This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft
File:                     B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft (raw, json)
Hash identifier:          ZGnYLMuLsIZHTvP6dPtAe3OQo6tNZHingRowg7CxL1k=
Subject key identifier:   22:50:F5:7B:7E:34:D2:C7:9C:9E:AB:7C:6E:E5:8E:20:DA:DE:61:A7
Authority key identifier: B8:22:2A:84:5C:0C:DC:59:E8:D3:69:AE:23:E1:16:CD:DE:A0:87:77
Certificate issuer:       /CN=B8222A845C0CDC59E8D369AE23E116CDDEA08777
Certificate serial:       06C682B519A4E70BDE7F5022032E7356A8C8BA4B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B8222A845C0CDC59E8D369AE23E116CDDEA08777.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft
Manifest number:          029F
Signing time:             Sat 13 Dec 2025 02:34:50 +0000
Manifest this update:     Sat 13 Dec 2025 02:29:50 +0000
Manifest next update:     Sun 14 Dec 2025 05:01:50 +0000
Files and hashes:         1: B8222A845C0CDC59E8D369AE23E116CDDEA08777.crl (hash: TaUW5HQ1gVVf0n3lZX06kfbMoDyN93XDpWLN8iYo5hg=)
                          2: 326131313a663263303a666663373a3a2f34382d3438203d3e20323136313431.roa (hash: MlubGqxKcu9/AdY4j4/cMK0ZlCKeMWkqNbhfRk1N6mE=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B8222A845C0CDC59E8D369AE23E116CDDEA08777.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Dec 2025 05:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:c6:82:b5:19:a4:e7:0b:de:7f:50:22:03:2e:73:56:a8:c8:ba:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8222A845C0CDC59E8D369AE23E116CDDEA08777
        Validity
            Not Before: Dec 13 02:29:50 2025 GMT
            Not After : Dec 14 05:01:50 2025 GMT
        Subject: CN=2250F57B7E34D2C79C9EAB7C6EE58E20DADE61A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:24:3b:f6:42:95:b9:08:2f:18:08:3f:1c:34:
                    5a:0c:39:0f:4f:7c:7b:e5:d8:d2:68:99:77:6a:7f:
                    5e:d0:3c:57:8c:72:16:18:02:dd:e4:81:d6:e6:e1:
                    3e:64:06:74:bd:4d:ec:b8:ae:83:d9:cf:7e:84:a2:
                    50:39:07:a8:82:01:a6:6e:43:4c:50:32:70:93:3c:
                    ef:bf:51:27:ee:67:6e:f4:09:67:b6:6d:00:c5:bf:
                    90:9c:1c:4a:4d:0b:5c:2b:75:74:83:ee:14:9c:5d:
                    08:48:ed:ae:e2:27:c6:f1:ab:8b:78:eb:5d:c2:cd:
                    f3:28:16:62:23:da:47:a1:34:7e:ff:b9:b6:b2:c4:
                    a2:c7:f9:8f:ef:e5:64:38:16:f9:22:98:40:8b:aa:
                    18:d2:dc:32:6e:f7:de:58:76:b8:05:ba:7b:0d:fd:
                    a4:85:dc:3f:02:1a:53:d5:19:67:43:f1:ed:ee:79:
                    00:c1:a9:4d:f4:4c:d5:76:c2:4c:34:8f:2f:69:7b:
                    33:55:1b:fa:d9:4d:70:9e:bc:d4:6a:4f:20:cb:0e:
                    49:20:f3:27:c7:35:6e:53:39:a7:ae:ea:c1:87:78:
                    b6:09:ec:93:ac:6b:63:31:73:cb:e3:01:34:35:9f:
                    b4:6a:5a:e1:76:38:aa:f1:52:13:7a:aa:c2:12:09:
                    a3:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:50:F5:7B:7E:34:D2:C7:9C:9E:AB:7C:6E:E5:8E:20:DA:DE:61:A7
            X509v3 Authority Key Identifier:
                keyid:B8:22:2A:84:5C:0C:DC:59:E8:D3:69:AE:23:E1:16:CD:DE:A0:87:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B8222A845C0CDC59E8D369AE23E116CDDEA08777.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:2a:d1:34:b0:83:59:b1:c3:1f:99:d4:e7:b0:56:d4:60:56:
         bb:cb:25:ac:1b:f9:42:97:f0:0f:e1:6a:76:54:d7:eb:22:a9:
         34:a5:15:4d:99:c6:b6:26:e7:a6:f0:67:81:a7:b1:5a:f9:ec:
         fe:c6:e9:2e:a4:01:3f:3d:8b:c0:59:bb:5a:fd:2b:3c:5e:c4:
         72:aa:17:aa:27:be:85:51:52:c4:99:45:63:34:02:e5:3f:d9:
         6d:7f:b2:11:17:5f:df:5c:ef:9f:8f:4a:05:de:50:88:f0:a6:
         97:bf:2d:88:54:1f:ad:5c:fa:0c:a4:2e:28:f6:d6:e5:4a:3c:
         48:c2:cd:74:9b:f3:21:ec:01:02:0c:ac:c9:4c:f4:99:e8:7b:
         c7:c2:fa:03:bd:23:e4:b3:54:cc:2f:a6:04:9f:6c:0b:47:4a:
         52:b9:5f:e5:a6:88:a7:9c:4a:5e:e8:df:bc:4a:3f:45:ca:bb:
         49:46:dd:4e:44:0f:2a:54:3f:7e:e5:c4:d2:2f:d4:92:9c:62:
         64:e2:59:a7:2f:24:ab:1c:58:b5:b9:35:47:38:87:86:d7:c5:
         3f:a2:56:7d:29:56:03:75:bf:83:62:20:b1:46:88:40:2f:5a:
         54:fc:32:8f:b1:65:b4:fe:98:2e:64:23:8a:78:bf:4a:9e:e8:
         72:ce:ca:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 13 18:09:00 2025 by rpki-client