This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.mft
File:                     44C4C913D58F5EF847996241E969B60A1E3F1389.mft (raw, json)
Hash identifier:          AyJX3MdO+sXobutCyzJRZ/ZSd1BIHf3vugNCICcH3BI=
Subject key identifier:   82:51:E0:A3:35:5C:2A:01:A3:16:18:D4:5B:C9:09:73:27:FC:22:BC
Authority key identifier: 44:C4:C9:13:D5:8F:5E:F8:47:99:62:41:E9:69:B6:0A:1E:3F:13:89
Certificate issuer:       /CN=44C4C913D58F5EF847996241E969B60A1E3F1389
Certificate serial:       57B381B6D4A7F83E82BD2E1F5F9B3DE7153AFF7F
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/44C4C913D58F5EF847996241E969B60A1E3F1389.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.mft
Manifest number:          02DB
Signing time:             Sun 25 Jan 2026 19:39:51 +0000
Manifest this update:     Sun 25 Jan 2026 19:34:51 +0000
Manifest next update:     Mon 26 Jan 2026 20:12:51 +0000
Files and hashes:         1: 44C4C913D58F5EF847996241E969B60A1E3F1389.crl (hash: OBFgo9fEHkru62jHXpERs9690MSagsaFt6fRGyoNK1Q=)
                          2: 326131313a663263303a666530303a3a2f34302d3430203d3e20323130353631.roa (hash: ZFgFa3mIQWS+C3ZANFakUZVad7gh+grxNMovjG/43xs=)
                          3: E42882C5C372E03CCD5EA87BB1B6FFEF1FF1BFF5.cer (hash: ZgkUmwBAN+BgyVFg/7xrYnbw3kS/Mk8fXnbXdBLqa28=)
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/44C4C913D58F5EF847996241E969B60A1E3F1389.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:b3:81:b6:d4:a7:f8:3e:82:bd:2e:1f:5f:9b:3d:e7:15:3a:ff:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44C4C913D58F5EF847996241E969B60A1E3F1389
        Validity
            Not Before: Jan 25 19:34:51 2026 GMT
            Not After : Jan 26 20:12:51 2026 GMT
        Subject: CN=8251E0A3355C2A01A31618D45BC9097327FC22BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e1:c8:a4:fb:e2:56:c4:ab:32:2a:68:fc:59:
                    12:f7:49:e6:d2:38:ef:68:08:2b:b2:25:f0:e0:c6:
                    81:5c:94:82:26:6a:56:cb:4e:82:5d:73:c9:56:c5:
                    23:9a:f5:be:67:64:3c:59:fa:4c:a1:f2:da:96:33:
                    a9:08:fd:eb:43:a0:61:ed:28:30:3d:47:bb:90:dd:
                    1b:cf:44:bd:c0:9e:09:a9:5e:1a:04:e2:fd:41:54:
                    ed:91:cf:ca:39:f2:de:ca:82:96:8c:0f:4c:47:a8:
                    e0:8e:c1:7a:34:33:83:d6:0a:dd:31:f0:bc:fc:96:
                    40:1a:13:21:b9:e2:07:85:8a:ec:b3:88:2e:48:91:
                    53:51:47:6b:ac:ba:d5:3c:d8:ac:25:d5:62:83:b2:
                    de:9b:8f:7f:28:32:c1:c8:ad:91:70:87:62:99:30:
                    eb:89:40:e5:e9:a8:7c:ac:4f:84:5e:3e:43:a9:45:
                    33:b8:51:20:48:ef:f9:e3:4e:88:0a:90:0c:b7:c1:
                    06:b1:82:2a:03:c3:36:bc:92:7a:b2:30:81:84:4d:
                    36:c7:5f:1b:f7:89:92:74:a3:21:8d:2a:7f:91:33:
                    ec:02:42:f4:a8:33:7e:c3:54:4c:87:cb:e1:70:50:
                    15:d0:17:27:d5:82:c0:41:2d:2d:dd:28:8b:02:be:
                    9f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:51:E0:A3:35:5C:2A:01:A3:16:18:D4:5B:C9:09:73:27:FC:22:BC
            X509v3 Authority Key Identifier:
                keyid:44:C4:C9:13:D5:8F:5E:F8:47:99:62:41:E9:69:B6:0A:1E:3F:13:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/44C4C913D58F5EF847996241E969B60A1E3F1389.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:3c:fe:a6:cc:04:e5:3f:3d:cc:07:02:15:72:2f:82:5e:29:
         26:f5:f4:01:81:a2:ae:62:9d:4c:18:fc:75:1c:ea:70:82:aa:
         7b:c2:32:b6:28:1b:ee:b1:c0:3a:ee:45:ae:82:c7:33:20:c7:
         bb:ab:01:2c:d1:8f:68:3c:ab:00:06:cb:fa:fd:db:99:07:53:
         e8:c4:7c:8c:18:7b:af:04:4a:14:07:19:c8:bf:f5:07:f0:6b:
         8a:07:78:72:98:e6:61:c5:40:83:58:8f:b8:42:6a:9a:eb:39:
         d4:39:ec:b5:2c:c9:c6:96:ea:9c:7a:c4:c0:2e:2f:aa:13:96:
         1b:01:ff:40:55:02:bd:1b:4d:cd:f5:de:05:5e:7b:ba:98:59:
         e0:7b:21:4c:3d:ee:2e:c5:6f:0b:08:c9:b7:da:5c:36:2d:27:
         5f:08:22:20:1c:10:e9:1b:f3:29:4d:2c:bc:fb:65:5f:98:c1:
         34:42:73:1c:5e:13:72:82:73:48:a7:43:3b:81:73:d9:a4:84:
         5d:c9:56:e9:a6:a4:b2:5e:41:3c:88:35:a0:d0:27:38:0d:43:
         fe:e1:ae:23:d0:51:2a:1b:3f:24:aa:9a:fa:d4:3d:08:a4:c2:
         b1:8a:a6:c9:57:96:ad:03:c7:17:eb:aa:a0:e4:71:fa:d4:79:
         8e:bf:43:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:21:48 2026 by rpki-client