This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft
File:                     2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft (raw, json)
Hash identifier:          s5LsiwwEp7E9RMXV7R+8qTHtLF9Becf57RQCz1lx134=
Subject key identifier:   77:69:70:C2:32:E0:C3:C4:BA:5A:58:3C:AC:67:CF:9C:F6:88:50:B0
Authority key identifier: 2B:3B:97:33:4D:A0:69:78:18:5D:AC:76:A2:F3:EA:35:85:E8:23:1E
Certificate issuer:       /CN=2B3B97334DA06978185DAC76A2F3EA3585E8231E
Certificate serial:       601042A2ECD0F76A4E70A0CE60D282CF2E2BB2A0
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/2B3B97334DA06978185DAC76A2F3EA3585E8231E.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft
Manifest number:          2C
Signing time:             Tue 16 Dec 2025 16:53:37 +0000
Manifest this update:     Tue 16 Dec 2025 16:48:36 +0000
Manifest next update:     Wed 17 Dec 2025 17:26:36 +0000
Files and hashes:         1: 326131313a663263303a666665303a3a2f34382d3438203d3e20323134373439.roa (hash: 1GvfKtWMgom1LeK1xMf1awTIi3U4xQIJrbQco2SMjvs=)
                          2: 2B3B97334DA06978185DAC76A2F3EA3585E8231E.crl (hash: ve4mUXi7GsCSfnKfrpRX74ryCUAqcoHbJ70RsBlAHjk=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/2B3B97334DA06978185DAC76A2F3EA3585E8231E.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Dec 2025 05:29:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:10:42:a2:ec:d0:f7:6a:4e:70:a0:ce:60:d2:82:cf:2e:2b:b2:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B3B97334DA06978185DAC76A2F3EA3585E8231E
        Validity
            Not Before: Dec 16 16:48:36 2025 GMT
            Not After : Dec 17 17:26:36 2025 GMT
        Subject: CN=776970C232E0C3C4BA5A583CAC67CF9CF68850B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:df:d4:f7:04:bd:f2:c3:33:1a:0b:a8:ae:28:
                    ed:82:86:9d:68:f3:31:83:51:8b:05:0f:1e:c9:62:
                    fc:d6:c8:24:3a:d2:35:36:89:0b:0d:ce:e2:8c:20:
                    4f:e9:bc:72:46:45:a6:27:a3:28:e0:2f:0c:c4:25:
                    d2:68:80:dd:a7:71:c9:d5:be:df:52:3e:28:fb:54:
                    a6:ce:ed:d7:3d:1b:57:47:2e:47:44:fc:28:7e:4d:
                    22:5e:6e:ba:2c:74:24:86:bc:c1:96:6b:ef:37:b2:
                    74:8c:c6:0b:41:ec:4a:14:90:1b:82:c2:c6:ee:0f:
                    8d:42:68:f3:8d:7e:93:f5:e6:5a:d1:3f:68:2e:80:
                    ca:9f:ce:c5:35:c0:39:3a:35:e1:a8:ae:75:57:d6:
                    14:c9:7f:36:be:11:cb:30:3d:fd:18:a4:ff:46:2a:
                    ae:8a:b0:ab:c0:a2:8d:a6:d2:7b:cb:46:22:c6:9b:
                    70:7e:c9:03:46:b1:ea:92:f8:7e:8d:78:9b:55:dd:
                    4c:72:d8:89:19:74:f3:8a:ee:51:36:3b:c9:c8:84:
                    a2:44:63:18:85:e5:a1:e9:3c:c1:ea:e3:8f:78:02:
                    84:3e:09:8d:4e:ad:8d:0c:a4:6f:81:fe:21:33:80:
                    65:ec:50:40:86:19:1b:16:e7:b4:74:ad:78:2a:fa:
                    5c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:69:70:C2:32:E0:C3:C4:BA:5A:58:3C:AC:67:CF:9C:F6:88:50:B0
            X509v3 Authority Key Identifier:
                keyid:2B:3B:97:33:4D:A0:69:78:18:5D:AC:76:A2:F3:EA:35:85:E8:23:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/2B3B97334DA06978185DAC76A2F3EA3585E8231E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:28:a6:79:6d:f9:bc:6a:57:b6:32:af:13:d6:fc:64:6d:c8:
         61:83:b9:ab:3d:a3:7f:8d:4b:95:e0:c8:22:cb:11:7f:3c:87:
         80:5c:37:49:b6:ea:43:ee:fa:40:aa:1a:0a:8c:61:dc:3a:0f:
         3c:15:e8:f8:10:b3:b1:51:fb:b2:24:78:77:6e:e9:1b:2f:56:
         72:f9:fd:27:e6:fd:22:2b:22:83:8a:31:1c:bb:bf:42:c4:7b:
         9a:2a:f1:a0:d2:1a:1e:d5:76:14:b9:a5:c4:91:e2:74:41:35:
         1e:fe:71:9a:be:af:87:03:50:98:ba:3b:a5:c8:24:e8:26:bc:
         72:d4:98:e1:00:c6:7e:d9:3b:e0:49:53:f7:ca:1b:62:5c:ae:
         26:ff:17:e6:d9:25:6a:97:03:86:0b:28:a3:7b:01:d6:d2:4f:
         5f:55:f3:bc:b7:0d:a6:65:ea:16:c9:fe:87:e6:63:4c:3b:0f:
         66:71:53:f2:4e:8f:e3:18:ca:da:ac:22:7b:a9:bb:90:1c:3a:
         31:b8:c8:3a:88:c9:11:ce:41:eb:9c:47:2d:31:86:ff:7f:1e:
         c8:9e:73:74:65:f8:e9:c5:5b:cb:b4:2c:ec:59:c7:65:64:19:
         96:26:6c:61:32:cc:40:c8:5a:2b:ce:83:d3:ec:1b:49:79:5c:
         28:6c:c1:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 21:57:05 2025 by rpki-client