This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft
File:                     2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft (raw, json)
Hash identifier:          XT9JjYd/VZDCuhCl54mJ58/pj0ywNHsrwwb3vDd2pKI=
Subject key identifier:   33:E7:DF:2D:D7:4C:F1:1A:A2:A6:3D:12:CE:15:22:E1:EF:C5:12:F9
Authority key identifier: 2B:3B:97:33:4D:A0:69:78:18:5D:AC:76:A2:F3:EA:35:85:E8:23:1E
Certificate issuer:       /CN=2B3B97334DA06978185DAC76A2F3EA3585E8231E
Certificate serial:       424355919A5943C13C850F1F5940C63DC753E04F
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/2B3B97334DA06978185DAC76A2F3EA3585E8231E.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft
Manifest number:          6A
Signing time:             Sun 25 Jan 2026 03:28:17 +0000
Manifest this update:     Sun 25 Jan 2026 03:23:17 +0000
Manifest next update:     Mon 26 Jan 2026 06:41:17 +0000
Files and hashes:         1: 2B3B97334DA06978185DAC76A2F3EA3585E8231E.crl (hash: fPNHJMTIt7JDXR7N0y208Al8hCEOLISZqooRC/zEzP4=)
                          2: 326131313a663263303a666665303a3a2f34382d3438203d3e20323134373439.roa (hash: vWCzOnh12VtJGg6RfrslnpFyun0vAz+2wk8UKDM7sNo=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/2B3B97334DA06978185DAC76A2F3EA3585E8231E.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 06:41:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:43:55:91:9a:59:43:c1:3c:85:0f:1f:59:40:c6:3d:c7:53:e0:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B3B97334DA06978185DAC76A2F3EA3585E8231E
        Validity
            Not Before: Jan 25 03:23:17 2026 GMT
            Not After : Jan 26 06:41:17 2026 GMT
        Subject: CN=33E7DF2DD74CF11AA2A63D12CE1522E1EFC512F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:aa:a6:6b:59:fd:ca:a3:d7:11:55:7e:13:64:
                    80:c2:f4:a6:41:2c:33:f4:b1:a0:e1:58:ad:73:68:
                    3f:21:d1:fa:ce:24:d3:be:9b:19:a1:b1:98:67:0f:
                    a2:e4:7a:bd:ad:a4:1b:68:fc:63:1b:97:a9:02:f8:
                    1b:4d:cd:85:d2:67:1d:a8:34:4d:76:e1:bf:08:71:
                    73:29:62:b1:64:31:09:36:ee:22:a8:4f:a9:a6:46:
                    f8:ce:e9:2c:a6:ae:60:a2:d4:f5:5e:c7:ad:0c:1b:
                    53:74:e0:ce:15:06:1b:32:17:ac:1b:96:6c:3b:b9:
                    de:7c:7b:e2:4c:d1:55:ee:95:2f:49:ed:e5:b8:e8:
                    b1:ba:cf:a5:a4:98:10:5a:66:13:cd:6d:1b:25:b1:
                    29:36:da:3a:87:46:5a:5e:83:e1:0f:e9:15:6f:54:
                    9f:a8:e7:6b:17:3e:6d:26:dd:4c:ad:1b:20:9f:02:
                    a9:df:4e:a1:3f:e0:d7:10:3e:5c:06:56:7b:42:89:
                    9f:fd:c8:10:d7:19:30:fa:22:e4:79:46:eb:b3:e4:
                    4b:59:c0:ff:de:cd:60:f5:6d:f4:80:31:95:1a:13:
                    33:b8:b5:16:8d:68:0b:5d:0d:89:71:ee:ab:e1:ea:
                    11:bc:6c:7b:40:1d:34:fb:02:0b:97:9c:c5:9e:81:
                    d5:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:E7:DF:2D:D7:4C:F1:1A:A2:A6:3D:12:CE:15:22:E1:EF:C5:12:F9
            X509v3 Authority Key Identifier:
                keyid:2B:3B:97:33:4D:A0:69:78:18:5D:AC:76:A2:F3:EA:35:85:E8:23:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/2B3B97334DA06978185DAC76A2F3EA3585E8231E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:13:0b:e9:84:b4:5e:73:ae:c5:24:dc:62:1b:14:4f:a5:22:
         8c:6d:4a:14:6c:2e:5a:20:11:8a:94:95:a1:9e:02:1f:39:84:
         24:7b:6a:9b:5a:99:22:7a:db:eb:9f:9d:b1:04:6f:0c:17:47:
         c6:91:8c:e9:bc:b7:a9:2b:fc:09:80:de:d5:4b:cc:3e:af:38:
         06:b2:7c:9b:8c:59:13:32:6c:0a:5c:ef:10:1e:d8:dc:e0:ca:
         0e:5c:e7:36:e0:5b:50:5a:f4:bf:a9:1f:a8:19:4d:3e:51:14:
         82:38:9a:81:03:08:a2:59:09:fa:7e:20:9e:92:5d:2c:9c:97:
         77:f2:3c:36:8a:b8:8d:46:35:a9:e7:1c:18:80:87:41:ed:69:
         c0:71:0c:11:15:fb:4a:0f:bf:79:95:e4:56:30:ee:08:e5:a2:
         37:28:4a:64:31:b4:01:e9:e3:87:a6:ef:01:87:2d:b9:b7:c0:
         f5:70:58:97:75:ef:54:73:88:fc:14:d2:a6:c0:63:ad:6e:78:
         ac:53:30:b7:31:94:2b:de:4c:1f:78:65:5e:21:b8:cb:dd:99:
         12:0c:2c:5a:21:ad:06:59:3d:41:0a:64:46:9c:dd:5b:f0:51:
         0f:53:27:e6:a1:72:f5:d7:c7:0c:29:19:74:54:89:64:98:a9:
         a3:7b:36:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:09:14 2026 by rpki-client