This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/1/165AE96D6A2E9A42B7FF7F1B1958413AE593D181.mft
File:                     165AE96D6A2E9A42B7FF7F1B1958413AE593D181.mft (raw, json)
Hash identifier:          YQMoLIEguoK3+Mg/sBqTk7XTPNFkQqcCkpgPC1aNy8k=
Subject key identifier:   A9:71:D1:F8:9E:CF:AC:0D:88:7E:DA:25:85:BE:34:4A:89:48:62:24
Authority key identifier: 16:5A:E9:6D:6A:2E:9A:42:B7:FF:7F:1B:19:58:41:3A:E5:93:D1:81
Certificate issuer:       /CN=165ae96d6a2e9a42b7ff7f1b1958413ae593d181
Certificate serial:       47A47BBF96B78E2BB3ADEEAFA1C59E1FE7B18AC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FlrpbWoumkK3_38bGVhBOuWT0YE.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/1/165AE96D6A2E9A42B7FF7F1B1958413AE593D181.mft
Manifest number:          02A2
Signing time:             Mon 15 Dec 2025 03:24:49 +0000
Manifest this update:     Mon 15 Dec 2025 03:19:49 +0000
Manifest next update:     Tue 16 Dec 2025 04:58:49 +0000
Files and hashes:         1: 165AE96D6A2E9A42B7FF7F1B1958413AE593D181.crl (hash: fldrMaQUooyDQnTzak5L+N5LQieQDRTTuaQ6ercmQco=)
                          2: AS212245.asa (hash: Tl7AFn5qU0JzGSHvNhoFySTYThSVH7NiT4mJ+9GeULc=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/1/165AE96D6A2E9A42B7FF7F1B1958413AE593D181.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/1/165AE96D6A2E9A42B7FF7F1B1958413AE593D181.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FlrpbWoumkK3_38bGVhBOuWT0YE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Dec 2025 23:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:a4:7b:bf:96:b7:8e:2b:b3:ad:ee:af:a1:c5:9e:1f:e7:b1:8a:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=165ae96d6a2e9a42b7ff7f1b1958413ae593d181
        Validity
            Not Before: Dec 15 03:19:49 2025 GMT
            Not After : Dec 16 04:58:49 2025 GMT
        Subject: CN=A971D1F89ECFAC0D887EDA2585BE344A89486224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:18:d3:41:b4:3e:d4:43:37:32:41:37:d0:85:
                    b6:8d:8a:cb:59:80:cc:84:80:78:e9:64:7c:2d:f8:
                    4a:71:dd:4a:cc:48:a4:f4:8f:0d:65:71:e0:8b:58:
                    d4:a0:98:df:e2:f7:e4:e2:3c:8f:e5:61:82:80:c3:
                    b6:f1:01:a6:4c:8a:ec:fc:91:89:4e:4f:cc:59:74:
                    e0:53:72:04:7d:e4:93:8d:04:e1:79:e3:23:49:5b:
                    80:27:cc:d4:a8:ab:b9:34:63:b2:62:94:f7:eb:d3:
                    25:a5:e7:0b:c9:8b:b8:f6:36:24:06:31:2b:25:43:
                    97:6f:a4:21:a3:96:d7:92:fc:fc:a8:46:39:f6:04:
                    f9:58:ac:64:ce:b5:5f:af:d7:7d:6d:75:2b:14:d4:
                    f0:05:06:c2:4c:3d:a8:99:09:38:88:24:40:09:7b:
                    33:70:ef:ea:60:e8:ce:a8:04:6b:9a:8c:d1:53:8e:
                    1c:cb:98:c7:90:d2:08:eb:61:48:9c:a9:fc:73:92:
                    0b:01:aa:58:ea:67:07:b7:29:54:43:7c:83:69:84:
                    21:09:92:6c:11:b6:02:14:48:f3:a4:36:97:66:d2:
                    fe:a0:62:f4:8a:fb:5f:79:88:90:49:da:af:49:18:
                    99:bd:46:37:ca:01:4b:f6:43:ca:50:e8:36:54:0e:
                    79:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:71:D1:F8:9E:CF:AC:0D:88:7E:DA:25:85:BE:34:4A:89:48:62:24
            X509v3 Authority Key Identifier:
                keyid:16:5A:E9:6D:6A:2E:9A:42:B7:FF:7F:1B:19:58:41:3A:E5:93:D1:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/1/165AE96D6A2E9A42B7FF7F1B1958413AE593D181.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FlrpbWoumkK3_38bGVhBOuWT0YE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/1/165AE96D6A2E9A42B7FF7F1B1958413AE593D181.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:df:03:fe:4b:10:85:dd:f0:a2:1e:e5:93:23:4f:78:b1:b3:
         c2:2e:fa:27:94:d1:d5:aa:df:a9:42:a4:99:b4:9e:92:f9:47:
         02:ca:60:e1:79:a7:ac:9d:5b:da:18:8e:1a:56:59:48:5a:4a:
         6d:2e:72:8e:7b:62:b3:b4:63:e5:e9:15:5b:b6:d9:40:ca:55:
         ad:52:f3:d2:fb:02:3d:62:71:05:a3:c3:8f:d9:70:88:e9:2d:
         ca:b1:9f:eb:4b:9e:53:4e:d1:96:f4:7a:9f:dc:40:41:14:7b:
         23:ba:13:92:62:59:57:78:31:ee:f6:21:6d:bf:be:59:a3:02:
         00:b7:d0:54:27:35:00:6c:25:a2:9b:33:3a:e2:7b:1a:70:c8:
         3e:02:e3:3f:26:39:e2:ae:4c:8b:a6:72:61:36:8c:0d:21:e8:
         19:cc:e1:f2:98:14:4d:8c:5c:22:4d:c6:a8:97:4c:05:e6:ee:
         f6:ef:11:9b:dc:9c:50:b6:65:be:8a:18:a6:0d:ee:5b:41:ca:
         f9:8d:ad:8d:60:db:ef:ab:72:cc:59:71:77:4f:4d:b9:58:43:
         fe:76:2b:25:84:79:45:f7:16:ef:c2:f0:da:34:d2:9c:d0:96:
         c4:3f:7c:aa:e7:0d:85:5f:67:58:1c:5f:2c:75:fe:6c:71:c7:
         b8:c9:b5:86
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUR6R7v5a3jiuzre6vocWeH+exisEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY1YWU5NmQ2YTJlOWE0MmI3ZmY3ZjFiMTk1ODQxM2Fl
NTkzZDE4MTAeFw0yNTEyMTUwMzE5NDlaFw0yNTEyMTYwNDU4NDlaMDMxMTAvBgNV
BAMTKEE5NzFEMUY4OUVDRkFDMEQ4ODdFREEyNTg1QkUzNDRBODk0ODYyMjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGGNNBtD7UQzcyQTfQhbaNistZ
gMyEgHjpZHwt+Epx3UrMSKT0jw1lceCLWNSgmN/i9+TiPI/lYYKAw7bxAaZMiuz8
kYlOT8xZdOBTcgR95JONBOF54yNJW4AnzNSoq7k0Y7JilPfr0yWl5wvJi7j2NiQG
MSslQ5dvpCGjlteS/PyoRjn2BPlYrGTOtV+v131tdSsU1PAFBsJMPaiZCTiIJEAJ
ezNw7+pg6M6oBGuajNFTjhzLmMeQ0gjrYUicqfxzkgsBqljqZwe3KVRDfINphCEJ
kmwRtgIUSPOkNpdm0v6gYvSK+195iJBJ2q9JGJm9RjfKAUv2Q8pQ6DZUDnkxAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUqXHR+J7PrA2Iftolhb40SolIYiQwHwYDVR0j
BBgwFoAUFlrpbWoumkK3/38bGVhBOuWT0YEwDgYDVR0PAQH/BAQDAgeAMIGPBgNV
HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv
cmVwby9ycGtpX2NhXzlkODM5Y2EwYTU1ZTQyYTQ5ZDEwZGUwNzFmNDY1OThiLzEv
MTY1QUU5NkQ2QTJFOUE0MkI3RkY3RjFCMTk1ODQxM0FFNTkzRDE4MS5jcmwwZAYI
KwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9ERUZBVUxUL0ZscnBiV291bWtLM18zOGJHVmhCT3VXVDBZRS5j
ZXIwgZoGCCsGAQUFBwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9ycGtp
LXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9jYV85ZDgzOWNhMGE1NWU0MmE0
OWQxMGRlMDcxZjQ2NTk4Yi8xLzE2NUFFOTZENkEyRTlBNDJCN0ZGN0YxQjE5NTg0
MTNBRTU5M0QxODEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB
BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASg
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBX3wP+SxCF3fCiHuWTI094sbPCLvonlNHV
qt+pQqSZtJ6S+UcCymDheaesnVvaGI4aVllIWkptLnKOe2KztGPl6RVbttlAylWt
UvPS+wI9YnEFo8OP2XCI6S3KsZ/rS55TTtGW9Hqf3EBBFHsjuhOSYllXeDHu9iFt
v75ZowIAt9BUJzUAbCWimzM64nsacMg+AuM/JjnirkyLpnJhNowNIegZzOHymBRN
jFwiTcaol0wF5u727xGb3JxQtmW+ihimDe5bQcr5ja2NYNvvq3LMWXF3T025WEP+
dislhHlF9xbvwvDaNNKc0JbEP3yq5w2FX2dYHF8sdf5scce4ybWG
-----END CERTIFICATE-----
Generated at Mon Dec 15 08:35:45 2025 by rpki-client