This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_660378fe866243659ee022a8c44f7a7e/0/62A86C7D9E920A161C8A4CEDDD0EE1BB74C581AC.mft
File:                     62A86C7D9E920A161C8A4CEDDD0EE1BB74C581AC.mft (raw, json)
Hash identifier:          560aa+hu78zOOnp0OtqDLPTAjC01uug7nowywlruMMk=
Subject key identifier:   90:1A:B0:F5:B2:50:2F:06:B2:6E:E4:56:FB:25:8A:37:0A:11:60:8C
Authority key identifier: 62:A8:6C:7D:9E:92:0A:16:1C:8A:4C:ED:DD:0E:E1:BB:74:C5:81:AC
Certificate issuer:       /CN=62A86C7D9E920A161C8A4CEDDD0EE1BB74C581AC
Certificate serial:       71E78CB68ADC02F897189F3E1EEF8336FE4880E6
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/62A86C7D9E920A161C8A4CEDDD0EE1BB74C581AC.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_660378fe866243659ee022a8c44f7a7e/0/62A86C7D9E920A161C8A4CEDDD0EE1BB74C581AC.mft
Manifest number:          0197
Signing time:             Sat 20 Dec 2025 06:14:58 +0000
Manifest this update:     Sat 20 Dec 2025 06:09:56 +0000
Manifest next update:     Sun 21 Dec 2025 08:54:56 +0000
Files and hashes:         1: 326131313a663263303a666663623a3a2f34382d3438203d3e20323133343931.roa (hash: EEncWQ01eVc4Q2mIJszNjdFlx1GOL5DQez1Clkannzg=)
                          2: 62A86C7D9E920A161C8A4CEDDD0EE1BB74C581AC.crl (hash: cGplavQ3dcNYyqaWivCBEBVfeN9YVPa48ocGtZALX0Y=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_660378fe866243659ee022a8c44f7a7e/0/62A86C7D9E920A161C8A4CEDDD0EE1BB74C581AC.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_660378fe866243659ee022a8c44f7a7e/0/62A86C7D9E920A161C8A4CEDDD0EE1BB74C581AC.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/62A86C7D9E920A161C8A4CEDDD0EE1BB74C581AC.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 08:54:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:e7:8c:b6:8a:dc:02:f8:97:18:9f:3e:1e:ef:83:36:fe:48:80:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62A86C7D9E920A161C8A4CEDDD0EE1BB74C581AC
        Validity
            Not Before: Dec 20 06:09:56 2025 GMT
            Not After : Dec 21 08:54:56 2025 GMT
        Subject: CN=901AB0F5B2502F06B26EE456FB258A370A11608C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:30:c7:d4:db:c5:e4:ac:b0:c6:ae:5e:b6:7d:
                    1f:83:d7:79:47:d6:fe:57:fd:09:3d:19:e3:f4:9e:
                    a8:3a:72:34:54:1e:02:00:ec:41:45:50:6a:b7:be:
                    41:c6:97:5c:73:d4:43:b1:92:b9:4e:27:1b:e3:e4:
                    46:ea:46:c6:4b:49:80:15:5a:56:65:95:e5:f4:e8:
                    4f:7b:85:e3:e2:88:fb:47:4c:2e:ec:16:f9:90:f3:
                    23:ae:66:c3:b8:1b:59:ca:02:bf:18:84:ae:c6:10:
                    e8:29:2b:83:83:7d:b5:dc:dd:02:51:17:cc:d5:b3:
                    62:8f:6d:f5:1a:20:6e:25:94:a6:6d:72:14:6d:c2:
                    c2:43:97:7b:50:e6:b6:46:7c:ba:fd:5c:ce:b5:15:
                    e0:56:42:46:53:39:d7:0e:b4:02:97:e5:2a:67:b9:
                    2c:8f:c7:07:1f:2b:7d:db:fe:7b:c1:ad:51:31:57:
                    0f:b6:fc:54:38:6b:d1:82:b6:0e:7f:3a:2d:e6:ba:
                    69:df:52:6e:4c:d3:0e:54:54:a9:af:09:a0:98:b9:
                    ac:c6:8b:70:18:09:f8:be:3c:a9:b3:25:fa:dd:66:
                    e8:08:7e:88:a5:fc:36:c4:5d:b6:7a:fd:dd:fd:12:
                    58:8d:d2:37:fd:a1:34:93:b9:6e:8e:07:05:af:0c:
                    04:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:1A:B0:F5:B2:50:2F:06:B2:6E:E4:56:FB:25:8A:37:0A:11:60:8C
            X509v3 Authority Key Identifier:
                keyid:62:A8:6C:7D:9E:92:0A:16:1C:8A:4C:ED:DD:0E:E1:BB:74:C5:81:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_660378fe866243659ee022a8c44f7a7e/0/62A86C7D9E920A161C8A4CEDDD0EE1BB74C581AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/62A86C7D9E920A161C8A4CEDDD0EE1BB74C581AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_660378fe866243659ee022a8c44f7a7e/0/62A86C7D9E920A161C8A4CEDDD0EE1BB74C581AC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:26:fd:9a:2a:64:21:b6:81:8f:26:6a:9a:0e:46:85:5f:2c:
         72:b5:10:5b:47:3f:19:e9:b9:94:7d:00:82:9b:c2:f1:f5:87:
         b8:9b:6b:4e:3b:38:1b:12:3f:6e:eb:9a:1d:68:15:8a:48:7c:
         7a:0e:6a:44:b5:22:6d:57:ab:29:78:2a:f0:da:01:c5:e8:54:
         6e:f6:69:fc:22:d9:27:09:6e:b9:34:7b:26:cc:90:79:bc:3c:
         99:b5:67:0a:f1:e4:69:e5:f5:5e:ca:92:5b:7d:34:d6:5b:49:
         83:d1:0a:49:c5:3f:05:e2:d6:fe:45:ec:f8:f1:74:4b:0a:b5:
         38:8f:63:83:82:2c:e7:35:4e:81:fb:74:b3:23:5b:f9:bb:41:
         7d:a7:6d:cf:bf:f4:aa:98:e9:89:56:53:f0:ab:5d:06:b9:b1:
         d1:be:77:52:78:e4:7b:77:b2:03:c7:6c:0d:0e:dd:71:34:a6:
         ba:77:55:47:60:0f:31:7e:ab:1e:3c:3e:30:0b:89:db:82:c7:
         49:ea:69:da:cb:95:df:17:dd:8f:50:e3:d1:9b:73:16:10:9a:
         da:d9:76:50:76:81:e8:2a:08:27:44:29:9f:b4:ab:8e:f0:c0:
         55:38:45:d7:71:9c:c9:33:49:a7:3d:46:d1:a4:8a:bb:5f:53:
         be:e1:2f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 01:33:50 2025 by rpki-client