This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.mft
File:                     5ABE2F609996476AAFE146BC5A72429B0B205FC0.mft (raw, json)
Hash identifier:          +B554aZUD0/mh+T6ayWbZ3QCcXmeTMCz1O9hWdjop3A=
Subject key identifier:   30:07:32:43:3B:A0:96:EA:5D:70:5E:68:4F:E0:53:74:FA:5B:50:BE
Authority key identifier: 5A:BE:2F:60:99:96:47:6A:AF:E1:46:BC:5A:72:42:9B:0B:20:5F:C0
Certificate issuer:       /CN=5ABE2F609996476AAFE146BC5A72429B0B205FC0
Certificate serial:       3352312BFAF1744E3504EC852D5E9E6768ACF794
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/5ABE2F609996476AAFE146BC5A72429B0B205FC0.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.mft
Manifest number:          02D6
Signing time:             Tue 27 Jan 2026 13:47:31 +0000
Manifest this update:     Tue 27 Jan 2026 13:42:31 +0000
Manifest next update:     Wed 28 Jan 2026 14:01:31 +0000
Files and hashes:         1: 5ABE2F609996476AAFE146BC5A72429B0B205FC0.crl (hash: OPdQKnnksr09m5+1eAUl+UoRwBMPVVx/35bboCJEahw=)
                          2: 326131313a663263303a666666373a3a2f34382d3438203d3e20323039323435.roa (hash: Fb1/PRkI0lrTKbp777DJ9P81eGra7/CB0uA9Vm+bs1w=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/5ABE2F609996476AAFE146BC5A72429B0B205FC0.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Jan 2026 14:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:52:31:2b:fa:f1:74:4e:35:04:ec:85:2d:5e:9e:67:68:ac:f7:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ABE2F609996476AAFE146BC5A72429B0B205FC0
        Validity
            Not Before: Jan 27 13:42:31 2026 GMT
            Not After : Jan 28 14:01:31 2026 GMT
        Subject: CN=300732433BA096EA5D705E684FE05374FA5B50BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:05:53:e0:eb:2b:b4:6f:21:e7:9e:37:95:c8:
                    d1:35:1e:a5:96:9a:54:a0:2c:7e:89:48:b8:85:cd:
                    c2:90:a6:e8:1d:57:3c:86:06:92:09:ec:eb:8e:bb:
                    58:d4:dc:0d:a6:f2:ab:03:ba:48:a8:71:50:17:74:
                    26:ec:e1:7d:46:66:26:60:7d:55:25:6e:b5:c9:71:
                    7b:dc:cb:4c:c4:4e:38:52:17:e6:29:aa:2c:df:ce:
                    d3:1b:cc:53:b8:d0:a0:81:f2:b5:b2:13:c4:aa:27:
                    70:ab:d7:d0:06:9f:17:73:01:fd:02:f3:74:7a:cd:
                    ad:5a:e6:2e:8b:ef:dd:28:dd:b6:e9:12:0b:06:c4:
                    0b:ff:0e:14:cc:5e:4a:c2:1c:81:96:ff:aa:cb:08:
                    f7:f6:e2:96:dd:6f:73:83:89:5c:9f:f5:30:21:40:
                    42:7b:37:35:f7:b9:76:ba:7a:8a:32:f6:87:6c:b8:
                    1f:39:65:6d:6e:ab:10:a0:55:ab:61:91:bf:e1:9a:
                    e5:ed:56:95:06:b7:1c:23:c3:fe:30:de:e5:12:f8:
                    c6:f4:8d:71:f8:f0:1e:e4:93:18:53:1c:9b:36:29:
                    5e:ba:38:a9:86:2f:e6:a5:00:c8:1b:9c:01:ed:a0:
                    3d:55:90:32:70:99:7c:a2:12:02:29:ca:a1:4c:2a:
                    23:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:07:32:43:3B:A0:96:EA:5D:70:5E:68:4F:E0:53:74:FA:5B:50:BE
            X509v3 Authority Key Identifier:
                keyid:5A:BE:2F:60:99:96:47:6A:AF:E1:46:BC:5A:72:42:9B:0B:20:5F:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/5ABE2F609996476AAFE146BC5A72429B0B205FC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:af:ac:9e:b3:b2:2d:42:f3:8e:53:90:da:9c:21:6f:4b:8c:
         d9:27:15:fe:c2:f5:d5:23:c2:4b:c5:2d:97:df:fe:94:87:2a:
         a1:6e:5a:7a:f1:2b:c7:68:66:40:38:ff:ad:95:48:f2:cb:d2:
         54:f8:cf:dc:2f:0c:9f:91:b6:77:b6:b4:81:57:ca:6f:9f:71:
         b7:94:b4:1f:62:9e:01:3d:dc:ac:9f:ac:78:80:e2:ef:c8:66:
         30:23:6e:8e:11:a3:bc:fa:d1:a4:8b:8a:db:79:ca:1a:b1:e3:
         18:e9:b7:a2:d9:20:05:86:e0:02:24:5a:02:c1:91:28:08:12:
         4a:ee:ef:50:51:38:d7:fa:cd:5b:0b:09:d5:e3:34:d2:c7:ff:
         75:92:93:17:69:ba:0d:a5:11:b3:ec:a9:24:39:82:99:b7:54:
         05:6a:1c:87:2c:b8:cf:26:52:b5:c0:88:a9:98:8a:e2:30:06:
         41:59:04:df:3e:6a:ac:12:59:f9:2e:00:e0:8f:35:77:a7:fb:
         72:12:51:57:d8:56:cc:c0:b9:30:7f:25:8a:76:c5:11:48:4f:
         59:66:8d:9a:5a:6c:ff:05:60:64:a9:38:7b:86:04:00:fb:b1:
         37:9d:a9:ec:c8:d5:fe:62:2b:a6:6a:93:46:67:f9:93:21:1f:
         32:ba:c5:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 28 00:07:42 2026 by rpki-client