This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/1/0F5FF499BA58BAFD47B7E71D4EF8014EED5158A2.mft
File:                     0F5FF499BA58BAFD47B7E71D4EF8014EED5158A2.mft (raw, json)
Hash identifier:          V61NHu6CdI7W5M8pk0LQo5xi/ex5y+Vr1FDpBZudxYs=
Subject key identifier:   BD:7D:64:A0:27:9F:C1:97:C7:6F:4C:21:67:86:62:C4:B4:D6:E5:F1
Authority key identifier: 0F:5F:F4:99:BA:58:BA:FD:47:B7:E7:1D:4E:F8:01:4E:ED:51:58:A2
Certificate issuer:       /CN=0f5ff499ba58bafd47b7e71d4ef8014eed5158a2
Certificate serial:       3215526905D6DBBD06C977D0E28F3F4D211BBB1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D1_0mbpYuv1Ht-cdTvgBTu1RWKI.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/1/0F5FF499BA58BAFD47B7E71D4EF8014EED5158A2.mft
Manifest number:          18
Signing time:             Wed 28 Jan 2026 03:49:32 +0000
Manifest this update:     Wed 28 Jan 2026 03:44:32 +0000
Manifest next update:     Thu 29 Jan 2026 06:06:32 +0000
Files and hashes:         1: 0F5FF499BA58BAFD47B7E71D4EF8014EED5158A2.crl (hash: QW70inMmoivWVkXux6ZPo2+0HedRh224LzqeOXmhyAQ=)
                          2: AS216141.asa (hash: tKUT71CvFzE99EA+puSjEl5I+oivrnpIZr6U9MCSChg=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/1/0F5FF499BA58BAFD47B7E71D4EF8014EED5158A2.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/1/0F5FF499BA58BAFD47B7E71D4EF8014EED5158A2.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D1_0mbpYuv1Ht-cdTvgBTu1RWKI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Jan 2026 20:26:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:15:52:69:05:d6:db:bd:06:c9:77:d0:e2:8f:3f:4d:21:1b:bb:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f5ff499ba58bafd47b7e71d4ef8014eed5158a2
        Validity
            Not Before: Jan 28 03:44:32 2026 GMT
            Not After : Jan 29 06:06:32 2026 GMT
        Subject: CN=BD7D64A0279FC197C76F4C21678662C4B4D6E5F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1b:83:9a:69:14:08:39:e6:6f:70:2d:63:8d:
                    7b:98:44:79:7d:92:14:75:8a:09:f1:e7:fb:b8:21:
                    e6:53:0a:e8:9f:8a:76:23:49:fb:6f:29:1e:4d:6e:
                    7d:8a:d4:3e:d1:ab:7d:cf:fa:16:55:b4:ae:32:da:
                    c4:c2:a1:04:bd:1c:1b:61:9b:f6:4e:fb:75:36:16:
                    37:3b:55:22:33:87:05:5f:52:f1:fa:fe:67:4f:99:
                    75:df:5a:a7:e7:67:76:c1:75:18:26:8c:99:90:8a:
                    68:19:c5:e7:86:78:da:d2:c4:7f:4e:3f:4f:08:91:
                    03:41:c2:cf:ad:13:4f:03:72:48:dd:4a:66:92:ca:
                    ba:ea:41:d3:7b:62:65:43:45:ec:81:78:ba:19:be:
                    4c:15:b8:65:ad:5e:a7:70:89:bc:55:b4:d9:2e:39:
                    88:df:e4:0e:bb:12:bf:72:98:fe:4d:48:32:50:92:
                    d6:47:74:3d:3f:1e:dc:ad:5d:73:13:d1:fe:f2:fb:
                    1f:46:32:19:02:14:59:36:d5:c5:03:fa:ce:7b:9f:
                    6c:d0:bf:9a:7a:8b:c8:ce:96:15:3e:2a:48:7b:6c:
                    b0:e8:50:94:0b:1b:29:cc:bb:17:7a:a6:99:96:33:
                    f0:4a:f2:db:7a:1d:d1:24:a9:18:67:54:9e:bd:3d:
                    ba:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:7D:64:A0:27:9F:C1:97:C7:6F:4C:21:67:86:62:C4:B4:D6:E5:F1
            X509v3 Authority Key Identifier:
                keyid:0F:5F:F4:99:BA:58:BA:FD:47:B7:E7:1D:4E:F8:01:4E:ED:51:58:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/1/0F5FF499BA58BAFD47B7E71D4EF8014EED5158A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1_0mbpYuv1Ht-cdTvgBTu1RWKI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/1/0F5FF499BA58BAFD47B7E71D4EF8014EED5158A2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:62:9b:a8:1f:0c:c4:84:61:63:13:ec:64:d6:35:91:66:6b:
         af:af:40:a4:96:ca:42:d9:ec:75:46:ee:89:ab:7d:eb:fd:c0:
         9d:fd:4f:33:eb:10:e7:86:73:5a:d9:2a:1a:b8:35:e7:f8:4f:
         a4:75:b0:a7:48:03:05:5c:82:a3:55:60:2a:42:ae:ab:e2:a9:
         25:ee:94:45:3e:03:6b:06:19:ef:e4:a0:a0:4d:bc:f3:c2:02:
         d6:f5:06:bd:fd:4b:e9:17:70:20:8a:95:8a:df:ec:e5:a8:2f:
         9c:f2:ea:58:1a:73:d3:91:08:40:11:76:af:36:7a:05:04:4b:
         79:6e:ac:0d:0e:f5:b7:8c:8d:c5:b5:0a:e0:c0:b7:df:f9:d9:
         b9:67:d8:75:0b:34:c8:e2:a0:f9:8a:ab:66:25:fe:8c:02:a9:
         67:ac:33:5a:d7:4f:a0:b6:c0:ba:35:ad:fd:67:c9:c8:3c:10:
         7a:92:a7:89:71:08:fd:39:c7:fb:2c:bd:0e:8d:0c:6b:f6:8f:
         45:c4:59:84:23:02:bb:e7:73:19:47:78:9d:bc:e0:61:0e:51:
         fa:74:53:c1:16:c7:19:2a:1b:a6:d5:be:61:46:66:f4:3b:05:
         5d:fc:aa:f6:58:f3:d7:08:af:c4:d1:bd:96:cb:30:1d:bc:38:
         c3:71:7b:36
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUMhVSaQXW270GyXfQ4o8/TSEbuxswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGY1ZmY0OTliYTU4YmFmZDQ3YjdlNzFkNGVmODAxNGVl
ZDUxNThhMjAeFw0yNjAxMjgwMzQ0MzJaFw0yNjAxMjkwNjA2MzJaMDMxMTAvBgNV
BAMTKEJEN0Q2NEEwMjc5RkMxOTdDNzZGNEMyMTY3ODY2MkM0QjRENkU1RjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKG4OaaRQIOeZvcC1jjXuYRHl9
khR1ignx5/u4IeZTCuifinYjSftvKR5Nbn2K1D7Rq33P+hZVtK4y2sTCoQS9HBth
m/ZO+3U2Fjc7VSIzhwVfUvH6/mdPmXXfWqfnZ3bBdRgmjJmQimgZxeeGeNrSxH9O
P08IkQNBws+tE08DckjdSmaSyrrqQdN7YmVDReyBeLoZvkwVuGWtXqdwibxVtNku
OYjf5A67Er9ymP5NSDJQktZHdD0/HtytXXMT0f7y+x9GMhkCFFk21cUD+s57n2zQ
v5p6i8jOlhU+Kkh7bLDoUJQLGynMuxd6ppmWM/BK8tt6HdEkqRhnVJ69PbrhAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUvX1koCefwZfHb0whZ4ZixLTW5fEwHwYDVR0j
BBgwFoAUD1/0mbpYuv1Ht+cdTvgBTu1RWKIwDgYDVR0PAQH/BAQDAgeAMIGPBgNV
HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv
cmVwby9ycGtpX2NhXzA5ODBlMjYyZjA4MTQ5MDk5OWRkMGQ1ZTIyOWU5Y2ZhLzEv
MEY1RkY0OTlCQTU4QkFGRDQ3QjdFNzFENEVGODAxNEVFRDUxNThBMi5jcmwwZAYI
KwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9ERUZBVUxUL0QxXzBtYnBZdXYxSHQtY2RUdmdCVHUxUldLSS5j
ZXIwgZoGCCsGAQUFBwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9ycGtp
LXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9jYV8wOTgwZTI2MmYwODE0OTA5
OTlkZDBkNWUyMjllOWNmYS8xLzBGNUZGNDk5QkE1OEJBRkQ0N0I3RTcxRDRFRjgw
MTRFRUQ1MTU4QTIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB
BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASg
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAYYpuoHwzEhGFjE+xk1jWRZmuvr0CklspC
2ex1Ru6Jq33r/cCd/U8z6xDnhnNa2SoauDXn+E+kdbCnSAMFXIKjVWAqQq6r4qkl
7pRFPgNrBhnv5KCgTbzzwgLW9Qa9/UvpF3AgipWK3+zlqC+c8upYGnPTkQhAEXav
NnoFBEt5bqwNDvW3jI3FtQrgwLff+dm5Z9h1CzTI4qD5iqtmJf6MAqlnrDNa10+g
tsC6Na39Z8nIPBB6kqeJcQj9Ocf7LL0OjQxr9o9FxFmEIwK753MZR3idvOBhDlH6
dFPBFscZKhum1b5hRmb0OwVd/Kr2WPPXCK/E0b2WyzAdvDjDcXs2
-----END CERTIFICATE-----
Generated at Wed Jan 28 06:21:53 2026 by rpki-client