This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft File: B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft (raw, json) Hash identifier: bUy+e83fFRV7x+z8BUnluPb8crauhsu8V+Wv8AUAYgg= Subject key identifier: C9:75:D5:78:42:1C:22:E9:A3:21:F6:C3:42:A7:67:3B:51:79:52:16 Authority key identifier: B8:8A:94:DC:A0:9E:3A:65:3C:06:F4:78:43:4D:C7:C8:F2:1E:05:18 Certificate issuer: /CN=B88A94DCA09E3A653C06F478434DC7C8F21E0518 Certificate serial: 354B3D34DD8CAA83380AE791684EFCA70FDB41AC Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft Manifest number: 02D7 Signing time: Sun 25 Jan 2026 18:24:02 +0000 Manifest this update: Sun 25 Jan 2026 18:19:02 +0000 Manifest next update: Mon 26 Jan 2026 19:36:02 +0000 Files and hashes: 1: 326131313a663263303a623030623a3a2f34382d3438203d3e20323035373839.roa (hash: tOaIT6qTvs/T2L2c3rEpmXq3gx7f0jW4s/J1R0UAbuM=) 2: 326131313a663263303a666666643a3a2f34382d3438203d3e20323035373839.roa (hash: nMLfH1nYsI5mPwv+N0MEzTUVq1YFB35SCmO/3EjXxsg=) 3: B88A94DCA09E3A653C06F478434DC7C8F21E0518.crl (hash: 0oXgE64cJxXVp8qPp1ojHDZ3nUo3bF+ICaG95AUNRDg=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:36:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:4b:3d:34:dd:8c:aa:83:38:0a:e7:91:68:4e:fc:a7:0f:db:41:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B88A94DCA09E3A653C06F478434DC7C8F21E0518 Validity Not Before: Jan 25 18:19:02 2026 GMT Not After : Jan 26 19:36:02 2026 GMT Subject: CN=C975D578421C22E9A321F6C342A7673B51795216 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e7:1c:26:05:85:fb:e7:31:99:a9:22:02:b3: 9e:b6:b8:cd:26:88:5d:09:6e:f4:42:f8:54:6f:1b: e5:4a:1b:8f:e4:cf:6d:ce:8b:12:b5:ab:c4:52:e9: 3e:dc:5a:ad:78:8b:ca:ea:9f:a1:92:0a:45:68:70: 02:e4:ed:90:7f:f2:05:5f:f9:21:b7:64:5a:a9:b6: d0:e8:f9:67:92:a8:e8:06:98:c2:64:3e:72:5c:96: e9:d7:3e:6f:41:20:6c:12:d3:40:97:02:2e:85:ef: e8:6e:57:52:0d:7e:df:3d:e0:a8:a4:1a:03:2d:d3: 1f:3b:91:91:f5:91:17:5e:e9:4d:63:70:3c:bc:63: f2:2b:0d:e4:29:ad:01:c9:98:21:00:b7:0e:b5:8c: 93:6c:ec:f9:8f:e3:d3:97:2d:19:fb:1b:88:07:05: bf:d7:82:e4:0e:a0:36:36:6f:94:8d:78:35:77:8a: 60:bd:0c:ab:80:1c:c3:55:cc:c2:f1:43:ad:18:26: b8:74:eb:b7:2c:4f:1b:c7:1f:89:5b:aa:6d:25:31: 88:b2:1b:00:ed:1f:60:fc:ed:ef:ef:60:af:01:6d: 95:4a:4c:1d:02:ab:8d:8d:a0:17:f1:65:a6:f3:8d: d8:ff:a9:de:d6:5a:77:b9:ec:66:d0:b2:de:61:80: 52:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:75:D5:78:42:1C:22:E9:A3:21:F6:C3:42:A7:67:3B:51:79:52:16 X509v3 Authority Key Identifier: keyid:B8:8A:94:DC:A0:9E:3A:65:3C:06:F4:78:43:4D:C7:C8:F2:1E:05:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:ea:6e:e1:48:54:0a:73:0f:80:1f:b9:b0:5f:be:38:10:ea: 2e:97:8d:19:9c:01:32:98:06:9c:cc:ed:a7:ed:04:db:5e:fb: 4f:ea:4b:25:68:f7:9c:75:84:d5:1a:0b:a0:ca:38:40:7f:6f: 23:32:4c:54:e8:f5:dd:3f:23:67:71:87:96:57:e3:4e:45:c3: 59:4d:ac:a4:b8:70:33:67:7f:70:ba:3c:2d:4d:01:19:b9:07: cb:4a:5c:ab:72:ed:13:86:c5:96:d6:2e:2d:68:32:6d:cb:3c: 9f:7f:dc:4d:37:2f:eb:b5:06:96:a7:11:7b:d2:66:4b:f7:c3: f9:e6:8d:6f:d8:ee:7b:af:7b:85:5d:5b:f7:6e:14:32:9f:41: 86:03:15:dd:70:b8:0a:18:52:a0:c5:7d:70:db:14:0f:a6:5b: 9c:b2:43:bb:2d:9b:cc:9b:fc:60:5a:17:57:d4:4f:fa:ff:9f: e5:a4:a8:8d:44:2f:37:32:f7:c5:fa:b6:40:16:cc:cc:9b:df: 2c:f9:7c:4e:d2:9c:b4:1f:eb:af:07:26:24:fb:0a:45:8e:e2: ba:51:1e:06:17:ba:6d:d5:0b:12:90:75:1a:64:ee:5a:10:96: 6b:23:3a:42:55:a6:ba:1f:d7:53:bc:68:0b:44:be:47:06:36: 8a:71:0b:de -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUNUs9NN2MqoM4CueRaE78pw/bQawwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg4QTk0RENBMDlFM0E2NTNDMDZGNDc4NDM0REM3QzhG MjFFMDUxODAeFw0yNjAxMjUxODE5MDJaFw0yNjAxMjYxOTM2MDJaMDMxMTAvBgNV BAMTKEM5NzVENTc4NDIxQzIyRTlBMzIxRjZDMzQyQTc2NzNCNTE3OTUyMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk5xwmBYX75zGZqSICs562uM0m iF0JbvRC+FRvG+VKG4/kz23OixK1q8RS6T7cWq14i8rqn6GSCkVocALk7ZB/8gVf +SG3ZFqpttDo+WeSqOgGmMJkPnJclunXPm9BIGwS00CXAi6F7+huV1INft894Kik GgMt0x87kZH1kRde6U1jcDy8Y/IrDeQprQHJmCEAtw61jJNs7PmP49OXLRn7G4gH Bb/XguQOoDY2b5SNeDV3imC9DKuAHMNVzMLxQ60YJrh067csTxvHH4lbqm0lMYiy GwDtH2D87e/vYK8BbZVKTB0Cq42NoBfxZabzjdj/qd7WWne57GbQst5hgFL3AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUyXXVeEIcIumjIfbDQqdnO1F5UhYwHwYDVR0j BBgwFoAUuIqU3KCeOmU8BvR4Q03HyPIeBRgwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzBhNDYzN2RmNWJhNzQzZmVhMWI0ODJiZTgyMzU4MThmLzAv Qjg4QTk0RENBMDlFM0E2NTNDMDZGNDc4NDM0REM3QzhGMjFFMDUxOC5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9CODhBOTREQ0EwOUUzQTY1M0MwNkY0Nzg0MzREQzdD OEYyMUUwNTE4LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzBhNDYz N2RmNWJhNzQzZmVhMWI0ODJiZTgyMzU4MThmLzAvQjg4QTk0RENBMDlFM0E2NTND MDZGNDc4NDM0REM3QzhGMjFFMDUxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADDqbuFIVApzD4AfubBf vjgQ6i6XjRmcATKYBpzM7aftBNte+0/qSyVo95x1hNUaC6DKOEB/byMyTFTo9d0/ I2dxh5ZX405Fw1lNrKS4cDNnf3C6PC1NARm5B8tKXKty7ROGxZbWLi1oMm3LPJ9/ 3E03L+u1BpanEXvSZkv3w/nmjW/Y7nuve4VdW/duFDKfQYYDFd1wuAoYUqDFfXDb FA+mW5yyQ7stm8yb/GBaF1fUT/r/n+WkqI1ELzcy98X6tkAWzMyb3yz5fE7SnLQf 668HJiT7CkWO4rpRHgYXum3VCxKQdRpk7loQlmsjOkJVprof11O8aAtEvkcGNopx C94= -----END CERTIFICATE-----Generated at Mon Jan 26 06:40:53 2026 by rpki-client