This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.mft
File:                     44C4C913D58F5EF847996241E969B60A1E3F1389.mft (raw, json)
Hash identifier:          lgRbNgN8z6x3OnhQ9slvqpFytkReNURLQVEgvOeqvXc=
Subject key identifier:   31:91:7D:2C:57:BA:C0:4F:2C:D4:8C:EB:A2:73:D7:B1:90:D0:0C:10
Authority key identifier: 44:C4:C9:13:D5:8F:5E:F8:47:99:62:41:E9:69:B6:0A:1E:3F:13:89
Certificate issuer:       /CN=44C4C913D58F5EF847996241E969B60A1E3F1389
Certificate serial:       742BEE893D003DAA9FE8FAB3CE75ECB81F85CE2F
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/44C4C913D58F5EF847996241E969B60A1E3F1389.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.mft
Manifest number:          02DD
Signing time:             Tue 27 Jan 2026 05:41:10 +0000
Manifest this update:     Tue 27 Jan 2026 05:36:10 +0000
Manifest next update:     Wed 28 Jan 2026 06:56:10 +0000
Files and hashes:         1: 44C4C913D58F5EF847996241E969B60A1E3F1389.crl (hash: uquTeTAbbdrX3BfBjehpT1KHL+xA/+VG1h4+2JQ4tcw=)
                          2: 326131313a663263303a666530303a3a2f34302d3430203d3e20323130353631.roa (hash: ZFgFa3mIQWS+C3ZANFakUZVad7gh+grxNMovjG/43xs=)
                          3: E42882C5C372E03CCD5EA87BB1B6FFEF1FF1BFF5.cer (hash: ZgkUmwBAN+BgyVFg/7xrYnbw3kS/Mk8fXnbXdBLqa28=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/44C4C913D58F5EF847996241E969B60A1E3F1389.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Jan 2026 06:56:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:2b:ee:89:3d:00:3d:aa:9f:e8:fa:b3:ce:75:ec:b8:1f:85:ce:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44C4C913D58F5EF847996241E969B60A1E3F1389
        Validity
            Not Before: Jan 27 05:36:10 2026 GMT
            Not After : Jan 28 06:56:10 2026 GMT
        Subject: CN=31917D2C57BAC04F2CD48CEBA273D7B190D00C10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d8:39:92:50:1d:8b:62:66:f3:df:0e:b8:54:
                    66:5b:f7:02:d7:41:84:8b:73:89:4f:b7:9b:da:22:
                    fe:15:d8:86:33:cf:cd:4c:35:2b:4f:64:45:1a:31:
                    ec:1d:f3:c6:d3:2e:42:fe:b7:4b:ad:62:e9:95:28:
                    66:fd:88:e8:f5:b2:01:d7:53:fb:79:c1:ef:15:99:
                    6a:fd:89:8b:57:93:27:5d:df:a5:6b:cb:72:a1:3f:
                    7f:02:18:bd:ce:b4:b5:01:79:9f:0d:70:f7:dd:b2:
                    b8:77:44:46:ca:ee:55:0d:2b:a8:b6:a7:ce:d3:94:
                    f7:2b:1a:e4:8a:58:da:51:eb:b3:f0:21:f0:5b:90:
                    8b:3e:34:d6:5d:a5:11:11:66:9d:c7:f5:f7:56:c3:
                    48:6b:51:70:42:10:39:f9:9f:a6:b6:a7:ee:49:d4:
                    63:e8:65:f7:11:08:ca:9f:d7:b7:d5:a9:74:54:9b:
                    a3:cd:cc:5b:5d:fa:f6:eb:9a:b9:21:92:9e:10:6b:
                    70:df:86:38:cd:ec:6f:0f:6c:06:9a:0d:62:af:c0:
                    7d:10:49:cd:e2:60:02:51:12:db:14:a2:92:42:f8:
                    f8:1f:65:7f:5e:2c:e5:df:ef:d6:94:37:1b:2c:97:
                    27:6a:0c:9e:3f:25:df:80:83:d6:7e:de:d4:70:0f:
                    6d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:91:7D:2C:57:BA:C0:4F:2C:D4:8C:EB:A2:73:D7:B1:90:D0:0C:10
            X509v3 Authority Key Identifier:
                keyid:44:C4:C9:13:D5:8F:5E:F8:47:99:62:41:E9:69:B6:0A:1E:3F:13:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/44C4C913D58F5EF847996241E969B60A1E3F1389.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:af:c7:29:30:24:e9:73:85:36:b1:9b:cb:7b:c5:6a:0d:df:
         3c:5d:0b:f7:e8:76:e4:be:4e:64:ce:7b:81:f3:6a:c8:2d:ad:
         34:a9:12:ca:8e:95:56:63:0a:23:49:09:a8:e0:37:e9:94:50:
         8f:39:8a:67:70:30:f7:20:1c:f7:fc:16:26:4b:7c:a0:c3:46:
         48:08:91:64:43:ef:76:42:da:04:b2:0e:93:4c:51:3a:b1:ea:
         e2:16:ab:be:08:05:4e:4f:a0:4d:c9:4d:64:b9:16:b2:0a:3d:
         fc:a4:82:d7:48:22:61:53:34:23:42:31:d1:16:63:76:77:b0:
         22:70:b7:27:46:2e:75:2f:4d:ff:f8:31:ed:75:fa:18:b4:62:
         60:00:7e:44:63:09:7a:b0:23:dd:d2:72:ed:44:c5:d3:e7:6b:
         93:db:98:bf:0f:f0:1c:d8:41:93:79:ac:d3:0d:69:55:d3:48:
         c7:70:44:57:8e:7b:4d:40:62:1b:18:73:7e:01:c4:6b:e4:d7:
         7c:2e:00:54:65:48:a7:eb:04:49:76:48:69:5a:67:bd:fe:bd:
         4e:a1:27:01:1c:7b:83:df:8e:ec:2e:51:2c:d8:5c:d0:b2:e6:
         3f:c8:5d:c0:36:4b:48:8b:a5:f7:ea:3a:ad:51:a7:77:0b:3a:
         81:d6:40:39
-----BEGIN CERTIFICATE-----
MIIFbjCCBFagAwIBAgIUdCvuiT0APaqf6PqzznXsuB+Fzi8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDRDNEM5MTNENThGNUVGODQ3OTk2MjQxRTk2OUI2MEEx
RTNGMTM4OTAeFw0yNjAxMjcwNTM2MTBaFw0yNjAxMjgwNjU2MTBaMDMxMTAvBgNV
BAMTKDMxOTE3RDJDNTdCQUMwNEYyQ0Q0OENFQkEyNzNEN0IxOTBEMDBDMTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU2DmSUB2LYmbz3w64VGZb9wLX
QYSLc4lPt5vaIv4V2IYzz81MNStPZEUaMewd88bTLkL+t0utYumVKGb9iOj1sgHX
U/t5we8VmWr9iYtXkydd36Vry3KhP38CGL3OtLUBeZ8NcPfdsrh3REbK7lUNK6i2
p87TlPcrGuSKWNpR67PwIfBbkIs+NNZdpRERZp3H9fdWw0hrUXBCEDn5n6a2p+5J
1GPoZfcRCMqf17fVqXRUm6PNzFtd+vbrmrkhkp4Qa3DfhjjN7G8PbAaaDWKvwH0Q
Sc3iYAJREtsUopJC+PgfZX9eLOXf79aUNxsslydqDJ4/Jd+Ag9Z+3tRwD23/AgMB
AAGjggJ4MIICdDAdBgNVHQ4EFgQUMZF9LFe6wE8s1IzronPXsZDQDBAwHwYDVR0j
BBgwFoAURMTJE9WPXvhHmWJB6Wm2Ch4/E4kwDgYDVR0PAQH/BAQDAgeAMIGPBgNV
HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv
cmVwby9ycGtpX2NhX2QwZjJkYjk5ZmUxZDRiMzZiOTMwMWM4MjEyMjBmZTNhLzAv
NDRDNEM5MTNENThGNUVGODQ3OTk2MjQxRTk2OUI2MEExRTNGMTM4OS5jcmwwgZ4G
CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz
LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh
MC1mMGQwMmMwM2EyYzYvNy80NEM0QzkxM0Q1OEY1RUY4NDc5OTYyNDFFOTY5QjYw
QTFFM0YxMzg5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty
c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2QwZjJk
Yjk5ZmUxZDRiMzZiOTMwMWM4MjEyMjBmZTNhLzAvNDRDNEM5MTNENThGNUVGODQ3
OTk2MjQxRTk2OUI2MEExRTNGMTM4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF
BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABKvxykwJOlzhTaxm8t7
xWoN3zxdC/foduS+TmTOe4HzasgtrTSpEsqOlVZjCiNJCajgN+mUUI85imdwMPcg
HPf8FiZLfKDDRkgIkWRD73ZC2gSyDpNMUTqx6uIWq74IBU5PoE3JTWS5FrIKPfyk
gtdIImFTNCNCMdEWY3Z3sCJwtydGLnUvTf/4Me11+hi0YmAAfkRjCXqwI93Scu1E
xdPna5PbmL8P8BzYQZN5rNMNaVXTSMdwRFeOe01AYhsYc34BxGvk13wuAFRlSKfr
BEl2SGlaZ73+vU6hJwEce4PfjuwuUSzYXNCy5j/IXcA2S0iLpffqOq1Rp3cLOoHW
QDk=
-----END CERTIFICATE-----
Generated at Wed Jan 28 00:07:49 2026 by rpki-client