This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.mft
File:                     067DBC6BCF0F9582DF78366389AEAF5965565EF5.mft (raw, json)
Hash identifier:          lJH3qrywE6v2DQEoq+jWWnLuhiBevZSmkdZ6di3muZA=
Subject key identifier:   B1:C1:76:8B:AB:0C:4E:A2:D6:60:42:AC:28:54:AE:12:B5:98:95:2B
Authority key identifier: 06:7D:BC:6B:CF:0F:95:82:DF:78:36:63:89:AE:AF:59:65:56:5E:F5
Certificate issuer:       /CN=067DBC6BCF0F9582DF78366389AEAF5965565EF5
Certificate serial:       422FBA1193672118CC8E917730720C62A8D2C899
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/067DBC6BCF0F9582DF78366389AEAF5965565EF5.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.mft
Manifest number:          02DB
Signing time:             Tue 27 Jan 2026 18:36:38 +0000
Manifest this update:     Tue 27 Jan 2026 18:31:38 +0000
Manifest next update:     Wed 28 Jan 2026 21:30:38 +0000
Files and hashes:         1: 326131313a663263303a666663343a3a2f34382d3438203d3e20323136333733.roa (hash: iTb04aO1BMGaSLDC3asTwY2ZRYrbTl7Ocrr3rHizQyw=)
                          2: 067DBC6BCF0F9582DF78366389AEAF5965565EF5.crl (hash: GVe7Qc2Fk+izn+pzQCm8kIhT6HfxQRrdJvhHAirc9OI=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/067DBC6BCF0F9582DF78366389AEAF5965565EF5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Jan 2026 15:50:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:2f:ba:11:93:67:21:18:cc:8e:91:77:30:72:0c:62:a8:d2:c8:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=067DBC6BCF0F9582DF78366389AEAF5965565EF5
        Validity
            Not Before: Jan 27 18:31:38 2026 GMT
            Not After : Jan 28 21:30:38 2026 GMT
        Subject: CN=B1C1768BAB0C4EA2D66042AC2854AE12B598952B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ae:92:eb:7e:e9:a5:ff:64:6a:0e:fe:ff:2e:
                    b9:99:59:46:c5:51:ce:ae:79:10:de:94:2e:ab:e8:
                    74:0e:ec:12:2e:8d:a7:1e:63:d8:25:dd:a3:d5:e4:
                    0f:57:2d:00:56:d2:60:88:d7:66:19:ee:72:4e:71:
                    92:b3:67:ae:ae:c1:27:d7:4c:55:84:0e:3d:8f:04:
                    bd:02:85:1d:c2:40:2d:b8:fb:c5:fb:b4:80:1e:30:
                    f4:df:79:19:51:6a:f3:ea:80:1b:16:42:9b:e0:7d:
                    2d:d2:c9:01:42:7a:ad:52:c0:8b:9c:2a:df:1f:b0:
                    1f:75:da:2d:d5:97:32:58:b9:35:e0:c3:69:4c:40:
                    2b:68:7a:03:c9:f7:a2:ca:63:d6:6e:5e:b7:3c:9d:
                    db:98:12:3f:cd:cf:1c:2a:02:93:12:b9:89:be:9d:
                    bf:7e:1d:e1:a2:46:79:21:d6:1e:55:08:4c:95:06:
                    7c:d1:75:9c:0b:50:fe:6e:f0:f0:78:c9:a5:4b:6e:
                    c2:d1:b7:81:5b:27:03:ad:cb:8e:aa:9d:bf:e1:b4:
                    66:d5:d4:1b:ae:b5:1b:3f:3d:c1:ef:20:4f:48:4a:
                    7e:b5:6a:23:13:80:38:30:68:14:f4:51:91:cb:1a:
                    3d:d2:60:c4:22:f6:71:8f:75:47:f1:15:69:ee:50:
                    dd:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:C1:76:8B:AB:0C:4E:A2:D6:60:42:AC:28:54:AE:12:B5:98:95:2B
            X509v3 Authority Key Identifier:
                keyid:06:7D:BC:6B:CF:0F:95:82:DF:78:36:63:89:AE:AF:59:65:56:5E:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/067DBC6BCF0F9582DF78366389AEAF5965565EF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:1a:5a:26:fe:23:5b:85:b8:23:c0:62:76:35:1e:3b:96:db:
         fc:c4:8b:20:34:e5:c0:d5:4b:b4:1a:6d:7c:07:1f:be:f5:22:
         87:eb:6c:5a:8d:66:ed:5a:cd:bb:df:97:fd:c3:06:92:3f:76:
         07:35:ac:1d:17:68:14:d7:14:be:5b:b4:eb:cb:26:00:fb:0b:
         96:9d:00:52:41:95:17:e3:55:c6:d0:d9:bf:da:eb:03:e1:09:
         3e:ae:4d:fc:21:c5:09:75:a2:6a:de:05:ee:95:fd:66:0b:5e:
         39:36:84:a3:10:e0:48:c1:c1:06:18:f1:9d:bd:c0:1d:d5:bc:
         10:02:6c:ca:34:89:6c:ba:4b:b3:ca:39:6b:20:7d:3e:06:ed:
         b9:46:21:21:4b:52:aa:31:53:52:4e:6d:16:e3:96:0d:b3:d7:
         49:f1:c7:e2:e7:6f:d8:65:08:b1:5b:86:f5:fa:00:ba:cb:be:
         81:98:12:45:8b:e8:0c:c9:6f:a5:10:82:20:47:ab:33:0b:88:
         02:1e:2d:94:fc:b9:f9:f5:76:f1:ea:5f:c7:36:c6:c3:e5:78:
         81:ef:3a:2b:aa:ee:c6:17:b6:d5:55:b3:eb:c6:12:ac:60:36:
         99:60:f5:2e:6f:3a:e2:4d:b3:c2:7d:83:b7:71:19:bb:2a:e6:
         9e:81:86:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 28 00:06:52 2026 by rpki-client