This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/4742E76772F118A935D69FD40F69858085C80999.mft
File:                     4742E76772F118A935D69FD40F69858085C80999.mft (raw, json)
Hash identifier:          oQdJzu2km52R5Muwpx/vh0ewMFbWxoTOcEMOlotTMYU=
Subject key identifier:   7D:73:32:9E:67:3E:E4:C5:56:2C:20:26:16:B2:C3:DD:C4:F9:B3:DE
Authority key identifier: 47:42:E7:67:72:F1:18:A9:35:D6:9F:D4:0F:69:85:80:85:C8:09:99
Certificate issuer:       /CN=4742E76772F118A935D69FD40F69858085C80999
Certificate serial:       1852F4BD948C5755AFD76CC8293F3B786A084EBA
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4742E76772F118A935D69FD40F69858085C80999.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/4742E76772F118A935D69FD40F69858085C80999.mft
Manifest number:          029E
Signing time:             Sat 13 Dec 2025 10:50:26 +0000
Manifest this update:     Sat 13 Dec 2025 10:45:26 +0000
Manifest next update:     Sun 14 Dec 2025 12:03:26 +0000
Files and hashes:         1: 326131313a663263303a666666613a3a2f34382d3438203d3e20323034303137.roa (hash: gUgzdRxmuJNOQsawEIqvnF9DX0YCEOe/wm39FVRE0Uw=)
                          2: 4742E76772F118A935D69FD40F69858085C80999.crl (hash: cVc4xJWwKSKSa57oMpBuIoEfnXFVS55RxhsVLhwpk7s=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/4742E76772F118A935D69FD40F69858085C80999.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/4742E76772F118A935D69FD40F69858085C80999.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4742E76772F118A935D69FD40F69858085C80999.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Dec 2025 11:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:52:f4:bd:94:8c:57:55:af:d7:6c:c8:29:3f:3b:78:6a:08:4e:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4742E76772F118A935D69FD40F69858085C80999
        Validity
            Not Before: Dec 13 10:45:26 2025 GMT
            Not After : Dec 14 12:03:26 2025 GMT
        Subject: CN=7D73329E673EE4C5562C202616B2C3DDC4F9B3DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:cb:0b:e6:d9:90:19:9b:8e:5a:35:fa:e1:fb:
                    0f:cf:ad:79:b7:0f:95:65:b7:16:59:0d:31:f2:1a:
                    9b:45:0b:b7:cb:90:c2:c0:ad:78:04:17:08:e5:a6:
                    8d:56:4f:e4:8c:57:ff:88:94:fa:6b:ec:ee:54:08:
                    4b:02:43:76:c4:99:19:d1:7a:04:fe:b5:01:5a:ca:
                    6a:da:94:a0:4c:57:e1:9d:56:c3:b2:de:11:5d:12:
                    ee:c1:84:20:dc:c2:5f:db:5d:bd:24:67:f4:80:65:
                    d8:70:d7:71:83:c2:60:39:c4:5d:51:75:74:b6:19:
                    d7:54:ee:92:75:1c:ce:12:33:e8:ef:d0:60:f0:1f:
                    de:67:c4:0b:f9:59:cd:0e:e2:8c:da:f5:b1:83:59:
                    0c:a3:21:65:7a:02:40:d2:f7:52:63:2c:f6:a4:84:
                    c0:b0:f5:c3:13:61:53:ba:d2:fe:7a:cc:e1:34:65:
                    bd:d9:e0:ae:85:a0:b9:22:21:61:1c:2b:c1:ec:01:
                    69:e6:f7:79:4f:72:97:20:27:d2:e6:51:c7:16:7f:
                    c0:62:31:82:19:38:ef:ed:6d:ca:91:15:c8:93:42:
                    72:cd:f0:de:ef:0f:75:5d:f4:40:d9:39:d5:25:60:
                    44:d3:6f:c4:0a:d3:c7:55:5f:c5:48:b7:cb:3b:f7:
                    77:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:73:32:9E:67:3E:E4:C5:56:2C:20:26:16:B2:C3:DD:C4:F9:B3:DE
            X509v3 Authority Key Identifier:
                keyid:47:42:E7:67:72:F1:18:A9:35:D6:9F:D4:0F:69:85:80:85:C8:09:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/4742E76772F118A935D69FD40F69858085C80999.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4742E76772F118A935D69FD40F69858085C80999.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/4742E76772F118A935D69FD40F69858085C80999.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:73:07:96:12:72:5f:bb:73:3a:e6:92:be:a7:f8:12:1f:91:
         c6:3a:48:80:4e:1f:02:43:9d:6c:28:ed:3a:52:68:b9:6b:ee:
         ec:ee:92:9a:e8:67:6d:ac:b2:de:65:d5:15:f5:17:71:3d:fd:
         c6:c8:51:fe:9f:08:9c:40:71:e7:d8:12:33:b7:a5:d3:69:4e:
         4f:26:1a:81:a7:45:c9:fa:3a:27:9d:3c:e5:b9:82:da:27:0b:
         25:8b:56:b3:51:60:cb:7f:c0:13:08:ba:b9:d8:b8:74:e3:2f:
         27:a2:61:91:e9:56:b8:b0:e6:47:b7:95:cb:e5:39:cf:5f:1f:
         fc:6d:e9:c4:73:39:af:1f:b4:0c:00:92:5d:20:fe:a7:31:68:
         7a:c2:a3:f6:1e:9f:cb:aa:49:4d:82:75:4d:8c:21:f7:17:bb:
         67:93:14:16:47:b7:eb:82:5e:c2:67:60:13:8f:13:9b:e7:63:
         1d:f6:29:11:34:45:fd:5c:78:05:4b:99:fa:c2:1a:62:c5:2d:
         ef:79:aa:c3:3d:e9:16:48:f5:5f:7c:d6:46:95:6e:28:87:47:
         a9:05:a4:04:cf:82:a5:be:3f:25:30:81:d1:b4:67:4c:8b:e7:
         2b:84:dd:fa:de:ff:ce:1f:dc:4b:05:8d:59:1d:9f:db:8a:22:
         b0:db:41:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 13 18:09:13 2025 by rpki-client