This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/1/B70DB680698C8AC70A7CB7CA607541E554249317.mft File: B70DB680698C8AC70A7CB7CA607541E554249317.mft (raw, json) Hash identifier: K6CQ8BYAtf226vqOaSGAS+ZR/4lh1y9XGU0CrSoocA8= Subject key identifier: 55:6E:FC:4C:20:EF:7B:67:22:C2:05:B6:DB:1B:E5:4A:53:CB:B1:12 Authority key identifier: B7:0D:B6:80:69:8C:8A:C7:0A:7C:B7:CA:60:75:41:E5:54:24:93:17 Certificate issuer: /CN=b70db680698c8ac70a7cb7ca607541e554249317 Certificate serial: 1EC93CE905A24BD8F0007F93FEDB99B2549B01EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tw22gGmMiscKfLfKYHVB5VQkkxc.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/1/B70DB680698C8AC70A7CB7CA607541E554249317.mft Manifest number: 029D Signing time: Mon 15 Dec 2025 23:42:03 +0000 Manifest this update: Mon 15 Dec 2025 23:37:03 +0000 Manifest next update: Wed 17 Dec 2025 01:52:03 +0000 Files and hashes: 1: B70DB680698C8AC70A7CB7CA607541E554249317.crl (hash: W9D8Mq1jJWvT4c8HXEgiATRv3aF3y5hIaHrd1QfX5DQ=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/1/B70DB680698C8AC70A7CB7CA607541E554249317.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/1/B70DB680698C8AC70A7CB7CA607541E554249317.mft rsync://rpki.ripe.net/repository/DEFAULT/tw22gGmMiscKfLfKYHVB5VQkkxc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:c9:3c:e9:05:a2:4b:d8:f0:00:7f:93:fe:db:99:b2:54:9b:01:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b70db680698c8ac70a7cb7ca607541e554249317 Validity Not Before: Dec 15 23:37:03 2025 GMT Not After : Dec 17 01:52:03 2025 GMT Subject: CN=556EFC4C20EF7B6722C205B6DB1BE54A53CBB112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d5:2a:79:a8:26:c6:5a:90:4a:87:43:8a:f9: 8b:05:c1:64:b6:e7:37:dc:88:5e:e2:7c:9a:fd:b4: 3d:89:e2:11:70:c0:06:37:a8:24:e8:00:0c:0e:38: fb:8c:75:dd:6c:6a:e8:60:6d:e0:79:ca:fe:8d:f9: db:ad:39:89:45:ed:c3:34:42:c8:e4:d2:88:a3:1f: 65:61:8f:50:92:0f:62:96:9c:7d:c7:83:02:93:29: f5:e8:80:3f:9d:19:cd:88:d5:77:e5:cb:0f:7e:8d: 1c:e0:22:49:b2:ee:5a:e4:44:da:2a:91:f1:2a:15: e5:6f:46:ec:66:04:0f:20:fd:94:ea:6a:88:23:a3: 06:8c:23:0e:5e:47:b0:3e:6e:f8:54:8e:be:66:ac: 7e:6a:72:88:fe:b1:ba:43:58:67:2f:22:39:b2:74: bb:63:10:cf:e8:7e:88:60:d8:16:a6:76:98:de:2d: 4d:f3:b4:4e:a5:7e:78:37:e6:a2:dd:2a:31:6f:9e: 92:71:73:68:79:eb:b4:ad:d1:46:bb:65:c3:8d:10: 0a:c8:15:3b:5c:c7:da:26:09:31:20:3d:62:ac:ec: 2e:9f:de:38:f0:c6:b9:dc:5e:2b:69:c4:09:2f:dc: f3:7c:e4:fe:4c:fe:75:10:af:e1:a9:1c:e1:9e:5a: c7:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:6E:FC:4C:20:EF:7B:67:22:C2:05:B6:DB:1B:E5:4A:53:CB:B1:12 X509v3 Authority Key Identifier: keyid:B7:0D:B6:80:69:8C:8A:C7:0A:7C:B7:CA:60:75:41:E5:54:24:93:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/1/B70DB680698C8AC70A7CB7CA607541E554249317.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tw22gGmMiscKfLfKYHVB5VQkkxc.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/1/B70DB680698C8AC70A7CB7CA607541E554249317.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:70:5f:4f:1c:16:d6:69:aa:94:50:9f:a3:da:7e:14:0a:00: 83:ea:2a:37:eb:71:72:1a:e3:e9:f3:90:74:22:8b:6a:4f:44: d4:c5:cb:fd:56:53:78:d2:9f:69:51:af:d1:a1:4a:7a:4a:88: 69:05:7f:63:6e:19:16:03:8f:8b:95:9c:ff:4f:8b:07:f5:5a: 09:a6:3a:d7:ea:28:49:29:81:38:71:68:63:77:f3:97:9c:f7: 25:be:d3:23:c4:c0:0f:34:89:ab:d1:96:c2:19:c8:0d:0d:30: 41:f7:7d:0d:c8:0c:7f:ca:a6:cb:5d:7a:3d:3d:ef:75:d6:8b: 90:c2:bc:23:d1:0f:84:d5:c8:9c:0b:e0:58:bb:bc:b6:a5:0c: d7:64:42:4f:55:81:a7:4b:5f:3a:21:ee:e6:b9:e1:f1:bb:25: 56:c8:c3:04:fb:e9:19:3d:b7:96:44:02:e1:bc:ce:98:a2:5c: 73:69:e6:35:f4:31:38:ff:b2:89:bb:f8:9e:5a:80:54:d2:0b: 42:46:05:b9:79:7d:38:ec:65:64:00:13:9c:1b:1d:ab:14:6e: 3f:42:d0:f8:30:b9:68:73:fc:ca:8b:c3:82:4f:78:05:d1:7d: 62:1a:29:6b:fd:5f:df:81:50:fd:02:44:2d:d4:53:6e:1f:47: 78:6b:6a:db -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUHsk86QWiS9jwAH+T/tuZslSbAeswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjcwZGI2ODA2OThjOGFjNzBhN2NiN2NhNjA3NTQxZTU1 NDI0OTMxNzAeFw0yNTEyMTUyMzM3MDNaFw0yNTEyMTcwMTUyMDNaMDMxMTAvBgNV BAMTKDU1NkVGQzRDMjBFRjdCNjcyMkMyMDVCNkRCMUJFNTRBNTNDQkIxMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf1Sp5qCbGWpBKh0OK+YsFwWS2 5zfciF7ifJr9tD2J4hFwwAY3qCToAAwOOPuMdd1sauhgbeB5yv6N+dutOYlF7cM0 Qsjk0oijH2Vhj1CSD2KWnH3HgwKTKfXogD+dGc2I1Xflyw9+jRzgIkmy7lrkRNoq kfEqFeVvRuxmBA8g/ZTqaogjowaMIw5eR7A+bvhUjr5mrH5qcoj+sbpDWGcvIjmy dLtjEM/ofohg2BamdpjeLU3ztE6lfng35qLdKjFvnpJxc2h567St0Ua7ZcONEArI FTtcx9omCTEgPWKs7C6f3jjwxrncXitpxAkv3PN85P5M/nUQr+GpHOGeWsftAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUVW78TCDve2ciwgW22xvlSlPLsRIwHwYDVR0j BBgwFoAUtw22gGmMiscKfLfKYHVB5VQkkxcwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzY0ODMyNjExYmEwNjRkNmI4ZjljMmI3YzczZmJkODRiLzEv QjcwREI2ODA2OThDOEFDNzBBN0NCN0NBNjA3NTQxRTU1NDI0OTMxNy5jcmwwZAYI KwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS9ERUZBVUxUL3R3MjJnR21NaXNjS2ZMZktZSFZCNVZRa2t4Yy5j ZXIwgZoGCCsGAQUFBwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9ycGtp LXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9jYV82NDgzMjYxMWJhMDY0ZDZi OGY5YzJiN2M3M2ZiZDg0Yi8xL0I3MERCNjgwNjk4QzhBQzcwQTdDQjdDQTYwNzU0 MUU1NTQyNDkzMTcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASg AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQArcF9PHBbWaaqUUJ+j2n4UCgCD6io363Fy GuPp85B0IotqT0TUxcv9VlN40p9pUa/RoUp6SohpBX9jbhkWA4+LlZz/T4sH9VoJ pjrX6ihJKYE4cWhjd/OXnPclvtMjxMAPNImr0ZbCGcgNDTBB930NyAx/yqbLXXo9 Pe911ouQwrwj0Q+E1cicC+BYu7y2pQzXZEJPVYGnS186Ie7mueHxuyVWyMME++kZ PbeWRALhvM6YolxzaeY19DE4/7KJu/ieWoBU0gtCRgW5eX047GVkABOcGx2rFG4/ QtD4MLloc/zKi8OCT3gF0X1iGilr/V/fgVD9AkQt1FNuH0d4a2rb -----END CERTIFICATE-----Generated at Tue Dec 16 06:33:22 2025 by rpki-client