This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft
File:                     0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft (raw, json)
Hash identifier:          E7CwI0l1+CLVKuJab6hxVmNwz4NcbrGUP5p0jUYaxY8=
Subject key identifier:   9F:99:E8:0B:7D:1A:3E:FA:5F:B8:01:20:22:18:82:43:28:1C:BA:5F
Authority key identifier: 06:23:BB:87:43:11:6D:86:B1:3B:9B:D9:E5:34:02:39:8B:7A:1E:E0
Certificate issuer:       /CN=0623bb8743116d86b13b9bd9e53402398b7a1ee0
Certificate serial:       4C56A2ACB5D7ED20BFE00E7CC13FAC4C8E8D3AD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BiO7h0MRbYaxO5vZ5TQCOYt6HuA.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft
Manifest number:          02A7
Signing time:             Mon 22 Dec 2025 01:48:58 +0000
Manifest this update:     Mon 22 Dec 2025 01:43:55 +0000
Manifest next update:     Tue 23 Dec 2025 03:51:55 +0000
Files and hashes:         1: 0623BB8743116D86B13B9BD9E53402398B7A1EE0.crl (hash: +WCiW0sttUz8rdh4ArxkDOsQN8m0BAiYVXYW1Vp4LoQ=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BiO7h0MRbYaxO5vZ5TQCOYt6HuA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 22:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:56:a2:ac:b5:d7:ed:20:bf:e0:0e:7c:c1:3f:ac:4c:8e:8d:3a:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0623bb8743116d86b13b9bd9e53402398b7a1ee0
        Validity
            Not Before: Dec 22 01:43:55 2025 GMT
            Not After : Dec 23 03:51:55 2025 GMT
        Subject: CN=9F99E80B7D1A3EFA5FB8012022188243281CBA5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7c:cf:9d:ce:36:6f:cb:ee:20:d5:50:69:75:
                    0b:ce:31:77:f8:22:47:0e:14:1f:26:8d:a3:87:65:
                    6f:33:d5:ad:7b:31:f9:20:2b:97:66:0a:5c:c7:48:
                    79:79:a9:b0:ce:c2:b1:dd:5d:9e:97:92:4a:25:5f:
                    02:50:97:ce:9c:e3:11:c6:24:bd:5e:5f:dc:35:34:
                    58:2f:61:6c:f8:6d:8d:0d:50:86:ea:60:61:ac:85:
                    ea:8c:8d:14:60:75:d2:ac:16:4c:88:95:05:1c:52:
                    eb:16:b1:a6:54:57:e3:fc:7d:7e:77:c2:08:5b:40:
                    97:29:3b:03:e4:0b:56:ea:2b:c0:3b:86:8a:f7:93:
                    67:d7:16:44:3b:98:be:44:6e:4b:b9:fe:01:af:6c:
                    ec:3b:2b:65:63:ce:e8:8e:af:d3:05:4d:3a:d8:39:
                    0c:ee:2a:7c:99:ed:cc:44:cd:b7:c2:35:2b:35:45:
                    1f:0c:cb:ca:9e:21:99:61:d1:6f:78:b9:ab:12:70:
                    25:da:70:a3:b4:f0:1e:d3:28:e4:f0:1e:e4:36:e9:
                    23:d9:9c:c2:89:5a:8b:ee:d8:a6:aa:c4:76:74:45:
                    20:f4:50:8b:08:3a:fe:7d:a2:96:ae:92:71:23:93:
                    d1:19:8c:ed:b7:c0:6d:4d:c7:c8:fc:3e:7a:2c:20:
                    43:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:99:E8:0B:7D:1A:3E:FA:5F:B8:01:20:22:18:82:43:28:1C:BA:5F
            X509v3 Authority Key Identifier:
                keyid:06:23:BB:87:43:11:6D:86:B1:3B:9B:D9:E5:34:02:39:8B:7A:1E:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiO7h0MRbYaxO5vZ5TQCOYt6HuA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:05:1d:6c:de:78:f3:ee:99:29:e1:ce:94:88:b0:97:78:e8:
         b4:b6:53:28:5a:2c:7e:7f:a2:31:e3:60:2d:2e:27:00:65:9d:
         f4:d0:76:62:99:30:fe:b3:eb:a8:9c:ae:11:58:50:80:80:aa:
         33:3c:c0:9f:b8:63:68:08:dc:ca:44:88:78:2a:20:d7:07:f4:
         1b:82:73:3e:d5:8b:85:93:23:f3:fe:4e:77:92:fb:c9:db:72:
         16:d3:e1:dd:b1:9a:5c:23:c4:dd:e7:62:2e:6e:a4:a9:11:77:
         4c:65:d0:49:f5:7a:d4:26:aa:00:76:0e:f3:b6:35:33:24:34:
         27:3c:47:5f:49:e6:57:c7:f0:6a:7e:49:a3:b7:55:89:03:aa:
         27:5f:ab:df:9b:7e:f3:c1:fe:25:b2:cb:c7:fe:3a:ad:19:43:
         73:ae:13:5e:43:a1:5f:7f:47:15:15:8c:3b:b3:af:0a:3e:a3:
         82:29:86:19:a9:79:b3:b4:06:98:8f:8a:c6:9a:3c:8a:d7:ab:
         4f:bf:3e:fc:af:cc:6a:ab:14:b5:20:98:29:b5:a8:a0:64:30:
         36:d4:bf:b8:96:37:f9:4c:a4:5b:f1:4b:95:72:92:36:5f:97:
         dd:3b:e4:17:65:9c:f9:0e:42:aa:bb:81:8e:2c:f8:9d:e7:6c:
         2e:90:18:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 06:30:32 2025 by rpki-client