This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft File: 970AD94C83244100A97F9186D53DADAB07995EE9.mft (raw, json) Hash identifier: kxdWfFbK5T8Ij3jK3b1mrNvD3PGX2ArllKClZKiu6EE= Subject key identifier: 72:71:63:CB:2D:23:43:A0:31:76:AC:2B:0C:08:28:35:AA:08:5E:9C Authority key identifier: 97:0A:D9:4C:83:24:41:00:A9:7F:91:86:D5:3D:AD:AB:07:99:5E:E9 Certificate issuer: /CN=970AD94C83244100A97F9186D53DADAB07995EE9 Certificate serial: 20DAE26D3602B1C88308D89A32A259D76B4206ED Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft Manifest number: 02AB Signing time: Mon 22 Dec 2025 05:03:19 +0000 Manifest this update: Mon 22 Dec 2025 04:58:17 +0000 Manifest next update: Tue 23 Dec 2025 06:28:17 +0000 Files and hashes: 1: 970AD94C83244100A97F9186D53DADAB07995EE9.crl (hash: HCOqTUNEmLfq6lfsEiVg5XjwHGGEOrOOsDGxpfQFbY0=) 2: 326131313a663263303a616361303a3a2f34342d3438203d3e20323132323435.roa (hash: CCNk9XY2QHD/b3jWZi363Jj900j75CnbAukUts4RWyQ=) 3: 326131313a663263303a666666363a3a2f34382d3438203d3e20323132323435.roa (hash: KUWIZJqj2P5+rqMCtyxvRjTojjJdo7mG970P3wqCh/c=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 06:28:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:da:e2:6d:36:02:b1:c8:83:08:d8:9a:32:a2:59:d7:6b:42:06:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=970AD94C83244100A97F9186D53DADAB07995EE9 Validity Not Before: Dec 22 04:58:17 2025 GMT Not After : Dec 23 06:28:17 2025 GMT Subject: CN=727163CB2D2343A03176AC2B0C082835AA085E9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2b:b3:24:2b:da:00:55:36:ee:1f:e5:1e:4f: f6:d5:9c:e2:22:71:2e:60:f0:5a:eb:4c:a5:b0:04: 16:30:ea:80:31:a5:63:65:09:02:59:f9:eb:e6:55: e9:15:61:72:b5:b4:fc:2e:d0:7c:69:bc:28:2b:d4: fb:44:98:de:ea:eb:51:4a:fa:89:d1:71:a7:4c:50: cd:20:aa:e3:90:ea:64:89:df:b1:6f:54:f8:33:cb: ea:d2:5c:37:98:59:f6:eb:37:f3:d2:a8:9a:a1:08: d6:9e:23:e6:fc:7d:c5:43:65:81:a1:f8:a9:b4:f7: ec:5b:dc:de:96:b2:47:d8:f9:9d:8f:c9:6d:b8:ed: e4:7e:24:c7:79:a1:a6:3a:b0:c1:98:dd:d8:4c:5c: b2:a0:e6:5d:84:7e:ce:e3:2e:6a:fc:e8:71:2c:55: 1a:90:8a:70:fc:45:b3:32:d4:c8:db:c3:a1:6a:6a: e5:4f:b7:fe:60:e4:0a:f8:46:3c:65:4a:a7:72:f0: 26:a4:53:be:45:fe:25:68:d2:b0:91:74:b8:00:42: fc:1f:02:47:e3:a1:a6:af:56:c6:93:04:88:63:5b: 2b:8d:55:5b:2a:4e:76:49:78:95:1c:93:00:90:84: 01:1b:e4:71:cc:28:9b:e6:5b:d8:9a:88:5a:d5:06: a9:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:71:63:CB:2D:23:43:A0:31:76:AC:2B:0C:08:28:35:AA:08:5E:9C X509v3 Authority Key Identifier: keyid:97:0A:D9:4C:83:24:41:00:A9:7F:91:86:D5:3D:AD:AB:07:99:5E:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:01:6c:9d:29:69:02:4f:c8:46:ed:13:9f:6c:d4:9c:4f:0e: 7b:08:f1:b0:ab:98:bd:65:f7:5a:a1:0b:c7:8b:78:b9:6e:f9: a6:f9:ae:5f:1b:00:28:d3:cc:46:f0:19:0b:4e:49:1d:8d:87: 63:de:f5:b4:49:bd:47:f9:25:64:db:3d:d5:67:4a:e8:0e:2a: 5a:02:ab:54:8f:11:94:af:5b:d2:c6:71:a3:46:99:03:7e:bf: 4f:ef:e8:8f:6c:70:a2:67:01:23:fd:fb:c1:16:72:0a:ce:fa: 9f:78:aa:29:75:ca:1b:c6:4d:a8:63:a9:1e:13:47:38:c1:80: 0b:5f:e6:30:7d:db:ff:1a:e2:26:9c:39:cf:d8:5c:1b:3b:0a: b0:4e:4b:c1:e5:d5:35:8a:c5:b4:d2:5c:cf:d9:af:fe:09:8a: b7:af:49:9f:47:16:57:fa:f1:8f:11:b9:4c:6e:32:9d:b7:6b: 10:40:61:2c:7c:bb:b5:30:da:c1:76:99:c1:e5:78:5f:b7:d5: 79:33:60:e4:7d:09:50:f0:a0:73:89:2c:34:08:e8:01:bc:d2: f9:d2:fe:20:45:a5:67:3a:cf:99:20:4c:23:57:37:4f:eb:48: b4:2b:54:f2:65:ae:72:ef:33:a7:a9:ad:e5:b9:94:82:8f:61: 59:2a:12:55 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUINribTYCsciDCNiaMqJZ12tCBu0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTcwQUQ5NEM4MzI0NDEwMEE5N0Y5MTg2RDUzREFEQUIw Nzk5NUVFOTAeFw0yNTEyMjIwNDU4MTdaFw0yNTEyMjMwNjI4MTdaMDMxMTAvBgNV BAMTKDcyNzE2M0NCMkQyMzQzQTAzMTc2QUMyQjBDMDgyODM1QUEwODVFOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnK7MkK9oAVTbuH+UeT/bVnOIi cS5g8FrrTKWwBBYw6oAxpWNlCQJZ+evmVekVYXK1tPwu0HxpvCgr1PtEmN7q61FK +onRcadMUM0gquOQ6mSJ37FvVPgzy+rSXDeYWfbrN/PSqJqhCNaeI+b8fcVDZYGh +Km09+xb3N6WskfY+Z2PyW247eR+JMd5oaY6sMGY3dhMXLKg5l2Efs7jLmr86HEs VRqQinD8RbMy1Mjbw6FqauVPt/5g5Ar4RjxlSqdy8CakU75F/iVo0rCRdLgAQvwf AkfjoaavVsaTBIhjWyuNVVsqTnZJeJUckwCQhAEb5HHMKJvmW9iaiFrVBqlbAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUcnFjyy0jQ6AxdqwrDAgoNaoIXpwwHwYDVR0j BBgwFoAUlwrZTIMkQQCpf5GG1T2tqweZXukwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzlkODM5Y2EwYTU1ZTQyYTQ5ZDEwZGUwNzFmNDY1OThiLzAv OTcwQUQ5NEM4MzI0NDEwMEE5N0Y5MTg2RDUzREFEQUIwNzk5NUVFOS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy85NzBBRDk0QzgzMjQ0MTAwQTk3RjkxODZENTNEQURB QjA3OTk1RUU5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzlkODM5 Y2EwYTU1ZTQyYTQ5ZDEwZGUwNzFmNDY1OThiLzAvOTcwQUQ5NEM4MzI0NDEwMEE5 N0Y5MTg2RDUzREFEQUIwNzk5NUVFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHMBbJ0paQJPyEbtE59s 1JxPDnsI8bCrmL1l91qhC8eLeLlu+ab5rl8bACjTzEbwGQtOSR2Nh2Pe9bRJvUf5 JWTbPdVnSugOKloCq1SPEZSvW9LGcaNGmQN+v0/v6I9scKJnASP9+8EWcgrO+p94 qil1yhvGTahjqR4TRzjBgAtf5jB92/8a4iacOc/YXBs7CrBOS8Hl1TWKxbTSXM/Z r/4JirevSZ9HFlf68Y8RuUxuMp23axBAYSx8u7Uw2sF2mcHleF+31XkzYOR9CVDw oHOJLDQI6AG80vnS/iBFpWc6z5kgTCNXN0/rSLQrVPJlrnLvM6epreW5lIKPYVkq ElU= -----END CERTIFICATE-----Generated at Mon Dec 22 18:42:47 2025 by rpki-client