This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft
File:                     89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft (raw, json)
Hash identifier:          hoEuJLE9obtdDkYIdPvn0plS/c16YK47N//4j6JKRYM=
Subject key identifier:   F2:70:9E:9D:C1:2F:20:2E:A6:31:2B:E7:40:C7:3C:9E:FA:7C:F1:28
Authority key identifier: 89:AA:97:7A:3B:C5:B6:B7:AC:46:29:55:D7:5A:2A:30:28:7E:25:77
Certificate issuer:       /CN=89aa977a3bc5b6b7ac462955d75a2a30287e2577
Certificate serial:       5BA9C6169149C4850B42C305E9165B739FDB83B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iaqXejvFtresRilV11oqMCh-JXc.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft
Manifest number:          02E7
Signing time:             Thu 05 Feb 2026 23:09:08 +0000
Manifest this update:     Thu 05 Feb 2026 23:04:06 +0000
Manifest next update:     Sat 07 Feb 2026 02:29:06 +0000
Files and hashes:         1: 89AA977A3BC5B6B7AC462955D75A2A30287E2577.crl (hash: 14c8VDuUvx4fB4GMsvkGDuRpE/TgQJRgOjkjkRc4HvQ=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:a9:c6:16:91:49:c4:85:0b:42:c3:05:e9:16:5b:73:9f:db:83:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89aa977a3bc5b6b7ac462955d75a2a30287e2577
        Validity
            Not Before: Feb  5 23:04:06 2026 GMT
            Not After : Feb  7 02:29:06 2026 GMT
        Subject: CN=F2709E9DC12F202EA6312BE740C73C9EFA7CF128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f0:93:20:6f:1e:21:aa:e8:63:aa:d0:47:d3:
                    6f:69:e8:fc:79:1c:da:58:11:cc:2d:2f:fc:ab:8a:
                    a2:45:ee:a8:98:a7:8c:b7:59:db:79:ad:1f:db:d4:
                    a2:b6:7e:62:b4:7c:d4:72:57:98:38:59:9b:16:24:
                    1f:75:de:97:b3:6b:25:d9:87:1f:17:66:36:f3:19:
                    43:9f:7d:cf:5f:fa:44:0b:ce:93:d5:81:4e:a1:2f:
                    24:c0:17:ab:79:43:e4:f1:62:6d:b1:4f:d5:52:26:
                    54:79:b0:58:a5:dc:19:3d:fb:ac:68:60:28:d9:65:
                    7e:9f:5a:46:e2:1f:d2:c4:e6:f3:9b:46:fa:f2:39:
                    0b:2d:00:48:34:5d:a8:c7:17:b9:a7:c7:01:ae:61:
                    be:98:e9:55:d5:9d:6d:45:30:04:c6:83:4b:30:80:
                    1b:c9:60:f8:9b:bc:f3:cc:d4:af:42:9f:2f:0f:a7:
                    a1:d6:ce:d8:7f:69:ba:47:71:a6:75:f4:af:73:03:
                    6d:c9:64:68:c1:1a:4b:a6:af:a2:00:02:a0:c7:13:
                    25:95:ae:a6:09:74:88:02:50:df:98:43:5e:e8:d0:
                    a6:b2:cc:1b:e0:a3:5a:06:b6:48:7a:47:9d:51:df:
                    61:8b:a8:52:b4:7c:06:fb:4a:03:2a:61:ad:d2:7e:
                    58:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:70:9E:9D:C1:2F:20:2E:A6:31:2B:E7:40:C7:3C:9E:FA:7C:F1:28
            X509v3 Authority Key Identifier:
                keyid:89:AA:97:7A:3B:C5:B6:B7:AC:46:29:55:D7:5A:2A:30:28:7E:25:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iaqXejvFtresRilV11oqMCh-JXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:9a:3e:c3:ff:ca:07:b7:4f:9b:f1:4b:10:da:67:40:48:5c:
         24:61:6e:31:fd:7a:3c:18:d0:aa:b7:59:87:49:9b:c9:b7:8e:
         2d:89:9f:e2:9b:86:dc:65:de:36:88:63:41:4c:ec:5f:35:b4:
         2f:80:cb:90:e4:ac:ca:7b:1c:ac:fc:e7:d1:ba:7b:ae:13:b8:
         f7:c8:51:3a:0b:ff:3f:80:4d:1f:35:39:b9:80:39:b7:22:33:
         e9:97:f8:44:ca:aa:74:8d:1a:61:73:9d:76:a2:2b:08:d2:6f:
         08:12:f3:b7:5e:1e:f8:c8:71:16:ce:d1:05:b1:cd:da:cb:b2:
         b8:34:6b:e3:c7:27:84:4b:11:85:c2:30:70:17:95:c9:26:76:
         e0:ba:a7:c3:66:2c:4e:62:2d:21:84:6f:7f:ef:48:b1:aa:0a:
         d7:e0:4c:f4:8b:f8:62:c3:04:18:0c:09:07:00:1a:71:ac:34:
         5a:53:1c:09:dc:40:3e:6f:46:37:63:ad:e2:56:8a:a9:b0:36:
         fd:21:47:78:9d:f9:df:f9:9e:35:18:91:aa:6d:80:82:d0:db:
         9b:34:1d:4e:7d:78:92:3f:ab:da:32:fa:0c:e9:0a:0b:3c:cd:
         fc:c7:d9:04:9b:fe:da:e1:1a:e0:4d:1e:d8:cf:31:84:9f:b1:
         92:24:3e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----