This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft File: B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft (raw, json) Hash identifier: h03ZKKhE5LsIvwN/MaMPNAFYnVIljY0gCEnxUqChrlk= Subject key identifier: 5D:C4:4A:4F:E1:31:55:D4:E4:89:3A:8E:A9:C8:4C:FB:0B:C5:53:62 Authority key identifier: B8:8A:94:DC:A0:9E:3A:65:3C:06:F4:78:43:4D:C7:C8:F2:1E:05:18 Certificate issuer: /CN=B88A94DCA09E3A653C06F478434DC7C8F21E0518 Certificate serial: 450F27D954EEC04DE0B822DF61B9913CFB289BE2 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft Manifest number: 02D9 Signing time: Tue 27 Jan 2026 05:56:22 +0000 Manifest this update: Tue 27 Jan 2026 05:51:22 +0000 Manifest next update: Wed 28 Jan 2026 06:39:22 +0000 Files and hashes: 1: 326131313a663263303a666666643a3a2f34382d3438203d3e20323035373839.roa (hash: nMLfH1nYsI5mPwv+N0MEzTUVq1YFB35SCmO/3EjXxsg=) 2: B88A94DCA09E3A653C06F478434DC7C8F21E0518.crl (hash: OpeX5ZLZaWfO2AyidSry9Xj6jHnUsLTzu9z0paBjk/o=) 3: 326131313a663263303a623030623a3a2f34382d3438203d3e20323035373839.roa (hash: tOaIT6qTvs/T2L2c3rEpmXq3gx7f0jW4s/J1R0UAbuM=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 06:39:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:0f:27:d9:54:ee:c0:4d:e0:b8:22:df:61:b9:91:3c:fb:28:9b:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B88A94DCA09E3A653C06F478434DC7C8F21E0518 Validity Not Before: Jan 27 05:51:22 2026 GMT Not After : Jan 28 06:39:22 2026 GMT Subject: CN=5DC44A4FE13155D4E4893A8EA9C84CFB0BC55362 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:42:96:16:ec:63:f8:6b:5c:fa:46:db:10:33: 37:cc:da:ba:74:21:02:37:34:6a:81:ca:64:40:f6: 06:45:fe:6b:fe:7e:65:83:c8:c3:76:4b:86:28:fa: 02:6a:10:a8:0b:31:ee:c6:e9:49:44:1a:c9:d0:ba: c3:c2:ec:ac:40:5d:f2:75:17:1f:a4:cf:95:2a:d4: d7:7c:ac:24:45:8e:24:bb:63:8d:be:4c:18:e5:9d: 3e:f1:60:7e:73:14:75:da:b6:40:12:18:09:09:6b: b1:88:49:95:f8:00:46:2a:1e:17:3c:64:68:a1:06: f6:23:ea:72:88:5d:65:3d:43:38:ef:63:4a:55:67: 9f:45:65:62:98:ee:fd:c0:36:16:84:62:77:7f:36: 40:40:af:64:44:a9:73:49:b5:20:26:7e:c6:46:f6: cc:b7:c5:09:da:dc:56:31:a9:6c:ad:05:1d:c6:d7: 72:5b:37:f9:2d:5d:00:d2:b1:79:75:70:65:50:3b: 67:91:42:5c:2a:13:3b:67:c7:58:b1:40:25:ad:f6: 89:fd:81:8f:98:0a:18:a6:32:34:c0:a5:46:ae:3a: 67:53:2d:e6:2c:97:aa:0c:b7:83:8b:13:28:4e:bf: 0f:cc:94:3c:3e:ad:6c:35:c6:e9:89:73:36:6b:f0: 95:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:C4:4A:4F:E1:31:55:D4:E4:89:3A:8E:A9:C8:4C:FB:0B:C5:53:62 X509v3 Authority Key Identifier: keyid:B8:8A:94:DC:A0:9E:3A:65:3C:06:F4:78:43:4D:C7:C8:F2:1E:05:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:76:6f:8d:62:78:79:ae:56:08:74:81:de:49:61:14:2f:8f: 3f:b9:f8:22:5c:5c:c3:03:c8:6b:17:01:1d:18:ed:02:90:f8: 08:2b:88:a5:ca:27:8d:b4:a2:67:2b:99:b0:23:e4:92:35:f0: 16:ee:4c:0e:f1:8f:c9:2d:46:76:81:bc:aa:57:56:86:69:1a: 6f:5b:94:8e:b9:e6:9e:66:af:a1:04:62:82:e6:57:50:9f:ca: a7:5b:58:1f:15:3f:69:7b:a4:20:97:54:69:99:d3:8d:a8:ef: 74:51:f4:91:ed:24:b2:90:c9:63:90:0e:34:06:8a:2a:8f:9d: b2:f3:dc:17:44:88:7b:b4:a5:50:c0:93:68:bc:ab:18:b7:42: 9c:73:00:b1:da:ed:9e:ef:8c:83:e0:78:5f:3a:36:c0:ae:9d: ed:02:78:9e:d7:bd:4e:61:8d:41:30:c4:78:df:fc:b1:db:b4: 1b:7c:f5:fe:8b:99:2a:c4:0f:1f:0e:91:f4:a4:62:53:78:e4: 25:fc:8a:5c:6e:dd:88:ce:ff:cd:33:a2:34:e6:63:a6:1f:c6: 3a:79:af:86:46:1f:ea:6a:0b:e4:62:42:96:47:f8:39:c5:cd: 82:e1:36:fe:46:e8:79:71:bf:de:df:f8:73:25:08:e9:cb:86: 86:63:27:1e -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIURQ8n2VTuwE3guCLfYbmRPPsom+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg4QTk0RENBMDlFM0E2NTNDMDZGNDc4NDM0REM3QzhG MjFFMDUxODAeFw0yNjAxMjcwNTUxMjJaFw0yNjAxMjgwNjM5MjJaMDMxMTAvBgNV BAMTKDVEQzQ0QTRGRTEzMTU1RDRFNDg5M0E4RUE5Qzg0Q0ZCMEJDNTUzNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNQpYW7GP4a1z6RtsQMzfM2rp0 IQI3NGqBymRA9gZF/mv+fmWDyMN2S4Yo+gJqEKgLMe7G6UlEGsnQusPC7KxAXfJ1 Fx+kz5Uq1Nd8rCRFjiS7Y42+TBjlnT7xYH5zFHXatkASGAkJa7GISZX4AEYqHhc8 ZGihBvYj6nKIXWU9QzjvY0pVZ59FZWKY7v3ANhaEYnd/NkBAr2REqXNJtSAmfsZG 9sy3xQna3FYxqWytBR3G13JbN/ktXQDSsXl1cGVQO2eRQlwqEztnx1ixQCWt9on9 gY+YChimMjTApUauOmdTLeYsl6oMt4OLEyhOvw/MlDw+rWw1xumJczZr8JXBAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUXcRKT+ExVdTkiTqOqchM+wvFU2IwHwYDVR0j BBgwFoAUuIqU3KCeOmU8BvR4Q03HyPIeBRgwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzBhNDYzN2RmNWJhNzQzZmVhMWI0ODJiZTgyMzU4MThmLzAv Qjg4QTk0RENBMDlFM0E2NTNDMDZGNDc4NDM0REM3QzhGMjFFMDUxOC5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9CODhBOTREQ0EwOUUzQTY1M0MwNkY0Nzg0MzREQzdD OEYyMUUwNTE4LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzBhNDYz N2RmNWJhNzQzZmVhMWI0ODJiZTgyMzU4MThmLzAvQjg4QTk0RENBMDlFM0E2NTND MDZGNDc4NDM0REM3QzhGMjFFMDUxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBALZ2b41ieHmuVgh0gd5J YRQvjz+5+CJcXMMDyGsXAR0Y7QKQ+AgriKXKJ420omcrmbAj5JI18BbuTA7xj8kt RnaBvKpXVoZpGm9blI655p5mr6EEYoLmV1CfyqdbWB8VP2l7pCCXVGmZ042o73RR 9JHtJLKQyWOQDjQGiiqPnbLz3BdEiHu0pVDAk2i8qxi3QpxzALHa7Z7vjIPgeF86 NsCune0CeJ7XvU5hjUEwxHjf/LHbtBt89f6LmSrEDx8OkfSkYlN45CX8ilxu3YjO /80zojTmY6Yfxjp5r4ZGH+pqC+RiQpZH+DnFzYLhNv5G6Hlxv97f+HMlCOnLhoZj Jx4= -----END CERTIFICATE-----Generated at Wed Jan 28 00:08:27 2026 by rpki-client