This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft File: 3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft (raw, json) Hash identifier: UgJ7KtyNswfXTm+uxcunug6uo/LQeEW2BApA+hguwfQ= Subject key identifier: 09:EB:CD:A6:37:79:56:EA:2E:DA:1B:B8:59:BF:4A:3F:B9:D8:E0:7F Authority key identifier: 3B:86:A4:A4:53:80:C6:D4:55:CD:E5:80:DE:D1:BC:56:12:D0:A5:78 Certificate issuer: /CN=3B86A4A45380C6D455CDE580DED1BC5612D0A578 Certificate serial: 1A3DA5A75E2B3225258DD7AE212B33D5B9410A13 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft Manifest number: 02A6 Signing time: Thu 18 Dec 2025 15:50:21 +0000 Manifest this update: Thu 18 Dec 2025 15:45:19 +0000 Manifest next update: Fri 19 Dec 2025 16:03:19 +0000 Files and hashes: 1: 326131313a663263303a666664303a3a2f34382d3438203d3e20323135303639.roa (hash: onhCLB3gV3HdQhsHYazqCSyNdZ/2h865cbuFqj2YlvA=) 2: 326131313a663263303a666664313a3a2f34382d3438203d3e20323135303639.roa (hash: Kgbp0+Zk4p3tpOkyAtCJ3HEWdnZBbzm3NgMcGrByxQs=) 3: 326131313a663263303a666664643a3a2f34382d3438203d3e20323135303639.roa (hash: pRpvcvkpUIjn6KDjm+Ywf0niLgvvVoNWrBKMV64s3Gs=) 4: 326131313a663263303a666664633a3a2f34382d3438203d3e20323135303639.roa (hash: fW3/1bM6uuAVh4/BqcyWFGfZeggD1zO77SW4GWfaw4U=) 5: 3B86A4A45380C6D455CDE580DED1BC5612D0A578.crl (hash: YJrHEl3PeRqnFyLf/PXfXsZnFzr3nDzx0hmYyfii994=) 6: 326131313a663263303a666664343a3a2f34362d3436203d3e20323135303639.roa (hash: b4lO7qQITmIuTe+1DZpcfLD2H0yGfI8Xz4qwvBeBNzo=) 7: 326131313a663263303a666664653a3a2f34382d3438203d3e20323135303639.roa (hash: scCBjh8HfhV3GwKDOrHZF1YXj718at6+uNm0y/KBmOw=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 16:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:3d:a5:a7:5e:2b:32:25:25:8d:d7:ae:21:2b:33:d5:b9:41:0a:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B86A4A45380C6D455CDE580DED1BC5612D0A578 Validity Not Before: Dec 18 15:45:19 2025 GMT Not After : Dec 19 16:03:19 2025 GMT Subject: CN=09EBCDA6377956EA2EDA1BB859BF4A3FB9D8E07F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:8a:b8:a6:72:8e:40:3f:a6:fc:25:7f:7e:74: 2c:66:e7:03:a6:eb:af:a5:8c:32:f6:8e:e8:42:ea: 27:ed:93:6c:2a:77:f0:aa:4a:9b:4e:4a:0a:9d:1c: 54:c6:5f:7e:b6:c7:4e:ae:f3:d7:5d:85:50:67:58: f5:66:80:ab:45:42:00:b0:18:86:f3:f4:42:31:26: e4:d1:e5:ac:1e:0a:dc:91:29:10:34:56:93:bb:6e: 5b:ed:9f:4c:8f:e0:fb:06:7e:e9:67:3e:f6:6a:4d: a5:b6:86:9b:80:91:17:7a:21:fc:2b:71:18:09:f7: f8:f0:af:40:64:aa:0f:ca:b1:34:ee:9c:2b:b4:4e: a8:7b:c1:af:37:30:d7:1e:3a:73:4e:52:32:7d:f9: 90:03:8e:58:ab:c3:51:a5:94:e6:df:28:d8:24:6d: 92:9b:9d:b2:bb:5d:e2:23:7c:3c:41:ae:86:d2:ec: 89:b1:20:22:49:98:19:dd:07:63:34:65:be:aa:77: 50:51:a9:e6:5a:26:f4:b2:ab:60:4b:8a:ad:d9:cf: 1c:d8:d8:7b:eb:b8:9d:58:bd:dc:6e:98:08:15:d0: 4e:1e:41:f4:3f:e1:74:d9:db:8e:70:96:cd:a8:fb: 6b:aa:c7:b8:0e:cc:e8:7a:7f:6b:bb:44:a8:e8:74: 8e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:EB:CD:A6:37:79:56:EA:2E:DA:1B:B8:59:BF:4A:3F:B9:D8:E0:7F X509v3 Authority Key Identifier: keyid:3B:86:A4:A4:53:80:C6:D4:55:CD:E5:80:DE:D1:BC:56:12:D0:A5:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:18:46:f4:32:04:7c:fa:94:1a:03:60:22:26:8d:73:2d:d0: ac:4e:c1:ce:d6:e2:06:a9:95:33:f7:ed:fe:55:76:a0:e7:b9: 8d:33:53:50:d0:ac:aa:ca:2f:15:4a:ab:c2:89:60:51:08:44: b9:25:9b:25:62:95:e2:a5:99:26:bc:e2:d1:96:bc:c8:1c:23: 75:35:aa:18:c9:4f:4b:04:4a:a7:5c:de:51:75:67:49:64:f9: 51:27:2b:42:a9:30:60:15:34:e9:66:8d:78:e1:5f:62:92:da: 09:63:ff:43:eb:5b:a0:b0:bf:1f:94:c3:f1:90:15:9e:59:b2: 63:dd:b2:5e:79:16:3e:61:2d:60:cb:03:d7:3a:ed:4b:05:f5: 7b:f8:18:33:6e:bd:c8:75:da:04:58:70:77:90:35:f2:29:d9: 93:53:df:5e:89:43:f0:43:2f:99:40:61:7f:09:a4:7d:c4:a8: 7f:9e:58:d3:9e:50:4d:58:aa:c6:f2:c0:c3:27:b5:4a:23:fd: 1b:66:8a:f2:a7:f1:bd:63:21:dc:16:5d:2d:99:a6:4c:ed:22: ad:46:14:9e:b6:52:63:f3:78:43:ff:ff:f7:bc:6a:43:c8:cc: 00:cc:50:64:a8:6b:50:8d:d2:9e:fb:77:a4:46:a8:ed:e0:c3: 06:4f:17:79 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUGj2lp14rMiUljdeuISsz1blBChMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I4NkE0QTQ1MzgwQzZENDU1Q0RFNTgwREVEMUJDNTYx MkQwQTU3ODAeFw0yNTEyMTgxNTQ1MTlaFw0yNTEyMTkxNjAzMTlaMDMxMTAvBgNV BAMTKDA5RUJDREE2Mzc3OTU2RUEyRURBMUJCODU5QkY0QTNGQjlEOEUwN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5irimco5AP6b8JX9+dCxm5wOm 66+ljDL2juhC6iftk2wqd/CqSptOSgqdHFTGX362x06u89ddhVBnWPVmgKtFQgCw GIbz9EIxJuTR5aweCtyRKRA0VpO7blvtn0yP4PsGfulnPvZqTaW2hpuAkRd6Ifwr cRgJ9/jwr0Bkqg/KsTTunCu0Tqh7wa83MNceOnNOUjJ9+ZADjlirw1GllObfKNgk bZKbnbK7XeIjfDxBrobS7ImxICJJmBndB2M0Zb6qd1BRqeZaJvSyq2BLiq3ZzxzY 2HvruJ1YvdxumAgV0E4eQfQ/4XTZ245wls2o+2uqx7gOzOh6f2u7RKjodI67AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUCevNpjd5Vuou2hu4Wb9KP7nY4H8wHwYDVR0j BBgwFoAUO4akpFOAxtRVzeWA3tG8VhLQpXgwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzI1NDA1Yzc2YzdhMDQzYzg5YWNlMTY3ZTlkMmNmNzljLzAv M0I4NkE0QTQ1MzgwQzZENDU1Q0RFNTgwREVEMUJDNTYxMkQwQTU3OC5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8zQjg2QTRBNDUzODBDNkQ0NTVDREU1ODBERUQxQkM1 NjEyRDBBNTc4LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzI1NDA1 Yzc2YzdhMDQzYzg5YWNlMTY3ZTlkMmNmNzljLzAvM0I4NkE0QTQ1MzgwQzZENDU1 Q0RFNTgwREVEMUJDNTYxMkQwQTU3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAEIYRvQyBHz6lBoDYCIm jXMt0KxOwc7W4gaplTP37f5VdqDnuY0zU1DQrKrKLxVKq8KJYFEIRLklmyVileKl mSa84tGWvMgcI3U1qhjJT0sESqdc3lF1Z0lk+VEnK0KpMGAVNOlmjXjhX2KS2glj /0PrW6Cwvx+Uw/GQFZ5ZsmPdsl55Fj5hLWDLA9c67UsF9Xv4GDNuvch12gRYcHeQ NfIp2ZNT316JQ/BDL5lAYX8JpH3EqH+eWNOeUE1YqsbywMMntUoj/RtmivKn8b1j IdwWXS2ZpkztIq1GFJ62UmPzeEP///e8akPIzADMUGSoa1CN0p77d6RGqO3gwwZP F3k= -----END CERTIFICATE-----Generated at Fri Dec 19 05:45:52 2025 by rpki-client