This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_ce68829cc35a43cab704f215ce6c50e3/0/C0877CC9EB843E8740AA80328E653F865C246295.mft
File:                     C0877CC9EB843E8740AA80328E653F865C246295.mft (raw, json)
Hash identifier:          y4JSsiKBsKnqELZQ86TO8iT0N/dPb6jwNIDoTkj6arI=
Subject key identifier:   07:61:67:73:E7:0D:B6:42:71:8B:4A:36:72:70:00:48:CE:56:8F:EE
Authority key identifier: C0:87:7C:C9:EB:84:3E:87:40:AA:80:32:8E:65:3F:86:5C:24:62:95
Certificate issuer:       /CN=c0877cc9eb843e8740aa80328e653f865c246295
Certificate serial:       28627B8D85BCEF916E5B171DC607900B7510B45A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wId8yeuEPodAqoAyjmU_hlwkYpU.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_ce68829cc35a43cab704f215ce6c50e3/0/C0877CC9EB843E8740AA80328E653F865C246295.mft
Manifest number:          0294
Signing time:             Sat 06 Dec 2025 02:48:13 +0000
Manifest this update:     Sat 06 Dec 2025 02:43:13 +0000
Manifest next update:     Sun 07 Dec 2025 05:38:13 +0000
Files and hashes:         1: C0877CC9EB843E8740AA80328E653F865C246295.crl (hash: zHPSQ5psGPTz9cYtQKte2NzsXOs027NYxSg05RBL3jE=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_ce68829cc35a43cab704f215ce6c50e3/0/C0877CC9EB843E8740AA80328E653F865C246295.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_ce68829cc35a43cab704f215ce6c50e3/0/C0877CC9EB843E8740AA80328E653F865C246295.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wId8yeuEPodAqoAyjmU_hlwkYpU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:62:7b:8d:85:bc:ef:91:6e:5b:17:1d:c6:07:90:0b:75:10:b4:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0877cc9eb843e8740aa80328e653f865c246295
        Validity
            Not Before: Dec  6 02:43:13 2025 GMT
            Not After : Dec  7 05:38:13 2025 GMT
        Subject: CN=07616773E70DB642718B4A3672700048CE568FEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2c:bf:23:3a:03:d2:aa:5b:8e:8c:e7:c8:04:
                    0e:1a:26:8d:b8:d5:9e:00:0a:4c:c3:2b:e8:37:a1:
                    6f:36:8f:47:e0:42:a1:77:cf:1f:96:66:4a:9e:1f:
                    77:1f:a9:70:16:d2:5f:3c:ba:4c:62:6a:af:5d:a8:
                    42:e2:ea:31:f7:e6:11:7e:d9:0e:1f:e3:ce:a7:e9:
                    20:0a:75:c6:3d:17:7e:f1:17:87:62:ae:c5:17:1b:
                    c1:0a:de:dc:ae:f5:a9:b6:75:60:ea:2f:a2:cb:72:
                    50:1d:1e:66:b3:c2:e2:fd:78:1b:7a:be:15:35:4c:
                    11:71:0b:17:37:8e:c6:da:12:ce:48:fb:bc:37:b6:
                    7d:95:76:ee:b6:48:71:aa:7e:46:49:92:97:93:c0:
                    ae:2a:08:cf:d8:a7:a7:18:9a:67:f9:86:2d:5a:3d:
                    b7:73:47:73:62:2c:2c:54:fe:bf:f5:d5:7b:ca:4b:
                    c7:85:5f:9b:a1:eb:93:ab:88:22:ce:13:f7:37:5f:
                    1b:11:ca:c1:53:cf:e5:52:b2:48:72:bf:97:0a:44:
                    93:f9:a4:d1:e2:de:c7:2e:58:0d:83:f2:ac:5a:c7:
                    c4:96:55:4a:0b:72:ff:3f:5d:f8:71:26:02:f0:ba:
                    4a:ae:a7:9f:8b:4d:e4:60:8e:6e:0b:6d:02:51:ea:
                    3d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:61:67:73:E7:0D:B6:42:71:8B:4A:36:72:70:00:48:CE:56:8F:EE
            X509v3 Authority Key Identifier:
                keyid:C0:87:7C:C9:EB:84:3E:87:40:AA:80:32:8E:65:3F:86:5C:24:62:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_ce68829cc35a43cab704f215ce6c50e3/0/C0877CC9EB843E8740AA80328E653F865C246295.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wId8yeuEPodAqoAyjmU_hlwkYpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_ce68829cc35a43cab704f215ce6c50e3/0/C0877CC9EB843E8740AA80328E653F865C246295.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:9e:cc:bd:93:93:9f:58:65:17:3c:7e:4a:62:fc:31:e4:c4:
         25:df:4d:5c:8d:af:c6:27:c2:66:db:41:83:a1:57:4a:28:7b:
         00:31:e9:87:61:9d:0f:3e:39:25:57:11:49:13:e3:1d:2e:e3:
         60:ab:ae:35:ee:53:c7:08:d3:6b:1a:05:6d:1d:f6:19:e0:14:
         78:56:41:49:11:c1:78:fe:4a:88:95:65:b7:e6:9d:ac:f9:07:
         13:74:5b:64:8d:43:72:1a:d4:69:fe:57:03:db:7e:8f:20:58:
         a6:83:fb:58:68:6a:bb:9d:44:d4:67:f4:ce:18:a2:b4:73:b2:
         19:ae:69:ae:1d:12:66:89:43:f0:71:52:fc:54:d6:93:87:54:
         4d:d1:21:b3:0f:60:92:6d:1e:b4:b4:44:24:4f:c3:35:c8:24:
         91:31:d8:87:6d:56:9e:6f:ad:df:16:4d:90:4c:63:de:d5:6b:
         d9:b6:6a:d4:a2:c7:7f:58:7b:9b:6c:65:9d:95:04:40:75:9c:
         35:c5:55:5e:1c:8e:79:43:e1:84:b6:ff:e0:63:79:e8:1e:1c:
         8a:d2:90:8c:f5:fd:05:5c:47:c4:b2:f7:ca:eb:00:3b:0c:e8:
         a6:66:9d:5e:8d:36:b9:74:e1:56:cf:9f:da:cc:20:0b:f6:1d:
         94:0f:12:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:44:25 2025 by rpki-client