This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft File: B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft (raw, json) Hash identifier: 84atz3c2b4ZAu29kaxwJfrAxnUHyCOf3Btc/FWPPFxc= Subject key identifier: 27:90:E4:B4:42:BE:22:13:15:EA:2D:63:75:C3:36:A5:88:49:AA:36 Authority key identifier: B8:8A:94:DC:A0:9E:3A:65:3C:06:F4:78:43:4D:C7:C8:F2:1E:05:18 Certificate issuer: /CN=B88A94DCA09E3A653C06F478434DC7C8F21E0518 Certificate serial: 12517A459B754F8587ED24140D05BB8E166936DD Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft Manifest number: 02A9 Signing time: Sun 21 Dec 2025 12:30:29 +0000 Manifest this update: Sun 21 Dec 2025 12:25:27 +0000 Manifest next update: Mon 22 Dec 2025 14:07:27 +0000 Files and hashes: 1: 326131313a663263303a623030623a3a2f34382d3438203d3e20323035373839.roa (hash: tOaIT6qTvs/T2L2c3rEpmXq3gx7f0jW4s/J1R0UAbuM=) 2: 326131313a663263303a666666643a3a2f34382d3438203d3e20323035373839.roa (hash: nMLfH1nYsI5mPwv+N0MEzTUVq1YFB35SCmO/3EjXxsg=) 3: B88A94DCA09E3A653C06F478434DC7C8F21E0518.crl (hash: 9edjEwzfnm226MqReC4ipf84Assnx6FqI5rZq0DW+Co=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:33:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:51:7a:45:9b:75:4f:85:87:ed:24:14:0d:05:bb:8e:16:69:36:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B88A94DCA09E3A653C06F478434DC7C8F21E0518 Validity Not Before: Dec 21 12:25:27 2025 GMT Not After : Dec 22 14:07:27 2025 GMT Subject: CN=2790E4B442BE221315EA2D6375C336A58849AA36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1e:25:d4:0c:25:f0:09:73:f8:8d:ec:de:d9: 54:19:6a:bc:43:a9:ae:74:32:3b:9f:27:eb:1c:14: 2d:91:09:91:f0:91:ae:0a:6e:2d:a2:a8:65:cd:57: 76:11:14:3b:e6:43:8d:d1:2d:1a:3e:52:51:1c:b6: 3c:57:41:3f:ed:90:31:ae:05:80:41:d0:df:0a:4a: ce:f1:79:b2:52:e6:1f:23:69:35:52:60:2f:80:2a: fe:c4:7a:a0:a6:ba:d7:c4:65:a1:df:e2:54:b8:1e: bd:26:b5:ed:0a:68:77:41:c1:0a:ee:43:e4:25:c5: 4b:86:fc:12:a5:72:17:c8:e6:98:5d:46:b1:89:08: 34:77:ba:9c:46:0e:f5:44:3b:8e:4a:32:fc:91:e0: e6:a0:8c:08:18:1f:51:2a:bb:38:3b:47:bd:a7:1b: bd:7a:f4:3f:d8:4d:9f:2c:4b:64:ad:11:5b:27:9d: 55:7b:de:1d:fa:63:7e:4e:6e:44:09:72:0f:a2:85: 93:9a:66:db:c6:57:a8:8e:19:f1:2d:82:62:20:3c: 53:33:d0:a3:49:8e:14:d5:66:84:94:5c:8b:23:dc: 28:23:14:20:b7:24:f5:cf:e0:d5:e1:f5:3f:51:ca: ca:23:e9:38:d1:cb:bc:d7:09:6e:cd:37:6f:54:4b: 0e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:90:E4:B4:42:BE:22:13:15:EA:2D:63:75:C3:36:A5:88:49:AA:36 X509v3 Authority Key Identifier: keyid:B8:8A:94:DC:A0:9E:3A:65:3C:06:F4:78:43:4D:C7:C8:F2:1E:05:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:9d:88:d4:6a:b7:e1:13:b4:4f:59:79:97:19:05:83:7a:4f: f9:7a:5d:1c:cb:ed:c0:ae:14:a0:bf:9f:e7:df:e6:54:28:e6: 34:18:7c:67:4a:9a:c8:45:91:9a:09:90:41:32:9c:cb:3c:8f: 99:d2:e3:37:a6:60:30:89:87:83:55:05:b9:79:2f:ad:d0:11: 86:d5:d7:81:c5:2d:72:54:1b:41:5e:d9:5a:7f:7f:2a:db:61: 78:37:65:08:3f:81:57:db:3a:77:8b:43:b4:c4:78:5a:3b:61: 26:54:3a:ca:a6:0c:79:13:c8:4f:32:14:34:d7:0f:68:f4:8f: ce:c5:7e:f8:e9:2f:63:68:64:e4:14:62:79:02:3b:44:7c:b2: d8:af:f1:ca:1d:92:51:18:e2:3b:2a:66:62:16:77:d7:d6:03: 8d:a1:e5:a7:84:29:3b:70:a9:bf:39:d0:ac:a1:8a:d6:63:24: 91:c4:a8:f5:90:0e:96:f1:80:48:00:ed:4c:05:31:a1:c7:f9: 7a:39:b0:18:c1:1c:e4:6b:56:df:e1:43:d3:56:a4:9a:35:08: 0e:88:e5:b6:bc:ba:2d:56:4a:a6:85:cb:86:83:63:59:26:bd: 65:ae:3e:94:1b:8f:aa:1d:ba:7d:b5:63:71:04:31:7d:28:0f: e3:2c:77:b7 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUElF6RZt1T4WH7SQUDQW7jhZpNt0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg4QTk0RENBMDlFM0E2NTNDMDZGNDc4NDM0REM3QzhG MjFFMDUxODAeFw0yNTEyMjExMjI1MjdaFw0yNTEyMjIxNDA3MjdaMDMxMTAvBgNV BAMTKDI3OTBFNEI0NDJCRTIyMTMxNUVBMkQ2Mzc1QzMzNkE1ODg0OUFBMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxHiXUDCXwCXP4jeze2VQZarxD qa50MjufJ+scFC2RCZHwka4Kbi2iqGXNV3YRFDvmQ43RLRo+UlEctjxXQT/tkDGu BYBB0N8KSs7xebJS5h8jaTVSYC+AKv7EeqCmutfEZaHf4lS4Hr0mte0KaHdBwQru Q+QlxUuG/BKlchfI5phdRrGJCDR3upxGDvVEO45KMvyR4OagjAgYH1Equzg7R72n G7169D/YTZ8sS2StEVsnnVV73h36Y35ObkQJcg+ihZOaZtvGV6iOGfEtgmIgPFMz 0KNJjhTVZoSUXIsj3CgjFCC3JPXP4NXh9T9Rysoj6TjRy7zXCW7NN29USw6VAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUJ5DktEK+IhMV6i1jdcM2pYhJqjYwHwYDVR0j BBgwFoAUuIqU3KCeOmU8BvR4Q03HyPIeBRgwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzBhNDYzN2RmNWJhNzQzZmVhMWI0ODJiZTgyMzU4MThmLzAv Qjg4QTk0RENBMDlFM0E2NTNDMDZGNDc4NDM0REM3QzhGMjFFMDUxOC5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9CODhBOTREQ0EwOUUzQTY1M0MwNkY0Nzg0MzREQzdD OEYyMUUwNTE4LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzBhNDYz N2RmNWJhNzQzZmVhMWI0ODJiZTgyMzU4MThmLzAvQjg4QTk0RENBMDlFM0E2NTND MDZGNDc4NDM0REM3QzhGMjFFMDUxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAE6diNRqt+ETtE9ZeZcZ BYN6T/l6XRzL7cCuFKC/n+ff5lQo5jQYfGdKmshFkZoJkEEynMs8j5nS4zemYDCJ h4NVBbl5L63QEYbV14HFLXJUG0Fe2Vp/fyrbYXg3ZQg/gVfbOneLQ7TEeFo7YSZU OsqmDHkTyE8yFDTXD2j0j87FfvjpL2NoZOQUYnkCO0R8stiv8codklEY4jsqZmIW d9fWA42h5aeEKTtwqb850KyhitZjJJHEqPWQDpbxgEgA7UwFMaHH+Xo5sBjBHORr Vt/hQ9NWpJo1CA6I5ba8ui1WSqaFy4aDY1kmvWWuPpQbj6odun21Y3EEMX0oD+Ms d7c= -----END CERTIFICATE-----Generated at Sun Dec 21 17:13:46 2025 by rpki-client