This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/0/B50D92304CA867525C648A07380EA065FD352DEC.mft
File:                     B50D92304CA867525C648A07380EA065FD352DEC.mft (raw, json)
Hash identifier:          jc+WFHMM+4AF4SJ7A4HbLrrM59RSl2yhiPuPZVBItvY=
Subject key identifier:   BE:40:D1:72:4D:F2:E6:33:8E:BC:E2:14:40:DE:20:7B:EB:EA:EA:14
Authority key identifier: B5:0D:92:30:4C:A8:67:52:5C:64:8A:07:38:0E:A0:65:FD:35:2D:EC
Certificate issuer:       /CN=B50D92304CA867525C648A07380EA065FD352DEC
Certificate serial:       5C76F7BE2A3486554FD09954B1A3E187D2D42CFD
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B50D92304CA867525C648A07380EA065FD352DEC.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/0/B50D92304CA867525C648A07380EA065FD352DEC.mft
Manifest number:          02A5
Signing time:             Tue 16 Dec 2025 05:22:24 +0000
Manifest this update:     Tue 16 Dec 2025 05:17:24 +0000
Manifest next update:     Wed 17 Dec 2025 06:06:24 +0000
Files and hashes:         1: B50D92304CA867525C648A07380EA065FD352DEC.crl (hash: I5qXfL7WGlNGZl+2NorT1uPhks1s4gTlyohZIM+48To=)
                          2: 326131313a663263303a666666353a3a2f34382d3438203d3e20323037383835.roa (hash: jMfNBauLsuyKF1Bnrr2mTN5g8wCiId2FE0DDlamIixc=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/0/B50D92304CA867525C648A07380EA065FD352DEC.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/0/B50D92304CA867525C648A07380EA065FD352DEC.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B50D92304CA867525C648A07380EA065FD352DEC.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 05:29:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:76:f7:be:2a:34:86:55:4f:d0:99:54:b1:a3:e1:87:d2:d4:2c:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B50D92304CA867525C648A07380EA065FD352DEC
        Validity
            Not Before: Dec 16 05:17:24 2025 GMT
            Not After : Dec 17 06:06:24 2025 GMT
        Subject: CN=BE40D1724DF2E6338EBCE21440DE207BEBEAEA14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a8:9c:f8:86:d1:0c:f1:40:5b:e9:cd:db:21:
                    a1:b8:f8:0d:a8:50:17:09:02:d6:92:a1:21:e2:13:
                    5e:d6:29:8e:0a:18:f0:ea:19:2a:ce:15:2e:1f:38:
                    e5:1e:48:63:24:92:f6:e5:5a:73:30:8d:2e:b5:0e:
                    86:2c:a3:bb:2e:ec:95:79:2c:b8:66:6b:65:c3:08:
                    b3:84:48:2d:6d:02:71:e1:76:4d:60:5f:d8:b0:a8:
                    1a:7f:aa:00:b5:dc:1b:37:d0:67:54:04:9e:48:9b:
                    ae:73:ac:62:18:d5:c3:1e:ba:52:f0:e0:1d:5a:7f:
                    11:e8:df:1b:23:be:fc:90:bc:04:34:bc:5c:37:6b:
                    ad:58:9b:91:fd:86:ef:4b:a2:6c:1e:8b:6e:86:8d:
                    cb:e4:64:39:55:4e:13:89:3a:d9:97:07:86:dc:0f:
                    d3:9b:93:ce:2b:fb:a5:9d:1d:65:82:bf:9c:c6:0e:
                    a0:b2:1d:a2:5d:a6:b3:d3:95:2f:13:fa:fa:68:19:
                    fc:53:24:3b:6b:47:c9:01:a3:3e:dc:17:7d:5a:b1:
                    63:f2:fb:8d:66:df:d3:7d:0b:ca:0e:2a:31:2e:fb:
                    78:28:e6:b5:20:4a:25:f5:6a:4a:25:fa:69:32:3a:
                    03:33:76:6d:bf:fc:72:98:ce:b7:6a:fc:0f:7a:08:
                    3b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:40:D1:72:4D:F2:E6:33:8E:BC:E2:14:40:DE:20:7B:EB:EA:EA:14
            X509v3 Authority Key Identifier:
                keyid:B5:0D:92:30:4C:A8:67:52:5C:64:8A:07:38:0E:A0:65:FD:35:2D:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/0/B50D92304CA867525C648A07380EA065FD352DEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B50D92304CA867525C648A07380EA065FD352DEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5d8f57cb83a144edac4b55b1a88b34d6/0/B50D92304CA867525C648A07380EA065FD352DEC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:f7:aa:b0:0b:9f:da:2e:be:ef:c4:fc:88:cf:d2:1e:98:c3:
         25:8f:5f:9c:11:84:12:92:30:eb:ed:44:1c:62:16:39:88:6c:
         58:7a:e7:65:fe:2b:e0:37:47:42:1f:8a:22:1c:b8:bd:9e:51:
         2e:a4:8e:a9:38:21:7e:b5:5c:df:a8:59:fd:66:80:21:26:11:
         21:da:b7:4d:aa:a8:63:ff:49:7a:28:1b:18:bc:2a:d7:31:8d:
         58:a1:e8:0e:01:bb:45:27:e4:97:1a:44:48:66:ef:b4:e2:47:
         20:75:f5:f0:7e:52:0d:ff:bc:16:71:f7:6c:f7:2d:d2:a1:71:
         dc:78:70:35:c3:1a:0a:63:63:9f:63:7a:b4:ff:c8:98:68:7e:
         d3:c1:bf:28:ac:23:6c:1e:71:63:ed:17:b7:c7:46:f9:c8:7e:
         7a:1f:35:dd:c9:e6:a9:63:fb:8c:32:48:33:29:46:8b:72:6a:
         61:03:51:98:8f:6d:62:70:c3:b9:57:45:e4:ce:7b:9a:39:69:
         bb:ec:9a:ad:6d:c1:85:21:dd:89:6a:e5:28:da:d1:2b:6a:d8:
         83:87:c5:73:92:82:09:03:0b:25:4a:f7:82:71:61:3e:e1:d3:
         84:93:50:4a:47:18:bb:43:b8:05:79:e4:fd:14:00:17:eb:6d:
         08:bc:18:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 19:48:18 2025 by rpki-client