This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.mft
File:                     5ABE2F609996476AAFE146BC5A72429B0B205FC0.mft (raw, json)
Hash identifier:          radH6CoyyBvrophfVxHnxEmTKLySRdRLReZAfrdA4x4=
Subject key identifier:   AA:B2:2B:96:1D:38:A5:71:E6:88:23:0A:E0:44:17:B7:C9:11:99:E7
Authority key identifier: 5A:BE:2F:60:99:96:47:6A:AF:E1:46:BC:5A:72:42:9B:0B:20:5F:C0
Certificate issuer:       /CN=5ABE2F609996476AAFE146BC5A72429B0B205FC0
Certificate serial:       55AF54B96D9ED013BE6B27005C7A17C84A9E8A51
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/5ABE2F609996476AAFE146BC5A72429B0B205FC0.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.mft
Manifest number:          029B
Signing time:             Sat 13 Dec 2025 03:24:53 +0000
Manifest this update:     Sat 13 Dec 2025 03:19:53 +0000
Manifest next update:     Sun 14 Dec 2025 04:19:53 +0000
Files and hashes:         1: 5ABE2F609996476AAFE146BC5A72429B0B205FC0.crl (hash: LwmjyfVhyfwbcBiP4QEe5z+jfnzrEKR7Tw2G1TKPQ2o=)
                          2: 326131313a663263303a666666373a3a2f34382d3438203d3e20323039323435.roa (hash: Fb1/PRkI0lrTKbp777DJ9P81eGra7/CB0uA9Vm+bs1w=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/5ABE2F609996476AAFE146BC5A72429B0B205FC0.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Dec 2025 04:19:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:af:54:b9:6d:9e:d0:13:be:6b:27:00:5c:7a:17:c8:4a:9e:8a:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ABE2F609996476AAFE146BC5A72429B0B205FC0
        Validity
            Not Before: Dec 13 03:19:53 2025 GMT
            Not After : Dec 14 04:19:53 2025 GMT
        Subject: CN=AAB22B961D38A571E688230AE04417B7C91199E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a5:dd:52:92:02:fe:31:bf:9a:9b:c2:1b:c2:
                    35:a8:e2:07:1d:63:55:75:9b:7f:14:59:97:a9:eb:
                    3c:01:d4:33:2f:3e:e7:a5:b6:cc:7d:bf:5f:77:c3:
                    c5:e8:15:7a:d0:4d:27:35:32:55:69:44:65:e0:b7:
                    af:33:89:ab:9e:21:82:9a:3a:5e:01:28:39:de:f6:
                    06:6e:c2:77:f5:2d:a6:57:17:59:81:8e:4b:d6:ff:
                    9b:a2:2e:4e:25:1e:d6:ff:88:78:8d:a8:00:43:60:
                    40:a8:67:39:5a:93:ef:4c:43:d0:2d:7b:33:d4:13:
                    43:95:fa:fd:45:75:07:27:76:f2:6e:e0:20:19:39:
                    cc:4a:90:70:ee:7e:73:4e:a4:5f:62:c8:d4:4e:f9:
                    33:4e:48:c6:db:2a:af:aa:52:f5:be:b6:62:0a:e3:
                    4a:4f:c3:fd:68:c8:bc:f9:60:b2:f5:d3:0c:2b:43:
                    b1:08:be:3d:79:e3:c1:e9:7f:50:32:3b:fc:bd:2c:
                    55:bf:ed:54:73:58:69:af:c7:ee:1c:e3:80:24:eb:
                    9e:1a:42:ce:2f:61:63:8b:6b:27:7a:1b:8f:82:91:
                    a6:9c:08:a6:0a:41:64:13:be:9d:a4:3a:35:e6:f4:
                    ea:d5:6f:1d:fd:7b:56:b0:c3:ab:17:d7:17:cc:6b:
                    15:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:B2:2B:96:1D:38:A5:71:E6:88:23:0A:E0:44:17:B7:C9:11:99:E7
            X509v3 Authority Key Identifier:
                keyid:5A:BE:2F:60:99:96:47:6A:AF:E1:46:BC:5A:72:42:9B:0B:20:5F:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/5ABE2F609996476AAFE146BC5A72429B0B205FC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:3e:f5:73:4b:d2:bb:da:4a:42:1a:22:05:25:62:12:8b:06:
         38:f3:13:41:aa:d9:8b:84:d2:ad:1a:8a:3d:17:2e:07:50:00:
         c8:b0:e3:70:82:f1:09:cd:a7:d5:b4:df:54:37:fd:70:41:6b:
         f9:4e:24:b4:4b:eb:3b:64:6d:f4:cc:46:b1:7d:b9:cc:e6:58:
         6c:7f:f0:98:27:45:aa:36:5d:1b:37:0e:2f:8e:e6:01:a6:ac:
         35:e5:ce:dd:7b:bc:5b:01:68:a6:24:60:15:26:81:6b:ff:7c:
         7c:0e:23:46:bd:50:9d:e7:11:a3:53:75:48:3f:b2:e5:17:6b:
         92:cd:93:e6:b4:a8:56:38:d0:bb:dc:a0:2c:8a:d2:6c:56:2c:
         2c:3a:b7:d3:19:e1:0f:d0:3c:43:9f:9e:63:fb:85:e5:bb:5b:
         9c:29:64:65:8e:04:a3:08:00:5d:9f:71:6e:17:03:53:f6:f4:
         09:89:07:da:0d:9d:2f:7d:88:1f:de:1e:31:70:7a:59:da:dc:
         87:7a:67:3c:73:e5:6e:e8:3c:61:58:a8:e6:de:a9:ea:6c:fa:
         7d:cc:eb:9b:48:c8:7f:dd:52:6b:0f:59:f9:01:a1:33:ae:ef:
         26:92:2f:66:62:71:82:49:01:08:fa:42:b3:bc:28:86:21:d3:
         d9:2c:06:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 13 18:10:42 2025 by rpki-client