This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/0/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.mft
File:                     DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.mft (raw, json)
Hash identifier:          xz0GR7iyoQvkmdt25F+jbIvPNowvUEm4GzekJXW/YMI=
Subject key identifier:   B6:54:C8:33:58:50:2C:66:43:5B:E5:E1:93:3E:7E:0F:36:99:7B:28
Authority key identifier: DC:2D:34:FE:0F:8C:90:B2:A8:CA:EC:47:27:D6:BA:31:B9:8D:25:D1
Certificate issuer:       /CN=DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1
Certificate serial:       6AD23CA76504D5CFE5B10DE6BF3A2239C7E9BE58
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/0/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.mft
Manifest number:          027C
Signing time:             Sat 15 Nov 2025 13:15:28 +0000
Manifest this update:     Sat 15 Nov 2025 13:10:26 +0000
Manifest next update:     Sun 16 Nov 2025 14:37:26 +0000
Files and hashes:         1: DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.crl (hash: RqB8KpCucctzz92bU+9m5Xz4qBEzC5b0kQNhk2ACe6I=)
                          2: 326131313a663263303a666665303a3a2f34342d3434203d3e20323038303531.roa (hash: tFJBYIhXxfWIXiULV/y0FG2z1kGnNqMQG/QFmAkPW/4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:d2:3c:a7:65:04:d5:cf:e5:b1:0d:e6:bf:3a:22:39:c7:e9:be:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1
        Validity
            Not Before: Nov 15 13:10:26 2025 GMT
            Not After : Nov 16 14:37:26 2025 GMT
        Subject: CN=B654C83358502C66435BE5E1933E7E0F36997B28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:cf:67:e0:c4:a1:d2:68:9e:83:08:a1:88:76:
                    aa:6e:78:94:01:e0:27:25:31:0c:a1:4e:8a:3d:71:
                    fb:25:6a:3f:97:84:a3:08:ff:4a:89:aa:31:9b:01:
                    14:bd:bb:ea:56:54:e3:46:63:f7:ff:35:c3:d8:89:
                    1e:cd:ee:99:52:5b:ed:95:58:22:15:2d:ea:a5:da:
                    aa:72:18:57:3c:fb:e4:65:fc:ea:b2:46:da:4a:87:
                    f0:9e:60:bb:32:f9:42:43:29:57:13:13:dc:ca:02:
                    3d:76:78:a1:a5:5c:a7:ae:ac:47:47:f9:05:7e:11:
                    e3:2f:c3:bd:fe:f0:1f:f0:dc:12:38:d1:92:eb:a2:
                    41:26:68:27:e8:77:94:f7:e9:8c:e2:eb:6f:11:ce:
                    ec:ba:62:de:cc:5e:06:b7:e2:74:38:4e:64:81:db:
                    bd:4c:87:b3:78:c8:bb:ee:0d:74:5b:74:62:7a:28:
                    8c:da:08:60:20:09:ca:52:c3:e8:95:d3:ee:e1:cf:
                    39:96:4e:69:f2:71:c6:5d:6a:bb:00:a1:24:5f:7f:
                    6c:7b:9c:99:42:7b:f1:ad:36:4a:83:86:bd:c6:98:
                    4d:f9:e0:c9:6f:df:d0:71:72:42:1f:4a:5e:8d:6e:
                    2b:49:58:60:c1:5a:70:67:2d:40:80:b7:4a:ec:ba:
                    92:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:54:C8:33:58:50:2C:66:43:5B:E5:E1:93:3E:7E:0F:36:99:7B:28
            X509v3 Authority Key Identifier:
                keyid:DC:2D:34:FE:0F:8C:90:B2:A8:CA:EC:47:27:D6:BA:31:B9:8D:25:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/0/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/0/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:0e:b3:32:b8:6d:16:17:60:ff:21:d9:d7:8d:49:a0:cc:33:
         77:d0:20:28:89:f5:eb:24:e6:66:08:c8:2b:da:4e:90:da:bd:
         7a:2e:72:60:45:42:db:fa:ed:88:ec:31:0c:8f:bd:30:f2:37:
         3c:57:76:ed:2e:30:54:34:c9:e0:2f:c1:3d:0d:57:97:dc:af:
         04:be:43:b9:12:69:74:a3:83:88:b3:46:6c:50:ad:14:f6:63:
         2d:9b:7f:67:04:48:52:92:68:0a:1f:fe:d8:9a:73:25:71:91:
         4e:ad:d4:9c:e0:5f:e8:3a:75:e9:ac:d8:8e:7e:cf:99:4b:3e:
         ef:79:fd:f7:62:da:54:d8:08:c7:27:fe:b9:be:91:81:a1:fd:
         1b:68:5a:c4:2f:2d:99:5f:53:54:0d:d2:32:77:f0:bb:81:3a:
         6a:13:5a:17:eb:af:85:6a:ad:1b:55:f7:ed:ef:f8:ab:79:b3:
         82:39:7e:d5:88:17:4d:0e:7a:c7:7e:ff:4c:e7:a2:d7:56:e5:
         74:f6:c7:4d:d3:6f:26:8f:31:15:03:e3:b9:62:59:3b:7e:68:
         0e:0f:6f:6e:62:1e:e3:12:9f:2f:5b:65:43:83:73:c5:0c:78:
         ba:aa:19:28:cf:22:1f:82:e0:94:d8:40:19:d7:a8:6b:b7:a5:
         8e:f2:16:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----