This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft File: B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft (raw, json) Hash identifier: zZhl4J4FT8hjwQn70qwcTAUsi8LNzWxDo/JSqSnw2Ps= Subject key identifier: 5B:22:18:DD:25:97:70:DB:35:28:68:59:F7:5E:60:D8:F0:03:59:DE Authority key identifier: B8:8A:94:DC:A0:9E:3A:65:3C:06:F4:78:43:4D:C7:C8:F2:1E:05:18 Certificate issuer: /CN=B88A94DCA09E3A653C06F478434DC7C8F21E0518 Certificate serial: 20F3BEB605CD3EF8CC20359C540B5792B482CFE8 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft Manifest number: 02AD Signing time: Wed 24 Dec 2025 12:08:14 +0000 Manifest this update: Wed 24 Dec 2025 12:03:14 +0000 Manifest next update: Thu 25 Dec 2025 12:21:14 +0000 Files and hashes: 1: B88A94DCA09E3A653C06F478434DC7C8F21E0518.crl (hash: vB7IC0O7DlQud5MANsOw7RdajC10MM8OkBn4QYP8p6U=) 2: 326131313a663263303a666666643a3a2f34382d3438203d3e20323035373839.roa (hash: nMLfH1nYsI5mPwv+N0MEzTUVq1YFB35SCmO/3EjXxsg=) 3: 326131313a663263303a623030623a3a2f34382d3438203d3e20323035373839.roa (hash: tOaIT6qTvs/T2L2c3rEpmXq3gx7f0jW4s/J1R0UAbuM=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 12:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:f3:be:b6:05:cd:3e:f8:cc:20:35:9c:54:0b:57:92:b4:82:cf:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B88A94DCA09E3A653C06F478434DC7C8F21E0518 Validity Not Before: Dec 24 12:03:14 2025 GMT Not After : Dec 25 12:21:14 2025 GMT Subject: CN=5B2218DD259770DB35286859F75E60D8F00359DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:bf:0d:ed:0e:17:bf:ff:1b:1c:3b:af:19:99: a1:ce:d3:af:5e:3b:19:9f:b5:78:c9:95:6a:46:79: df:0c:24:4c:a9:37:62:c3:97:dc:fc:9f:c6:44:04: 16:bf:3b:89:56:6d:e2:35:ea:75:51:bf:a8:7c:a1: df:c7:b7:fe:39:00:19:27:8a:e2:af:ea:f4:4b:ee: f2:89:f9:82:d7:88:fc:48:25:58:37:a4:a9:4f:52: eb:45:95:57:ed:21:9a:bd:54:04:80:03:59:37:85: 1a:55:26:93:1d:83:56:c3:72:9b:1f:28:bf:dc:39: db:f7:2f:16:b1:91:c9:ea:10:5b:57:8f:d1:85:75: 17:42:25:42:48:4c:1d:f6:6f:ae:89:45:63:e2:3c: 07:ea:94:52:49:ec:9e:e3:2b:90:0f:52:a3:69:95: 53:5b:30:ba:ca:c0:f3:29:a2:e7:9a:97:d4:bb:dc: 6b:41:b4:2a:53:c4:ca:0f:b3:24:d4:7f:1b:42:79: 17:5b:08:43:b6:6d:0d:b7:13:32:bf:55:63:9a:56: 04:bf:c5:df:b9:c8:a4:ad:90:97:38:6b:22:ad:ad: 1a:50:67:1d:b0:7f:93:34:89:93:8a:00:79:1c:3a: bb:02:3b:78:15:ef:6a:69:98:1a:72:a1:a8:26:5b: 1b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:22:18:DD:25:97:70:DB:35:28:68:59:F7:5E:60:D8:F0:03:59:DE X509v3 Authority Key Identifier: keyid:B8:8A:94:DC:A0:9E:3A:65:3C:06:F4:78:43:4D:C7:C8:F2:1E:05:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:a9:2c:ab:63:e4:00:70:ea:2b:cb:41:83:8b:0e:f2:59:71: a2:ef:57:9e:d2:63:29:12:dc:96:61:86:09:e3:9e:61:47:58: 47:0a:3f:17:70:95:44:9d:17:db:f6:0b:12:41:7f:0c:44:fb: 78:96:6f:a1:e2:83:cf:1b:ee:41:05:c0:9b:24:43:b2:1e:a3: de:bf:1b:27:28:de:9e:86:64:e8:15:79:4e:84:5b:86:e4:2c: 97:32:23:b2:d0:54:af:19:3e:20:51:a8:17:7a:48:aa:26:04: d9:92:1f:e4:d8:27:30:82:fd:c9:64:49:07:74:8f:02:f1:71: 07:f9:17:7b:2d:b3:c8:81:fa:53:78:6a:78:dc:59:36:60:c5: 4e:f7:ca:4b:d2:9c:96:52:96:c1:c2:7d:bb:c8:c2:3c:c5:a2: 52:b2:2d:80:3e:9e:46:c2:e5:2a:a8:87:6f:57:90:6b:7e:c7: 00:2f:33:de:e8:5c:b4:e6:10:2c:8f:12:46:71:bd:6c:b2:43: 7d:6c:cd:a0:bb:74:70:3f:fa:90:80:e1:34:5e:9f:2f:11:65: 5d:db:24:2b:07:cc:02:cd:ed:98:1d:52:75:c9:ce:b6:5b:96: 81:dd:48:40:31:b5:66:ac:b2:db:8b:93:18:f7:96:9f:af:3b: e6:ba:aa:39 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUIPO+tgXNPvjMIDWcVAtXkrSCz+gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg4QTk0RENBMDlFM0E2NTNDMDZGNDc4NDM0REM3QzhG MjFFMDUxODAeFw0yNTEyMjQxMjAzMTRaFw0yNTEyMjUxMjIxMTRaMDMxMTAvBgNV BAMTKDVCMjIxOEREMjU5NzcwREIzNTI4Njg1OUY3NUU2MEQ4RjAwMzU5REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCovw3tDhe//xscO68ZmaHO069e OxmftXjJlWpGed8MJEypN2LDl9z8n8ZEBBa/O4lWbeI16nVRv6h8od/Ht/45ABkn iuKv6vRL7vKJ+YLXiPxIJVg3pKlPUutFlVftIZq9VASAA1k3hRpVJpMdg1bDcpsf KL/cOdv3LxaxkcnqEFtXj9GFdRdCJUJITB32b66JRWPiPAfqlFJJ7J7jK5APUqNp lVNbMLrKwPMpoueal9S73GtBtCpTxMoPsyTUfxtCeRdbCEO2bQ23EzK/VWOaVgS/ xd+5yKStkJc4ayKtrRpQZx2wf5M0iZOKAHkcOrsCO3gV72ppmBpyoagmWxt7AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUWyIY3SWXcNs1KGhZ915g2PADWd4wHwYDVR0j BBgwFoAUuIqU3KCeOmU8BvR4Q03HyPIeBRgwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzBhNDYzN2RmNWJhNzQzZmVhMWI0ODJiZTgyMzU4MThmLzAv Qjg4QTk0RENBMDlFM0E2NTNDMDZGNDc4NDM0REM3QzhGMjFFMDUxOC5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9CODhBOTREQ0EwOUUzQTY1M0MwNkY0Nzg0MzREQzdD OEYyMUUwNTE4LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzBhNDYz N2RmNWJhNzQzZmVhMWI0ODJiZTgyMzU4MThmLzAvQjg4QTk0RENBMDlFM0E2NTND MDZGNDc4NDM0REM3QzhGMjFFMDUxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAK+pLKtj5ABw6ivLQYOL DvJZcaLvV57SYykS3JZhhgnjnmFHWEcKPxdwlUSdF9v2CxJBfwxE+3iWb6Hig88b 7kEFwJskQ7Ieo96/Gyco3p6GZOgVeU6EW4bkLJcyI7LQVK8ZPiBRqBd6SKomBNmS H+TYJzCC/clkSQd0jwLxcQf5F3sts8iB+lN4anjcWTZgxU73ykvSnJZSlsHCfbvI wjzFolKyLYA+nkbC5Sqoh29XkGt+xwAvM97oXLTmECyPEkZxvWyyQ31szaC7dHA/ +pCA4TReny8RZV3bJCsHzALN7ZgdUnXJzrZbloHdSEAxtWasstuLkxj3lp+vO+a6 qjk= -----END CERTIFICATE-----Generated at Wed Dec 24 21:52:36 2025 by rpki-client