This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft File: 2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft (raw, json) Hash identifier: 6EticzP6SDnBYRe1BRjkQlOiWe3PG1rqkZFpl73Or8o= Subject key identifier: BB:D3:E6:54:59:B2:E4:36:23:D5:48:37:25:AE:24:FF:6A:64:5D:DF Authority key identifier: 2B:3B:97:33:4D:A0:69:78:18:5D:AC:76:A2:F3:EA:35:85:E8:23:1E Certificate issuer: /CN=2B3B97334DA06978185DAC76A2F3EA3585E8231E Certificate serial: 02691F423CE824EB29BAE20E54B7BD5A4FC3A9EF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/2B3B97334DA06978185DAC76A2F3EA3585E8231E.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft Manifest number: 20 Signing time: Sun 07 Dec 2025 15:36:51 +0000 Manifest this update: Sun 07 Dec 2025 15:31:51 +0000 Manifest next update: Mon 08 Dec 2025 18:45:51 +0000 Files and hashes: 1: 2B3B97334DA06978185DAC76A2F3EA3585E8231E.crl (hash: p8KqAMgZYfadQ8h7agPfweJySqkKcOtxELX+YLGhNfk=) 2: 326131313a663263303a666665303a3a2f34382d3438203d3e20323134373439.roa (hash: 1GvfKtWMgom1LeK1xMf1awTIi3U4xQIJrbQco2SMjvs=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/2B3B97334DA06978185DAC76A2F3EA3585E8231E.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 17:44:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:69:1f:42:3c:e8:24:eb:29:ba:e2:0e:54:b7:bd:5a:4f:c3:a9:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B3B97334DA06978185DAC76A2F3EA3585E8231E Validity Not Before: Dec 7 15:31:51 2025 GMT Not After : Dec 8 18:45:51 2025 GMT Subject: CN=BBD3E65459B2E43623D5483725AE24FF6A645DDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c3:93:e1:1c:a3:0f:4b:74:d0:fe:04:e3:f2: ae:d5:70:03:40:81:25:75:eb:82:a7:9e:92:25:de: 5d:5f:c2:d9:aa:5b:e5:f7:ac:11:9b:6e:6a:a8:c1: 78:c2:f9:fa:62:69:ab:12:e4:72:bb:70:3f:28:10: 1b:c0:d4:1e:98:4b:2f:a4:58:97:ec:ae:23:a7:7e: 9f:31:f6:ef:79:98:b3:7e:b5:a7:f9:d9:b7:ad:41: 01:04:87:6e:b7:95:b5:f0:df:da:b5:13:e7:e0:04: 40:00:c2:31:77:0c:09:07:5c:29:0e:69:5e:64:1c: e7:b8:1d:ed:9a:1d:52:63:d6:37:2a:9e:6b:ef:ed: 37:09:ea:d5:5a:62:e8:d6:8f:fd:6f:87:d0:6b:3a: 92:13:23:e5:21:20:26:e1:b0:51:a0:71:a4:d5:f0: b4:b7:f1:bf:98:13:bf:ce:5f:a1:07:c2:fa:74:8f: 62:0a:e2:63:fb:cb:21:a2:bb:af:3e:29:a8:0c:b7: 7c:09:e1:f9:e5:b1:35:47:ba:62:c9:f1:6d:71:01: 7f:78:77:b7:82:e5:82:58:59:89:9d:c1:2d:dd:76: e4:6f:07:58:a5:51:05:fd:d6:5d:b9:d7:78:83:14: a1:5e:a2:6d:db:f1:26:df:c7:71:05:6b:cc:4b:0a: d7:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:D3:E6:54:59:B2:E4:36:23:D5:48:37:25:AE:24:FF:6A:64:5D:DF X509v3 Authority Key Identifier: keyid:2B:3B:97:33:4D:A0:69:78:18:5D:AC:76:A2:F3:EA:35:85:E8:23:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/2B3B97334DA06978185DAC76A2F3EA3585E8231E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:12:24:b7:8f:b4:f8:a5:60:5a:15:c2:e5:f0:23:05:f7:31: 4d:42:a8:a8:8b:8e:b2:47:0a:9f:de:c7:a6:e5:ba:5c:54:d9: 0c:9b:92:9e:79:75:fc:b3:d5:38:fc:9c:a9:9e:e8:98:9b:f2: e7:67:c7:cc:64:a7:84:90:55:c5:1b:c0:a6:3b:b1:19:46:8f: f7:a0:24:28:37:fe:ff:fc:b9:2e:13:98:35:4c:fc:fc:34:a2: 69:88:41:00:ac:9e:0a:02:4c:b7:ac:0f:fa:19:c9:04:d5:4c: 37:e6:4a:f4:a7:93:f5:4f:48:e9:fa:bc:0f:21:65:f4:84:e5: 6c:6b:53:99:ce:34:ee:cc:6b:b6:a5:5f:74:2c:c3:fe:1b:64: 91:2b:e7:14:93:e6:c0:71:41:12:82:8a:b7:53:f0:85:1a:24: 54:5c:f6:98:72:59:28:0f:60:d2:7b:52:c8:67:4c:02:cc:b0: 27:ca:ce:9f:cc:bf:41:dc:8c:c7:d6:51:6c:7f:7c:2e:b9:de: 58:e0:6b:3b:6e:74:ba:92:a2:68:49:39:42:45:d3:ef:be:f8: 7d:86:bb:09:f6:f0:50:44:5a:b7:2d:8b:d6:95:3f:b7:d6:7c: 7e:30:fb:68:73:ad:42:20:43:8c:c2:c6:a2:a2:04:06:a5:a1: 65:85:2c:dc -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUAmkfQjzoJOspuuIOVLe9Wk/Dqe8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkIzQjk3MzM0REEwNjk3ODE4NURBQzc2QTJGM0VBMzU4 NUU4MjMxRTAeFw0yNTEyMDcxNTMxNTFaFw0yNTEyMDgxODQ1NTFaMDMxMTAvBgNV BAMTKEJCRDNFNjU0NTlCMkU0MzYyM0Q1NDgzNzI1QUUyNEZGNkE2NDVEREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCw5PhHKMPS3TQ/gTj8q7VcANA gSV164KnnpIl3l1fwtmqW+X3rBGbbmqowXjC+fpiaasS5HK7cD8oEBvA1B6YSy+k WJfsriOnfp8x9u95mLN+taf52betQQEEh263lbXw39q1E+fgBEAAwjF3DAkHXCkO aV5kHOe4He2aHVJj1jcqnmvv7TcJ6tVaYujWj/1vh9BrOpITI+UhICbhsFGgcaTV 8LS38b+YE7/OX6EHwvp0j2IK4mP7yyGiu68+KagMt3wJ4fnlsTVHumLJ8W1xAX94 d7eC5YJYWYmdwS3dduRvB1ilUQX91l2513iDFKFeom3b8Sbfx3EFa8xLCtc7AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUu9PmVFmy5DYj1Ug3Ja4k/2pkXd8wHwYDVR0j BBgwFoAUKzuXM02gaXgYXax2ovPqNYXoIx4wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2YxMTRjMWVhNzc4ODQ1MmNiZjM4YmU4NTRlYTgzNTlkLzAv MkIzQjk3MzM0REEwNjk3ODE4NURBQzc2QTJGM0VBMzU4NUU4MjMxRS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8yQjNCOTczMzREQTA2OTc4MTg1REFDNzZBMkYzRUEz NTg1RTgyMzFFLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2YxMTRj MWVhNzc4ODQ1MmNiZjM4YmU4NTRlYTgzNTlkLzAvMkIzQjk3MzM0REEwNjk3ODE4 NURBQzc2QTJGM0VBMzU4NUU4MjMxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGASJLePtPilYFoVwuXw IwX3MU1CqKiLjrJHCp/ex6blulxU2Qybkp55dfyz1Tj8nKme6Jib8udnx8xkp4SQ VcUbwKY7sRlGj/egJCg3/v/8uS4TmDVM/Pw0ommIQQCsngoCTLesD/oZyQTVTDfm SvSnk/VPSOn6vA8hZfSE5WxrU5nONO7Ma7alX3Qsw/4bZJEr5xST5sBxQRKCirdT 8IUaJFRc9phyWSgPYNJ7UshnTALMsCfKzp/Mv0HcjMfWUWx/fC653ljgaztudLqS omhJOUJF0++++H2Guwn28FBEWrcti9aVP7fWfH4w+2hzrUIgQ4zCxqKiBAaloWWF LNw= -----END CERTIFICATE-----Generated at Mon Dec 8 04:01:50 2025 by rpki-client