This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.mft
File:                     BBED14E9793905EC1EA5CE10AA03C497D737B115.mft (raw, json)
Hash identifier:          Mgq5QyKoaYV4A7OJ2mBfmqgRQXOSskl6gMzHo1BTjNM=
Subject key identifier:   42:2B:9E:59:E1:89:50:86:E0:EF:C6:B5:D9:4A:03:08:8B:B2:94:A5
Authority key identifier: BB:ED:14:E9:79:39:05:EC:1E:A5:CE:10:AA:03:C4:97:D7:37:B1:15
Certificate issuer:       /CN=BBED14E9793905EC1EA5CE10AA03C497D737B115
Certificate serial:       6B4EA4DDD6CC0B57E1EC0E0280E91BBFC741FDDF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/BBED14E9793905EC1EA5CE10AA03C497D737B115.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.mft
Manifest number:          02D3
Signing time:             Tue 27 Jan 2026 13:37:23 +0000
Manifest this update:     Tue 27 Jan 2026 13:32:23 +0000
Manifest next update:     Wed 28 Jan 2026 14:50:23 +0000
Files and hashes:         1: BBED14E9793905EC1EA5CE10AA03C497D737B115.crl (hash: 95kknykEq/ctKJBipWE2k+SK+gutbwqXBq0P7hIyiQc=)
                          2: 326131313a663263303a666663303a3a2f34382d3438203d3e20323035353839.roa (hash: MpewGrhFOYc7jc70q6ubpOkEuQ0IJ7Wp+DrSPfwP1vQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/BBED14E9793905EC1EA5CE10AA03C497D737B115.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Jan 2026 14:50:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:4e:a4:dd:d6:cc:0b:57:e1:ec:0e:02:80:e9:1b:bf:c7:41:fd:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBED14E9793905EC1EA5CE10AA03C497D737B115
        Validity
            Not Before: Jan 27 13:32:23 2026 GMT
            Not After : Jan 28 14:50:23 2026 GMT
        Subject: CN=422B9E59E1895086E0EFC6B5D94A03088BB294A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9f:aa:9a:4b:ec:f7:3e:36:c7:84:12:0f:a1:
                    89:94:d5:96:9e:ed:d5:25:06:6e:b5:bf:be:9b:fb:
                    93:15:e7:56:84:f1:a7:be:d1:d1:4a:f9:3a:97:70:
                    98:d5:9d:b5:3f:b9:27:96:9d:95:c4:6d:73:cf:38:
                    aa:79:5b:a8:67:73:11:3a:22:a2:19:1a:02:a4:1d:
                    86:57:d9:62:9c:d6:3f:48:a4:1c:c2:b2:0e:96:27:
                    6b:93:1e:2b:df:35:b3:61:b1:59:1f:0a:67:13:99:
                    4b:0c:31:ec:9e:a0:34:88:ec:fe:ea:50:e8:ce:11:
                    35:5f:70:c4:c0:44:a2:91:43:fa:ba:bd:e7:8b:df:
                    31:db:7d:63:68:53:ee:02:b7:4b:1b:dc:cf:5b:a2:
                    46:b7:1e:51:c6:a3:0c:cc:6f:9b:31:f3:43:ab:43:
                    0b:47:06:26:12:7d:e8:ef:d6:77:2f:24:0f:f6:07:
                    df:19:ef:2e:85:2b:af:d6:07:e9:97:da:d1:d3:75:
                    85:6c:47:e4:47:fc:21:71:34:1b:ac:10:9e:8b:13:
                    6b:60:37:c2:7e:82:6b:3a:84:8e:9a:da:4d:20:2e:
                    db:14:89:67:4e:1a:2f:eb:78:67:29:11:cd:86:38:
                    f4:b5:a9:36:4a:e4:9e:f6:3a:61:fd:ec:f9:23:fa:
                    d6:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:2B:9E:59:E1:89:50:86:E0:EF:C6:B5:D9:4A:03:08:8B:B2:94:A5
            X509v3 Authority Key Identifier:
                keyid:BB:ED:14:E9:79:39:05:EC:1E:A5:CE:10:AA:03:C4:97:D7:37:B1:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/BBED14E9793905EC1EA5CE10AA03C497D737B115.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3a97f76180384d23a721d46ae0e5068f/0/BBED14E9793905EC1EA5CE10AA03C497D737B115.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:31:13:8b:e3:03:5e:67:e0:51:30:17:d2:9e:74:8f:8d:8a:
         48:ac:d0:31:3c:37:93:3a:56:15:62:88:07:60:a6:cb:17:9a:
         eb:a4:95:f7:2e:e9:00:e4:95:77:b4:f6:9e:a4:92:2a:3a:da:
         72:8a:31:b9:f4:35:f2:90:bb:ab:ad:fb:cf:45:a1:c9:61:97:
         0b:e3:7e:d2:ee:f3:c4:4d:b7:7b:40:16:78:55:8b:c8:d2:15:
         b5:91:95:30:27:d3:6b:ab:78:e6:ec:2c:88:18:1d:df:80:67:
         7d:5d:da:42:48:fe:f5:f5:92:f5:75:ff:36:ae:01:97:7b:bf:
         1a:1b:6e:2c:c9:8e:92:0e:ff:fa:43:9b:5d:ce:c3:c3:45:21:
         17:3e:2e:1c:6b:f0:91:e1:4d:56:2d:fe:2e:b4:74:75:e7:92:
         a3:61:46:2e:42:a5:0e:c2:27:c9:d9:bd:ee:15:7b:8c:0d:8d:
         a6:92:9c:66:42:2f:36:f0:ca:30:e4:99:aa:20:bd:f6:4a:9f:
         84:7e:35:c8:36:9a:1f:dd:6a:38:1d:ea:08:8b:b1:f3:76:52:
         39:2a:7e:1b:18:b5:a3:4f:ec:47:85:13:49:5e:a9:b0:39:5b:
         3a:ec:ae:e0:b5:ec:96:e1:d3:a2:95:51:7c:a4:32:02:03:4d:
         d3:61:87:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 28 00:08:25 2026 by rpki-client