This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/4742E76772F118A935D69FD40F69858085C80999.mft File: 4742E76772F118A935D69FD40F69858085C80999.mft (raw, json) Hash identifier: 3pBaliDUeBV6aS64xm7wLHbN2wpsaQz1BuzcYBfERyc= Subject key identifier: 6C:FB:46:5E:56:CB:A8:68:38:AA:C4:0C:6B:8F:7E:7E:40:0E:4D:3F Authority key identifier: 47:42:E7:67:72:F1:18:A9:35:D6:9F:D4:0F:69:85:80:85:C8:09:99 Certificate issuer: /CN=4742E76772F118A935D69FD40F69858085C80999 Certificate serial: 2687FABFA52D51280E8ED3317ADFE5594F4BF2DD Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4742E76772F118A935D69FD40F69858085C80999.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/4742E76772F118A935D69FD40F69858085C80999.mft Manifest number: 02A7 Signing time: Sat 20 Dec 2025 17:17:02 +0000 Manifest this update: Sat 20 Dec 2025 17:12:00 +0000 Manifest next update: Sun 21 Dec 2025 19:05:00 +0000 Files and hashes: 1: 4742E76772F118A935D69FD40F69858085C80999.crl (hash: Y1aFO/M11qFyZTrw3lXElm+0FxsDSMPb4dRvR+/16wg=) 2: 326131313a663263303a666666613a3a2f34382d3438203d3e20323034303137.roa (hash: gUgzdRxmuJNOQsawEIqvnF9DX0YCEOe/wm39FVRE0Uw=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/4742E76772F118A935D69FD40F69858085C80999.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/4742E76772F118A935D69FD40F69858085C80999.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4742E76772F118A935D69FD40F69858085C80999.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:87:fa:bf:a5:2d:51:28:0e:8e:d3:31:7a:df:e5:59:4f:4b:f2:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4742E76772F118A935D69FD40F69858085C80999 Validity Not Before: Dec 20 17:12:00 2025 GMT Not After : Dec 21 19:05:00 2025 GMT Subject: CN=6CFB465E56CBA86838AAC40C6B8F7E7E400E4D3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:5a:b4:b8:4d:0a:c3:88:dc:b3:75:96:00:ff: 22:ca:67:85:ae:96:0b:05:7c:41:8b:ab:3a:f5:b5: 89:83:2a:6d:f2:3f:6b:13:ff:a6:0d:d2:22:b0:1c: d0:5a:e2:a8:f9:df:f4:60:6e:61:ad:fe:1e:ca:6b: bb:7f:e5:b3:36:28:e6:5c:9a:81:86:25:a3:d5:f8: a1:fc:f2:a4:4f:41:ac:63:db:d3:98:fb:93:23:a7: d5:94:1c:73:53:2d:46:92:20:a3:a0:16:55:8f:eb: 5e:39:b8:9c:5e:dc:90:e5:d8:37:df:42:54:05:74: db:d7:60:3e:cd:fc:4a:fb:15:e3:26:1b:a4:86:e0: 99:34:b9:47:ec:b5:9a:c9:3b:68:3a:b6:6b:04:0b: 04:74:b0:9e:e0:0e:ac:7d:22:2b:ca:30:2c:c4:9d: 69:95:35:c9:9d:44:2c:f4:9b:95:27:45:55:4d:4d: 10:98:82:c1:52:26:a8:68:37:d1:a3:c7:aa:3f:07: 29:e7:20:19:64:98:7f:1e:98:a6:5f:c1:9c:ac:21: f7:2c:f2:87:24:b4:40:8c:44:c1:88:aa:7c:2f:49: 09:98:cb:ba:c4:7b:a2:88:1a:4c:47:65:db:8d:64: cb:85:89:59:6e:31:71:8f:04:35:be:9e:85:04:98: a9:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:FB:46:5E:56:CB:A8:68:38:AA:C4:0C:6B:8F:7E:7E:40:0E:4D:3F X509v3 Authority Key Identifier: keyid:47:42:E7:67:72:F1:18:A9:35:D6:9F:D4:0F:69:85:80:85:C8:09:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/4742E76772F118A935D69FD40F69858085C80999.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4742E76772F118A935D69FD40F69858085C80999.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/4742E76772F118A935D69FD40F69858085C80999.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:a4:26:dc:f8:2f:b6:c2:6a:bf:ca:c9:46:25:7e:fc:70:2e: c1:2e:f1:f2:a0:41:ff:5e:30:46:27:59:f8:21:20:6f:17:b8: c2:79:f2:e0:87:de:98:f4:8f:cf:d4:d7:a5:bb:80:91:00:99: 46:27:78:1d:5c:26:4e:66:3d:db:73:a9:03:2d:41:16:b4:dc: 22:e0:a1:17:ad:85:a5:db:6f:4a:52:ac:ec:0f:e7:1a:bf:15: c0:6d:02:00:7c:bd:a3:f8:d5:b2:f6:2e:b7:d0:ec:e9:a2:00: 91:37:33:24:51:79:7c:4d:ef:7e:24:7a:3d:f7:7f:6c:ae:73: a0:17:b1:04:25:f4:ca:f5:2c:56:96:ac:52:40:dd:80:92:6a: c1:12:2c:87:7f:b0:22:44:0f:fc:af:37:db:00:b7:fa:95:93: c1:af:aa:25:4f:44:1c:af:ef:7d:5f:86:49:8b:f1:8c:51:e4: 21:32:83:ed:cb:f2:bc:06:86:b6:e9:81:24:f1:aa:fc:0a:33: b1:fe:d2:58:71:f7:c6:c5:bd:d8:f9:b1:ec:72:9e:ed:ab:33: 2e:60:69:68:16:77:d1:69:b0:a9:b2:4e:4b:66:6d:c6:12:3e: 36:d2:f8:8c:86:75:fc:77:b3:d0:bd:c7:4f:cf:b9:55:5f:ed: 82:d3:4c:08 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUJof6v6UtUSgOjtMxet/lWU9L8t0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc0MkU3Njc3MkYxMThBOTM1RDY5RkQ0MEY2OTg1ODA4 NUM4MDk5OTAeFw0yNTEyMjAxNzEyMDBaFw0yNTEyMjExOTA1MDBaMDMxMTAvBgNV BAMTKDZDRkI0NjVFNTZDQkE4NjgzOEFBQzQwQzZCOEY3RTdFNDAwRTREM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaWrS4TQrDiNyzdZYA/yLKZ4Wu lgsFfEGLqzr1tYmDKm3yP2sT/6YN0iKwHNBa4qj53/RgbmGt/h7Ka7t/5bM2KOZc moGGJaPV+KH88qRPQaxj29OY+5Mjp9WUHHNTLUaSIKOgFlWP6145uJxe3JDl2Dff QlQFdNvXYD7N/Er7FeMmG6SG4Jk0uUfstZrJO2g6tmsECwR0sJ7gDqx9IivKMCzE nWmVNcmdRCz0m5UnRVVNTRCYgsFSJqhoN9Gjx6o/BynnIBlkmH8emKZfwZysIfcs 8ocktECMRMGIqnwvSQmYy7rEe6KIGkxHZduNZMuFiVluMXGPBDW+noUEmKnFAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUbPtGXlbLqGg4qsQMa49+fkAOTT8wHwYDVR0j BBgwFoAUR0LnZ3LxGKk11p/UD2mFgIXICZkwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzYwYTA5MGMyN2MwNjRlMDc4YTdmNmU0NDZhNGZiZjcwLzAv NDc0MkU3Njc3MkYxMThBOTM1RDY5RkQ0MEY2OTg1ODA4NUM4MDk5OS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy80NzQyRTc2NzcyRjExOEE5MzVENjlGRDQwRjY5ODU4 MDg1QzgwOTk5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzYwYTA5 MGMyN2MwNjRlMDc4YTdmNmU0NDZhNGZiZjcwLzAvNDc0MkU3Njc3MkYxMThBOTM1 RDY5RkQ0MEY2OTg1ODA4NUM4MDk5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHOkJtz4L7bCar/KyUYl fvxwLsEu8fKgQf9eMEYnWfghIG8XuMJ58uCH3pj0j8/U16W7gJEAmUYneB1cJk5m PdtzqQMtQRa03CLgoRethaXbb0pSrOwP5xq/FcBtAgB8vaP41bL2LrfQ7OmiAJE3 MyRReXxN734kej33f2yuc6AXsQQl9Mr1LFaWrFJA3YCSasESLId/sCJED/yvN9sA t/qVk8GvqiVPRByv731fhkmL8YxR5CEyg+3L8rwGhrbpgSTxqvwKM7H+0lhx98bF vdj5sexynu2rMy5gaWgWd9FpsKmyTktmbcYSPjbS+IyGdfx3s9C9x0/PuVVf7YLT TAg= -----END CERTIFICATE-----Generated at Sat Dec 20 19:31:41 2025 by rpki-client