This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/4742E76772F118A935D69FD40F69858085C80999.mft File: 4742E76772F118A935D69FD40F69858085C80999.mft (raw, json) Hash identifier: Y0jAqe4PZboRlGGkSnxHXd7/qUfJ3einoS7ehpxZ+nQ= Subject key identifier: 06:52:2D:A4:57:9B:FA:32:70:AA:84:34:76:67:73:AF:B2:14:A0:A3 Authority key identifier: 47:42:E7:67:72:F1:18:A9:35:D6:9F:D4:0F:69:85:80:85:C8:09:99 Certificate issuer: /CN=4742E76772F118A935D69FD40F69858085C80999 Certificate serial: 3AEE313BD827014081D47DE382FAC1D339AB1FAC Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4742E76772F118A935D69FD40F69858085C80999.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/4742E76772F118A935D69FD40F69858085C80999.mft Manifest number: 02A8 Signing time: Sun 21 Dec 2025 11:05:36 +0000 Manifest this update: Sun 21 Dec 2025 11:00:34 +0000 Manifest next update: Mon 22 Dec 2025 14:12:34 +0000 Files and hashes: 1: 326131313a663263303a666666613a3a2f34382d3438203d3e20323034303137.roa (hash: gUgzdRxmuJNOQsawEIqvnF9DX0YCEOe/wm39FVRE0Uw=) 2: 4742E76772F118A935D69FD40F69858085C80999.crl (hash: zquOFwSoPymhU4PKMN0r2iWg7jPr3GE4/2z6aGzVDpQ=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/4742E76772F118A935D69FD40F69858085C80999.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/4742E76772F118A935D69FD40F69858085C80999.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4742E76772F118A935D69FD40F69858085C80999.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:ee:31:3b:d8:27:01:40:81:d4:7d:e3:82:fa:c1:d3:39:ab:1f:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4742E76772F118A935D69FD40F69858085C80999 Validity Not Before: Dec 21 11:00:34 2025 GMT Not After : Dec 22 14:12:34 2025 GMT Subject: CN=06522DA4579BFA3270AA8434766773AFB214A0A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:04:1c:24:75:2f:04:82:d7:9b:44:67:7c:4c: a8:a3:7e:88:48:f0:32:c2:cf:1f:8c:d0:16:88:3c: 42:c0:de:6b:1a:2c:64:ed:75:be:63:d5:c2:3a:80: f8:99:47:08:fd:9d:a8:71:40:e7:5b:d5:89:64:cf: 26:d7:a6:36:31:2f:f9:fc:6c:0b:6d:bf:b7:46:fc: d9:7e:7a:68:76:01:7a:d2:a5:db:90:b4:56:be:b3: 27:de:fe:76:c3:8d:c1:d7:32:97:ce:0b:c9:7e:0b: a0:ba:5f:dd:34:1c:92:35:08:0c:e7:49:58:6e:d3: 74:9c:27:08:41:a4:d5:d9:9a:c9:51:2a:3d:73:ee: 7a:78:6f:e4:c3:2b:e8:11:f4:1f:91:1e:a4:66:f8: 69:96:14:04:4c:5f:11:00:e9:bc:ce:29:f3:43:29: 13:14:6e:99:97:78:ac:e2:14:5a:c0:d6:10:d5:f9: aa:7e:6a:3b:f0:2d:4c:4e:d8:9b:34:84:29:1e:0d: ea:73:4a:7a:5b:80:98:58:36:e6:1d:ee:89:2c:74: 73:a8:0e:a9:b8:23:72:60:61:33:77:31:b0:af:fb: 80:f9:ef:9e:a3:21:7b:ad:6c:9e:40:ef:97:bc:52: 7a:fe:df:d4:ec:0d:2b:ad:22:8b:d4:b7:ac:d3:83: 24:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:52:2D:A4:57:9B:FA:32:70:AA:84:34:76:67:73:AF:B2:14:A0:A3 X509v3 Authority Key Identifier: keyid:47:42:E7:67:72:F1:18:A9:35:D6:9F:D4:0F:69:85:80:85:C8:09:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/4742E76772F118A935D69FD40F69858085C80999.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4742E76772F118A935D69FD40F69858085C80999.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/4742E76772F118A935D69FD40F69858085C80999.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:1c:8e:b4:b9:ef:d2:c4:d9:cc:98:47:8a:35:2d:22:1b:99: 2b:fb:ad:3e:01:33:df:63:61:07:1b:90:47:09:ec:3c:b5:3a: bf:b7:0e:ad:f5:2c:63:69:ed:29:de:6d:be:86:7a:82:61:68: 8e:e0:13:0f:7b:43:16:a6:ba:54:5d:ae:a9:49:89:93:de:19: 49:e6:70:dc:8f:f6:81:8e:e4:4c:a3:87:81:e4:dd:c3:d9:d0: 02:a5:d7:b7:40:eb:94:e9:39:8a:db:68:64:6d:6c:b0:44:cd: ad:c1:7c:e6:55:ec:ae:c2:5c:66:0a:55:ce:57:4e:a7:7f:2e: 68:ef:d1:30:d1:cf:d4:54:a8:35:e5:92:d2:92:ce:26:59:b0: fb:6d:51:fa:e5:2b:49:94:8d:67:bf:70:e9:48:89:51:ff:f8: 45:e6:29:26:a4:67:52:e2:3b:c7:7f:1d:df:f9:6e:2d:06:d7: de:d0:b0:79:fe:11:a1:5f:fb:8a:49:85:82:ba:4f:86:64:78: ce:09:7f:e2:61:6d:08:25:6c:71:38:42:a8:14:c0:91:86:6a: 59:79:d6:78:7a:8c:3c:a3:9a:94:39:3e:12:86:c4:11:f9:74: ad:83:d1:95:f3:05:f9:b2:c1:9f:54:fa:c3:4b:e7:39:76:90: b5:c5:63:37 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUOu4xO9gnAUCB1H3jgvrB0zmrH6wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc0MkU3Njc3MkYxMThBOTM1RDY5RkQ0MEY2OTg1ODA4 NUM4MDk5OTAeFw0yNTEyMjExMTAwMzRaFw0yNTEyMjIxNDEyMzRaMDMxMTAvBgNV BAMTKDA2NTIyREE0NTc5QkZBMzI3MEFBODQzNDc2Njc3M0FGQjIxNEEwQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaBBwkdS8EgtebRGd8TKijfohI 8DLCzx+M0BaIPELA3msaLGTtdb5j1cI6gPiZRwj9nahxQOdb1YlkzybXpjYxL/n8 bAttv7dG/Nl+emh2AXrSpduQtFa+syfe/nbDjcHXMpfOC8l+C6C6X900HJI1CAzn SVhu03ScJwhBpNXZmslRKj1z7np4b+TDK+gR9B+RHqRm+GmWFARMXxEA6bzOKfND KRMUbpmXeKziFFrA1hDV+ap+ajvwLUxO2Js0hCkeDepzSnpbgJhYNuYd7oksdHOo Dqm4I3JgYTN3MbCv+4D5756jIXutbJ5A75e8Unr+39TsDSutIovUt6zTgySzAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUBlItpFeb+jJwqoQ0dmdzr7IUoKMwHwYDVR0j BBgwFoAUR0LnZ3LxGKk11p/UD2mFgIXICZkwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzYwYTA5MGMyN2MwNjRlMDc4YTdmNmU0NDZhNGZiZjcwLzAv NDc0MkU3Njc3MkYxMThBOTM1RDY5RkQ0MEY2OTg1ODA4NUM4MDk5OS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy80NzQyRTc2NzcyRjExOEE5MzVENjlGRDQwRjY5ODU4 MDg1QzgwOTk5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzYwYTA5 MGMyN2MwNjRlMDc4YTdmNmU0NDZhNGZiZjcwLzAvNDc0MkU3Njc3MkYxMThBOTM1 RDY5RkQ0MEY2OTg1ODA4NUM4MDk5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAEUcjrS579LE2cyYR4o1 LSIbmSv7rT4BM99jYQcbkEcJ7Dy1Or+3Dq31LGNp7Snebb6GeoJhaI7gEw97Qxam ulRdrqlJiZPeGUnmcNyP9oGO5Eyjh4Hk3cPZ0AKl17dA65TpOYrbaGRtbLBEza3B fOZV7K7CXGYKVc5XTqd/Lmjv0TDRz9RUqDXlktKSziZZsPttUfrlK0mUjWe/cOlI iVH/+EXmKSakZ1LiO8d/Hd/5bi0G197QsHn+EaFf+4pJhYK6T4ZkeM4Jf+JhbQgl bHE4QqgUwJGGall51nh6jDyjmpQ5PhKGxBH5dK2D0ZXzBfmywZ9U+sNL5zl2kLXF Yzc= -----END CERTIFICATE-----Generated at Sun Dec 21 22:28:11 2025 by rpki-client