This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft File: B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft (raw, json) Hash identifier: 402s6GWhdLnuBf9hIyhdtUjIAHILWOTvCPyu/UUpVks= Subject key identifier: 1B:D9:19:28:0A:45:B3:B8:BA:F9:6C:06:65:23:F8:3A:43:35:A7:B5 Authority key identifier: B8:8A:94:DC:A0:9E:3A:65:3C:06:F4:78:43:4D:C7:C8:F2:1E:05:18 Certificate issuer: /CN=B88A94DCA09E3A653C06F478434DC7C8F21E0518 Certificate serial: 7865B2A2B0ED3014A8F073F855D72963B403D46F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft Manifest number: 0297 Signing time: Sun 07 Dec 2025 19:12:31 +0000 Manifest this update: Sun 07 Dec 2025 19:07:31 +0000 Manifest next update: Mon 08 Dec 2025 21:35:31 +0000 Files and hashes: 1: 326131313a663263303a623030623a3a2f34382d3438203d3e20323035373839.roa (hash: tOaIT6qTvs/T2L2c3rEpmXq3gx7f0jW4s/J1R0UAbuM=) 2: 326131313a663263303a666666643a3a2f34382d3438203d3e20323035373839.roa (hash: nMLfH1nYsI5mPwv+N0MEzTUVq1YFB35SCmO/3EjXxsg=) 3: B88A94DCA09E3A653C06F478434DC7C8F21E0518.crl (hash: q1abd0qkPUveH+km+tuTvNaRwK+/Ust5LZFcyyn3vG4=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 17:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:65:b2:a2:b0:ed:30:14:a8:f0:73:f8:55:d7:29:63:b4:03:d4:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B88A94DCA09E3A653C06F478434DC7C8F21E0518 Validity Not Before: Dec 7 19:07:31 2025 GMT Not After : Dec 8 21:35:31 2025 GMT Subject: CN=1BD919280A45B3B8BAF96C066523F83A4335A7B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:2c:40:fc:16:d3:58:d7:0f:5c:c1:bd:0c:dc: fa:cd:57:d1:1a:95:76:0f:ef:8e:90:de:3e:91:ca: f4:3a:8d:a4:95:c5:7b:d5:7a:cf:f3:26:2a:3d:88: f7:a6:5d:8c:0e:a9:51:49:fb:aa:43:17:60:52:e5: 2c:de:72:3a:59:65:69:22:56:ca:9f:d9:eb:67:92: 50:b9:d5:75:29:7a:36:5b:43:ea:8f:49:f8:89:c0: 85:81:ac:64:3a:91:4c:83:81:e2:e8:f3:6e:58:93: 4d:c5:f0:d6:2e:bf:47:d1:98:5d:8c:d4:6f:7e:87: 94:11:46:19:c3:ba:93:7e:46:9e:eb:0d:42:16:14: f5:be:d2:3e:fd:ea:29:7c:82:80:30:d5:74:51:33: 3b:f8:b5:19:e3:aa:28:60:5a:1c:8b:13:2b:17:27: 2a:4e:83:2f:db:dd:c5:12:4a:1a:ee:63:bb:1b:ab: 10:80:5c:c2:45:59:f0:0c:55:e2:4c:a1:07:dc:6a: 90:fc:c5:2c:85:2a:9d:c2:aa:3b:7d:f7:e9:08:1e: 9c:ee:0e:72:dd:49:19:fe:3d:b6:d0:22:c6:61:07: e6:6e:ae:4e:06:94:bf:7d:90:aa:6b:ab:82:ca:cf: ad:9a:bb:47:5d:d8:67:7f:8b:88:b1:7f:ea:67:62: eb:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:D9:19:28:0A:45:B3:B8:BA:F9:6C:06:65:23:F8:3A:43:35:A7:B5 X509v3 Authority Key Identifier: keyid:B8:8A:94:DC:A0:9E:3A:65:3C:06:F4:78:43:4D:C7:C8:F2:1E:05:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:a1:d2:d6:39:b0:85:ed:03:39:4a:86:84:e2:a1:47:0b:e1: 5f:63:10:0f:7f:24:d4:41:80:f5:08:84:e0:5d:19:fa:0d:c4: 6b:e4:cb:8a:fd:67:0d:15:79:93:7b:9c:57:da:0d:36:3a:08: 85:b6:c1:18:da:68:5a:6b:97:d2:03:c2:19:b6:29:42:5d:11: fb:9a:42:90:a3:ab:8f:eb:0e:2c:7a:87:81:dc:d7:ac:0a:a3: 68:aa:4f:31:c3:da:4f:bc:8f:c9:53:44:6f:2f:72:84:fd:3b: 58:ae:25:b3:3e:75:54:ba:01:f7:3f:3c:ab:1e:05:9c:8d:fa: 28:e3:e1:dc:d7:0e:f8:c6:af:7a:51:9b:a3:64:c0:47:d9:3f: 9d:11:35:4f:12:70:31:e1:3e:04:0a:18:40:eb:2c:b3:82:3a: df:f0:94:24:e2:94:86:15:ce:04:28:85:c1:74:d3:c2:01:21: 52:f4:2e:71:ef:83:be:70:ea:94:36:bd:61:28:3c:84:68:2c: f1:54:63:90:a9:94:45:4e:2e:d4:46:fe:58:b7:df:6c:37:d8: 61:60:0e:01:1f:e0:4b:8e:c5:39:6b:56:8c:a8:bd:85:d7:aa: 8c:8b:df:16:7f:ec:9d:43:3e:87:ba:a0:55:e7:83:89:09:da: e7:6b:68:58 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUeGWyorDtMBSo8HP4VdcpY7QD1G8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg4QTk0RENBMDlFM0E2NTNDMDZGNDc4NDM0REM3QzhG MjFFMDUxODAeFw0yNTEyMDcxOTA3MzFaFw0yNTEyMDgyMTM1MzFaMDMxMTAvBgNV BAMTKDFCRDkxOTI4MEE0NUIzQjhCQUY5NkMwNjY1MjNGODNBNDMzNUE3QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhLED8FtNY1w9cwb0M3PrNV9Ea lXYP746Q3j6RyvQ6jaSVxXvVes/zJio9iPemXYwOqVFJ+6pDF2BS5SzecjpZZWki Vsqf2etnklC51XUpejZbQ+qPSfiJwIWBrGQ6kUyDgeLo825Yk03F8NYuv0fRmF2M 1G9+h5QRRhnDupN+Rp7rDUIWFPW+0j796il8goAw1XRRMzv4tRnjqihgWhyLEysX JypOgy/b3cUSShruY7sbqxCAXMJFWfAMVeJMoQfcapD8xSyFKp3Cqjt99+kIHpzu DnLdSRn+PbbQIsZhB+Zurk4GlL99kKprq4LKz62au0dd2Gd/i4ixf+pnYustAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUG9kZKApFs7i6+WwGZSP4OkM1p7UwHwYDVR0j BBgwFoAUuIqU3KCeOmU8BvR4Q03HyPIeBRgwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzBhNDYzN2RmNWJhNzQzZmVhMWI0ODJiZTgyMzU4MThmLzAv Qjg4QTk0RENBMDlFM0E2NTNDMDZGNDc4NDM0REM3QzhGMjFFMDUxOC5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9CODhBOTREQ0EwOUUzQTY1M0MwNkY0Nzg0MzREQzdD OEYyMUUwNTE4LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzBhNDYz N2RmNWJhNzQzZmVhMWI0ODJiZTgyMzU4MThmLzAvQjg4QTk0RENBMDlFM0E2NTND MDZGNDc4NDM0REM3QzhGMjFFMDUxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJah0tY5sIXtAzlKhoTi oUcL4V9jEA9/JNRBgPUIhOBdGfoNxGvky4r9Zw0VeZN7nFfaDTY6CIW2wRjaaFpr l9IDwhm2KUJdEfuaQpCjq4/rDix6h4Hc16wKo2iqTzHD2k+8j8lTRG8vcoT9O1iu JbM+dVS6Afc/PKseBZyN+ijj4dzXDvjGr3pRm6NkwEfZP50RNU8ScDHhPgQKGEDr LLOCOt/wlCTilIYVzgQohcF008IBIVL0LnHvg75w6pQ2vWEoPIRoLPFUY5CplEVO LtRG/li332w32GFgDgEf4EuOxTlrVoyovYXXqoyL3xZ/7J1DPoe6oFXng4kJ2udr aFg= -----END CERTIFICATE-----Generated at Sun Dec 7 23:13:21 2025 by rpki-client