93:a4:
                    22:0f:53:4b:2c:26:2f:11:64:5c:1c:90:0e:67:0a:
                    ab:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:2F:34:C2:BA:45:4A:B5:8E:D5:AA:65:7E:AA:81:E4:99:8D:46:FD
            X509v3 Authority Key Identifier:
                keyid:16:5A:E9:6D:6A:2E:9A:42:B7:FF:7F:1B:19:58:41:3A:E5:93:D1:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/1/165AE96D6A2E9A42B7FF7F1B1958413AE593D181.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FlrpbWoumkK3_38bGVhBOuWT0YE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/1/165AE96D6A2E9A42B7FF7F1B1958413AE593D181.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:af:b0:35:c5:59:a9:d2:31:bb:ed:cf:38:fa:97:59:b9:8a:
         fc:18:56:0c:98:1f:0b:e0:6b:c3:0b:d6:77:d9:f8:7b:e9:dd:
         ca:0e:a8:cc:6f:3e:35:29:66:6b:8a:5f:2f:3d:84:11:a9:ae:
         0c:d3:e2:af:9c:b5:58:28:6c:1e:ab:b6:c6:bf:28:b6:60:cf:
         8f:ee:bc:49:eb:4c:1d:f8:bf:2d:36:ae:87:b0:09:b2:0a:e8:
         7d:cb:3a:b9:f5:40:6d:1c:1f:c6:01:a3:b9:6c:fc:54:d6:ab:
         f3:d3:44:d3:22:31:66:d9:8d:b0:c5:48:c6:94:47:64:3a:32:
         d5:2b:df:7e:84:a7:e8:6a:ca:ae:c9:86:5d:66:40:e2:b7:5d:
         21:6c:b8:96:56:a8:42:c4:77:59:c3:e3:66:9b:e1:7d:7a:c3:
         e9:97:27:af:b8:a5:fd:ba:32:1b:bb:c6:2e:ad:6a:75:d3:cf:
         44:9d:2a:63:5a:f6:dd:da:a8:e7:ad:96:9e:8d:eb:a7:9f:04:
         5a:77:25:66:36:7e:cf:b0:5c:cf:ed:e7:ed:54:b7:40:8f:3d:
         ee:9d:e3:86:66:c9:f2:72:6e:b9:cd:ae:60:19:96:e3:3d:08:
         33:f9:dc:a5:46:d6:d7:30:e9:5b:8f:7e:0c:f3:b0:4c:fc:46:
         20:71:72:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 05:06:45 2025 by rpki-client