This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft File: 3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft (raw, json) Hash identifier: mewI/lPLPWcbN0svwg4iOXQYJwSmKzcmi4zVRqAEvLg= Subject key identifier: 8B:27:B6:64:00:6A:31:11:FE:2F:3E:3C:14:82:B5:13:D1:10:13:56 Authority key identifier: 3B:86:A4:A4:53:80:C6:D4:55:CD:E5:80:DE:D1:BC:56:12:D0:A5:78 Certificate issuer: /CN=3B86A4A45380C6D455CDE580DED1BC5612D0A578 Certificate serial: 7662003F17E225ADC4DA563166BCB6F9E21B4CAD Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft Manifest number: 02A9 Signing time: Sat 20 Dec 2025 19:42:35 +0000 Manifest this update: Sat 20 Dec 2025 19:37:33 +0000 Manifest next update: Sun 21 Dec 2025 22:15:33 +0000 Files and hashes: 1: 326131313a663263303a666664643a3a2f34382d3438203d3e20323135303639.roa (hash: pRpvcvkpUIjn6KDjm+Ywf0niLgvvVoNWrBKMV64s3Gs=) 2: 326131313a663263303a666664343a3a2f34362d3436203d3e20323135303639.roa (hash: b4lO7qQITmIuTe+1DZpcfLD2H0yGfI8Xz4qwvBeBNzo=) 3: 326131313a663263303a666664633a3a2f34382d3438203d3e20323135303639.roa (hash: fW3/1bM6uuAVh4/BqcyWFGfZeggD1zO77SW4GWfaw4U=) 4: 326131313a663263303a666664653a3a2f34382d3438203d3e20323135303639.roa (hash: scCBjh8HfhV3GwKDOrHZF1YXj718at6+uNm0y/KBmOw=) 5: 326131313a663263303a666664313a3a2f34382d3438203d3e20323135303639.roa (hash: Kgbp0+Zk4p3tpOkyAtCJ3HEWdnZBbzm3NgMcGrByxQs=) 6: 3B86A4A45380C6D455CDE580DED1BC5612D0A578.crl (hash: zL9DPV1TQBevmMzcxwteFNodkkfDpucCDXoifC7SEgM=) 7: 326131313a663263303a666664303a3a2f34382d3438203d3e20323135303639.roa (hash: onhCLB3gV3HdQhsHYazqCSyNdZ/2h865cbuFqj2YlvA=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:62:00:3f:17:e2:25:ad:c4:da:56:31:66:bc:b6:f9:e2:1b:4c:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B86A4A45380C6D455CDE580DED1BC5612D0A578 Validity Not Before: Dec 20 19:37:33 2025 GMT Not After : Dec 21 22:15:33 2025 GMT Subject: CN=8B27B664006A3111FE2F3E3C1482B513D1101356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:2f:dc:55:17:a0:09:37:22:82:43:34:88:21: 03:22:a1:13:1c:f3:72:ed:e5:d1:9e:ec:07:5c:39: 33:5b:50:24:58:9e:df:1e:50:de:40:f2:53:68:cc: a3:d0:35:c4:ad:53:a6:08:b3:16:d6:fb:ba:b9:0b: 2b:d6:62:2f:aa:ec:21:21:f0:8a:dc:8d:39:54:40: 7d:41:53:4c:46:07:02:94:a5:2d:40:78:3a:50:b2: 15:39:4e:32:8f:fe:1d:3f:b8:ee:ea:46:20:75:51: 5f:3b:a3:b2:50:13:b7:54:16:85:72:93:89:0d:15: e7:5f:43:74:e9:f5:92:c2:8b:f8:5c:ad:0d:b6:2e: 22:52:fb:8b:77:c6:10:c2:41:18:e4:36:18:ff:a7: 10:e8:b6:80:6d:4c:07:7b:90:7b:66:51:7e:36:1b: e3:b3:54:06:8d:c7:b8:7b:ad:c8:bc:cb:73:73:37: 4c:e0:05:3b:a5:a5:62:21:71:be:35:48:c2:aa:02: 4c:69:34:5e:08:5f:db:a5:4d:c3:3e:4a:e0:3d:b0: 04:25:7d:19:22:0c:d4:a4:1c:25:ca:87:a7:87:49: bc:5f:81:f5:62:6b:1b:20:81:66:5a:51:85:f4:a9: c1:3e:0a:3e:1b:40:bc:1d:67:2b:79:5d:6a:56:bf: 38:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:27:B6:64:00:6A:31:11:FE:2F:3E:3C:14:82:B5:13:D1:10:13:56 X509v3 Authority Key Identifier: keyid:3B:86:A4:A4:53:80:C6:D4:55:CD:E5:80:DE:D1:BC:56:12:D0:A5:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:62:54:a4:08:60:2b:82:b3:d4:8f:c9:2c:9d:cc:5c:85:e1: b7:cc:fb:13:60:3b:e6:13:e8:1c:0c:21:e9:a4:7b:1d:3f:ca: c1:bd:d5:5e:b3:de:93:21:1f:33:1d:50:67:a8:f5:32:b4:4c: 3a:1a:d1:ba:c2:f7:8b:40:48:24:06:f6:95:f8:d0:46:31:92: 1e:ab:3a:ff:4a:17:2b:d7:4e:3c:be:97:3e:57:ce:cb:bf:88: 7a:8f:9b:ea:fb:51:a8:18:ba:be:3d:d3:97:af:4b:93:46:05: 90:56:88:30:14:ef:df:fc:53:26:a3:b3:b3:a1:96:cc:b1:61: 2c:50:f1:7d:60:b8:3e:42:48:90:e9:29:a6:ca:ad:fb:7c:f5: fe:96:30:f5:64:d1:09:2b:5f:16:d6:52:78:45:d1:7e:5c:eb: 09:4f:a0:2e:5f:76:9c:70:e4:2e:d5:50:b2:48:f3:69:23:f4: c9:dd:67:76:87:3b:e8:fb:b0:3d:2d:a4:b1:6b:89:0c:e4:3f: b7:1c:9a:5a:1b:28:0d:7e:41:45:a8:33:e4:ee:b8:45:23:6d: 33:fe:88:c3:d8:18:2b:f7:93:32:ee:e9:29:74:2c:e7:70:7a: 7e:f1:35:1e:53:8e:a0:47:ae:ba:cd:7e:65:cd:31:c2:e4:7c: d2:a4:ee:9c -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUdmIAPxfiJa3E2lYxZry2+eIbTK0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I4NkE0QTQ1MzgwQzZENDU1Q0RFNTgwREVEMUJDNTYx MkQwQTU3ODAeFw0yNTEyMjAxOTM3MzNaFw0yNTEyMjEyMjE1MzNaMDMxMTAvBgNV BAMTKDhCMjdCNjY0MDA2QTMxMTFGRTJGM0UzQzE0ODJCNTEzRDExMDEzNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkL9xVF6AJNyKCQzSIIQMioRMc 83Lt5dGe7AdcOTNbUCRYnt8eUN5A8lNozKPQNcStU6YIsxbW+7q5CyvWYi+q7CEh 8IrcjTlUQH1BU0xGBwKUpS1AeDpQshU5TjKP/h0/uO7qRiB1UV87o7JQE7dUFoVy k4kNFedfQ3Tp9ZLCi/hcrQ22LiJS+4t3xhDCQRjkNhj/pxDotoBtTAd7kHtmUX42 G+OzVAaNx7h7rci8y3NzN0zgBTulpWIhcb41SMKqAkxpNF4IX9ulTcM+SuA9sAQl fRkiDNSkHCXKh6eHSbxfgfViaxsggWZaUYX0qcE+Cj4bQLwdZyt5XWpWvzjfAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUiye2ZABqMRH+Lz48FIK1E9EQE1YwHwYDVR0j BBgwFoAUO4akpFOAxtRVzeWA3tG8VhLQpXgwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzI1NDA1Yzc2YzdhMDQzYzg5YWNlMTY3ZTlkMmNmNzljLzAv M0I4NkE0QTQ1MzgwQzZENDU1Q0RFNTgwREVEMUJDNTYxMkQwQTU3OC5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8zQjg2QTRBNDUzODBDNkQ0NTVDREU1ODBERUQxQkM1 NjEyRDBBNTc4LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzI1NDA1 Yzc2YzdhMDQzYzg5YWNlMTY3ZTlkMmNmNzljLzAvM0I4NkE0QTQ1MzgwQzZENDU1 Q0RFNTgwREVEMUJDNTYxMkQwQTU3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAC5iVKQIYCuCs9SPySyd zFyF4bfM+xNgO+YT6BwMIemkex0/ysG91V6z3pMhHzMdUGeo9TK0TDoa0brC94tA SCQG9pX40EYxkh6rOv9KFyvXTjy+lz5Xzsu/iHqPm+r7UagYur4905evS5NGBZBW iDAU79/8Uyajs7OhlsyxYSxQ8X1guD5CSJDpKabKrft89f6WMPVk0QkrXxbWUnhF 0X5c6wlPoC5fdpxw5C7VULJI82kj9MndZ3aHO+j7sD0tpLFriQzkP7ccmlobKA1+ QUWoM+TuuEUjbTP+iMPYGCv3kzLu6Sl0LOdwen7xNR5TjqBHrrrNfmXNMcLkfNKk 7pw= -----END CERTIFICATE-----Generated at Sun Dec 21 04:06:50 2025 by rpki-client