This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft
File:                     B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft (raw, json)
Hash identifier:          B3uleoXF9FXV+fnc6OVxgOayFY8Ob/1Bq6FN7OLVm2Q=
Subject key identifier:   36:65:36:D3:77:70:0D:62:09:63:46:12:01:26:DC:E8:CC:2D:36:7C
Authority key identifier: B8:22:2A:84:5C:0C:DC:59:E8:D3:69:AE:23:E1:16:CD:DE:A0:87:77
Certificate issuer:       /CN=B8222A845C0CDC59E8D369AE23E116CDDEA08777
Certificate serial:       70D1BD36F1C3CD2ACA38BBE68112514B21282EB3
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B8222A845C0CDC59E8D369AE23E116CDDEA08777.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft
Manifest number:          0297
Signing time:             Sat 06 Dec 2025 21:30:22 +0000
Manifest this update:     Sat 06 Dec 2025 21:25:22 +0000
Manifest next update:     Mon 08 Dec 2025 00:59:22 +0000
Files and hashes:         1: B8222A845C0CDC59E8D369AE23E116CDDEA08777.crl (hash: cFv2Yio4p1FCuGfaA6GasaLPKZnp58cqFeosBnzr+oU=)
                          2: 326131313a663263303a666663373a3a2f34382d3438203d3e20323136313431.roa (hash: MlubGqxKcu9/AdY4j4/cMK0ZlCKeMWkqNbhfRk1N6mE=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B8222A845C0CDC59E8D369AE23E116CDDEA08777.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 07:35:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:d1:bd:36:f1:c3:cd:2a:ca:38:bb:e6:81:12:51:4b:21:28:2e:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8222A845C0CDC59E8D369AE23E116CDDEA08777
        Validity
            Not Before: Dec  6 21:25:22 2025 GMT
            Not After : Dec  8 00:59:22 2025 GMT
        Subject: CN=366536D377700D62096346120126DCE8CC2D367C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5d:b1:5e:0d:73:7f:c2:72:ec:6b:d8:8f:d8:
                    46:9b:79:a1:ac:ae:01:de:9b:19:86:b0:fb:99:f5:
                    7b:39:17:fb:1e:0f:e3:c0:a4:1d:5a:60:a1:e9:bd:
                    26:c9:94:53:33:89:68:24:b4:79:10:fa:d0:03:3b:
                    08:67:80:2a:b8:18:70:71:15:c8:11:27:9e:d4:fd:
                    08:a8:15:86:44:e9:59:ec:c0:1f:ad:bc:e5:fc:29:
                    fd:64:0f:db:6c:77:04:bf:17:b3:7c:df:ac:e4:21:
                    b3:2f:46:a0:fd:56:77:a9:ad:89:ea:8e:28:15:bf:
                    86:88:63:57:3e:da:6e:3b:f0:51:1e:e9:87:77:67:
                    e6:e7:8c:61:30:4c:03:ef:53:81:f1:90:74:f5:64:
                    31:c0:18:5d:f2:c3:6b:01:92:de:c8:a9:67:28:1a:
                    db:7e:a0:1c:c9:d7:87:5e:96:a4:3b:2c:4b:66:10:
                    4e:04:8e:22:e7:ee:15:72:27:fe:cf:d6:ce:9f:60:
                    40:c6:02:8e:19:f0:45:0e:1a:9c:b2:81:5f:86:73:
                    5a:a6:d0:84:c1:0b:fc:c0:ed:ce:76:cf:aa:cb:e2:
                    2e:20:c5:4a:51:10:37:e7:12:eb:15:c0:05:da:f1:
                    6f:ad:ab:c8:5e:8c:b1:d2:a0:ac:8a:41:de:67:57:
                    ed:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:65:36:D3:77:70:0D:62:09:63:46:12:01:26:DC:E8:CC:2D:36:7C
            X509v3 Authority Key Identifier:
                keyid:B8:22:2A:84:5C:0C:DC:59:E8:D3:69:AE:23:E1:16:CD:DE:A0:87:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B8222A845C0CDC59E8D369AE23E116CDDEA08777.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:a3:0e:b3:75:65:1c:ff:6e:77:10:ca:56:7a:26:f1:8e:3e:
         da:a2:48:e5:ab:6b:6e:00:9a:1c:f2:83:92:eb:77:ca:7a:27:
         83:de:87:39:a4:25:92:63:74:fa:fc:fe:05:d3:fb:4a:09:e6:
         57:01:05:67:50:b8:db:63:3f:c7:1a:7d:fa:1d:22:04:27:20:
         6b:15:ba:c1:02:15:e6:cd:f0:d9:d8:c3:80:a8:a5:63:20:a1:
         22:28:f3:3c:7c:85:2e:99:d0:54:71:26:99:36:2a:e3:39:c0:
         35:07:10:90:1c:a1:93:aa:39:af:d0:4a:1b:86:9a:9b:e1:8b:
         be:81:74:65:86:96:89:80:61:2a:4d:69:82:dd:16:3b:63:92:
         1a:b1:7a:64:da:9b:5c:55:4c:63:14:ca:15:77:4b:f8:82:a1:
         f2:10:21:e3:47:53:bd:b0:99:17:96:e5:1d:e3:f2:9b:6b:98:
         36:d9:95:36:99:5a:ca:c6:c9:4b:57:96:bd:17:1e:de:79:55:
         50:98:4a:f8:7f:5c:9b:b3:7b:a0:3b:26:db:fd:fd:f5:c6:61:
         cc:c2:45:72:de:c6:bb:0e:ab:5a:8c:e3:f7:89:6c:1d:fb:ea:
         b0:4e:13:65:25:c2:4b:54:61:8f:88:40:ea:3d:9e:8a:5b:af:
         18:38:3d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:19:55 2025 by rpki-client