This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.mft
File:                     C2724A29EF989A4340933B8130B402DD4627A501.mft (raw, json)
Hash identifier:          awAF+Mewk8vgLg9vQb4QQDzDo+3pfFpHXA9xuz9Yl0E=
Subject key identifier:   33:0C:53:69:2D:D4:1C:8C:0A:78:BC:2A:F6:85:57:B2:E2:E9:D9:13
Authority key identifier: C2:72:4A:29:EF:98:9A:43:40:93:3B:81:30:B4:02:DD:46:27:A5:01
Certificate issuer:       /CN=C2724A29EF989A4340933B8130B402DD4627A501
Certificate serial:       36A05B421889BBEFB690B1D36C2BE98E11C6CCE4
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/C2724A29EF989A4340933B8130B402DD4627A501.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.mft
Manifest number:          0292
Signing time:             Sat 06 Dec 2025 12:29:21 +0000
Manifest this update:     Sat 06 Dec 2025 12:24:21 +0000
Manifest next update:     Sun 07 Dec 2025 15:55:21 +0000
Files and hashes:         1: 326131313a663263303a666663333a3a2f34382d3438203d3e20313938383035.roa (hash: hqgaxXhgaM7AiSsPcNwqghRTi61TSIKXFax/zJU7ecI=)
                          2: C2724A29EF989A4340933B8130B402DD4627A501.crl (hash: T0TXINGvX5AW/1GrxDZdX6YjgMqPqaE4GCGcitBp0ms=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/C2724A29EF989A4340933B8130B402DD4627A501.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 07:35:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:a0:5b:42:18:89:bb:ef:b6:90:b1:d3:6c:2b:e9:8e:11:c6:cc:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2724A29EF989A4340933B8130B402DD4627A501
        Validity
            Not Before: Dec  6 12:24:21 2025 GMT
            Not After : Dec  7 15:55:21 2025 GMT
        Subject: CN=330C53692DD41C8C0A78BC2AF68557B2E2E9D913
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:9f:a4:c3:41:07:7b:3a:05:74:7e:9f:68:5b:
                    28:10:72:cd:96:65:52:a1:f2:ee:54:a5:c9:17:46:
                    b3:43:76:7b:62:4a:82:5c:c6:b0:f6:ec:79:2f:8a:
                    2e:66:4b:2e:53:b5:ac:5e:59:87:4c:10:e3:4d:6d:
                    82:8a:82:14:95:b7:a9:a5:00:c4:03:24:4e:77:ea:
                    bf:7b:00:77:e1:75:bc:76:da:1e:b0:94:ab:e1:88:
                    a1:70:7d:9f:93:87:f3:6d:bc:4d:7b:dd:11:76:1b:
                    d5:cf:25:e5:20:c7:ed:65:34:c3:94:92:30:c1:e3:
                    9e:e4:27:27:78:57:39:4b:76:86:90:3b:ac:84:c7:
                    c2:da:55:ed:33:be:93:23:c9:25:e0:6a:6b:f0:ec:
                    1d:5e:84:9b:c1:74:55:51:91:83:8f:42:9e:a5:b6:
                    2e:33:65:cf:fd:26:f9:3c:d4:e2:b7:d3:ff:cd:d2:
                    b1:db:bc:16:64:64:20:9d:92:1b:9c:4c:1b:b0:55:
                    ec:8e:42:8e:1c:f2:89:96:5f:e9:d0:ff:05:08:93:
                    ff:57:27:47:a9:d7:c5:4d:dd:81:e7:4d:4d:34:e7:
                    b2:a9:4c:8b:69:78:62:c8:22:2f:17:3f:cf:b4:53:
                    66:8f:6d:42:d2:70:75:3e:cd:be:24:0a:5d:c9:75:
                    bc:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:0C:53:69:2D:D4:1C:8C:0A:78:BC:2A:F6:85:57:B2:E2:E9:D9:13
            X509v3 Authority Key Identifier:
                keyid:C2:72:4A:29:EF:98:9A:43:40:93:3B:81:30:B4:02:DD:46:27:A5:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/C2724A29EF989A4340933B8130B402DD4627A501.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:60:85:c2:7d:43:39:d1:0e:26:65:11:57:d6:6c:60:5d:08:
         8e:ed:1f:42:99:a0:78:e0:48:c8:fb:d3:f1:f8:18:a2:71:af:
         1d:26:89:38:62:fc:f0:d9:6e:89:97:e1:40:be:1b:2c:ea:92:
         8c:15:c6:05:9c:75:32:4e:5d:ea:5e:33:a5:ce:34:fe:0f:4a:
         89:e5:c4:5b:c1:66:de:59:84:1b:98:0d:7d:34:5c:4e:5f:ff:
         ee:01:c7:86:8b:50:0b:6e:ea:ab:98:ae:d7:0c:6b:ec:21:46:
         bb:a3:d9:81:66:4e:1f:80:3c:06:1d:c6:8e:bb:ea:1a:8d:66:
         c4:92:88:b8:01:dc:40:79:d1:83:e9:a6:aa:9c:a7:b9:83:8e:
         63:62:82:30:43:40:d6:95:cd:4c:96:22:8c:05:77:fc:c0:ab:
         5e:f7:37:6e:d0:d9:2e:56:ff:89:0f:e3:00:97:33:20:34:05:
         c8:01:d1:ec:84:e4:71:c9:17:e1:d7:7a:ec:0d:0e:ab:6e:73:
         05:2c:1c:db:cc:30:0c:3d:f5:29:08:cb:d2:3d:ee:61:5b:c6:
         7e:ef:38:da:e1:11:d1:42:a5:e2:df:4f:86:ed:26:69:4f:49:
         1d:4f:e1:31:67:9e:98:5d:59:59:85:2b:a3:91:50:ea:99:21:
         f6:60:e3:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:33:45 2025 by rpki-client