This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/1/16151D7763E4E6BC44887A7873C442580A952833.mft
File:                     16151D7763E4E6BC44887A7873C442580A952833.mft (raw, json)
Hash identifier:          5t3pRXmyzQjEqDtzA3UteO7a6etN5iizZ+JSBRqjXCo=
Subject key identifier:   B9:12:FC:D4:2B:7C:FC:92:7A:8F:5C:E6:4F:A5:C5:26:BF:C9:23:DF
Authority key identifier: 16:15:1D:77:63:E4:E6:BC:44:88:7A:78:73:C4:42:58:0A:95:28:33
Certificate issuer:       /CN=16151d7763e4e6bc44887a7873c442580a952833
Certificate serial:       24BFFAB6E2CE9C87CFCD4BCA99FB6FEFEDF958D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FhUdd2Pk5rxEiHp4c8RCWAqVKDM.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/1/16151D7763E4E6BC44887A7873C442580A952833.mft
Manifest number:          02A9
Signing time:             Sun 21 Dec 2025 09:48:24 +0000
Manifest this update:     Sun 21 Dec 2025 09:43:22 +0000
Manifest next update:     Mon 22 Dec 2025 10:56:22 +0000
Files and hashes:         1: AS205789.asa (hash: Qzff0maeB5+cpe8E67bbTtMCUs1MUvsaRwXsYj8uY5w=)
                          2: 16151D7763E4E6BC44887A7873C442580A952833.crl (hash: 4rLZ2VCicX0lP8Hqdev1g8fYqTVB82K9psnV1n+cu4k=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/1/16151D7763E4E6BC44887A7873C442580A952833.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/1/16151D7763E4E6BC44887A7873C442580A952833.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FhUdd2Pk5rxEiHp4c8RCWAqVKDM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 10:56:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:bf:fa:b6:e2:ce:9c:87:cf:cd:4b:ca:99:fb:6f:ef:ed:f9:58:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16151d7763e4e6bc44887a7873c442580a952833
        Validity
            Not Before: Dec 21 09:43:22 2025 GMT
            Not After : Dec 22 10:56:22 2025 GMT
        Subject: CN=B912FCD42B7CFC927A8F5CE64FA5C526BFC923DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:99:16:04:a7:1f:05:87:17:82:b2:12:b5:eb:
                    9a:59:47:5a:f5:ea:d2:87:07:d1:ed:12:d7:6b:a9:
                    c0:04:7b:ad:de:8b:8d:9d:36:a3:db:ca:77:47:a0:
                    f2:fd:56:e5:05:1d:71:dd:c7:a6:30:57:a4:1c:b1:
                    ad:a4:b7:09:b3:4b:ee:36:6a:79:ec:05:23:7c:58:
                    54:bb:75:12:7b:1b:62:7c:09:6f:f2:7e:40:ce:de:
                    ff:8a:28:c9:1d:8f:04:fd:3e:b4:b3:ae:d4:79:fc:
                    3b:3b:79:23:73:73:41:d4:98:ab:e0:c6:9e:94:d3:
                    b6:bb:4a:09:95:bf:7e:6e:41:46:d5:27:5d:02:2f:
                    7b:f6:c3:23:53:7a:f4:b9:9e:d1:78:a4:55:5a:70:
                    01:10:b7:e5:9b:dd:ab:88:aa:2e:87:57:f3:97:61:
                    10:4f:c6:21:4c:8d:a9:16:4b:ec:a5:8f:0c:34:e5:
                    cf:85:94:60:c2:39:17:5f:0a:9c:77:9f:75:f6:1a:
                    ba:3a:4f:2a:7b:18:43:bb:c1:d6:cb:a4:0a:0c:9a:
                    05:27:d2:c3:74:00:ce:70:21:4b:e2:6c:64:da:2d:
                    e1:44:e5:27:31:d8:54:7f:ef:f4:98:db:91:a9:71:
                    1d:09:77:18:1c:33:1f:cb:c1:47:1c:a4:3f:c0:85:
                    e3:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:12:FC:D4:2B:7C:FC:92:7A:8F:5C:E6:4F:A5:C5:26:BF:C9:23:DF
            X509v3 Authority Key Identifier:
                keyid:16:15:1D:77:63:E4:E6:BC:44:88:7A:78:73:C4:42:58:0A:95:28:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/1/16151D7763E4E6BC44887A7873C442580A952833.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FhUdd2Pk5rxEiHp4c8RCWAqVKDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/1/16151D7763E4E6BC44887A7873C442580A952833.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:82:53:be:b7:f1:9f:92:c8:8b:14:a0:71:68:b9:8c:5c:a1:
         aa:95:6c:0e:ad:9c:46:1d:a3:3c:54:a9:db:d5:c8:69:cf:df:
         f0:e1:d0:13:69:ec:51:5c:40:4e:7d:65:68:b6:55:bd:d9:4b:
         bc:f4:79:00:63:12:eb:7b:c1:2b:e9:00:48:4e:b6:2c:cd:a6:
         c6:85:06:3f:9a:e2:62:1c:b6:76:db:dd:4f:26:b8:a0:1a:30:
         44:3c:ce:22:ee:ab:15:4c:81:2d:d0:ed:0f:51:98:f2:39:14:
         48:cb:68:d8:a1:f5:ba:d3:b4:e6:77:a3:24:2a:17:9c:22:f3:
         3f:67:ac:52:27:a6:18:25:55:53:75:71:b8:28:79:3e:42:6c:
         ee:31:22:6c:24:c2:00:3d:d9:c6:a8:b3:38:b2:70:30:56:40:
         87:be:45:1c:b7:dc:47:b2:ed:b7:83:ca:cf:11:83:28:9e:e4:
         be:70:39:30:97:1b:88:6d:41:37:9f:3a:c9:09:4d:be:17:7d:
         7e:54:7d:0e:a9:dc:b0:04:d7:8b:35:4d:5e:52:c0:0a:7b:41:
         a2:dd:8e:5c:74:0e:a2:ce:85:8b:5f:f4:aa:3a:cb:e3:8e:e1:
         9c:74:b0:e5:03:bd:66:1f:e8:f0:aa:e7:b5:17:0e:dc:5c:13:
         24:67:68:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 18:36:02 2025 by rpki-client