This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft File: B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft (raw, json) Hash identifier: jH4qRs7hR/WHSTscbj8vFZugJ3Mu5HL+cVbytGoYsFs= Subject key identifier: C5:BD:F9:90:7B:D4:B1:4E:27:D2:D2:22:0A:6C:97:77:7B:3D:A1:59 Authority key identifier: B8:22:2A:84:5C:0C:DC:59:E8:D3:69:AE:23:E1:16:CD:DE:A0:87:77 Certificate issuer: /CN=B8222A845C0CDC59E8D369AE23E116CDDEA08777 Certificate serial: 1BFBCB4C6E033E789F05F9D11702E60B5F152094 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B8222A845C0CDC59E8D369AE23E116CDDEA08777.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft Manifest number: 02A9 Signing time: Sat 20 Dec 2025 19:36:18 +0000 Manifest this update: Sat 20 Dec 2025 19:31:16 +0000 Manifest next update: Sun 21 Dec 2025 23:20:16 +0000 Files and hashes: 1: 326131313a663263303a666663373a3a2f34382d3438203d3e20323136313431.roa (hash: MlubGqxKcu9/AdY4j4/cMK0ZlCKeMWkqNbhfRk1N6mE=) 2: B8222A845C0CDC59E8D369AE23E116CDDEA08777.crl (hash: pyjZelKyx0ENwLON9yp3mJdr/LoLChon27x+SXVT64A=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B8222A845C0CDC59E8D369AE23E116CDDEA08777.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 16:36:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:fb:cb:4c:6e:03:3e:78:9f:05:f9:d1:17:02:e6:0b:5f:15:20:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8222A845C0CDC59E8D369AE23E116CDDEA08777 Validity Not Before: Dec 20 19:31:16 2025 GMT Not After : Dec 21 23:20:16 2025 GMT Subject: CN=C5BDF9907BD4B14E27D2D2220A6C97777B3DA159 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:1a:2f:d9:64:5e:60:bd:ab:02:33:fa:1d:80: 0a:48:cc:f7:82:ed:09:f1:a4:e9:d0:3b:e9:2d:a4: fc:75:2d:e9:d8:92:84:52:6b:d3:00:ab:84:ba:93: 07:f7:a2:97:b7:e3:9f:39:80:a0:2e:93:af:0c:fa: ef:dc:0f:f7:f5:f9:53:d5:34:7a:f6:58:29:1c:fe: 03:31:b8:6e:9f:c6:a2:00:65:c7:0c:33:5f:39:2a: cd:b6:cf:8a:0d:56:12:8c:e4:4f:be:43:27:f7:29: 90:f4:e9:e2:58:89:54:46:49:6f:a5:13:85:83:b1: e5:24:31:34:b8:e4:ed:61:e2:92:19:84:04:59:ad: 14:2a:7a:ff:83:29:c9:df:0e:bc:62:7c:c9:b6:60: 76:50:99:7f:8f:08:50:58:46:cb:c3:89:17:f9:6a: 74:fa:a0:a5:57:2a:bc:52:e1:3e:ee:27:a9:5d:0b: 73:36:3d:7a:af:12:fb:d1:f6:59:4b:6b:10:09:6b: 7a:f4:f8:2f:13:a3:21:d5:ec:24:17:26:75:75:c1: b8:3e:a7:b7:3c:e5:90:ae:cb:b1:72:ea:b3:a2:e9: 3b:f7:0c:f8:7f:9d:7b:4d:a8:a2:b8:a5:e4:c8:26: 71:35:ca:7b:41:a8:40:6a:6e:3b:31:8f:e5:7b:bd: 3e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:BD:F9:90:7B:D4:B1:4E:27:D2:D2:22:0A:6C:97:77:7B:3D:A1:59 X509v3 Authority Key Identifier: keyid:B8:22:2A:84:5C:0C:DC:59:E8:D3:69:AE:23:E1:16:CD:DE:A0:87:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B8222A845C0CDC59E8D369AE23E116CDDEA08777.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:cc:95:b6:19:e7:19:e4:e9:69:7d:b4:08:51:a6:46:51:93: 04:5e:3c:6c:e7:28:b1:e4:da:7e:5a:df:63:c5:54:67:a4:d9: 54:e1:b9:be:c3:54:fa:38:f1:45:d6:9a:12:18:22:e8:ee:04: 4f:5a:06:42:90:b5:a1:40:7b:b2:3a:67:18:fe:55:76:10:ba: 9f:f3:5a:8c:85:41:7a:e6:7c:23:4d:aa:84:8f:d3:ba:d2:7d: 89:cf:e5:c0:4f:b3:04:f2:53:1c:01:84:ef:fc:bb:be:c3:8b: be:b1:85:98:57:1e:02:d0:25:e2:93:73:19:99:36:57:dd:d4: 94:e4:9f:a6:b6:b8:f7:17:5f:a3:d9:b6:fc:88:1c:08:f5:f2: 5a:88:90:da:2c:d1:0e:09:d5:cc:35:fb:83:a4:a8:6b:48:4c: 34:1b:25:c6:7a:57:57:a5:ec:9f:2f:e5:f8:a8:7a:91:55:3e: 4f:4f:1e:d8:9a:b9:84:7b:3b:2c:52:ea:f7:ae:20:f3:71:23: c2:b2:09:b0:cc:18:d1:57:70:78:13:77:58:8f:eb:a7:b2:a5: 45:97:de:97:c2:75:c4:c2:5f:aa:53:f6:d3:7c:1b:e0:be:04: 83:86:89:5d:9b:c9:48:23:6b:e4:ee:bb:b3:92:ab:f2:b9:f6: be:2d:f0:26 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUG/vLTG4DPnifBfnRFwLmC18VIJQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjgyMjJBODQ1QzBDREM1OUU4RDM2OUFFMjNFMTE2Q0RE RUEwODc3NzAeFw0yNTEyMjAxOTMxMTZaFw0yNTEyMjEyMzIwMTZaMDMxMTAvBgNV BAMTKEM1QkRGOTkwN0JENEIxNEUyN0QyRDIyMjBBNkM5Nzc3N0IzREExNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjGi/ZZF5gvasCM/odgApIzPeC 7QnxpOnQO+ktpPx1LenYkoRSa9MAq4S6kwf3ope34585gKAuk68M+u/cD/f1+VPV NHr2WCkc/gMxuG6fxqIAZccMM185Ks22z4oNVhKM5E++Qyf3KZD06eJYiVRGSW+l E4WDseUkMTS45O1h4pIZhARZrRQqev+DKcnfDrxifMm2YHZQmX+PCFBYRsvDiRf5 anT6oKVXKrxS4T7uJ6ldC3M2PXqvEvvR9llLaxAJa3r0+C8ToyHV7CQXJnV1wbg+ p7c85ZCuy7Fy6rOi6Tv3DPh/nXtNqKK4peTIJnE1yntBqEBqbjsxj+V7vT6dAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUxb35kHvUsU4n0tIiCmyXd3s9oVkwHwYDVR0j BBgwFoAUuCIqhFwM3Fno02muI+EWzd6gh3cwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzA5ODBlMjYyZjA4MTQ5MDk5OWRkMGQ1ZTIyOWU5Y2ZhLzAv QjgyMjJBODQ1QzBDREM1OUU4RDM2OUFFMjNFMTE2Q0RERUEwODc3Ny5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9CODIyMkE4NDVDMENEQzU5RThEMzY5QUUyM0UxMTZD RERFQTA4Nzc3LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzA5ODBl MjYyZjA4MTQ5MDk5OWRkMGQ1ZTIyOWU5Y2ZhLzAvQjgyMjJBODQ1QzBDREM1OUU4 RDM2OUFFMjNFMTE2Q0RERUEwODc3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAMPMlbYZ5xnk6Wl9tAhR pkZRkwRePGznKLHk2n5a32PFVGek2VThub7DVPo48UXWmhIYIujuBE9aBkKQtaFA e7I6Zxj+VXYQup/zWoyFQXrmfCNNqoSP07rSfYnP5cBPswTyUxwBhO/8u77Di76x hZhXHgLQJeKTcxmZNlfd1JTkn6a2uPcXX6PZtvyIHAj18lqIkNos0Q4J1cw1+4Ok qGtITDQbJcZ6V1el7J8v5fioepFVPk9PHtiauYR7OyxS6veuIPNxI8KyCbDMGNFX cHgTd1iP66eypUWX3pfCdcTCX6pT9tN8G+C+BIOGiV2byUgja+Tuu7OSq/K59r4t 8CY= -----END CERTIFICATE-----Generated at Sun Dec 21 02:00:30 2025 by rpki-client