This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft
File:                     B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft (raw, json)
Hash identifier:          tDNCMKF/G+34oFIEbjyf6GiPAiPGzTlxTo3XDUQXUHE=
Subject key identifier:   3C:5F:1F:90:40:6B:70:7A:9F:83:99:5E:D2:83:A1:0E:EF:45:57:58
Authority key identifier: B8:22:2A:84:5C:0C:DC:59:E8:D3:69:AE:23:E1:16:CD:DE:A0:87:77
Certificate issuer:       /CN=B8222A845C0CDC59E8D369AE23E116CDDEA08777
Certificate serial:       667417A158C9E02D7E71C87E5186FB81168DE009
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B8222A845C0CDC59E8D369AE23E116CDDEA08777.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft
Manifest number:          02DB
Signing time:             Tue 27 Jan 2026 09:39:17 +0000
Manifest this update:     Tue 27 Jan 2026 09:34:17 +0000
Manifest next update:     Wed 28 Jan 2026 12:12:17 +0000
Files and hashes:         1: 326131313a663263303a666663373a3a2f34382d3438203d3e20323136313431.roa (hash: MlubGqxKcu9/AdY4j4/cMK0ZlCKeMWkqNbhfRk1N6mE=)
                          2: B8222A845C0CDC59E8D369AE23E116CDDEA08777.crl (hash: OZnti64PsAZp5l1y01RSjbRQLEx739OOHyIwp63b1JI=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B8222A845C0CDC59E8D369AE23E116CDDEA08777.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Jan 2026 12:12:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:74:17:a1:58:c9:e0:2d:7e:71:c8:7e:51:86:fb:81:16:8d:e0:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8222A845C0CDC59E8D369AE23E116CDDEA08777
        Validity
            Not Before: Jan 27 09:34:17 2026 GMT
            Not After : Jan 28 12:12:17 2026 GMT
        Subject: CN=3C5F1F90406B707A9F83995ED283A10EEF455758
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:82:e1:56:18:f2:01:13:31:17:40:17:a5:50:
                    12:02:5a:7b:9f:5e:b8:60:34:b6:57:59:70:e5:d6:
                    fe:4b:ca:a7:ea:a2:ae:98:f8:28:c3:3d:6f:3c:03:
                    2a:f9:4b:d5:eb:d8:5b:42:69:7e:6e:c5:71:43:6e:
                    85:44:ad:2c:54:df:9b:40:59:1d:b4:45:bd:f2:36:
                    08:7e:c9:23:e7:a9:c7:15:5c:3f:0d:9b:8f:58:07:
                    15:62:62:95:70:e2:fe:f6:02:db:ff:f1:f6:6d:17:
                    83:7d:ee:7c:74:8d:fe:cd:43:2c:51:3d:04:6a:e0:
                    6b:47:98:aa:86:9a:ae:2a:9d:1e:df:70:98:e9:d8:
                    8b:a7:8e:a8:bf:e4:f4:5e:14:d1:bb:19:d3:52:cf:
                    5d:94:a8:c7:c1:86:33:26:9e:f4:da:1f:b6:dc:41:
                    ca:8f:65:d1:43:85:a9:f1:0b:84:9c:6a:b2:55:8e:
                    fe:6c:e7:94:35:d5:ce:49:a0:6a:f0:ba:27:63:be:
                    66:99:09:98:31:13:04:d5:6c:f9:8e:c0:8d:99:94:
                    1c:a1:a0:6e:1c:19:4c:26:29:bb:a8:69:ab:4f:4b:
                    3d:12:79:9f:93:bc:74:03:de:6b:02:f0:94:a0:15:
                    df:6c:c1:70:05:65:6c:4c:58:6d:21:7b:e6:56:ff:
                    d5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:5F:1F:90:40:6B:70:7A:9F:83:99:5E:D2:83:A1:0E:EF:45:57:58
            X509v3 Authority Key Identifier:
                keyid:B8:22:2A:84:5C:0C:DC:59:E8:D3:69:AE:23:E1:16:CD:DE:A0:87:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B8222A845C0CDC59E8D369AE23E116CDDEA08777.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:5b:42:3e:94:c8:30:02:1e:83:37:66:96:b6:31:3d:7c:93:
         c8:49:e3:02:b1:e0:e7:b8:54:f8:bb:ec:6b:96:65:b5:d5:33:
         21:f0:fc:e4:fc:fa:e9:fc:ec:a0:bd:37:ad:db:00:ba:ac:78:
         0d:9b:44:f9:e3:b6:c4:8b:33:17:67:e5:b2:e8:9b:3e:3d:22:
         ac:06:d8:1d:11:3e:b2:f1:ea:1a:15:c6:64:c5:be:24:b1:c1:
         80:f6:c9:7f:ed:42:7e:9e:c6:3e:35:6b:52:e2:4c:57:0d:15:
         74:c3:6d:d5:bc:b5:c9:fc:7a:eb:53:91:c3:7a:90:4e:bd:ed:
         1b:f1:e6:a6:36:2e:2a:5a:25:63:54:49:19:ff:a2:da:1f:72:
         76:0d:d8:67:a2:08:8e:ae:7b:e8:c4:83:13:e5:0c:5d:4b:26:
         63:b5:39:69:de:0a:8f:9e:f6:15:a1:03:1e:d5:6c:fc:5f:1c:
         b8:5e:cf:5a:36:3b:ce:a6:e8:7d:13:e3:70:f8:18:a9:52:cd:
         8f:f5:2a:6c:70:04:d3:6d:11:a6:8a:df:00:6b:4c:76:c2:2a:
         55:6f:95:d8:39:dd:d0:0c:2c:e0:aa:79:68:f0:41:5f:b5:31:
         6f:53:36:f0:63:e7:5e:6e:77:5c:d3:f8:fe:00:4a:a4:76:51:
         59:11:62:96
-----BEGIN CERTIFICATE-----
MIIFbjCCBFagAwIBAgIUZnQXoVjJ4C1+cch+UYb7gRaN4AkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjgyMjJBODQ1QzBDREM1OUU4RDM2OUFFMjNFMTE2Q0RE
RUEwODc3NzAeFw0yNjAxMjcwOTM0MTdaFw0yNjAxMjgxMjEyMTdaMDMxMTAvBgNV
BAMTKDNDNUYxRjkwNDA2QjcwN0E5RjgzOTk1RUQyODNBMTBFRUY0NTU3NTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbguFWGPIBEzEXQBelUBICWnuf
XrhgNLZXWXDl1v5Lyqfqoq6Y+CjDPW88Ayr5S9Xr2FtCaX5uxXFDboVErSxU35tA
WR20Rb3yNgh+ySPnqccVXD8Nm49YBxViYpVw4v72Atv/8fZtF4N97nx0jf7NQyxR
PQRq4GtHmKqGmq4qnR7fcJjp2Iunjqi/5PReFNG7GdNSz12UqMfBhjMmnvTaH7bc
QcqPZdFDhanxC4ScarJVjv5s55Q11c5JoGrwuidjvmaZCZgxEwTVbPmOwI2ZlByh
oG4cGUwmKbuoaatPSz0SeZ+TvHQD3msC8JSgFd9swXAFZWxMWG0he+ZW/9XlAgMB
AAGjggJ4MIICdDAdBgNVHQ4EFgQUPF8fkEBrcHqfg5le0oOhDu9FV1gwHwYDVR0j
BBgwFoAUuCIqhFwM3Fno02muI+EWzd6gh3cwDgYDVR0PAQH/BAQDAgeAMIGPBgNV
HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv
cmVwby9ycGtpX2NhXzA5ODBlMjYyZjA4MTQ5MDk5OWRkMGQ1ZTIyOWU5Y2ZhLzAv
QjgyMjJBODQ1QzBDREM1OUU4RDM2OUFFMjNFMTE2Q0RERUEwODc3Ny5jcmwwgZ4G
CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz
LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh
MC1mMGQwMmMwM2EyYzYvNy9CODIyMkE4NDVDMENEQzU5RThEMzY5QUUyM0UxMTZD
RERFQTA4Nzc3LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty
c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzA5ODBl
MjYyZjA4MTQ5MDk5OWRkMGQ1ZTIyOWU5Y2ZhLzAvQjgyMjJBODQ1QzBDREM1OUU4
RDM2OUFFMjNFMTE2Q0RERUEwODc3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF
BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGNbQj6UyDACHoM3Zpa2
MT18k8hJ4wKx4Oe4VPi77GuWZbXVMyHw/OT8+un87KC9N63bALqseA2bRPnjtsSL
Mxdn5bLomz49IqwG2B0RPrLx6hoVxmTFviSxwYD2yX/tQn6exj41a1LiTFcNFXTD
bdW8tcn8eutTkcN6kE697Rvx5qY2LipaJWNUSRn/otofcnYN2GeiCI6ue+jEgxPl
DF1LJmO1OWneCo+e9hWhAx7VbPxfHLhez1o2O86m6H0T43D4GKlSzY/1KmxwBNNt
EaaK3wBrTHbCKlVvldg53dAMLOCqeWjwQV+1MW9TNvBj515ud1zT+P4ASqR2UVkR
YpY=
-----END CERTIFICATE-----
Generated at Wed Jan 28 00:08:52 2026 by rpki-client