This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft
File:                     1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft (raw, json)
Hash identifier:          J+B/+6kz/gFkihil07cLTS/ySM8xYN0zv+kVGsdei9o=
Subject key identifier:   11:C5:52:FE:4B:E8:8E:84:ED:D1:86:37:7C:4D:5A:E2:29:92:6F:47
Authority key identifier: 1A:BB:08:D4:1A:5A:69:74:32:0D:97:88:77:69:A1:5B:A6:B7:EF:71
Certificate issuer:       /CN=1ABB08D41A5A6974320D97887769A15BA6B7EF71
Certificate serial:       436B1B7F39BF36402BF164B0A49F66F7A851543F
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1ABB08D41A5A6974320D97887769A15BA6B7EF71.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft
Manifest number:          02DD
Signing time:             Tue 27 Jan 2026 17:35:50 +0000
Manifest this update:     Tue 27 Jan 2026 17:30:49 +0000
Manifest next update:     Wed 28 Jan 2026 18:18:49 +0000
Files and hashes:         1: 1ABB08D41A5A6974320D97887769A15BA6B7EF71.crl (hash: Rj5/hbZxzYxhaBJ9DhPUfnLD6FJqZ8+PmxGU712s+xY=)
                          2: 326131313a663263303a666330303a3a2f34302d3430203d3e20323032303736.roa (hash: rxzc3BrYti6kxmXubVnEFiS+UC7vkumI3P6AvUB5lwM=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1ABB08D41A5A6974320D97887769A15BA6B7EF71.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Jan 2026 15:50:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:6b:1b:7f:39:bf:36:40:2b:f1:64:b0:a4:9f:66:f7:a8:51:54:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ABB08D41A5A6974320D97887769A15BA6B7EF71
        Validity
            Not Before: Jan 27 17:30:49 2026 GMT
            Not After : Jan 28 18:18:49 2026 GMT
        Subject: CN=11C552FE4BE88E84EDD186377C4D5AE229926F47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:72:03:be:d8:21:e5:e4:8a:3b:f6:2d:96:c4:
                    c3:b2:74:fe:de:3d:f2:8d:02:23:18:15:dd:fa:91:
                    4a:5e:3d:b2:02:2c:a1:49:52:d8:1a:a8:7e:98:5d:
                    30:91:99:db:df:ed:bd:d8:7e:c4:b9:25:77:3d:7e:
                    d5:0c:c9:fb:bc:43:41:cd:7e:ad:5a:99:58:10:54:
                    ab:09:85:af:8e:86:ec:7e:ee:a0:29:48:69:39:7d:
                    8f:ba:eb:4c:d8:1b:c7:d4:56:78:ad:33:f7:6b:fa:
                    9e:ba:cf:8f:fe:38:ba:48:b0:26:fe:49:e5:26:4c:
                    41:35:8f:b9:a5:80:82:59:0f:f7:1e:8d:18:92:c2:
                    c3:ae:ea:fa:7b:05:0b:73:99:5f:18:df:84:c5:be:
                    31:64:26:ec:5f:35:e3:ef:27:a0:40:65:98:8b:15:
                    a7:3b:29:c5:37:a3:5b:63:ec:97:92:40:9f:2d:1d:
                    34:35:eb:4f:7f:a5:fa:ec:47:14:10:3c:fd:0a:64:
                    08:87:09:26:b6:9e:7a:bc:a4:31:de:25:fb:50:ec:
                    70:34:41:22:6a:45:43:8d:7d:bf:7d:fa:90:8a:37:
                    7b:f9:0c:d8:de:df:c0:8b:3a:a7:aa:bf:4f:9b:76:
                    13:69:de:1b:78:7f:0e:fb:91:f1:24:e7:70:a8:6d:
                    ee:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:C5:52:FE:4B:E8:8E:84:ED:D1:86:37:7C:4D:5A:E2:29:92:6F:47
            X509v3 Authority Key Identifier:
                keyid:1A:BB:08:D4:1A:5A:69:74:32:0D:97:88:77:69:A1:5B:A6:B7:EF:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1ABB08D41A5A6974320D97887769A15BA6B7EF71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:f0:ed:50:a9:bc:d0:5f:f8:b6:45:73:3b:f2:72:87:ed:14:
         e4:e4:3e:71:c5:40:25:03:11:ff:2a:db:dd:0c:35:22:20:bf:
         69:8f:76:94:74:0d:e2:ba:fa:27:fd:e7:56:99:e1:91:23:4d:
         2c:92:02:f6:58:66:7f:b0:91:01:d8:bc:cd:12:60:a9:c1:04:
         16:e5:8b:37:5c:ba:82:0c:f2:39:67:32:92:db:47:0b:b9:df:
         79:f6:9d:7e:d6:ac:ff:93:01:2a:92:c1:f2:02:56:d4:a2:b4:
         6a:96:ba:84:5d:89:c5:22:6a:1a:1e:ee:54:9a:7a:3d:76:43:
         ab:b9:4f:1e:23:08:9f:eb:06:dd:e5:5a:4c:d3:5b:cc:2c:d3:
         67:1d:eb:32:c1:0e:03:7b:36:44:f5:17:62:4d:61:87:34:84:
         3a:a3:14:9f:a1:75:2d:21:dc:ad:82:60:c0:e4:77:60:79:ea:
         b1:98:8f:f0:78:2f:7b:d5:f3:28:65:b6:73:87:70:c0:3a:fb:
         8c:b8:4a:74:fa:72:93:e6:be:d0:e9:59:c3:55:0b:db:16:0b:
         f8:42:ac:68:82:e1:f2:df:0a:fe:1e:ee:5a:03:bc:76:70:66:
         c6:e7:d7:9d:0e:07:8f:31:c1:06:7a:ca:7c:8f:cd:7a:f1:d0:
         62:ed:db:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 28 00:07:50 2026 by rpki-client