This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_660378fe866243659ee022a8c44f7a7e/0/62A86C7D9E920A161C8A4CEDDD0EE1BB74C581AC.mft
File:                     62A86C7D9E920A161C8A4CEDDD0EE1BB74C581AC.mft (raw, json)
Hash identifier:          dXw9J5wDlHwufbPmSKHyw+rak0hr8ge9leLES3w4skM=
Subject key identifier:   1F:A3:56:65:BF:95:FF:F6:A6:C7:7F:10:3E:4B:61:8B:8A:CF:9A:4A
Authority key identifier: 62:A8:6C:7D:9E:92:0A:16:1C:8A:4C:ED:DD:0E:E1:BB:74:C5:81:AC
Certificate issuer:       /CN=62A86C7D9E920A161C8A4CEDDD0EE1BB74C581AC
Certificate serial:       12967EBB064361C49DAF926FD7B69C87A37FB076
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/62A86C7D9E920A161C8A4CEDDD0EE1BB74C581AC.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_660378fe866243659ee022a8c44f7a7e/0/62A86C7D9E920A161C8A4CEDDD0EE1BB74C581AC.mft
Manifest number:          01C9
Signing time:             Tue 27 Jan 2026 11:40:55 +0000
Manifest this update:     Tue 27 Jan 2026 11:35:55 +0000
Manifest next update:     Wed 28 Jan 2026 13:13:55 +0000
Files and hashes:         1: 326131313a663263303a666663623a3a2f34382d3438203d3e20323133343931.roa (hash: EEncWQ01eVc4Q2mIJszNjdFlx1GOL5DQez1Clkannzg=)
                          2: 62A86C7D9E920A161C8A4CEDDD0EE1BB74C581AC.crl (hash: rND3OEJO4zPKdYqkIp8KO6AlkLRE8pXz885u1i/UH3Q=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_660378fe866243659ee022a8c44f7a7e/0/62A86C7D9E920A161C8A4CEDDD0EE1BB74C581AC.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_660378fe866243659ee022a8c44f7a7e/0/62A86C7D9E920A161C8A4CEDDD0EE1BB74C581AC.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/62A86C7D9E920A161C8A4CEDDD0EE1BB74C581AC.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Jan 2026 13:13:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:96:7e:bb:06:43:61:c4:9d:af:92:6f:d7:b6:9c:87:a3:7f:b0:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62A86C7D9E920A161C8A4CEDDD0EE1BB74C581AC
        Validity
            Not Before: Jan 27 11:35:55 2026 GMT
            Not After : Jan 28 13:13:55 2026 GMT
        Subject: CN=1FA35665BF95FFF6A6C77F103E4B618B8ACF9A4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d7:4b:79:2f:86:de:e6:72:81:c8:de:38:fb:
                    f8:f1:28:f6:3f:3e:f9:eb:84:7f:d5:a5:8e:1e:56:
                    20:c1:2b:39:02:ed:c5:cb:4b:f7:a7:7f:dc:26:1d:
                    f4:da:a4:fa:47:5c:df:2e:9e:b9:9d:a6:12:e5:8c:
                    c3:ce:c8:92:76:e1:9e:ea:f9:81:06:86:9c:96:c2:
                    c1:97:11:0f:d6:2c:f5:00:f4:b1:2c:65:14:19:73:
                    7e:48:22:9e:79:2a:04:f1:21:36:b1:7b:1e:a6:64:
                    91:a4:3e:7e:45:8c:94:ae:ea:34:08:6e:43:d5:1c:
                    49:2a:92:a9:a7:e5:47:69:bd:0e:d0:bd:6e:a3:d0:
                    5d:bf:67:0f:dd:16:98:7f:16:c2:df:66:2c:85:e3:
                    6e:92:4b:5e:a9:08:c8:aa:eb:60:43:0d:1d:1a:81:
                    82:8e:14:35:4e:18:fd:4d:81:2b:eb:8f:ed:47:3e:
                    f6:38:5a:cd:15:25:88:34:1d:d2:0d:4e:9a:d9:48:
                    f5:db:82:24:00:fe:9d:ba:d4:4b:fe:98:78:a2:26:
                    17:88:c8:df:9a:ee:bb:6b:78:7a:41:48:c5:54:5a:
                    c5:44:b1:53:dd:30:96:c0:6b:1a:96:75:8d:d2:07:
                    19:7a:83:b5:f5:da:2e:b2:f5:3b:8e:13:27:8d:ea:
                    51:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:A3:56:65:BF:95:FF:F6:A6:C7:7F:10:3E:4B:61:8B:8A:CF:9A:4A
            X509v3 Authority Key Identifier:
                keyid:62:A8:6C:7D:9E:92:0A:16:1C:8A:4C:ED:DD:0E:E1:BB:74:C5:81:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_660378fe866243659ee022a8c44f7a7e/0/62A86C7D9E920A161C8A4CEDDD0EE1BB74C581AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/62A86C7D9E920A161C8A4CEDDD0EE1BB74C581AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_660378fe866243659ee022a8c44f7a7e/0/62A86C7D9E920A161C8A4CEDDD0EE1BB74C581AC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:8c:ad:59:a6:45:e7:fa:bf:a9:6c:6d:5e:ef:b4:a7:75:73:
         49:36:f4:bc:8a:da:e9:e0:72:84:1f:b0:67:7e:3e:e3:3a:37:
         ec:e4:82:27:02:cd:8b:0d:15:12:28:81:70:e5:eb:39:82:f2:
         66:09:a1:08:44:92:f0:71:e8:c5:33:52:b5:15:c5:e8:eb:7b:
         b4:a4:f4:08:f3:02:9e:3e:30:e5:0f:44:52:42:b4:96:fa:6f:
         a9:da:9b:6a:ea:bb:ad:39:5b:fc:24:71:a5:e4:ab:7f:0a:27:
         fa:fa:65:64:c4:6d:7e:a4:96:ef:0c:8f:62:35:80:42:ed:68:
         5d:3e:b5:ad:51:3c:31:71:85:8b:96:74:ff:ec:91:b2:2e:53:
         eb:ec:c6:51:b3:09:71:82:a9:6e:da:91:62:61:ed:5a:73:89:
         61:a6:3f:34:df:c5:02:d9:a1:e2:b0:c6:8c:42:18:e0:ff:d2:
         4f:ee:7d:f3:af:0b:13:e9:da:4e:00:da:aa:a6:09:31:7e:a5:
         b5:7f:b2:d0:be:f2:9f:0d:dc:43:b4:c2:7f:f8:f1:ba:43:93:
         8c:97:cd:8f:e2:a6:b6:ee:38:79:8e:44:ac:31:3a:28:3f:de:
         3b:e1:91:f7:a0:33:5b:e0:3b:59:9b:aa:6c:92:b1:0f:85:52:
         de:69:cd:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 28 00:08:25 2026 by rpki-client