This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/1/941604040038CDC77F90A40FE277C4A0EB9E8DF8.mft File: 941604040038CDC77F90A40FE277C4A0EB9E8DF8.mft (raw, json) Hash identifier: 4RRX/Mlbk3/Xx3/qJroStFkxYQe6K0IVa7EAkW9t40o= Subject key identifier: BC:23:38:A4:6B:58:A4:32:45:FA:27:32:E5:D5:BA:58:2F:67:2E:37 Authority key identifier: 94:16:04:04:00:38:CD:C7:7F:90:A4:0F:E2:77:C4:A0:EB:9E:8D:F8 Certificate issuer: /CN=941604040038cdc77f90a40fe277c4a0eb9e8df8 Certificate serial: 6F869C99C88528CF63C873568459D863B62DF042 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBYEBAA4zcd_kKQP4nfEoOuejfg.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/1/941604040038CDC77F90A40FE277C4A0EB9E8DF8.mft Manifest number: 0295 Signing time: Sat 06 Dec 2025 10:24:05 +0000 Manifest this update: Sat 06 Dec 2025 10:19:05 +0000 Manifest next update: Sun 07 Dec 2025 10:49:05 +0000 Files and hashes: 1: 941604040038CDC77F90A40FE277C4A0EB9E8DF8.crl (hash: /ChK7O3rfcmugOPe2jG0ia/X6lMFjT/VKOK6FWfWK1s=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/1/941604040038CDC77F90A40FE277C4A0EB9E8DF8.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/1/941604040038CDC77F90A40FE277C4A0EB9E8DF8.mft rsync://rpki.ripe.net/repository/DEFAULT/lBYEBAA4zcd_kKQP4nfEoOuejfg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:49:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:86:9c:99:c8:85:28:cf:63:c8:73:56:84:59:d8:63:b6:2d:f0:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=941604040038cdc77f90a40fe277c4a0eb9e8df8 Validity Not Before: Dec 6 10:19:05 2025 GMT Not After : Dec 7 10:49:05 2025 GMT Subject: CN=BC2338A46B58A43245FA2732E5D5BA582F672E37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:79:cd:66:34:9e:0c:a6:0e:69:69:2a:ae:b2: 23:6b:bf:15:bb:72:cc:6c:e8:a3:af:22:46:31:c7: 76:68:cf:dd:a1:28:35:70:84:b8:66:d2:51:20:96: 0b:a3:98:21:54:81:a4:80:6d:25:19:f6:0b:34:ea: cb:56:19:64:1b:e1:6a:02:43:5c:5a:7f:e4:87:ab: 58:94:de:cb:42:92:63:1b:d8:15:cf:6f:a0:02:f6: 82:68:c6:f8:7a:3e:4f:f5:c0:9c:b9:80:6a:d2:a6: e2:a9:a9:0d:fb:bd:4f:3c:36:a4:5b:39:d0:4e:46: 09:92:30:c7:07:21:d2:bc:a6:34:e2:e0:7f:2b:bd: d2:92:66:f7:0f:5a:33:d2:9a:e1:28:61:7f:b7:61: c3:cf:19:9e:a1:d2:a7:04:d5:bf:d8:e6:59:56:41: 29:5e:b3:e6:ec:ea:fd:b3:75:c0:61:01:91:ce:dc: b4:ad:bd:31:0e:9f:70:a9:45:f2:06:f5:a8:7c:1f: 5c:42:f1:61:26:7c:ea:b7:69:59:f9:ad:46:78:c2: f0:5b:35:24:5b:0d:71:06:a6:eb:5e:59:72:66:20: 2b:bf:36:de:28:33:65:ce:df:67:73:4d:e9:12:58: e4:f2:93:1f:7e:ac:ff:6d:49:24:5c:6a:75:c9:7b: 47:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:23:38:A4:6B:58:A4:32:45:FA:27:32:E5:D5:BA:58:2F:67:2E:37 X509v3 Authority Key Identifier: keyid:94:16:04:04:00:38:CD:C7:7F:90:A4:0F:E2:77:C4:A0:EB:9E:8D:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/1/941604040038CDC77F90A40FE277C4A0EB9E8DF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBYEBAA4zcd_kKQP4nfEoOuejfg.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/1/941604040038CDC77F90A40FE277C4A0EB9E8DF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:73:3b:52:39:8f:b4:4c:4a:d5:7f:a4:1f:92:3e:85:ea:71: 3d:e3:dc:ea:56:d5:a7:e4:f0:2f:af:f1:4f:2d:f9:44:1d:6b: bd:33:dc:3e:e0:76:b3:26:7f:52:74:7e:67:9b:fa:00:6b:a2: 8b:eb:6b:eb:95:19:a4:3e:d7:dd:2d:84:3a:8f:b4:af:aa:17: c5:6c:78:ca:13:b3:15:04:b6:7a:1b:dc:81:7b:e9:f8:bd:10: a3:4f:fc:b1:fd:87:9f:24:f6:68:bb:e2:51:5f:e7:00:bb:f6: 8a:17:ec:8d:5e:1a:60:3f:3b:3e:df:ea:d3:13:a7:9e:39:82: 55:b0:b8:af:2d:ca:37:77:24:38:b1:b9:0f:03:14:ad:1c:b1: 5a:0c:2f:e9:f6:92:6d:c7:8c:e7:88:b2:38:b7:32:7e:2e:46: d5:ef:d3:b2:01:4c:91:a5:91:7f:0b:0c:da:93:d9:3d:8f:0e: 7b:0b:72:41:cb:68:08:21:eb:fe:6c:f5:e6:bc:a4:b2:3a:d6: 56:7c:45:d2:8f:b1:a8:7a:32:64:5f:33:60:dd:f0:91:5c:70: 24:a9:b5:cd:d0:34:94:ae:23:a0:3d:d9:c0:76:9e:2a:e9:ff: f3:6e:b8:77:04:f3:11:67:7b:e4:61:30:e1:30:4c:99:81:88: d0:59:02:b0 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUb4acmciFKM9jyHNWhFnYY7Yt8EIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQxNjA0MDQwMDM4Y2RjNzdmOTBhNDBmZTI3N2M0YTBl YjllOGRmODAeFw0yNTEyMDYxMDE5MDVaFw0yNTEyMDcxMDQ5MDVaMDMxMTAvBgNV BAMTKEJDMjMzOEE0NkI1OEE0MzI0NUZBMjczMkU1RDVCQTU4MkY2NzJFMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiec1mNJ4Mpg5paSqusiNrvxW7 csxs6KOvIkYxx3Zoz92hKDVwhLhm0lEglgujmCFUgaSAbSUZ9gs06stWGWQb4WoC Q1xaf+SHq1iU3stCkmMb2BXPb6AC9oJoxvh6Pk/1wJy5gGrSpuKpqQ37vU88NqRb OdBORgmSMMcHIdK8pjTi4H8rvdKSZvcPWjPSmuEoYX+3YcPPGZ6h0qcE1b/Y5llW QSles+bs6v2zdcBhAZHO3LStvTEOn3CpRfIG9ah8H1xC8WEmfOq3aVn5rUZ4wvBb NSRbDXEGputeWXJmICu/Nt4oM2XO32dzTekSWOTykx9+rP9tSSRcanXJe0dXAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUvCM4pGtYpDJF+icy5dW6WC9nLjcwHwYDVR0j BBgwFoAUlBYEBAA4zcd/kKQP4nfEoOuejfgwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzEzNjA5ZWRiNjMwMzRiZTBiY2Y1MzlmMmRlZWZiZjI5LzEv OTQxNjA0MDQwMDM4Q0RDNzdGOTBBNDBGRTI3N0M0QTBFQjlFOERGOC5jcmwwZAYI KwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS9ERUZBVUxUL2xCWUVCQUE0emNkX2tLUVA0bmZFb091ZWpmZy5j ZXIwgZoGCCsGAQUFBwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9ycGtp LXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9jYV8xMzYwOWVkYjYzMDM0YmUw YmNmNTM5ZjJkZWVmYmYyOS8xLzk0MTYwNDA0MDAzOENEQzc3RjkwQTQwRkUyNzdD NEEwRUI5RThERjgubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASg AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBXcztSOY+0TErVf6Qfkj6F6nE949zqVtWn 5PAvr/FPLflEHWu9M9w+4HazJn9SdH5nm/oAa6KL62vrlRmkPtfdLYQ6j7SvqhfF bHjKE7MVBLZ6G9yBe+n4vRCjT/yx/YefJPZou+JRX+cAu/aKF+yNXhpgPzs+3+rT E6eeOYJVsLivLco3dyQ4sbkPAxStHLFaDC/p9pJtx4zniLI4tzJ+LkbV79OyAUyR pZF/Cwzak9k9jw57C3JBy2gIIev+bPXmvKSyOtZWfEXSj7GoejJkXzNg3fCRXHAk qbXN0DSUriOgPdnAdp4q6f/zbrh3BPMRZ3vkYTDhMEyZgYjQWQKw -----END CERTIFICATE-----Generated at Sat Dec 6 17:33:52 2025 by rpki-client