This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft
File:                     2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft (raw, json)
Hash identifier:          yjAkZ1eZSz6aPtQSew3jcVKBURDOjx05oV411s4TwF8=
Subject key identifier:   7F:1E:7A:0D:60:10:45:29:CE:CC:C5:97:01:2C:0F:5B:A3:85:9A:B0
Authority key identifier: 2B:3B:97:33:4D:A0:69:78:18:5D:AC:76:A2:F3:EA:35:85:E8:23:1E
Certificate issuer:       /CN=2B3B97334DA06978185DAC76A2F3EA3585E8231E
Certificate serial:       0DCE6327176242DE076E56F3AD3FDA8C9E059E15
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/2B3B97334DA06978185DAC76A2F3EA3585E8231E.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft
Manifest number:          6D
Signing time:             Tue 27 Jan 2026 07:57:58 +0000
Manifest this update:     Tue 27 Jan 2026 07:52:58 +0000
Manifest next update:     Wed 28 Jan 2026 10:22:58 +0000
Files and hashes:         1: 326131313a663263303a666665303a3a2f34382d3438203d3e20323134373439.roa (hash: vWCzOnh12VtJGg6RfrslnpFyun0vAz+2wk8UKDM7sNo=)
                          2: 2B3B97334DA06978185DAC76A2F3EA3585E8231E.crl (hash: 6wKbPj11ipW9goVevfPL7yPdwdo9m7/sC6anLRBZUjw=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/2B3B97334DA06978185DAC76A2F3EA3585E8231E.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Jan 2026 10:22:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:ce:63:27:17:62:42:de:07:6e:56:f3:ad:3f:da:8c:9e:05:9e:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B3B97334DA06978185DAC76A2F3EA3585E8231E
        Validity
            Not Before: Jan 27 07:52:58 2026 GMT
            Not After : Jan 28 10:22:58 2026 GMT
        Subject: CN=7F1E7A0D60104529CECCC597012C0F5BA3859AB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:43:b2:a6:72:37:0b:f6:dc:92:8f:f0:a9:0d:
                    e9:26:c7:55:fd:f1:b1:d6:75:57:4d:67:a4:30:4a:
                    75:70:f4:5f:82:40:5f:6f:fd:e8:c5:b6:b4:ad:eb:
                    18:61:46:98:02:5f:ae:fd:06:bf:25:6b:17:ed:57:
                    fe:e8:63:a8:b8:68:e0:21:ce:d3:f3:62:5e:cc:9f:
                    03:8e:f9:74:e2:d4:08:b1:86:9f:75:67:61:74:39:
                    1c:3d:16:0b:0c:36:d3:0d:c8:61:4a:1d:2f:ee:14:
                    93:4f:11:ad:e1:ca:ee:a0:5c:0f:cf:31:cb:d1:41:
                    5a:b0:1a:a2:1e:58:4d:b5:fa:73:d0:98:74:fc:65:
                    6a:83:fc:92:e1:05:ee:0f:56:76:3e:a5:f5:d5:c8:
                    be:1d:39:26:aa:48:e4:d1:0a:71:53:6c:8f:d6:4e:
                    fa:1d:d0:ef:2e:6a:7b:3d:88:bc:56:52:43:71:89:
                    42:2c:2e:33:eb:ec:07:5b:31:85:9d:e3:50:9b:e4:
                    a6:d6:1b:3e:5a:69:39:ef:60:77:a5:f2:1a:31:05:
                    1d:c0:ce:ca:a2:58:31:63:66:08:01:91:59:03:a8:
                    a0:34:6e:1b:fb:3c:c3:7c:47:7d:fb:0c:8e:de:f3:
                    7a:28:cf:18:a4:0f:26:68:df:34:ee:b6:cb:d0:cb:
                    bd:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:1E:7A:0D:60:10:45:29:CE:CC:C5:97:01:2C:0F:5B:A3:85:9A:B0
            X509v3 Authority Key Identifier:
                keyid:2B:3B:97:33:4D:A0:69:78:18:5D:AC:76:A2:F3:EA:35:85:E8:23:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/2B3B97334DA06978185DAC76A2F3EA3585E8231E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:42:b7:0c:28:ea:b5:b8:7d:33:9c:be:42:03:9d:1b:08:6e:
         f4:11:f3:4a:54:89:ce:77:04:aa:46:d3:f2:d0:51:d3:a3:db:
         12:60:e0:80:a1:ff:eb:b4:80:99:d1:34:59:7a:a2:2b:d2:65:
         b0:fa:d6:0f:ff:4b:a2:12:ef:58:d1:66:b6:5f:b9:45:3d:cf:
         1d:ae:32:bb:b1:5e:7e:78:98:04:85:52:74:38:97:92:bb:f1:
         8e:d3:2a:5d:9e:9c:18:3b:81:5a:8c:26:f1:18:3a:22:f6:b0:
         c3:6e:4d:8d:ac:37:4f:4f:32:e4:e0:fe:54:2f:45:49:a6:e5:
         58:f5:5b:ee:91:14:6e:0f:c1:14:5d:d4:b9:1f:00:bf:e9:cd:
         46:2d:ee:fd:ca:d1:de:cb:66:0b:ae:8d:7f:be:11:61:2a:66:
         b1:00:dc:a2:2d:15:08:9b:10:ec:e4:dc:cf:27:71:9f:6f:0e:
         ba:4b:d9:02:fd:83:27:4f:ba:13:3d:8d:eb:e9:72:2e:eb:3d:
         13:88:8d:0b:ea:dc:b8:92:16:d2:16:fe:88:2c:40:89:2d:79:
         99:45:55:24:6c:cf:18:e0:9a:be:02:46:57:4b:db:9b:d5:7b:
         96:ce:53:96:cc:dd:68:43:95:e0:77:73:92:e4:1b:97:31:55:
         58:d6:c4:00
-----BEGIN CERTIFICATE-----
MIIFbjCCBFagAwIBAgIUDc5jJxdiQt4HblbzrT/ajJ4FnhUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkIzQjk3MzM0REEwNjk3ODE4NURBQzc2QTJGM0VBMzU4
NUU4MjMxRTAeFw0yNjAxMjcwNzUyNThaFw0yNjAxMjgxMDIyNThaMDMxMTAvBgNV
BAMTKDdGMUU3QTBENjAxMDQ1MjlDRUNDQzU5NzAxMkMwRjVCQTM4NTlBQjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJQ7KmcjcL9tySj/CpDekmx1X9
8bHWdVdNZ6QwSnVw9F+CQF9v/ejFtrSt6xhhRpgCX679Br8laxftV/7oY6i4aOAh
ztPzYl7MnwOO+XTi1Aixhp91Z2F0ORw9FgsMNtMNyGFKHS/uFJNPEa3hyu6gXA/P
McvRQVqwGqIeWE21+nPQmHT8ZWqD/JLhBe4PVnY+pfXVyL4dOSaqSOTRCnFTbI/W
Tvod0O8uans9iLxWUkNxiUIsLjPr7AdbMYWd41Cb5KbWGz5aaTnvYHel8hoxBR3A
zsqiWDFjZggBkVkDqKA0bhv7PMN8R337DI7e83oozxikDyZo3zTutsvQy70PAgMB
AAGjggJ4MIICdDAdBgNVHQ4EFgQUfx56DWAQRSnOzMWXASwPW6OFmrAwHwYDVR0j
BBgwFoAUKzuXM02gaXgYXax2ovPqNYXoIx4wDgYDVR0PAQH/BAQDAgeAMIGPBgNV
HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv
cmVwby9ycGtpX2NhX2YxMTRjMWVhNzc4ODQ1MmNiZjM4YmU4NTRlYTgzNTlkLzAv
MkIzQjk3MzM0REEwNjk3ODE4NURBQzc2QTJGM0VBMzU4NUU4MjMxRS5jcmwwgZ4G
CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz
LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh
MC1mMGQwMmMwM2EyYzYvNy8yQjNCOTczMzREQTA2OTc4MTg1REFDNzZBMkYzRUEz
NTg1RTgyMzFFLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty
c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2YxMTRj
MWVhNzc4ODQ1MmNiZjM4YmU4NTRlYTgzNTlkLzAvMkIzQjk3MzM0REEwNjk3ODE4
NURBQzc2QTJGM0VBMzU4NUU4MjMxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF
BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGVCtwwo6rW4fTOcvkID
nRsIbvQR80pUic53BKpG0/LQUdOj2xJg4ICh/+u0gJnRNFl6oivSZbD61g//S6IS
71jRZrZfuUU9zx2uMruxXn54mASFUnQ4l5K78Y7TKl2enBg7gVqMJvEYOiL2sMNu
TY2sN09PMuTg/lQvRUmm5Vj1W+6RFG4PwRRd1LkfAL/pzUYt7v3K0d7LZguujX++
EWEqZrEA3KItFQibEOzk3M8ncZ9vDrpL2QL9gydPuhM9jevpci7rPROIjQvq3LiS
FtIW/ogsQIkteZlFVSRszxjgmr4CRldL25vVe5bOU5bM3WhDleB3c5LkG5cxVVjW
xAA=
-----END CERTIFICATE-----
Generated at Wed Jan 28 00:07:42 2026 by rpki-client