This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft File: 4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft (raw, json) Hash identifier: CKsbTr1nY6/GxbqhL9i2VZq8v5WG+9CFKbusHwSRsoQ= Subject key identifier: 90:3E:C0:22:5E:69:FF:B1:9C:37:AE:13:89:E8:58:2D:53:FC:78:80 Authority key identifier: 4B:A4:51:1F:4B:81:C5:65:CE:D3:E7:0B:30:20:FB:D0:ED:05:56:2F Certificate issuer: /CN=4BA4511F4B81C565CED3E70B3020FBD0ED05562F Certificate serial: 68CAAFB8BF40F575184F23C6D55AF49446DEFE71 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft Manifest number: 02A4 Signing time: Fri 12 Dec 2025 05:47:19 +0000 Manifest this update: Fri 12 Dec 2025 05:42:18 +0000 Manifest next update: Sat 13 Dec 2025 08:24:18 +0000 Files and hashes: 1: 4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl (hash: 5mvsrItqY148QHjSSRmCYHke/f1NRGt85NsOz5ANgxk=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:24:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:ca:af:b8:bf:40:f5:75:18:4f:23:c6:d5:5a:f4:94:46:de:fe:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BA4511F4B81C565CED3E70B3020FBD0ED05562F Validity Not Before: Dec 12 05:42:18 2025 GMT Not After : Dec 13 08:24:18 2025 GMT Subject: CN=903EC0225E69FFB19C37AE1389E8582D53FC7880 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b1:58:d1:44:1c:c9:6c:41:a9:ae:21:32:b1: 7f:e1:39:67:c3:a5:c2:75:87:db:2c:b8:64:3d:e7: 30:87:13:3e:6f:e5:1c:a5:c7:30:b9:a8:03:9b:c0: 84:5f:28:c8:32:d5:5f:6b:47:aa:64:12:87:61:62: 2c:ec:c3:64:41:c3:86:01:0a:c8:bf:bd:ed:78:23: ba:e8:8a:d4:49:63:20:ab:b7:5b:26:1a:96:e7:56: be:9b:44:49:a7:12:a8:e1:24:f2:7c:45:d2:d2:d4: 07:19:c5:a8:4c:0b:87:32:98:d1:89:f5:6e:88:13: 8a:07:b6:a9:de:2a:39:c0:ee:e9:e4:9a:e6:87:a0: ba:b7:f3:b2:0f:8d:75:d5:06:4d:e0:f4:0b:66:80: 9b:11:b0:17:62:90:d7:0d:55:50:58:ae:7d:86:d2: 22:4e:91:b0:09:9f:59:92:a1:a2:04:9d:eb:e5:d8: ae:a7:cf:e9:8e:9a:d4:d9:04:84:7a:b2:30:47:21: 65:66:b0:56:25:dd:41:ff:e7:92:04:1c:d9:87:95: 51:1a:c2:02:ff:f1:c7:e7:8a:59:24:c1:af:57:9d: 03:b4:7d:85:09:cf:95:9b:64:3d:f9:fd:47:aa:bf: e0:32:af:1f:4e:ea:4c:7b:48:d9:f1:af:24:3c:e1: 7d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:3E:C0:22:5E:69:FF:B1:9C:37:AE:13:89:E8:58:2D:53:FC:78:80 X509v3 Authority Key Identifier: keyid:4B:A4:51:1F:4B:81:C5:65:CE:D3:E7:0B:30:20:FB:D0:ED:05:56:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:89:e0:d3:ed:43:4f:26:a9:58:ce:73:f7:1c:97:eb:16:4b: cb:56:45:fb:eb:41:c4:77:1d:13:52:78:71:7c:21:62:88:32: 95:1e:5b:59:a1:14:55:3f:c9:d8:49:e5:5c:8e:72:7f:b3:6c: 79:63:e2:34:6e:01:ed:e9:87:54:3b:cc:e3:ab:5d:8f:49:6c: b4:c2:c0:c0:19:25:45:34:c5:30:f1:74:59:db:cb:69:0c:26: ea:90:e2:12:9d:97:4a:02:22:61:3d:b8:88:c5:66:4c:60:59: f0:6a:aa:ef:f4:8c:7b:c0:9a:bf:6d:e8:74:7f:cb:40:26:db: 47:86:12:74:97:c5:61:1b:65:f7:e7:b0:50:7f:56:ed:0c:5d: 3b:f3:a0:65:57:57:79:00:5a:58:ab:2e:7d:3d:a6:78:78:fd: ed:50:9f:d9:a5:b4:61:2b:2f:a6:e3:52:42:8d:fd:7b:54:9d: c2:ee:ca:cb:39:0b:09:09:cf:1a:96:d9:72:5e:34:a6:f2:c2: de:2f:6f:c1:94:ee:f7:9d:d9:86:cd:e6:bb:ba:08:30:61:a0: 78:df:d4:a7:c0:20:a4:ce:a4:11:e5:58:83:6f:1a:cf:bd:d1: 56:d9:1f:78:d1:4c:44:b0:b4:41:1c:fb:2e:96:73:fb:37:5b: ef:5c:4a:31 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUaMqvuL9A9XUYTyPG1Vr0lEbe/nEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJBNDUxMUY0QjgxQzU2NUNFRDNFNzBCMzAyMEZCRDBF RDA1NTYyRjAeFw0yNTEyMTIwNTQyMThaFw0yNTEyMTMwODI0MThaMDMxMTAvBgNV BAMTKDkwM0VDMDIyNUU2OUZGQjE5QzM3QUUxMzg5RTg1ODJENTNGQzc4ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZsVjRRBzJbEGpriEysX/hOWfD pcJ1h9ssuGQ95zCHEz5v5RylxzC5qAObwIRfKMgy1V9rR6pkEodhYizsw2RBw4YB Csi/ve14I7roitRJYyCrt1smGpbnVr6bREmnEqjhJPJ8RdLS1AcZxahMC4cymNGJ 9W6IE4oHtqneKjnA7unkmuaHoLq387IPjXXVBk3g9AtmgJsRsBdikNcNVVBYrn2G 0iJOkbAJn1mSoaIEnevl2K6nz+mOmtTZBIR6sjBHIWVmsFYl3UH/55IEHNmHlVEa wgL/8cfnilkkwa9XnQO0fYUJz5WbZD35/Ueqv+Ayrx9O6kx7SNnxryQ84X0NAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUkD7AIl5p/7GcN64TiehYLVP8eIAwHwYDVR0j BBgwFoAUS6RRH0uBxWXO0+cLMCD70O0FVi8wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzk3M2U3YTk4YTcxYjQ5ZmZiYjIyYjc2ZWQ1ZjEyOWUyLzAv NEJBNDUxMUY0QjgxQzU2NUNFRDNFNzBCMzAyMEZCRDBFRDA1NTYyRi5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy80QkE0NTExRjRCODFDNTY1Q0VEM0U3MEIzMDIwRkJE MEVEMDU1NjJGLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzk3M2U3 YTk4YTcxYjQ5ZmZiYjIyYjc2ZWQ1ZjEyOWUyLzAvNEJBNDUxMUY0QjgxQzU2NUNF RDNFNzBCMzAyMEZCRDBFRDA1NTYyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGOJ4NPtQ08mqVjOc/cc l+sWS8tWRfvrQcR3HRNSeHF8IWKIMpUeW1mhFFU/ydhJ5VyOcn+zbHlj4jRuAe3p h1Q7zOOrXY9JbLTCwMAZJUU0xTDxdFnby2kMJuqQ4hKdl0oCImE9uIjFZkxgWfBq qu/0jHvAmr9t6HR/y0Am20eGEnSXxWEbZffnsFB/Vu0MXTvzoGVXV3kAWlirLn09 pnh4/e1Qn9mltGErL6bjUkKN/XtUncLuyss5CwkJzxqW2XJeNKbywt4vb8GU7ved 2YbN5ru6CDBhoHjf1KfAIKTOpBHlWINvGs+90VbZH3jRTESwtEEc+y6Wc/s3W+9c SjE= -----END CERTIFICATE-----Generated at Fri Dec 12 22:47:14 2025 by rpki-client