This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_a792bf2416824748ace8530fb32d91c9/0/E02C2B37910DB974089166C0D244DE386B5762C2.mft
File:                     E02C2B37910DB974089166C0D244DE386B5762C2.mft (raw, json)
Hash identifier:          LVdfj/06uXpt+e5JMeeVeycKBP/xVWl++W3T++gKx04=
Subject key identifier:   50:A4:33:39:0F:12:B6:7B:77:CE:5E:12:7F:58:57:D6:91:5A:23:BA
Authority key identifier: E0:2C:2B:37:91:0D:B9:74:08:91:66:C0:D2:44:DE:38:6B:57:62:C2
Certificate issuer:       /CN=E02C2B37910DB974089166C0D244DE386B5762C2
Certificate serial:       695C36C3D1064DCBB5A39BAB968CD640B9169A5D
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/E02C2B37910DB974089166C0D244DE386B5762C2.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_a792bf2416824748ace8530fb32d91c9/0/E02C2B37910DB974089166C0D244DE386B5762C2.mft
Manifest number:          02D5
Signing time:             Sat 24 Jan 2026 21:33:38 +0000
Manifest this update:     Sat 24 Jan 2026 21:28:37 +0000
Manifest next update:     Sun 25 Jan 2026 22:11:37 +0000
Files and hashes:         1: 326131313a663263303a666663393a3a2f34382d3438203d3e203230373132.roa (hash: Rp9KJAcanSbSQ/x/ooTfEhh4TI6JTDG8xGHkoqLsfeo=)
                          2: E02C2B37910DB974089166C0D244DE386B5762C2.crl (hash: uOi5iCaDnkJA8+rILTJdWS0ETwBDzbAlFjdSG8dsTPM=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_a792bf2416824748ace8530fb32d91c9/0/E02C2B37910DB974089166C0D244DE386B5762C2.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_a792bf2416824748ace8530fb32d91c9/0/E02C2B37910DB974089166C0D244DE386B5762C2.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/E02C2B37910DB974089166C0D244DE386B5762C2.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:11:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:5c:36:c3:d1:06:4d:cb:b5:a3:9b:ab:96:8c:d6:40:b9:16:9a:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E02C2B37910DB974089166C0D244DE386B5762C2
        Validity
            Not Before: Jan 24 21:28:37 2026 GMT
            Not After : Jan 25 22:11:37 2026 GMT
        Subject: CN=50A433390F12B67B77CE5E127F5857D6915A23BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2b:a1:a8:5c:48:5d:ce:d8:bb:1c:87:eb:80:
                    6e:cc:3e:89:05:ee:f7:e4:aa:9e:8b:aa:18:fb:43:
                    16:a8:69:f4:8e:c7:c6:1a:37:1b:e2:91:cd:61:f0:
                    71:c5:bd:6d:7f:1f:7d:33:d4:8f:a4:05:7a:fa:d0:
                    40:4d:a9:10:92:ab:6b:44:21:6b:95:1c:ba:84:27:
                    38:fb:44:fe:72:f2:9d:89:1c:22:07:d2:08:50:83:
                    a6:96:d0:1d:f9:c0:87:04:1a:e5:a9:73:31:84:45:
                    63:d2:f7:4a:c5:e4:78:79:33:3c:42:71:77:a6:d4:
                    96:51:05:c3:14:94:e7:7f:06:9c:55:e8:5d:fd:6a:
                    a5:a4:b6:07:50:b6:95:3e:e3:ef:08:70:45:ca:5c:
                    5a:3e:23:c0:32:b7:f7:8b:ba:bf:b3:bb:a0:14:6c:
                    cd:df:8b:fa:6f:fb:65:39:28:9a:e1:ad:a9:84:a2:
                    6b:e1:3d:86:3a:84:fa:e1:a2:69:39:ea:14:ce:ce:
                    90:d5:37:86:b3:68:c1:3f:3f:74:d1:d2:9a:41:f8:
                    4e:69:c8:4d:4c:56:78:ca:9c:11:d5:6a:8d:06:09:
                    9e:6d:3c:7c:93:20:68:82:15:af:da:7f:95:89:bf:
                    b0:cc:67:44:c0:38:4e:92:96:1a:23:fc:7c:22:af:
                    9d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:A4:33:39:0F:12:B6:7B:77:CE:5E:12:7F:58:57:D6:91:5A:23:BA
            X509v3 Authority Key Identifier:
                keyid:E0:2C:2B:37:91:0D:B9:74:08:91:66:C0:D2:44:DE:38:6B:57:62:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a792bf2416824748ace8530fb32d91c9/0/E02C2B37910DB974089166C0D244DE386B5762C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/E02C2B37910DB974089166C0D244DE386B5762C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a792bf2416824748ace8530fb32d91c9/0/E02C2B37910DB974089166C0D244DE386B5762C2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:fa:d7:25:f1:7c:50:c0:a5:4a:de:cb:60:8b:43:f9:58:9d:
         89:5d:50:c6:d2:20:31:3b:01:6d:79:04:af:04:89:8c:05:2f:
         bd:a3:b4:63:75:d5:76:82:3d:58:c5:34:65:f9:bc:fa:d5:08:
         e5:33:ff:0a:d9:82:54:ca:89:30:44:63:af:f5:79:d3:75:fe:
         87:0e:ad:fd:82:ab:7a:9c:a3:db:ef:19:8a:8d:35:cd:0d:02:
         c7:7e:e8:28:52:f0:39:8e:f0:35:23:fc:30:46:ef:c5:d3:dd:
         cf:39:bd:fb:fb:74:b7:45:ca:46:03:2b:8d:10:09:a6:59:55:
         0b:76:14:3d:b8:d0:53:2c:8e:cb:f6:7e:66:34:8b:2d:dc:6c:
         12:9f:26:77:d9:92:04:74:07:48:b2:aa:7a:5a:a9:42:20:b3:
         08:3e:d2:06:b6:8e:a6:52:eb:f9:d3:e7:4e:b0:e2:46:4f:ff:
         51:6c:a7:76:92:1c:94:3c:04:ee:27:3e:65:db:51:23:e6:9c:
         6c:8d:15:a3:84:05:45:65:3d:00:41:af:d5:e6:2f:8b:40:09:
         19:07:d1:bf:c5:99:6b:31:8b:28:f5:a3:11:ee:b4:a5:54:ca:
         23:38:0a:3a:e7:53:b2:72:86:96:39:ac:aa:fb:dc:8f:dc:50:
         19:6d:9e:68
-----BEGIN CERTIFICATE-----
MIIFbjCCBFagAwIBAgIUaVw2w9EGTcu1o5urlozWQLkWml0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTAyQzJCMzc5MTBEQjk3NDA4OTE2NkMwRDI0NERFMzg2
QjU3NjJDMjAeFw0yNjAxMjQyMTI4MzdaFw0yNjAxMjUyMjExMzdaMDMxMTAvBgNV
BAMTKDUwQTQzMzM5MEYxMkI2N0I3N0NFNUUxMjdGNTg1N0Q2OTE1QTIzQkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIK6GoXEhdzti7HIfrgG7MPokF
7vfkqp6Lqhj7QxaoafSOx8YaNxvikc1h8HHFvW1/H30z1I+kBXr60EBNqRCSq2tE
IWuVHLqEJzj7RP5y8p2JHCIH0ghQg6aW0B35wIcEGuWpczGERWPS90rF5Hh5MzxC
cXem1JZRBcMUlOd/BpxV6F39aqWktgdQtpU+4+8IcEXKXFo+I8Ayt/eLur+zu6AU
bM3fi/pv+2U5KJrhramEomvhPYY6hPrhomk56hTOzpDVN4azaME/P3TR0ppB+E5p
yE1MVnjKnBHVao0GCZ5tPHyTIGiCFa/af5WJv7DMZ0TAOE6Slhoj/Hwir51BAgMB
AAGjggJ4MIICdDAdBgNVHQ4EFgQUUKQzOQ8Stnt3zl4Sf1hX1pFaI7owHwYDVR0j
BBgwFoAU4CwrN5ENuXQIkWbA0kTeOGtXYsIwDgYDVR0PAQH/BAQDAgeAMIGPBgNV
HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv
cmVwby9ycGtpX2NhX2E3OTJiZjI0MTY4MjQ3NDhhY2U4NTMwZmIzMmQ5MWM5LzAv
RTAyQzJCMzc5MTBEQjk3NDA4OTE2NkMwRDI0NERFMzg2QjU3NjJDMi5jcmwwgZ4G
CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz
LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh
MC1mMGQwMmMwM2EyYzYvNy9FMDJDMkIzNzkxMERCOTc0MDg5MTY2QzBEMjQ0REUz
ODZCNTc2MkMyLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty
c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2E3OTJi
ZjI0MTY4MjQ3NDhhY2U4NTMwZmIzMmQ5MWM5LzAvRTAyQzJCMzc5MTBEQjk3NDA4
OTE2NkMwRDI0NERFMzg2QjU3NjJDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF
BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJD61yXxfFDApUrey2CL
Q/lYnYldUMbSIDE7AW15BK8EiYwFL72jtGN11XaCPVjFNGX5vPrVCOUz/wrZglTK
iTBEY6/1edN1/ocOrf2Cq3qco9vvGYqNNc0NAsd+6ChS8DmO8DUj/DBG78XT3c85
vfv7dLdFykYDK40QCaZZVQt2FD240FMsjsv2fmY0iy3cbBKfJnfZkgR0B0iyqnpa
qUIgswg+0ga2jqZS6/nT506w4kZP/1Fsp3aSHJQ8BO4nPmXbUSPmnGyNFaOEBUVl
PQBBr9XmL4tACRkH0b/FmWsxiyj1oxHutKVUyiM4CjrnU7JyhpY5rKr73I/cUBlt
nmg=
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:27:52 2026 by rpki-client