This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/1/165AE96D6A2E9A42B7FF7F1B1958413AE593D181.mft
File:                     165AE96D6A2E9A42B7FF7F1B1958413AE593D181.mft (raw, json)
Hash identifier:          SR/4f8fr8d2PqG7oXu7i04QPaVryyPhgGeyBFCWf7cE=
Subject key identifier:   76:37:40:D9:7F:1F:C8:EB:B9:7F:5A:77:30:67:90:21:DB:10:59:2C
Authority key identifier: 16:5A:E9:6D:6A:2E:9A:42:B7:FF:7F:1B:19:58:41:3A:E5:93:D1:81
Certificate issuer:       /CN=165ae96d6a2e9a42b7ff7f1b1958413ae593d181
Certificate serial:       03E977683CDE02B51F28F325431EF1C2DCD176AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FlrpbWoumkK3_38bGVhBOuWT0YE.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/1/165AE96D6A2E9A42B7FF7F1B1958413AE593D181.mft
Manifest number:          02AB
Signing time:             Mon 22 Dec 2025 03:33:37 +0000
Manifest this update:     Mon 22 Dec 2025 03:28:35 +0000
Manifest next update:     Tue 23 Dec 2025 07:23:35 +0000
Files and hashes:         1: AS212245.asa (hash: Tl7AFn5qU0JzGSHvNhoFySTYThSVH7NiT4mJ+9GeULc=)
                          2: 165AE96D6A2E9A42B7FF7F1B1958413AE593D181.crl (hash: RiW9qGQ9CFwKm4GNg59023cVQnxWuxs+hJmia0mHP70=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/1/165AE96D6A2E9A42B7FF7F1B1958413AE593D181.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/1/165AE96D6A2E9A42B7FF7F1B1958413AE593D181.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FlrpbWoumkK3_38bGVhBOuWT0YE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 23 Dec 2025 07:23:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:e9:77:68:3c:de:02:b5:1f:28:f3:25:43:1e:f1:c2:dc:d1:76:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=165ae96d6a2e9a42b7ff7f1b1958413ae593d181
        Validity
            Not Before: Dec 22 03:28:35 2025 GMT
            Not After : Dec 23 07:23:35 2025 GMT
        Subject: CN=763740D97F1FC8EBB97F5A7730679021DB10592C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ea:ba:0d:a0:dd:f9:dc:f3:8d:48:c1:a9:32:
                    b2:9e:25:15:ef:04:71:30:12:16:2c:98:f3:4c:39:
                    c3:0d:0e:45:ea:67:d9:a7:b9:02:2c:46:a3:fe:d2:
                    7e:a4:bb:75:a0:ee:63:96:cc:b2:ce:73:30:e1:7d:
                    43:b7:b3:9a:bd:94:5a:d1:f6:77:ae:3a:30:88:6d:
                    92:24:98:5b:df:35:1e:ab:7f:63:ee:a5:54:3a:0f:
                    a5:8b:2c:b9:79:a3:55:18:88:0d:75:23:cc:c5:86:
                    fe:f0:19:8f:0b:66:97:9f:f4:4b:f8:9f:c4:c8:0c:
                    68:a6:a2:29:25:d5:6f:44:30:eb:a0:e7:f5:0c:2f:
                    87:c6:ce:15:2c:a9:59:a7:91:65:e0:58:84:5d:52:
                    ae:f3:8d:7f:ef:87:75:5b:f4:cf:32:f6:df:18:77:
                    bd:fd:6e:67:82:71:87:f6:29:e4:56:05:c9:9d:14:
                    fa:0b:7e:3a:de:e5:22:35:45:9b:6d:14:db:b6:64:
                    8b:e5:09:94:56:f4:77:5e:4d:23:96:a8:b8:9d:90:
                    74:88:60:33:be:31:4e:b5:58:74:64:b9:3d:5b:b5:
                    61:b3:e7:b0:84:f6:2a:da:86:ed:d7:80:c4:8d:bb:
                    29:94:eb:c2:dd:63:97:6a:c6:6f:89:5b:83:15:08:
                    c3:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:37:40:D9:7F:1F:C8:EB:B9:7F:5A:77:30:67:90:21:DB:10:59:2C
            X509v3 Authority Key Identifier:
                keyid:16:5A:E9:6D:6A:2E:9A:42:B7:FF:7F:1B:19:58:41:3A:E5:93:D1:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/1/165AE96D6A2E9A42B7FF7F1B1958413AE593D181.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FlrpbWoumkK3_38bGVhBOuWT0YE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/1/165AE96D6A2E9A42B7FF7F1B1958413AE593D181.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:e3:f0:1c:88:fb:e4:3c:d6:96:9b:66:24:af:6f:89:98:35:
         97:00:9e:f8:4c:5b:d9:81:16:2f:7d:d8:5e:50:97:26:49:5a:
         b7:0c:6b:a5:41:8b:ee:8f:af:10:5e:69:1c:46:b8:9c:88:0e:
         be:c5:f1:31:13:1c:b9:0b:de:d4:77:59:00:4c:6c:80:43:25:
         1f:2f:53:ef:6a:6a:15:1d:77:8a:2c:fe:f5:44:c6:ac:ab:db:
         58:f3:db:b1:3d:4c:10:62:d1:4e:5c:8d:f5:c3:29:9f:03:0d:
         fc:27:fd:5c:40:9f:ef:1a:16:aa:c6:df:5f:bb:b7:f3:74:cf:
         52:20:63:b7:5a:bf:c9:9a:0a:74:6c:18:77:cc:bf:bd:4d:fc:
         5d:92:e4:10:b3:db:2c:93:d9:cb:da:3f:eb:fd:84:54:9a:57:
         d7:30:22:64:3a:e6:62:0a:cd:61:44:7e:be:3a:5f:97:4e:7e:
         4e:05:c4:e9:65:87:35:df:cd:5f:08:bd:21:d2:1a:dd:d3:9e:
         a0:1c:45:3f:f5:ba:9a:c8:00:70:1e:94:aa:f3:b8:b9:17:77:
         19:37:a8:a3:df:12:00:71:32:88:d8:8a:5d:32:46:a6:e9:6c:
         d0:a8:01:ba:b6:61:bc:0b:0d:3b:a2:4e:0f:3c:8e:9f:b5:98:
         d5:30:61:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 18:49:14 2025 by rpki-client