This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/1/165AE96D6A2E9A42B7FF7F1B1958413AE593D181.mft
File:                     165AE96D6A2E9A42B7FF7F1B1958413AE593D181.mft (raw, json)
Hash identifier:          e1YqNc6IbELEHUY/UM1qr+SipFASpxwqhEVOjtpd0sA=
Subject key identifier:   A9:BD:AD:0A:92:DD:8F:2D:D4:E8:BF:B4:43:58:49:0D:F8:4D:54:4C
Authority key identifier: 16:5A:E9:6D:6A:2E:9A:42:B7:FF:7F:1B:19:58:41:3A:E5:93:D1:81
Certificate issuer:       /CN=165ae96d6a2e9a42b7ff7f1b1958413ae593d181
Certificate serial:       02DCFEC0CDF7A62E7CE3A245431E5A7956FA8EC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FlrpbWoumkK3_38bGVhBOuWT0YE.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/1/165AE96D6A2E9A42B7FF7F1B1958413AE593D181.mft
Manifest number:          0297
Signing time:             Sat 06 Dec 2025 22:45:29 +0000
Manifest this update:     Sat 06 Dec 2025 22:40:29 +0000
Manifest next update:     Mon 08 Dec 2025 01:31:29 +0000
Files and hashes:         1: 165AE96D6A2E9A42B7FF7F1B1958413AE593D181.crl (hash: LWkCwUNnRL+lXw9SXt/Iqqz9Mca2k2iFpLOx+dl2snE=)
                          2: AS212245.asa (hash: Tl7AFn5qU0JzGSHvNhoFySTYThSVH7NiT4mJ+9GeULc=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/1/165AE96D6A2E9A42B7FF7F1B1958413AE593D181.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/1/165AE96D6A2E9A42B7FF7F1B1958413AE593D181.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FlrpbWoumkK3_38bGVhBOuWT0YE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:29:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:dc:fe:c0:cd:f7:a6:2e:7c:e3:a2:45:43:1e:5a:79:56:fa:8e:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=165ae96d6a2e9a42b7ff7f1b1958413ae593d181
        Validity
            Not Before: Dec  6 22:40:29 2025 GMT
            Not After : Dec  8 01:31:29 2025 GMT
        Subject: CN=A9BDAD0A92DD8F2DD4E8BFB44358490DF84D544C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1f:85:17:0d:90:25:77:fb:fb:b9:34:71:09:
                    ff:a3:38:d5:3c:50:59:7a:2d:a8:c1:ca:19:79:72:
                    4e:76:75:d7:0e:ac:b2:74:2f:a9:89:63:68:69:f6:
                    c8:5f:01:3e:09:6e:1f:99:e8:4f:02:2a:4c:39:d1:
                    e5:0a:94:7e:6d:26:66:fe:47:4c:e2:e8:af:5b:12:
                    bd:35:bd:bc:56:80:99:60:44:8a:66:8f:fa:e2:07:
                    58:30:1d:76:2b:86:f9:6c:06:be:ce:69:6d:6a:73:
                    9b:b6:8f:17:f5:5b:49:f1:ca:05:d5:a1:9f:86:b5:
                    ae:5e:1c:c8:d6:61:89:54:1b:24:a4:40:d0:9b:5d:
                    fe:d6:69:9a:8e:8c:68:63:d3:8a:eb:31:cd:69:7e:
                    37:1b:3e:99:45:dd:90:8c:39:28:43:75:bd:6b:06:
                    c2:90:83:75:42:da:c1:23:59:68:15:64:2a:91:6f:
                    98:5d:ac:bc:ed:72:4d:7e:26:9e:0f:a5:51:c2:8e:
                    fc:33:46:72:36:ba:a7:4b:df:af:d9:d9:f5:3b:68:
                    bd:05:9d:d8:12:7a:55:f8:1a:78:77:a0:5d:5c:10:
                    00:74:40:d1:2e:3f:cb:9c:49:46:6b:9a:f5:bf:77:
                    e4:b9:f5:c6:9b:41:05:e2:1a:db:09:50:0f:84:67:
                    74:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:BD:AD:0A:92:DD:8F:2D:D4:E8:BF:B4:43:58:49:0D:F8:4D:54:4C
            X509v3 Authority Key Identifier:
                keyid:16:5A:E9:6D:6A:2E:9A:42:B7:FF:7F:1B:19:58:41:3A:E5:93:D1:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/1/165AE96D6A2E9A42B7FF7F1B1958413AE593D181.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FlrpbWoumkK3_38bGVhBOuWT0YE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/1/165AE96D6A2E9A42B7FF7F1B1958413AE593D181.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:2e:4e:db:05:2f:46:e1:ab:4b:7b:1e:0f:18:f7:78:d4:89:
         f0:bf:97:f4:34:5f:96:81:de:19:ff:69:07:3a:79:48:20:54:
         83:1e:ca:70:10:35:18:84:58:b2:20:ec:ae:f3:d6:03:6c:b7:
         7a:fe:ee:b7:29:f5:77:03:01:b1:50:84:37:7e:42:22:cc:ae:
         95:8b:1c:93:2d:64:44:ec:21:1a:9a:5e:55:16:c8:5f:c9:97:
         32:6b:3a:1e:f2:d5:10:9d:43:7d:13:63:f2:38:35:e3:38:84:
         2e:03:ac:fb:e9:a2:60:a1:a1:78:e6:17:c5:8a:4e:e1:33:c9:
         d8:8e:b6:c1:55:2c:46:54:fa:76:3b:39:3e:cc:71:db:69:90:
         63:8f:fb:13:10:e2:4a:63:3e:69:dc:ea:26:00:06:a5:12:12:
         de:15:1b:37:10:3b:90:81:93:d3:5c:99:a5:c2:33:4b:73:93:
         11:7e:de:94:0e:01:de:bc:29:88:9b:66:c0:4c:aa:7d:ec:04:
         e7:80:a6:3e:0e:24:75:82:64:4d:e0:4a:3b:5e:ca:9b:da:d1:
         47:3f:93:26:27:9c:77:a7:72:8c:53:c9:0a:24:1d:31:76:ac:
         8b:8e:01:fb:0c:12:37:5d:bc:87:9b:df:47:63:71:29:e8:5d:
         78:36:90:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:24:10 2025 by rpki-client