This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.mft
File:                     10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.mft (raw, json)
Hash identifier:          0tz22nWsm8Bty1xzYguKoQJXXTzatWPsPuBzL6FhWRQ=
Subject key identifier:   69:7A:3E:EB:88:D2:24:51:23:89:2B:3F:C2:AE:78:AE:0B:64:73:F5
Authority key identifier: 10:B5:13:39:C5:BC:CE:70:9C:B6:D6:A1:49:21:AA:F4:C6:BA:6A:42
Certificate issuer:       /CN=10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42
Certificate serial:       5BFBE62D72F925B1FBADA12631CF78CAB4130422
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.mft
Manifest number:          02A6
Signing time:             Thu 18 Dec 2025 18:00:28 +0000
Manifest this update:     Thu 18 Dec 2025 17:55:25 +0000
Manifest next update:     Fri 19 Dec 2025 19:59:25 +0000
Files and hashes:         1: 10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.crl (hash: vZd/UkxfTzTx1jRL38IugQWaJ7g5Gh8ackkJSVcdjno=)
                          2: 326131313a663263303a666666303a3a2f34382d3438203d3e20323033303234.roa (hash: 97DFsajVBa0EqLsX0/dV54HSIKbk5ZSaY4ztBppt1cY=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Dec 2025 19:59:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:fb:e6:2d:72:f9:25:b1:fb:ad:a1:26:31:cf:78:ca:b4:13:04:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42
        Validity
            Not Before: Dec 18 17:55:25 2025 GMT
            Not After : Dec 19 19:59:25 2025 GMT
        Subject: CN=697A3EEB88D2245123892B3FC2AE78AE0B6473F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:58:67:cd:c8:db:9c:0b:3b:51:7a:30:31:02:
                    7b:00:21:62:64:a6:1d:ee:5c:11:59:f9:c8:31:07:
                    99:d1:7f:92:58:86:dd:44:5e:19:79:f4:e0:29:51:
                    04:0e:2d:30:f9:6f:ab:1f:d7:9f:da:e6:fb:f0:f8:
                    06:3c:05:d1:ca:f9:73:38:75:5d:16:52:dd:13:c6:
                    68:f2:24:1e:05:d6:e7:dd:62:f6:13:2f:69:c1:06:
                    a9:fd:9f:a3:59:b2:e1:02:22:58:72:c7:30:06:26:
                    ae:79:0d:51:b8:03:a5:e0:89:49:91:6b:97:14:c9:
                    96:9d:ed:cc:e1:ac:b4:4c:59:ef:57:2c:a3:c6:b0:
                    9f:61:5e:fc:d9:37:73:95:86:78:cc:5b:b6:65:13:
                    94:52:40:73:09:0e:a2:cb:3c:27:ba:8a:c0:be:00:
                    03:67:c2:29:84:31:0b:f9:9b:15:86:db:92:0a:50:
                    5d:82:c8:f4:1c:60:56:31:d7:b3:a8:1f:71:f4:d1:
                    83:99:3d:e6:5f:fc:74:f9:bf:0d:a2:1c:0e:5e:c3:
                    d0:cd:75:c5:0b:ae:98:17:12:97:47:f4:ab:c0:53:
                    30:e1:fc:1f:5f:e2:d4:dd:dc:39:11:ac:56:69:86:
                    ce:6c:e5:13:b3:12:ed:0f:13:3f:52:b6:9e:bb:e9:
                    82:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:7A:3E:EB:88:D2:24:51:23:89:2B:3F:C2:AE:78:AE:0B:64:73:F5
            X509v3 Authority Key Identifier:
                keyid:10:B5:13:39:C5:BC:CE:70:9C:B6:D6:A1:49:21:AA:F4:C6:BA:6A:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:b7:cd:71:73:43:63:f5:53:69:63:77:7e:93:c9:0e:4f:9d:
         70:67:7b:d3:aa:ad:5f:e0:53:60:00:5b:55:f4:90:62:65:f6:
         16:b7:ef:fc:61:bd:e4:4a:db:21:9b:8b:97:33:65:21:43:74:
         0b:8b:66:9e:bf:c0:c3:49:e3:9c:11:83:d4:df:c1:8d:0c:29:
         f0:f4:92:b2:8a:c7:9d:0b:28:5e:0c:93:91:51:e1:56:97:77:
         3a:87:d1:01:f0:ce:09:44:b2:90:61:56:42:3d:b7:5e:9a:a3:
         94:fa:b2:77:8f:19:8c:b7:57:b4:3e:e3:4c:c7:73:87:e6:72:
         a4:19:9d:85:e4:6c:18:b7:b8:4e:ec:3b:bd:5c:3c:e0:d2:76:
         b8:6f:dd:86:fc:bc:8b:8d:75:d1:f5:6d:4d:a8:03:19:2b:4e:
         c8:1c:d2:86:47:cc:9b:24:79:4c:74:2d:83:01:3e:0f:13:1f:
         9f:c7:db:f2:59:e6:48:21:ec:82:c0:9b:65:58:c3:a5:6e:85:
         43:e3:a4:02:c2:f1:50:0d:47:e4:22:e4:c9:77:fd:a8:da:a2:
         b3:ac:95:14:85:ed:6c:9a:3b:ca:ed:c7:4f:6a:be:01:b5:aa:
         5a:ec:c4:68:aa:f5:ca:53:53:48:02:8a:aa:db:c8:7b:9f:e3:
         5c:c6:a1:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 11:53:47 2025 by rpki-client