This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft File: AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft (raw, json) Hash identifier: 745EC/S+aB1Wf1B9+e0dSTcNXXDp902nZgcn1tQXo80= Subject key identifier: F1:B9:65:BC:1B:64:18:B8:6B:2D:EA:AE:0C:E2:45:72:43:43:14:03 Authority key identifier: AF:5A:EE:5A:C3:83:5D:AD:FF:52:DC:E6:BE:76:F9:83:2B:C3:D4:39 Certificate issuer: /CN=AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439 Certificate serial: 1CB6323712F2DD575A9347B2FE9B941717567D91 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft Manifest number: 029D Signing time: Sat 13 Dec 2025 05:19:56 +0000 Manifest this update: Sat 13 Dec 2025 05:14:56 +0000 Manifest next update: Sun 14 Dec 2025 08:58:56 +0000 Files and hashes: 1: AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl (hash: MTz7qPUdi9bep5S5rgVBieEgjEoJgsAHM8XT3wFvlxM=) 2: 326131313a663263303a666663633a3a2f34382d3438203d3e20323135373638.roa (hash: 40KX5Azg+QOWUNYOrdl6IsWrdX+iJJgcObJYGtl3Q6w=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 08:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:b6:32:37:12:f2:dd:57:5a:93:47:b2:fe:9b:94:17:17:56:7d:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439 Validity Not Before: Dec 13 05:14:56 2025 GMT Not After : Dec 14 08:58:56 2025 GMT Subject: CN=F1B965BC1B6418B86B2DEAAE0CE2457243431403 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:94:e1:72:74:db:17:28:31:69:3a:7c:7d:9d: 52:46:35:9c:86:25:a6:01:b2:8f:bc:83:11:e5:26: 7f:a2:29:68:f1:96:b3:d8:d0:c8:fd:60:cf:e0:2b: 5a:ae:63:1b:45:42:f3:71:16:82:a5:3e:37:0c:86: d8:ed:ab:a5:b7:0a:37:7e:d3:e1:50:3a:3b:56:d9: a3:2f:9d:ca:e6:8e:40:fa:96:aa:40:10:be:70:4f: 07:9c:e0:f0:e3:c5:96:82:ed:88:f2:85:25:16:68: 81:67:3b:a1:a3:77:34:24:f8:2c:ed:c9:8c:f3:ac: 8a:4c:7d:07:a1:ed:ac:2e:10:b8:57:5b:42:29:9e: bc:b8:51:11:79:f7:ef:41:93:54:37:31:ce:7d:c9: 81:ca:04:89:4b:4d:7e:53:56:a9:5c:91:1e:32:5d: 12:9f:40:53:28:f4:c1:c1:35:45:82:1c:19:3f:eb: ab:fa:b0:af:08:2c:d0:5a:20:e4:d5:80:66:37:fd: 52:ea:00:55:5d:82:16:9c:6c:46:b9:1f:dd:5b:81: 75:53:bb:ec:85:36:31:bf:13:c7:01:30:ca:3e:f5: 17:f1:1c:31:29:96:b1:a1:86:a2:88:cf:13:0a:f6: 3d:d2:22:1b:1b:94:60:0c:66:07:eb:d0:23:ea:37: 68:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:B9:65:BC:1B:64:18:B8:6B:2D:EA:AE:0C:E2:45:72:43:43:14:03 X509v3 Authority Key Identifier: keyid:AF:5A:EE:5A:C3:83:5D:AD:FF:52:DC:E6:BE:76:F9:83:2B:C3:D4:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:53:93:35:ca:11:0e:d8:bd:05:66:29:e0:e4:84:e2:1c:6b: 7c:06:77:f2:f8:cc:c8:98:06:f0:31:a6:0f:f7:02:f1:f2:59: e5:da:f8:4b:a2:d6:ed:bd:53:62:68:73:98:e7:f8:3a:15:36: 01:1d:f0:f0:2f:cb:50:f2:ca:ab:22:91:18:4b:d7:6e:64:b8: 50:2c:5d:52:b4:69:64:02:d3:ab:11:e5:bc:cd:1a:c4:a9:96: 33:03:53:41:bd:a9:e3:15:08:97:77:51:81:ac:a6:4d:e9:3f: f7:15:38:10:f2:65:b0:f4:f4:bb:67:fd:fc:8b:99:82:f7:5f: 11:87:c3:7c:2d:86:94:07:40:9b:c3:10:00:f6:18:42:17:da: 55:4d:3b:98:4f:73:2d:9e:f7:48:bb:fd:54:11:1e:ff:b0:83: 22:9a:eb:08:73:61:79:5f:00:4f:1f:d8:12:18:41:9b:9a:ed: 34:ba:00:6e:73:9c:ee:0e:06:bb:92:4b:de:53:ca:5d:cb:e0: 17:29:3c:72:52:e4:7f:3e:ca:d9:d6:9d:d7:f1:d2:02:99:0e: 49:cb:46:22:e1:3c:ec:4d:7d:44:0e:35:e6:9a:ea:79:dc:21: 75:b9:03:6e:63:5a:7e:f0:1b:91:5d:3b:33:c6:33:32:f9:47: ae:c1:f7:9f -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUHLYyNxLy3Vdak0ey/puUFxdWfZEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY1QUVFNUFDMzgzNURBREZGNTJEQ0U2QkU3NkY5ODMy QkMzRDQzOTAeFw0yNTEyMTMwNTE0NTZaFw0yNTEyMTQwODU4NTZaMDMxMTAvBgNV BAMTKEYxQjk2NUJDMUI2NDE4Qjg2QjJERUFBRTBDRTI0NTcyNDM0MzE0MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWlOFydNsXKDFpOnx9nVJGNZyG JaYBso+8gxHlJn+iKWjxlrPY0Mj9YM/gK1quYxtFQvNxFoKlPjcMhtjtq6W3Cjd+ 0+FQOjtW2aMvncrmjkD6lqpAEL5wTwec4PDjxZaC7YjyhSUWaIFnO6GjdzQk+Czt yYzzrIpMfQeh7awuELhXW0Ipnry4URF59+9Bk1Q3Mc59yYHKBIlLTX5TVqlckR4y XRKfQFMo9MHBNUWCHBk/66v6sK8ILNBaIOTVgGY3/VLqAFVdghacbEa5H91bgXVT u+yFNjG/E8cBMMo+9RfxHDEplrGhhqKIzxMK9j3SIhsblGAMZgfr0CPqN2hrAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU8bllvBtkGLhrLequDOJFckNDFAMwHwYDVR0j BBgwFoAUr1ruWsODXa3/Utzmvnb5gyvD1DkwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2E4NDA1ZWI1M2RlNDQ2YTk5NGQyMWYzYzI3ZWEzZjk4LzAv QUY1QUVFNUFDMzgzNURBREZGNTJEQ0U2QkU3NkY5ODMyQkMzRDQzOS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9BRjVBRUU1QUMzODM1REFERkY1MkRDRTZCRTc2Rjk4 MzJCQzNENDM5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2E4NDA1 ZWI1M2RlNDQ2YTk5NGQyMWYzYzI3ZWEzZjk4LzAvQUY1QUVFNUFDMzgzNURBREZG NTJEQ0U2QkU3NkY5ODMyQkMzRDQzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJlTkzXKEQ7YvQVmKeDk hOIca3wGd/L4zMiYBvAxpg/3AvHyWeXa+Eui1u29U2Joc5jn+DoVNgEd8PAvy1Dy yqsikRhL125kuFAsXVK0aWQC06sR5bzNGsSpljMDU0G9qeMVCJd3UYGspk3pP/cV OBDyZbD09Ltn/fyLmYL3XxGHw3wthpQHQJvDEAD2GEIX2lVNO5hPcy2e90i7/VQR Hv+wgyKa6whzYXlfAE8f2BIYQZua7TS6AG5znO4OBruSS95Tyl3L4BcpPHJS5H8+ ytnWndfx0gKZDknLRiLhPOxNfUQONeaa6nncIXW5A25jWn7wG5FdOzPGMzL5R67B 958= -----END CERTIFICATE-----Generated at Sat Dec 13 18:06:43 2025 by rpki-client