This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.mft
File:                     C2724A29EF989A4340933B8130B402DD4627A501.mft (raw, json)
Hash identifier:          W8Fy3Vg2ZHn/B0kzujGVBVEKIHD1RrmB1DGKWqamgVU=
Subject key identifier:   6D:C3:A1:4A:C5:04:66:92:23:12:A2:78:57:93:FD:B7:5F:2E:99:46
Authority key identifier: C2:72:4A:29:EF:98:9A:43:40:93:3B:81:30:B4:02:DD:46:27:A5:01
Certificate issuer:       /CN=C2724A29EF989A4340933B8130B402DD4627A501
Certificate serial:       2A98354A3C9FA7A0861260D34F1EAD1D7DA3343B
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/C2724A29EF989A4340933B8130B402DD4627A501.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.mft
Manifest number:          029A
Signing time:             Fri 12 Dec 2025 16:48:54 +0000
Manifest this update:     Fri 12 Dec 2025 16:43:54 +0000
Manifest next update:     Sat 13 Dec 2025 17:19:54 +0000
Files and hashes:         1: 326131313a663263303a666663333a3a2f34382d3438203d3e20313938383035.roa (hash: hqgaxXhgaM7AiSsPcNwqghRTi61TSIKXFax/zJU7ecI=)
                          2: C2724A29EF989A4340933B8130B402DD4627A501.crl (hash: zcajJaqbpBFLXheTWwDwRoQ0FSqPwTXkeOKaH7hDHuA=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/C2724A29EF989A4340933B8130B402DD4627A501.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Dec 2025 13:14:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:98:35:4a:3c:9f:a7:a0:86:12:60:d3:4f:1e:ad:1d:7d:a3:34:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2724A29EF989A4340933B8130B402DD4627A501
        Validity
            Not Before: Dec 12 16:43:54 2025 GMT
            Not After : Dec 13 17:19:54 2025 GMT
        Subject: CN=6DC3A14AC50466922312A2785793FDB75F2E9946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:2f:92:7a:23:43:60:79:35:69:a0:ad:39:bf:
                    05:14:35:6b:6d:27:26:ca:33:10:3e:45:98:6b:1c:
                    9a:ca:e1:ae:8a:0d:8f:7c:ae:bd:07:9d:f6:c2:89:
                    ff:27:83:f3:52:70:ca:99:1a:16:86:3a:ce:9d:c8:
                    02:d7:c9:47:ed:bf:1f:05:8b:8d:60:bc:cf:26:66:
                    ef:f6:69:c3:ef:1b:5c:86:72:3c:59:57:be:3b:0c:
                    22:34:86:f7:e1:f6:c4:d8:fb:76:93:37:61:e7:53:
                    fe:58:de:3f:bf:74:7d:a4:fb:14:91:4f:91:d1:29:
                    bc:25:84:50:2d:a4:ef:d0:6e:c7:db:6f:8e:ae:09:
                    43:ac:b2:8a:1f:0f:ab:a7:94:12:20:87:2c:18:e4:
                    b4:09:81:3b:7a:24:00:95:0a:2e:7a:9d:a5:3d:4d:
                    7b:b8:50:de:1c:ae:1a:a3:14:cb:80:69:38:02:95:
                    76:67:e2:72:10:a2:5e:cd:23:d7:a2:23:da:81:95:
                    9d:b1:fd:d9:08:8e:79:6c:89:25:5a:e6:c3:78:f8:
                    7b:44:cf:c2:6c:e3:dc:c7:0c:9f:c2:ca:24:3a:92:
                    9f:9d:0a:70:17:2e:d8:46:2f:8b:7b:28:f2:a8:2e:
                    c9:4f:a1:c0:b3:0a:9b:d1:7e:25:1e:63:b7:24:8a:
                    19:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:C3:A1:4A:C5:04:66:92:23:12:A2:78:57:93:FD:B7:5F:2E:99:46
            X509v3 Authority Key Identifier:
                keyid:C2:72:4A:29:EF:98:9A:43:40:93:3B:81:30:B4:02:DD:46:27:A5:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/C2724A29EF989A4340933B8130B402DD4627A501.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:8a:47:ac:d1:79:e7:97:f9:23:d8:3c:2c:a4:de:e4:b2:fb:
         62:7f:15:69:75:75:75:a7:28:c5:64:77:a6:7d:7c:18:04:d4:
         c3:41:53:69:c3:30:4c:ae:ff:df:99:27:71:72:c4:65:78:ef:
         6b:f6:8d:0a:32:63:c3:d0:b6:08:6a:b4:81:38:b6:3b:48:07:
         a4:2b:e8:31:1d:ff:89:c2:0a:79:a5:23:d7:0d:7a:29:90:85:
         53:35:ba:0b:8a:9c:d3:6f:25:ba:62:fe:e5:b1:ba:4d:27:13:
         ea:2e:5a:bc:7e:64:03:90:b6:5a:a7:82:16:af:4b:29:0d:34:
         5c:bc:f1:be:68:1e:ba:7b:9b:16:f2:2b:0c:1e:ce:a5:ef:1d:
         fe:17:79:0c:e8:a2:f3:83:c5:f0:ec:6d:92:2b:1e:92:a5:98:
         d9:b7:78:8d:ce:da:32:24:a8:16:8e:ed:b8:2d:9b:d3:42:78:
         b3:d5:74:92:f8:7f:14:0d:3d:f3:8f:20:18:0b:ae:18:0b:7d:
         a9:81:cd:ee:a5:26:7e:28:a0:e1:35:5d:26:1e:84:d8:40:e3:
         2a:9a:5d:9c:2b:dc:1c:f9:31:b2:65:6d:c8:8a:0c:d9:99:39:
         e1:0e:4a:43:34:54:06:09:05:a2:90:7e:98:84:ca:bb:3a:65:
         49:83:fc:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 22:47:15 2025 by rpki-client