This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft File: 3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft (raw, json) Hash identifier: qB/DYzPFbT0yyJcmja/oMsARkpwdns/qlqsR0vboeSs= Subject key identifier: 0F:F5:69:7F:E1:97:4B:62:B4:1C:F1:EE:07:F6:C3:9F:7B:25:B5:C6 Authority key identifier: 3B:86:A4:A4:53:80:C6:D4:55:CD:E5:80:DE:D1:BC:56:12:D0:A5:78 Certificate issuer: /CN=3B86A4A45380C6D455CDE580DED1BC5612D0A578 Certificate serial: 4EB3AE6E25117D3055F5C2069A2AA58C6749EE37 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft Manifest number: 0295 Signing time: Fri 05 Dec 2025 19:32:37 +0000 Manifest this update: Fri 05 Dec 2025 19:27:37 +0000 Manifest next update: Sat 06 Dec 2025 20:33:37 +0000 Files and hashes: 1: 326131313a663263303a666664643a3a2f34382d3438203d3e20323135303639.roa (hash: pRpvcvkpUIjn6KDjm+Ywf0niLgvvVoNWrBKMV64s3Gs=) 2: 326131313a663263303a666664343a3a2f34362d3436203d3e20323135303639.roa (hash: b4lO7qQITmIuTe+1DZpcfLD2H0yGfI8Xz4qwvBeBNzo=) 3: 326131313a663263303a666664303a3a2f34382d3438203d3e20323135303639.roa (hash: onhCLB3gV3HdQhsHYazqCSyNdZ/2h865cbuFqj2YlvA=) 4: 326131313a663263303a666664633a3a2f34382d3438203d3e20323135303639.roa (hash: fW3/1bM6uuAVh4/BqcyWFGfZeggD1zO77SW4GWfaw4U=) 5: 326131313a663263303a666664653a3a2f34382d3438203d3e20323135303639.roa (hash: scCBjh8HfhV3GwKDOrHZF1YXj718at6+uNm0y/KBmOw=) 6: 326131313a663263303a666664313a3a2f34382d3438203d3e20323135303639.roa (hash: Kgbp0+Zk4p3tpOkyAtCJ3HEWdnZBbzm3NgMcGrByxQs=) 7: 3B86A4A45380C6D455CDE580DED1BC5612D0A578.crl (hash: N2gfkCblHZjK3jAr4hcxTTiKgKkiImMHEQB6aQUK/UQ=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:33:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:b3:ae:6e:25:11:7d:30:55:f5:c2:06:9a:2a:a5:8c:67:49:ee:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B86A4A45380C6D455CDE580DED1BC5612D0A578 Validity Not Before: Dec 5 19:27:37 2025 GMT Not After : Dec 6 20:33:37 2025 GMT Subject: CN=0FF5697FE1974B62B41CF1EE07F6C39F7B25B5C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:a0:fa:14:22:ae:69:b3:93:a7:e8:29:74:6d: 26:e5:8c:f4:3d:a3:6a:10:e1:05:57:89:3b:ec:16: ad:1b:4e:66:84:8a:51:87:11:e4:82:3e:d3:6b:37: c6:a4:7d:d0:7a:b6:76:48:21:a0:4a:81:d3:8c:97: e3:c8:dd:9d:3e:5b:5c:5e:5d:94:b3:b4:a8:cf:30: f6:e1:d7:e6:6f:a1:b8:2e:55:8d:85:f3:2b:31:6a: a9:11:49:60:78:99:01:11:cf:6e:cb:c7:5e:0c:53: 04:a8:f1:27:8e:06:ad:42:c7:26:da:d1:03:3c:a9: d4:5c:ec:e5:75:e9:1e:56:de:4e:bf:f6:17:0c:29: 4c:24:77:39:2d:b4:48:76:a5:f5:c5:b1:18:a4:d9: b2:29:1b:c5:71:72:3b:4b:08:74:3c:39:12:e5:19: 5e:aa:e8:b7:f7:a4:ea:f3:c5:c4:48:81:e1:96:ae: 89:f6:28:04:cc:3d:59:0c:15:12:91:fd:31:56:79: b8:d9:b3:14:92:28:4c:33:23:07:d4:d3:c3:4b:af: 51:98:61:3c:ff:33:09:49:8d:58:37:7a:9d:aa:e1: 2d:6d:ab:8c:1b:a7:a8:41:8a:cc:d5:cd:09:46:25: a7:68:3a:9a:fb:9a:7a:73:68:2c:b3:bd:13:29:c5: cc:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:F5:69:7F:E1:97:4B:62:B4:1C:F1:EE:07:F6:C3:9F:7B:25:B5:C6 X509v3 Authority Key Identifier: keyid:3B:86:A4:A4:53:80:C6:D4:55:CD:E5:80:DE:D1:BC:56:12:D0:A5:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:4f:9f:db:11:90:d6:a1:67:92:54:6e:07:55:eb:21:dd:1a: 80:50:72:3b:55:64:b1:a2:18:50:fc:9a:89:cd:10:4b:a1:9a: 79:e5:5c:e4:b8:e0:21:4e:cf:68:04:76:42:38:c1:f8:fc:f9: 0b:ea:c0:67:f7:3e:8f:a1:b9:7e:96:d1:f8:c5:d9:8e:56:a2: c2:88:05:bb:8c:a9:fe:65:c0:df:35:5a:1f:f5:10:f1:50:96: 89:04:44:d7:1e:7e:72:a3:4b:2a:29:33:f3:e0:9c:58:7b:1b: 84:19:a9:ba:4d:82:91:78:ca:e2:97:ac:fb:10:e6:ff:a0:31: c3:5f:b1:45:30:fa:9d:30:2b:39:ae:67:bc:fb:c6:75:23:e2: 16:53:4a:7d:78:02:ac:f1:94:df:b1:96:d6:97:4f:24:63:87: 33:4e:31:8c:c0:53:fa:a3:8c:c7:02:87:df:3a:c1:3d:82:38: f0:df:65:3d:d7:27:07:5e:d7:81:5a:f3:ed:8d:3f:66:9d:33: fe:02:e8:0b:a4:b8:e7:03:20:31:c3:b6:86:4f:1f:db:1f:8a: 60:10:74:de:ac:dd:61:5d:0e:32:1c:f1:e1:86:c5:3b:c7:28: 0a:3c:f8:39:22:89:ba:c4:7a:30:9c:be:1c:52:4b:74:22:76: 12:1e:01:6e -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUTrOubiURfTBV9cIGmiqljGdJ7jcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0I4NkE0QTQ1MzgwQzZENDU1Q0RFNTgwREVEMUJDNTYx MkQwQTU3ODAeFw0yNTEyMDUxOTI3MzdaFw0yNTEyMDYyMDMzMzdaMDMxMTAvBgNV BAMTKDBGRjU2OTdGRTE5NzRCNjJCNDFDRjFFRTA3RjZDMzlGN0IyNUI1QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD+oPoUIq5ps5On6Cl0bSbljPQ9 o2oQ4QVXiTvsFq0bTmaEilGHEeSCPtNrN8akfdB6tnZIIaBKgdOMl+PI3Z0+W1xe XZSztKjPMPbh1+ZvobguVY2F8ysxaqkRSWB4mQERz27Lx14MUwSo8SeOBq1Cxyba 0QM8qdRc7OV16R5W3k6/9hcMKUwkdzkttEh2pfXFsRik2bIpG8VxcjtLCHQ8ORLl GV6q6Lf3pOrzxcRIgeGWron2KATMPVkMFRKR/TFWebjZsxSSKEwzIwfU08NLr1GY YTz/MwlJjVg3ep2q4S1tq4wbp6hBiszVzQlGJadoOpr7mnpzaCyzvRMpxcy9AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUD/Vpf+GXS2K0HPHuB/bDn3sltcYwHwYDVR0j BBgwFoAUO4akpFOAxtRVzeWA3tG8VhLQpXgwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzI1NDA1Yzc2YzdhMDQzYzg5YWNlMTY3ZTlkMmNmNzljLzAv M0I4NkE0QTQ1MzgwQzZENDU1Q0RFNTgwREVEMUJDNTYxMkQwQTU3OC5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8zQjg2QTRBNDUzODBDNkQ0NTVDREU1ODBERUQxQkM1 NjEyRDBBNTc4LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzI1NDA1 Yzc2YzdhMDQzYzg5YWNlMTY3ZTlkMmNmNzljLzAvM0I4NkE0QTQ1MzgwQzZENDU1 Q0RFNTgwREVEMUJDNTYxMkQwQTU3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAH9Pn9sRkNahZ5JUbgdV 6yHdGoBQcjtVZLGiGFD8monNEEuhmnnlXOS44CFOz2gEdkI4wfj8+QvqwGf3Po+h uX6W0fjF2Y5WosKIBbuMqf5lwN81Wh/1EPFQlokERNcefnKjSyopM/PgnFh7G4QZ qbpNgpF4yuKXrPsQ5v+gMcNfsUUw+p0wKzmuZ7z7xnUj4hZTSn14AqzxlN+xltaX TyRjhzNOMYzAU/qjjMcCh986wT2COPDfZT3XJwde14Fa8+2NP2adM/4C6AukuOcD IDHDtoZPH9sfimAQdN6s3WFdDjIc8eGGxTvHKAo8+DkiibrEejCcvhxSS3QidhIe AW4= -----END CERTIFICATE-----Generated at Sat Dec 6 13:03:47 2025 by rpki-client