This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft File: 4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft (raw, json) Hash identifier: sjj2ycgSMe716cHW4SeuaD0aFH/02jwVFXF7AYKkzpo= Subject key identifier: C3:52:51:B0:1C:E0:40:18:AE:8F:8E:E7:52:D9:36:53:32:42:08:47 Authority key identifier: 4B:A4:51:1F:4B:81:C5:65:CE:D3:E7:0B:30:20:FB:D0:ED:05:56:2F Certificate issuer: /CN=4BA4511F4B81C565CED3E70B3020FBD0ED05562F Certificate serial: 2943529B227D0C1B65AC71E734747AE712ABCD20 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft Manifest number: 02AF Signing time: Sat 20 Dec 2025 16:35:29 +0000 Manifest this update: Sat 20 Dec 2025 16:30:27 +0000 Manifest next update: Sun 21 Dec 2025 17:11:27 +0000 Files and hashes: 1: 4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl (hash: 41DxnHtQtiudmZ2dVLEYQiWS98YsprbGwqLHIHa9Y00=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 16:36:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:43:52:9b:22:7d:0c:1b:65:ac:71:e7:34:74:7a:e7:12:ab:cd:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BA4511F4B81C565CED3E70B3020FBD0ED05562F Validity Not Before: Dec 20 16:30:27 2025 GMT Not After : Dec 21 17:11:27 2025 GMT Subject: CN=C35251B01CE04018AE8F8EE752D9365332420847 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c9:ce:05:d7:58:fb:b5:3f:71:c7:88:7f:b5: 35:ea:a6:1c:83:e1:5e:42:f5:bd:09:fb:fb:8e:3a: 12:db:f2:fc:32:0e:9d:a8:06:73:7a:eb:78:ee:da: 75:9f:2e:f9:58:bb:c5:71:52:09:0b:e5:87:2e:8c: e9:95:2e:79:2a:ff:56:07:d4:9a:10:19:0a:75:3e: 62:67:b4:43:13:07:44:3d:8a:1d:15:50:4f:fc:9e: 47:97:f2:2e:a6:f3:d4:ed:c9:24:9d:20:e3:53:0a: c3:b3:90:40:4c:f0:03:f8:a5:9b:fd:86:2b:00:f4: e9:0a:69:02:49:24:1f:cc:87:3e:28:8f:39:c6:b6: b5:ec:0d:1c:94:45:83:70:56:0b:97:4a:46:a9:8f: 9d:f5:21:25:ea:94:67:95:89:42:ca:ca:ff:37:d9: ba:cb:ed:f1:28:38:66:c2:fc:07:c8:11:c3:5c:43: f9:88:ed:54:e2:b1:1b:ac:8f:d3:b6:e1:5d:ca:ae: 50:c4:8a:95:b7:8d:58:fb:be:3c:9a:b4:95:9f:4f: 8b:27:55:8e:95:14:19:9a:93:f2:c9:99:e5:dd:f0: 03:7b:3e:82:01:c5:79:7a:f7:5e:ff:8e:89:08:56: ac:1a:f4:97:62:a7:d2:ee:21:a3:8a:c3:c8:f3:13: 91:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:52:51:B0:1C:E0:40:18:AE:8F:8E:E7:52:D9:36:53:32:42:08:47 X509v3 Authority Key Identifier: keyid:4B:A4:51:1F:4B:81:C5:65:CE:D3:E7:0B:30:20:FB:D0:ED:05:56:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:02:33:12:a2:3b:96:80:25:c1:c0:78:24:1f:42:b7:30:3e: 80:20:08:2f:72:72:72:a6:97:5c:ac:2d:1d:cf:1d:78:e6:6e: a1:4c:df:d3:01:7e:d5:0a:4e:9e:27:a1:e7:d7:3e:3d:86:38: 10:ac:0a:ca:95:10:f6:43:0e:8a:31:4f:14:b4:fe:6f:6f:6d: 0c:42:ac:92:d1:9f:5e:ff:c9:cb:2d:65:2d:b3:23:3c:7b:c9: b2:af:4d:26:7c:e9:c0:fc:b8:16:48:93:65:1e:49:27:dd:db: c9:b4:49:7f:25:c2:5a:ba:9b:c3:4a:11:7d:cc:94:ba:ba:86: 97:2f:7b:b0:39:7e:d0:60:e8:38:7d:74:d7:d2:7c:2d:4e:ce: 8a:e8:4e:65:1d:fe:4e:91:c1:b4:a5:75:63:c8:73:dd:21:d5: 10:66:d0:d3:ce:71:e4:49:1c:d6:eb:05:d9:66:70:ce:5a:3e: 8e:c4:e9:24:ec:77:39:48:96:a7:14:e5:54:0a:f4:5b:f7:10: f6:07:8f:45:ca:58:9c:63:d2:2e:c6:e8:b8:c6:c4:7d:04:6c: 55:eb:e5:97:64:25:c6:1e:f7:7b:53:d0:46:9c:80:82:20:05: de:e9:04:14:13:6a:42:9c:5a:e8:2a:5d:97:ca:ac:28:bb:55: dc:38:4c:0b -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUKUNSmyJ9DBtlrHHnNHR65xKrzSAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJBNDUxMUY0QjgxQzU2NUNFRDNFNzBCMzAyMEZCRDBF RDA1NTYyRjAeFw0yNTEyMjAxNjMwMjdaFw0yNTEyMjExNzExMjdaMDMxMTAvBgNV BAMTKEMzNTI1MUIwMUNFMDQwMThBRThGOEVFNzUyRDkzNjUzMzI0MjA4NDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRyc4F11j7tT9xx4h/tTXqphyD 4V5C9b0J+/uOOhLb8vwyDp2oBnN663ju2nWfLvlYu8VxUgkL5YcujOmVLnkq/1YH 1JoQGQp1PmJntEMTB0Q9ih0VUE/8nkeX8i6m89TtySSdIONTCsOzkEBM8AP4pZv9 hisA9OkKaQJJJB/Mhz4ojznGtrXsDRyURYNwVguXSkapj531ISXqlGeViULKyv83 2brL7fEoOGbC/AfIEcNcQ/mI7VTisRusj9O24V3KrlDEipW3jVj7vjyatJWfT4sn VY6VFBmak/LJmeXd8AN7PoIBxXl6917/jokIVqwa9Jdip9LuIaOKw8jzE5GbAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUw1JRsBzgQBiuj47nUtk2UzJCCEcwHwYDVR0j BBgwFoAUS6RRH0uBxWXO0+cLMCD70O0FVi8wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzk3M2U3YTk4YTcxYjQ5ZmZiYjIyYjc2ZWQ1ZjEyOWUyLzAv NEJBNDUxMUY0QjgxQzU2NUNFRDNFNzBCMzAyMEZCRDBFRDA1NTYyRi5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy80QkE0NTExRjRCODFDNTY1Q0VEM0U3MEIzMDIwRkJE MEVEMDU1NjJGLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzk3M2U3 YTk4YTcxYjQ5ZmZiYjIyYjc2ZWQ1ZjEyOWUyLzAvNEJBNDUxMUY0QjgxQzU2NUNF RDNFNzBCMzAyMEZCRDBFRDA1NTYyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAFoCMxKiO5aAJcHAeCQf QrcwPoAgCC9ycnKml1ysLR3PHXjmbqFM39MBftUKTp4noefXPj2GOBCsCsqVEPZD DooxTxS0/m9vbQxCrJLRn17/ycstZS2zIzx7ybKvTSZ86cD8uBZIk2UeSSfd28m0 SX8lwlq6m8NKEX3MlLq6hpcve7A5ftBg6Dh9dNfSfC1OzoroTmUd/k6RwbSldWPI c90h1RBm0NPOceRJHNbrBdlmcM5aPo7E6STsdzlIlqcU5VQK9Fv3EPYHj0XKWJxj 0i7G6LjGxH0EbFXr5ZdkJcYe93tT0EacgIIgBd7pBBQTakKcWugqXZfKrCi7Vdw4 TAs= -----END CERTIFICATE-----Generated at Sun Dec 21 01:45:32 2025 by rpki-client