This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft File: B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft (raw, json) Hash identifier: yeQWmGWFq09hdImejGryrWTrY3eccEPT9JoOEs+beuE= Subject key identifier: 3D:DA:7F:E9:0E:9A:15:E5:BD:17:BB:23:F9:70:B4:E5:5B:C7:56:B9 Authority key identifier: B8:8A:94:DC:A0:9E:3A:65:3C:06:F4:78:43:4D:C7:C8:F2:1E:05:18 Certificate issuer: /CN=B88A94DCA09E3A653C06F478434DC7C8F21E0518 Certificate serial: 2D0DAB561ECA815975CF174AD5711D05816ED52D Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft Manifest number: 0294 Signing time: Fri 05 Dec 2025 15:37:12 +0000 Manifest this update: Fri 05 Dec 2025 15:32:12 +0000 Manifest next update: Sat 06 Dec 2025 15:43:12 +0000 Files and hashes: 1: 326131313a663263303a623030623a3a2f34382d3438203d3e20323035373839.roa (hash: tOaIT6qTvs/T2L2c3rEpmXq3gx7f0jW4s/J1R0UAbuM=) 2: 326131313a663263303a666666643a3a2f34382d3438203d3e20323035373839.roa (hash: nMLfH1nYsI5mPwv+N0MEzTUVq1YFB35SCmO/3EjXxsg=) 3: B88A94DCA09E3A653C06F478434DC7C8F21E0518.crl (hash: gNnfli9I/Z7hyT1wgsGbA12upfgQ94lzXN/t/0NUAss=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 15:43:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:0d:ab:56:1e:ca:81:59:75:cf:17:4a:d5:71:1d:05:81:6e:d5:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B88A94DCA09E3A653C06F478434DC7C8F21E0518 Validity Not Before: Dec 5 15:32:12 2025 GMT Not After : Dec 6 15:43:12 2025 GMT Subject: CN=3DDA7FE90E9A15E5BD17BB23F970B4E55BC756B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:6a:ef:bc:e9:b6:c1:1c:5c:98:83:93:53:17: 63:f4:b9:b7:61:38:ab:82:76:bb:7f:ac:99:41:31: 58:1d:ae:d6:19:ed:a9:3a:fb:97:f6:fb:c3:53:43: 35:c8:43:ec:61:4e:d9:dc:28:28:ca:48:16:2a:77: e4:82:d7:24:94:9d:04:de:0e:aa:3c:d3:37:44:3d: 87:4a:0b:bd:83:56:3c:a5:28:ce:16:98:cf:db:5f: 4d:f9:a8:f0:22:11:28:14:03:cb:8a:67:ba:71:99: dd:e0:27:db:10:95:3a:43:ed:8e:9c:52:ef:3f:98: 36:53:a9:18:9e:39:a6:8b:9e:52:1c:ee:ca:3a:d1: b9:ba:bc:51:9e:9f:a9:20:a8:ad:4b:cf:de:81:52: 82:a8:11:57:bc:0e:b3:73:d1:01:8b:5c:82:f6:db: d8:ef:94:02:b2:ca:6e:cf:d9:85:d7:62:fa:fc:2f: 1c:de:8f:51:ec:f4:3b:db:10:f3:4a:dc:ee:88:15: 1f:5b:b8:59:f7:cc:fe:48:06:94:3a:41:06:50:33: 30:9a:8c:41:e2:49:fc:1c:1a:b5:2a:01:d6:35:47: 0f:df:99:85:b1:cf:80:ef:cc:d9:2f:66:d5:95:d9: de:c8:25:3e:41:61:c1:ac:a2:73:3c:ae:1c:95:92: 3f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:DA:7F:E9:0E:9A:15:E5:BD:17:BB:23:F9:70:B4:E5:5B:C7:56:B9 X509v3 Authority Key Identifier: keyid:B8:8A:94:DC:A0:9E:3A:65:3C:06:F4:78:43:4D:C7:C8:F2:1E:05:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:03:39:8e:15:66:57:f2:66:20:82:5e:f7:5c:c3:c8:23:ca: d8:c0:a8:d3:b1:47:d9:1c:9c:ef:15:85:9e:22:2f:e5:2a:cc: 3b:9e:6d:3e:0e:53:a2:83:6e:2a:c8:55:31:af:45:9d:0b:f5: 8e:f7:be:4e:dc:aa:67:e7:ed:c5:d5:aa:a0:16:4e:69:19:08: 11:ad:9f:20:50:ce:e4:ba:9a:78:74:c3:c7:cf:27:ca:19:fc: bc:e8:f3:92:d8:e4:6c:62:c0:7a:79:dd:f8:57:4c:10:42:7b: 5e:46:96:d7:be:da:2d:a2:a4:94:a7:40:fc:8b:8e:82:80:eb: 05:9b:12:9d:96:f8:51:b9:12:e9:78:8c:17:6c:88:00:6f:33: a4:82:86:95:65:d2:58:3d:62:fd:6f:8c:4a:0b:a9:ce:41:df: fb:1a:f7:39:62:99:5d:b3:8f:74:84:f9:ac:87:0a:f1:14:d8: 69:05:05:66:e9:20:5e:95:a1:b9:16:88:05:90:1e:70:36:b8: a3:55:47:6a:38:4d:5a:9c:4f:be:22:50:50:43:d6:ce:dd:dc: e4:2b:af:5b:18:98:23:ee:1e:0f:1e:81:50:9a:18:c5:04:75: 94:86:8a:9d:f8:0a:9f:52:59:f1:f1:a6:59:fd:4f:4e:4b:c8: 37:e4:d6:e4 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIULQ2rVh7KgVl1zxdK1XEdBYFu1S0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg4QTk0RENBMDlFM0E2NTNDMDZGNDc4NDM0REM3QzhG MjFFMDUxODAeFw0yNTEyMDUxNTMyMTJaFw0yNTEyMDYxNTQzMTJaMDMxMTAvBgNV BAMTKDNEREE3RkU5MEU5QTE1RTVCRDE3QkIyM0Y5NzBCNEU1NUJDNzU2QjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfau+86bbBHFyYg5NTF2P0ubdh OKuCdrt/rJlBMVgdrtYZ7ak6+5f2+8NTQzXIQ+xhTtncKCjKSBYqd+SC1ySUnQTe Dqo80zdEPYdKC72DVjylKM4WmM/bX035qPAiESgUA8uKZ7pxmd3gJ9sQlTpD7Y6c Uu8/mDZTqRieOaaLnlIc7so60bm6vFGen6kgqK1Lz96BUoKoEVe8DrNz0QGLXIL2 29jvlAKyym7P2YXXYvr8Lxzej1Hs9DvbEPNK3O6IFR9buFn3zP5IBpQ6QQZQMzCa jEHiSfwcGrUqAdY1Rw/fmYWxz4DvzNkvZtWV2d7IJT5BYcGsonM8rhyVkj9xAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUPdp/6Q6aFeW9F7sj+XC05VvHVrkwHwYDVR0j BBgwFoAUuIqU3KCeOmU8BvR4Q03HyPIeBRgwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzBhNDYzN2RmNWJhNzQzZmVhMWI0ODJiZTgyMzU4MThmLzAv Qjg4QTk0RENBMDlFM0E2NTNDMDZGNDc4NDM0REM3QzhGMjFFMDUxOC5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9CODhBOTREQ0EwOUUzQTY1M0MwNkY0Nzg0MzREQzdD OEYyMUUwNTE4LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzBhNDYz N2RmNWJhNzQzZmVhMWI0ODJiZTgyMzU4MThmLzAvQjg4QTk0RENBMDlFM0E2NTND MDZGNDc4NDM0REM3QzhGMjFFMDUxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAEYDOY4VZlfyZiCCXvdc w8gjytjAqNOxR9kcnO8VhZ4iL+UqzDuebT4OU6KDbirIVTGvRZ0L9Y73vk7cqmfn 7cXVqqAWTmkZCBGtnyBQzuS6mnh0w8fPJ8oZ/Lzo85LY5GxiwHp53fhXTBBCe15G lte+2i2ipJSnQPyLjoKA6wWbEp2W+FG5Eul4jBdsiABvM6SChpVl0lg9Yv1vjEoL qc5B3/sa9zlimV2zj3SE+ayHCvEU2GkFBWbpIF6VobkWiAWQHnA2uKNVR2o4TVqc T74iUFBD1s7d3OQrr1sYmCPuHg8egVCaGMUEdZSGip34Cp9SWfHxpln9T05LyDfk 1uQ= -----END CERTIFICATE-----Generated at Sat Dec 6 06:41:10 2025 by rpki-client