This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft File: 4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft (raw, json) Hash identifier: K0DV2uw3RKPDiN6bryfs+rN4hojuprOzS5g8IGD48J4= Subject key identifier: 5A:30:14:EF:3A:39:F0:19:17:DF:60:97:74:BA:85:7A:8D:2D:BA:51 Authority key identifier: 4B:A4:51:1F:4B:81:C5:65:CE:D3:E7:0B:30:20:FB:D0:ED:05:56:2F Certificate issuer: /CN=4BA4511F4B81C565CED3E70B3020FBD0ED05562F Certificate serial: 3EF045FE20CB52A533E7D07AB85D0062183CD1B8 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft Manifest number: 02E0 Signing time: Tue 27 Jan 2026 02:44:12 +0000 Manifest this update: Tue 27 Jan 2026 02:39:12 +0000 Manifest next update: Wed 28 Jan 2026 06:16:12 +0000 Files and hashes: 1: 4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl (hash: 0MXxJwk+btMWMVLAFSGjSFoLNfR2dv1+mFeB+RnTXA8=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 06:16:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:f0:45:fe:20:cb:52:a5:33:e7:d0:7a:b8:5d:00:62:18:3c:d1:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BA4511F4B81C565CED3E70B3020FBD0ED05562F Validity Not Before: Jan 27 02:39:12 2026 GMT Not After : Jan 28 06:16:12 2026 GMT Subject: CN=5A3014EF3A39F01917DF609774BA857A8D2DBA51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:00:4e:23:19:53:24:0c:21:fd:f4:33:9e:8b: d6:d5:78:af:ba:e3:db:1e:d7:4d:af:bb:eb:e7:eb: db:64:3e:ce:01:12:e5:32:ff:b8:16:c5:af:ab:69: e6:79:3c:5e:db:0b:2e:84:96:f2:07:52:a3:01:a3: 45:0f:6f:f8:c4:a5:b7:5b:4a:43:c1:08:f5:76:49: 82:49:ce:6f:ab:d5:0f:10:16:11:a7:e9:f0:9d:76: 97:ae:38:f7:7d:46:0e:19:9a:a3:73:d2:ea:d2:ce: ad:e3:58:14:99:c3:23:9b:82:f6:c8:41:7c:42:71: 69:f9:7e:86:77:67:38:f2:4e:b9:90:33:4f:f9:f2: 98:dc:89:a0:85:b6:09:3f:08:0b:87:5e:78:e6:25: 40:5f:dd:44:92:f7:93:99:21:39:a5:eb:a8:19:1d: b1:ab:6e:65:06:62:e7:5e:4d:5a:b5:a6:a2:65:8d: ab:89:89:e8:4d:b3:f3:0a:50:00:87:63:38:2e:a0: 60:67:03:87:cf:65:d6:22:de:10:f1:50:d5:a9:11: a1:6d:6d:43:e2:25:3d:88:8b:67:18:2a:18:a5:96: 4f:a1:ab:89:80:64:04:fd:72:e9:a2:00:de:e0:53: 62:62:26:e6:f6:54:52:50:de:88:bd:65:bf:76:14: 05:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:30:14:EF:3A:39:F0:19:17:DF:60:97:74:BA:85:7A:8D:2D:BA:51 X509v3 Authority Key Identifier: keyid:4B:A4:51:1F:4B:81:C5:65:CE:D3:E7:0B:30:20:FB:D0:ED:05:56:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:b8:33:81:0f:ad:4c:a1:ef:f9:61:11:02:71:50:8f:1c:e5: 17:dd:2f:a5:7b:4e:8d:ab:a7:c8:ed:29:cd:0e:5c:44:8e:ad: 6c:9e:13:76:6d:25:8f:13:04:5b:8f:b1:00:9f:98:a5:8d:a8: e9:24:7b:be:b4:7e:7d:f3:5b:76:e5:92:87:77:80:f8:3c:e5: 71:7b:12:fd:0e:3d:71:bc:c9:0c:a8:45:9a:7d:48:0c:86:db: bb:18:40:ac:d1:59:d6:c1:84:2a:e5:3a:2e:8c:16:cc:17:3d: 86:47:71:4f:f3:9f:0d:0a:8d:8f:91:e8:06:6a:76:41:62:34: e1:06:c5:0e:5c:b3:ea:75:4f:cf:66:70:6e:b0:62:9f:3d:67: 8e:85:89:72:84:1c:d2:07:7b:75:39:c1:51:1d:84:a3:90:3b: b1:9e:58:22:63:1e:ca:3c:9c:6b:19:88:fe:62:54:9a:fa:d6: f2:b2:7d:e3:3f:38:bc:b0:5b:ef:84:b1:12:6f:87:32:5f:b2: 2d:1c:3a:02:5f:39:7c:3a:20:c0:5d:c2:06:4b:14:e0:f3:b4: 61:58:16:5d:c3:1f:39:e9:00:43:d2:a4:05:4d:83:36:d7:c0: b0:6b:11:61:87:c7:83:c5:33:9f:67:0b:5e:ff:b7:96:6c:d7: 43:41:d3:bb -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUPvBF/iDLUqUz59B6uF0AYhg80bgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJBNDUxMUY0QjgxQzU2NUNFRDNFNzBCMzAyMEZCRDBF RDA1NTYyRjAeFw0yNjAxMjcwMjM5MTJaFw0yNjAxMjgwNjE2MTJaMDMxMTAvBgNV BAMTKDVBMzAxNEVGM0EzOUYwMTkxN0RGNjA5Nzc0QkE4NTdBOEQyREJBNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPAE4jGVMkDCH99DOei9bVeK+6 49se102vu+vn69tkPs4BEuUy/7gWxa+raeZ5PF7bCy6ElvIHUqMBo0UPb/jEpbdb SkPBCPV2SYJJzm+r1Q8QFhGn6fCddpeuOPd9Rg4ZmqNz0urSzq3jWBSZwyObgvbI QXxCcWn5foZ3ZzjyTrmQM0/58pjciaCFtgk/CAuHXnjmJUBf3USS95OZITml66gZ HbGrbmUGYudeTVq1pqJljauJiehNs/MKUACHYzguoGBnA4fPZdYi3hDxUNWpEaFt bUPiJT2Ii2cYKhillk+hq4mAZAT9cumiAN7gU2JiJub2VFJQ3oi9Zb92FAU7AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUWjAU7zo58BkX32CXdLqFeo0tulEwHwYDVR0j BBgwFoAUS6RRH0uBxWXO0+cLMCD70O0FVi8wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzk3M2U3YTk4YTcxYjQ5ZmZiYjIyYjc2ZWQ1ZjEyOWUyLzAv NEJBNDUxMUY0QjgxQzU2NUNFRDNFNzBCMzAyMEZCRDBFRDA1NTYyRi5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy80QkE0NTExRjRCODFDNTY1Q0VEM0U3MEIzMDIwRkJE MEVEMDU1NjJGLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzk3M2U3 YTk4YTcxYjQ5ZmZiYjIyYjc2ZWQ1ZjEyOWUyLzAvNEJBNDUxMUY0QjgxQzU2NUNF RDNFNzBCMzAyMEZCRDBFRDA1NTYyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAIW4M4EPrUyh7/lhEQJx UI8c5RfdL6V7To2rp8jtKc0OXESOrWyeE3ZtJY8TBFuPsQCfmKWNqOkke760fn3z W3blkod3gPg85XF7Ev0OPXG8yQyoRZp9SAyG27sYQKzRWdbBhCrlOi6MFswXPYZH cU/znw0KjY+R6AZqdkFiNOEGxQ5cs+p1T89mcG6wYp89Z46FiXKEHNIHe3U5wVEd hKOQO7GeWCJjHso8nGsZiP5iVJr61vKyfeM/OLywW++EsRJvhzJfsi0cOgJfOXw6 IMBdwgZLFODztGFYFl3DHznpAEPSpAVNgzbXwLBrEWGHx4PFM59nC17/t5Zs10NB 07s= -----END CERTIFICATE-----Generated at Wed Jan 28 00:06:31 2026 by rpki-client