This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/0/6482EA67DB858D1440DD67B955223E4341BA4E97.mft
File:                     6482EA67DB858D1440DD67B955223E4341BA4E97.mft (raw, json)
Hash identifier:          XZc/R2eJqnFHjWf4fTVz42+2iRK+cV3f73oHQ4TSQtU=
Subject key identifier:   72:5C:3B:89:B2:2D:CC:DC:B6:63:A0:32:EA:A4:38:F5:31:E8:3E:2D
Authority key identifier: 64:82:EA:67:DB:85:8D:14:40:DD:67:B9:55:22:3E:43:41:BA:4E:97
Certificate issuer:       /CN=6482EA67DB858D1440DD67B955223E4341BA4E97
Certificate serial:       6A2CA118AEB3FCA985C165570660E15C5BF5E254
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6482EA67DB858D1440DD67B955223E4341BA4E97.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/0/6482EA67DB858D1440DD67B955223E4341BA4E97.mft
Manifest number:          029E
Signing time:             Sat 13 Dec 2025 14:11:35 +0000
Manifest this update:     Sat 13 Dec 2025 14:06:35 +0000
Manifest next update:     Sun 14 Dec 2025 17:33:35 +0000
Files and hashes:         1: 6482EA67DB858D1440DD67B955223E4341BA4E97.crl (hash: uBiXnikL2+xlNYTHcsSP8/S8SHQBt/z+M+wj8RzlaAA=)
                          2: 326131313a663263303a666666393a3a2f34382d3438203d3e20323034373235.roa (hash: MdiZ+9TbSNzfNPtu/3qU2TdQ6jBsbjIkWQpbqOwaXo4=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/0/6482EA67DB858D1440DD67B955223E4341BA4E97.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/0/6482EA67DB858D1440DD67B955223E4341BA4E97.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6482EA67DB858D1440DD67B955223E4341BA4E97.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Dec 2025 11:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:2c:a1:18:ae:b3:fc:a9:85:c1:65:57:06:60:e1:5c:5b:f5:e2:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6482EA67DB858D1440DD67B955223E4341BA4E97
        Validity
            Not Before: Dec 13 14:06:35 2025 GMT
            Not After : Dec 14 17:33:35 2025 GMT
        Subject: CN=725C3B89B22DCCDCB663A032EAA438F531E83E2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ac:06:82:78:74:4f:34:9a:76:b9:66:a4:9c:
                    9b:bb:69:97:e1:2f:89:dc:35:fc:34:82:5f:7c:b1:
                    d7:a6:5e:61:cf:46:99:63:cf:2f:b7:a2:14:0c:99:
                    b9:13:68:20:81:f2:a0:03:59:67:4c:a8:93:29:bb:
                    eb:b5:21:0a:99:5f:d3:93:c3:f0:75:20:69:44:cc:
                    2c:23:7a:6e:8b:60:86:da:ff:8d:db:da:59:50:33:
                    d0:67:63:c5:c5:94:e4:47:bc:92:de:9f:98:4e:49:
                    d8:88:33:31:35:6c:9e:c3:7c:ea:91:57:0d:8d:75:
                    5c:ef:b7:ff:17:b3:04:cb:7f:ee:8f:5e:5a:b0:88:
                    ee:30:96:62:39:c7:f2:28:cd:7e:63:34:5f:41:87:
                    1c:eb:a8:18:14:20:e9:15:b5:4f:fd:99:8b:2a:7b:
                    12:10:8e:90:e1:b4:3c:c1:8c:06:fa:97:9d:68:df:
                    56:c0:d6:97:b5:65:f5:25:0d:bb:54:ba:6b:8b:a9:
                    07:09:af:b4:5e:78:93:96:38:20:77:4b:bc:d1:46:
                    34:c1:26:7d:04:c3:e5:32:b1:09:f9:07:ba:2e:fc:
                    5d:a3:3b:e7:ae:2e:a8:21:ad:aa:ed:36:72:8a:78:
                    ec:3e:bb:23:29:e6:5d:df:63:f0:1f:a4:24:c5:12:
                    fe:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:5C:3B:89:B2:2D:CC:DC:B6:63:A0:32:EA:A4:38:F5:31:E8:3E:2D
            X509v3 Authority Key Identifier:
                keyid:64:82:EA:67:DB:85:8D:14:40:DD:67:B9:55:22:3E:43:41:BA:4E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/0/6482EA67DB858D1440DD67B955223E4341BA4E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6482EA67DB858D1440DD67B955223E4341BA4E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/0/6482EA67DB858D1440DD67B955223E4341BA4E97.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:4a:54:85:d3:80:72:cc:67:50:15:0c:51:63:90:60:43:55:
         21:a9:df:5f:59:a9:6a:88:19:e3:1a:10:aa:e4:ef:6f:bd:02:
         50:06:d5:6b:39:46:77:fd:b6:df:74:58:2a:29:2b:86:7c:83:
         5a:94:d4:a4:78:10:9e:61:f1:d1:71:ab:37:ad:af:a3:18:bd:
         72:ee:ea:34:0c:e6:33:91:15:16:d6:a1:79:1c:3c:ba:3a:b5:
         3d:50:a7:dc:05:e5:80:7c:20:77:0c:d9:41:19:70:fb:55:3a:
         a2:ea:b7:dd:25:d4:9e:dd:a9:43:38:87:d8:5f:30:b4:8b:52:
         22:94:cc:b9:ec:d1:95:24:c6:88:ef:87:3b:88:e0:58:58:57:
         17:e5:2f:fe:80:73:98:62:ba:d9:4b:53:7c:be:75:c0:b6:36:
         2f:07:ed:00:41:fd:cc:3e:db:a6:be:b0:b3:e4:9a:ef:8a:7a:
         ca:be:e5:19:aa:a8:41:a8:dd:59:5b:b9:fa:80:ef:81:66:91:
         b9:17:9e:cb:32:76:1d:ef:05:cf:94:fa:a2:15:ac:0d:7d:78:
         69:b3:9f:5e:dd:f0:01:22:41:7a:b6:e0:aa:83:61:45:ac:49:
         e5:d3:3c:e3:5a:89:b0:55:97:d6:fc:ab:4b:52:2f:dc:fb:e5:
         1f:e7:62:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 13 18:10:43 2025 by rpki-client