This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_339bb4cff3b44732854d9aeff1067d91/0/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.mft File: 69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.mft (raw, json) Hash identifier: /aP3jjsUhvEoklIZ0Cc34/CjPJJq+lnz2Jq0FDA+rI8= Subject key identifier: 86:9F:A4:49:CA:26:94:91:98:CC:6A:6E:54:09:65:30:8A:26:90:E4 Authority key identifier: 69:BD:D1:09:2A:CE:9A:10:E4:C9:4F:AD:8B:2D:A3:DD:CC:F6:4A:9E Certificate issuer: /CN=69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E Certificate serial: 4AE12C98456015DF81203BA4DE64E7FE548E8BBB Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_339bb4cff3b44732854d9aeff1067d91/0/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.mft Manifest number: 029E Signing time: Fri 12 Dec 2025 13:38:21 +0000 Manifest this update: Fri 12 Dec 2025 13:33:21 +0000 Manifest next update: Sat 13 Dec 2025 17:11:21 +0000 Files and hashes: 1: 69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.crl (hash: AsP2KzJ07sbTqC26ImU7ZY7ETkPYM2i+HKr/DIYfNKo=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_339bb4cff3b44732854d9aeff1067d91/0/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_339bb4cff3b44732854d9aeff1067d91/0/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 13:14:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:e1:2c:98:45:60:15:df:81:20:3b:a4:de:64:e7:fe:54:8e:8b:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E Validity Not Before: Dec 12 13:33:21 2025 GMT Not After : Dec 13 17:11:21 2025 GMT Subject: CN=869FA449CA26949198CC6A6E540965308A2690E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a6:2d:58:69:45:8d:62:e9:26:e7:8b:fe:2f: ca:60:77:b4:5c:f5:66:08:bd:d3:dd:bf:db:43:43: 04:b9:7d:fc:79:c5:33:69:04:99:93:40:34:9e:d4: 54:9e:2e:7a:4d:a6:cb:e8:9e:7a:f6:b3:9b:0c:20: 30:04:03:d4:42:93:5a:7a:b6:c6:d9:4b:fd:19:c0: f8:fe:4b:0f:0a:ab:9c:a3:31:cf:df:55:0e:10:6d: b4:4f:67:6b:b8:45:4f:41:b4:77:da:2e:a1:01:d3: 8d:2d:d4:92:50:af:0b:ae:cb:d9:d5:70:88:8a:9c: 64:a4:ca:15:ef:15:f5:6c:48:ca:1c:26:13:62:fe: 11:58:f3:15:88:a5:a3:f1:2a:b4:9a:4b:a0:3f:ee: 9a:0d:0c:87:3e:7b:17:0e:5d:03:83:29:5a:42:6c: 8c:3c:1c:ce:69:42:6d:f9:af:55:0b:b2:71:02:4f: 5f:da:84:91:42:f6:b9:13:31:53:0f:f0:e1:45:33: 54:03:15:39:4f:37:6f:8e:c3:c2:ae:4b:cc:7a:49: ef:60:67:62:21:d5:5b:7a:5e:d4:40:da:08:84:b1: 17:9f:c6:ab:92:39:65:90:2c:28:ea:bc:2f:58:47: 8b:b3:89:fd:69:a4:5d:ad:86:09:fb:0a:6f:b5:7c: ec:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:9F:A4:49:CA:26:94:91:98:CC:6A:6E:54:09:65:30:8A:26:90:E4 X509v3 Authority Key Identifier: keyid:69:BD:D1:09:2A:CE:9A:10:E4:C9:4F:AD:8B:2D:A3:DD:CC:F6:4A:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_339bb4cff3b44732854d9aeff1067d91/0/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_339bb4cff3b44732854d9aeff1067d91/0/69BDD1092ACE9A10E4C94FAD8B2DA3DDCCF64A9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:72:14:12:67:24:45:81:88:35:8c:2d:3c:65:d1:93:4c:8a: 2a:d3:55:95:cf:21:df:f8:7b:ba:32:c7:b1:60:94:92:c9:16: fa:8a:0f:2b:24:a2:fb:2b:ac:17:e0:2b:b2:59:98:70:0d:59: 33:c8:fb:95:7c:e5:2d:e5:d4:0d:21:2b:6f:60:54:6f:03:3a: af:77:6f:d4:4d:93:38:dd:85:01:85:da:50:7d:ed:fb:cc:68: 13:fb:7b:f7:97:c3:93:95:0c:32:c4:c3:03:a7:42:f7:75:3f: 6a:8d:2f:d5:06:e6:1c:2f:d9:49:60:fa:99:cc:91:42:d4:a1: 94:3e:1a:18:9d:ea:03:d2:4a:88:7d:f0:c2:05:f2:46:2b:17: 29:fe:5d:c2:db:6f:09:f6:ea:7c:5c:c3:a6:74:bd:78:36:28: f3:11:50:64:78:0a:0f:28:25:7a:14:4a:50:c6:03:3b:8a:ba: 35:8e:7d:d3:33:af:f8:76:6a:83:98:df:56:af:6d:66:f4:7d: 3a:64:7d:03:23:24:0e:bc:3b:fe:c0:47:3a:6d:2d:83:f8:14: 37:4d:46:74:4d:a9:a0:c7:f9:96:64:d9:e0:80:6b:36:49:3a: ec:81:a3:4d:69:b8:fa:bd:1c:6c:3f:59:64:2c:7b:6a:fd:5a: 66:02:84:67 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUSuEsmEVgFd+BIDuk3mTn/lSOi7swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjlCREQxMDkyQUNFOUExMEU0Qzk0RkFEOEIyREEzRERD Q0Y2NEE5RTAeFw0yNTEyMTIxMzMzMjFaFw0yNTEyMTMxNzExMjFaMDMxMTAvBgNV BAMTKDg2OUZBNDQ5Q0EyNjk0OTE5OENDNkE2RTU0MDk2NTMwOEEyNjkwRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3pi1YaUWNYukm54v+L8pgd7Rc 9WYIvdPdv9tDQwS5ffx5xTNpBJmTQDSe1FSeLnpNpsvonnr2s5sMIDAEA9RCk1p6 tsbZS/0ZwPj+Sw8Kq5yjMc/fVQ4QbbRPZ2u4RU9BtHfaLqEB040t1JJQrwuuy9nV cIiKnGSkyhXvFfVsSMocJhNi/hFY8xWIpaPxKrSaS6A/7poNDIc+excOXQODKVpC bIw8HM5pQm35r1ULsnECT1/ahJFC9rkTMVMP8OFFM1QDFTlPN2+Ow8KuS8x6Se9g Z2Ih1Vt6XtRA2giEsRefxquSOWWQLCjqvC9YR4uzif1ppF2thgn7Cm+1fOz9AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUhp+kScomlJGYzGpuVAllMIomkOQwHwYDVR0j BBgwFoAUab3RCSrOmhDkyU+tiy2j3cz2Sp4wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzMzOWJiNGNmZjNiNDQ3MzI4NTRkOWFlZmYxMDY3ZDkxLzAv NjlCREQxMDkyQUNFOUExMEU0Qzk0RkFEOEIyREEzRERDQ0Y2NEE5RS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy82OUJERDEwOTJBQ0U5QTEwRTRDOTRGQUQ4QjJEQTNE RENDRjY0QTlFLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzMzOWJi NGNmZjNiNDQ3MzI4NTRkOWFlZmYxMDY3ZDkxLzAvNjlCREQxMDkyQUNFOUExMEU0 Qzk0RkFEOEIyREEzRERDQ0Y2NEE5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHVyFBJnJEWBiDWMLTxl 0ZNMiirTVZXPId/4e7oyx7FglJLJFvqKDyskovsrrBfgK7JZmHANWTPI+5V85S3l 1A0hK29gVG8DOq93b9RNkzjdhQGF2lB97fvMaBP7e/eXw5OVDDLEwwOnQvd1P2qN L9UG5hwv2Ulg+pnMkULUoZQ+Ghid6gPSSoh98MIF8kYrFyn+XcLbbwn26nxcw6Z0 vXg2KPMRUGR4Cg8oJXoUSlDGAzuKujWOfdMzr/h2aoOY31avbWb0fTpkfQMjJA68 O/7ARzptLYP4FDdNRnRNqaDH+ZZk2eCAazZJOuyBo01puPq9HGw/WWQse2r9WmYC hGc= -----END CERTIFICATE-----Generated at Fri Dec 12 22:47:30 2025 by rpki-client