This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.mft
File:                     C2724A29EF989A4340933B8130B402DD4627A501.mft (raw, json)
Hash identifier:          e1q36c9W5R/tbDJOeOrNzeOYLfgiI6Ifc1c6Eqag/FE=
Subject key identifier:   CC:C3:EF:1B:8F:63:4D:8B:A8:4A:77:21:0A:77:E9:4D:C7:5A:F5:60
Authority key identifier: C2:72:4A:29:EF:98:9A:43:40:93:3B:81:30:B4:02:DD:46:27:A5:01
Certificate issuer:       /CN=C2724A29EF989A4340933B8130B402DD4627A501
Certificate serial:       3F2DEAA0E651B1A0CBC31A9E469513A41945AD42
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/C2724A29EF989A4340933B8130B402DD4627A501.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.mft
Manifest number:          02D5
Signing time:             Tue 27 Jan 2026 05:51:18 +0000
Manifest this update:     Tue 27 Jan 2026 05:46:18 +0000
Manifest next update:     Wed 28 Jan 2026 06:59:18 +0000
Files and hashes:         1: C2724A29EF989A4340933B8130B402DD4627A501.crl (hash: 2vea8bA8WWF1m0QkLW3X+N5fyv5dznwciA0cRwbbcKE=)
                          2: 326131313a663263303a666663333a3a2f34382d3438203d3e20313938383035.roa (hash: hqgaxXhgaM7AiSsPcNwqghRTi61TSIKXFax/zJU7ecI=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/C2724A29EF989A4340933B8130B402DD4627A501.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Jan 2026 06:59:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:2d:ea:a0:e6:51:b1:a0:cb:c3:1a:9e:46:95:13:a4:19:45:ad:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2724A29EF989A4340933B8130B402DD4627A501
        Validity
            Not Before: Jan 27 05:46:18 2026 GMT
            Not After : Jan 28 06:59:18 2026 GMT
        Subject: CN=CCC3EF1B8F634D8BA84A77210A77E94DC75AF560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:06:05:a8:e7:48:6f:20:a9:a2:41:98:16:6d:
                    e9:61:e8:82:c9:4e:29:0d:4a:c1:f4:c9:55:a9:f9:
                    60:b0:be:dd:5c:c0:55:0b:45:aa:2a:78:47:7c:0a:
                    fe:d5:b1:02:ff:ec:07:23:77:64:b0:82:15:8d:88:
                    63:b5:98:cb:32:aa:5a:f9:3e:7d:a0:34:54:cf:5e:
                    4c:a7:85:63:14:e8:a1:f9:cd:33:7a:15:f2:6f:6d:
                    c7:85:b1:48:24:9c:2c:3d:50:c5:18:64:50:11:70:
                    de:58:e4:28:96:f9:8c:f7:d9:c1:0d:8d:56:92:63:
                    80:8e:be:0e:0f:37:93:a6:77:1b:3d:dc:b1:c8:5d:
                    18:07:ba:46:8d:22:4d:77:e9:ad:ba:cc:6f:18:88:
                    c1:5e:10:a4:86:33:76:94:b6:77:00:3e:f1:b7:17:
                    4b:7f:8c:c7:86:39:fc:3a:e8:cf:df:ed:97:01:ec:
                    24:ca:01:d9:d9:f0:f1:f0:ad:9d:6c:1c:16:fb:71:
                    55:d9:d6:e1:52:4b:f6:fa:a0:77:13:0b:af:df:20:
                    3b:2c:9a:63:cb:97:9c:d0:31:5c:ca:81:8a:45:9a:
                    f5:88:a1:69:7a:fa:45:c9:1e:8f:08:83:91:ce:10:
                    30:a6:0e:5b:e2:3b:99:a1:74:79:f5:3a:9c:85:d7:
                    1c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:C3:EF:1B:8F:63:4D:8B:A8:4A:77:21:0A:77:E9:4D:C7:5A:F5:60
            X509v3 Authority Key Identifier:
                keyid:C2:72:4A:29:EF:98:9A:43:40:93:3B:81:30:B4:02:DD:46:27:A5:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/C2724A29EF989A4340933B8130B402DD4627A501.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:34:fc:3b:ec:99:ed:f1:77:98:44:4c:4b:36:c6:7d:4a:6b:
         d0:be:0f:47:39:9d:ec:13:20:00:69:5b:1d:49:f7:c0:0b:e2:
         2c:fb:28:dc:79:e7:41:d6:d3:01:30:4a:0f:9d:65:c6:95:40:
         ac:45:8e:fb:c2:40:e6:1e:fb:61:de:83:0a:ba:43:06:7f:d6:
         0c:e4:b8:0b:26:85:ec:57:ab:af:08:cb:ec:52:5b:42:e5:bd:
         65:ef:7d:a1:e4:57:10:2a:ad:1a:5b:97:ff:3e:c9:b1:39:4d:
         12:ea:9c:bb:c5:ab:24:bb:a1:38:2d:15:db:1a:b9:ed:67:9c:
         17:4a:85:6a:e2:57:b8:85:f7:be:16:f3:98:70:ad:88:a4:38:
         3b:f3:03:1e:82:d4:a1:f3:46:ba:b1:45:19:25:73:e7:22:9a:
         71:a3:cd:17:b2:0b:39:73:76:1a:83:b5:77:02:2c:3b:54:9c:
         7d:ea:ee:54:e6:95:93:5a:55:ba:00:74:6d:43:8b:e2:44:3d:
         09:9f:a9:2b:01:8a:cd:31:4c:0c:3c:e8:6e:6a:79:18:67:b0:
         e2:b5:09:3c:44:ad:3c:fc:a2:db:ce:67:c1:db:14:a2:8f:bc:
         4b:5a:83:ec:61:08:3f:2f:0b:23:58:c3:e3:e5:b4:e7:a4:db:
         0a:72:ca:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 28 00:08:24 2026 by rpki-client