This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft
File:                     0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft (raw, json)
Hash identifier:          xboaK4Cjm7L6lZjL/NMA8h7mGTVqNSGe01R0R+LDvYU=
Subject key identifier:   22:D1:A5:FC:35:CC:33:72:7A:D0:52:DD:6A:D9:5E:E7:56:BC:4A:FF
Authority key identifier: 06:23:BB:87:43:11:6D:86:B1:3B:9B:D9:E5:34:02:39:8B:7A:1E:E0
Certificate issuer:       /CN=0623bb8743116d86b13b9bd9e53402398b7a1ee0
Certificate serial:       3A8E8A9906F5708154BB5D6D6C50D0C1837A0F08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BiO7h0MRbYaxO5vZ5TQCOYt6HuA.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft
Manifest number:          02E4
Signing time:             Fri 06 Feb 2026 02:58:23 +0000
Manifest this update:     Fri 06 Feb 2026 02:53:20 +0000
Manifest next update:     Sat 07 Feb 2026 03:51:20 +0000
Files and hashes:         1: 0623BB8743116D86B13B9BD9E53402398B7A1EE0.crl (hash: IXgoS/pxDcxAJMXa6mkR8Xm+fPjaa6NlZ2y4a/AUaMs=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:8e:8a:99:06:f5:70:81:54:bb:5d:6d:6c:50:d0:c1:83:7a:0f:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0623bb8743116d86b13b9bd9e53402398b7a1ee0
        Validity
            Not Before: Feb  6 02:53:20 2026 GMT
            Not After : Feb  7 03:51:20 2026 GMT
        Subject: CN=22D1A5FC35CC33727AD052DD6AD95EE756BC4AFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f9:b4:37:3d:6a:bf:e5:43:da:d7:71:6a:98:
                    08:46:89:fe:92:55:b5:f7:fc:57:1b:51:dc:74:78:
                    d0:53:02:9c:b0:ed:85:38:a3:dc:7f:56:54:45:a0:
                    f7:b2:b2:1f:e1:c0:ab:8d:b4:48:4e:03:89:a7:8d:
                    0d:b7:bc:5d:51:02:97:3c:d9:d7:76:9a:07:5e:fe:
                    ff:64:2d:b6:0c:cc:c1:bd:6b:ba:45:e6:23:ff:a5:
                    54:b6:4b:91:ea:04:39:43:37:a2:2e:0f:5d:7a:64:
                    82:05:00:dc:2b:40:0d:10:e4:85:fc:b4:7b:ff:7f:
                    70:38:99:76:6f:e7:ab:4c:97:0d:cf:82:3d:e2:22:
                    a9:0a:00:ca:9e:94:e4:e6:22:e3:83:68:02:48:f3:
                    f5:86:d7:14:72:13:7f:98:c5:0f:7f:0f:8b:25:3e:
                    d6:38:db:23:e9:8d:90:8b:6d:64:4e:4f:88:59:63:
                    32:b7:10:14:fb:08:19:af:87:a2:36:90:75:d5:ae:
                    af:ea:61:44:aa:f8:e7:47:12:3b:0e:8c:40:b3:5c:
                    5a:85:c5:ea:ff:9f:a9:0f:79:e1:74:9c:a7:a3:95:
                    5d:af:8c:ae:4a:a2:66:f8:4a:85:da:9b:e7:ac:9e:
                    7f:45:fb:a2:e6:19:1c:0b:46:3b:a3:7b:7f:3d:15:
                    81:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:D1:A5:FC:35:CC:33:72:7A:D0:52:DD:6A:D9:5E:E7:56:BC:4A:FF
            X509v3 Authority Key Identifier:
                keyid:06:23:BB:87:43:11:6D:86:B1:3B:9B:D9:E5:34:02:39:8B:7A:1E:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiO7h0MRbYaxO5vZ5TQCOYt6HuA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:83:a7:1b:9c:a7:96:57:a1:07:9e:8e:ee:9c:ff:d2:ba:f8:
         c0:6b:50:36:78:4b:73:02:f7:5b:32:9e:d2:9d:17:e3:ce:75:
         5a:b9:b5:44:90:ef:b2:e7:23:05:d3:73:82:a3:f9:64:b6:09:
         7a:1d:b0:a5:1f:5e:7a:81:eb:7d:5f:f7:da:6b:c0:e6:c4:45:
         59:2f:4c:b1:6b:d7:6f:78:40:da:76:3b:45:dc:8c:cd:2f:be:
         ed:57:b1:d3:b9:e7:c0:f5:98:41:98:1a:0b:7b:8c:61:50:4c:
         2d:ec:51:32:16:a0:01:9f:a9:ed:48:f0:b5:11:e2:cf:42:33:
         40:63:7e:11:4e:24:f9:23:ab:07:a2:51:0e:c3:27:d3:37:ef:
         c9:1f:34:78:1b:94:fb:11:f8:fb:7f:a5:53:78:60:52:69:08:
         e8:6f:b3:ef:f2:0c:17:8b:90:23:ec:17:bc:77:f2:8c:2d:ac:
         43:cd:e5:50:6d:7c:4d:9a:5d:72:c9:71:9c:15:c3:3e:7b:4b:
         11:f3:c1:f9:ca:b9:68:8c:49:59:52:07:da:59:73:cb:17:19:
         fe:a4:ae:9b:e0:8b:b3:c6:6b:a1:51:73:b5:5c:fd:3c:37:66:
         05:4f:d3:c1:b2:4e:6e:1c:0c:3d:7a:7d:11:35:55:21:d5:ff:
         3a:1c:3f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----