This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft File: 0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft (raw, json) Hash identifier: IDsw3j0jUwYhPHeuOBaRt9nezRN5mcEACBdBxSlmnyE= Subject key identifier: 38:76:9F:82:11:BC:C2:2F:87:8D:CD:A5:E2:B2:20:1E:04:D1:CE:BA Authority key identifier: 06:23:BB:87:43:11:6D:86:B1:3B:9B:D9:E5:34:02:39:8B:7A:1E:E0 Certificate issuer: /CN=0623bb8743116d86b13b9bd9e53402398b7a1ee0 Certificate serial: 6459A33375700673A27011F4894B688D51502EAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BiO7h0MRbYaxO5vZ5TQCOYt6HuA.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft Manifest number: 0291 Signing time: Fri 05 Dec 2025 18:47:31 +0000 Manifest this update: Fri 05 Dec 2025 18:42:31 +0000 Manifest next update: Sat 06 Dec 2025 21:06:31 +0000 Files and hashes: 1: 0623BB8743116D86B13B9BD9E53402398B7A1EE0.crl (hash: 5wn7yd6sbNkho9udHORym9MLl6o2AQvYsP1BBI5kZdQ=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft rsync://rpki.ripe.net/repository/DEFAULT/BiO7h0MRbYaxO5vZ5TQCOYt6HuA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 21:06:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:59:a3:33:75:70:06:73:a2:70:11:f4:89:4b:68:8d:51:50:2e:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0623bb8743116d86b13b9bd9e53402398b7a1ee0 Validity Not Before: Dec 5 18:42:31 2025 GMT Not After : Dec 6 21:06:31 2025 GMT Subject: CN=38769F8211BCC22F878DCDA5E2B2201E04D1CEBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:80:8c:88:79:88:d0:1f:7e:46:c5:8a:85:eb: 41:fb:67:d2:31:9f:c8:dd:78:1d:d3:f6:41:25:1e: 94:21:2a:10:63:6a:f3:81:84:bd:87:13:5f:77:c2: 41:d2:c8:8f:c5:a3:f4:16:cd:52:c1:1f:a8:04:99: 61:94:e2:eb:33:6f:30:b2:13:f2:e8:d0:18:cd:7a: 96:89:0c:64:e4:16:1f:ca:1f:ac:b0:37:22:79:1e: 1b:89:46:a3:dc:c9:6e:e8:d0:fe:2d:e1:37:b3:fe: 61:6d:26:b2:b3:c5:5e:89:d1:ad:c0:99:45:23:39: 2c:9b:ca:c5:88:54:66:7c:24:ef:e2:0b:63:af:e5: 15:3f:ae:6b:3b:6c:7c:cd:5d:ed:f2:55:2f:7c:df: 34:6b:1f:91:1b:74:27:de:db:dd:f3:74:c1:2e:ff: d4:1a:1b:16:7b:39:ba:5f:a9:fa:a4:38:29:84:0e: 6e:25:3e:86:22:c6:05:7e:89:15:9b:71:49:c7:eb: 1b:86:93:5a:7c:37:b6:ff:60:b3:14:a9:7a:4f:45: eb:f9:04:50:f5:ff:57:08:d4:ac:bd:83:79:39:b3: a3:81:3c:d2:1e:d4:ba:fb:ba:97:2a:97:35:5c:3d: 58:50:20:e3:27:44:7d:6b:a7:3b:fe:f8:69:dd:f1: 1f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:76:9F:82:11:BC:C2:2F:87:8D:CD:A5:E2:B2:20:1E:04:D1:CE:BA X509v3 Authority Key Identifier: keyid:06:23:BB:87:43:11:6D:86:B1:3B:9B:D9:E5:34:02:39:8B:7A:1E:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiO7h0MRbYaxO5vZ5TQCOYt6HuA.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/1/0623BB8743116D86B13B9BD9E53402398B7A1EE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:ed:49:5c:d0:32:83:f8:e0:0f:70:a9:a4:c3:d5:68:8f:23: bd:d9:95:fd:76:2b:fb:81:a4:72:a8:20:27:25:e4:a8:3d:ef: 79:56:b7:fe:55:e6:a5:70:e6:eb:7a:fb:e8:04:c1:bb:cc:dc: 50:0c:70:b0:71:93:ac:a0:0e:78:c6:e8:3e:65:c0:64:bb:47: 1a:98:2b:c5:80:97:34:10:28:6b:d4:75:ae:1c:7b:ee:6a:9a: 26:8a:79:03:ae:f7:75:ad:5e:96:39:07:f7:1e:c4:0a:2c:08: e9:aa:f7:b0:37:c1:c7:16:10:3e:f2:6b:72:1d:8e:55:93:00: 26:d5:fb:d5:cf:58:17:66:cc:25:42:7f:0f:dd:ba:ec:5f:34: f5:55:90:50:ff:ba:ba:95:31:e6:f6:88:85:a1:79:78:fe:9e: 39:75:8c:52:f6:db:7d:85:1b:06:ff:5e:9c:cb:e4:96:6d:29: 5b:8e:17:50:9d:fe:0e:8d:aa:c5:13:16:98:c2:96:83:9b:ba: e3:fd:48:62:59:d7:c4:3b:e0:d5:65:ae:e9:fc:34:ca:12:57: cc:2a:08:14:71:3f:f8:02:37:3c:c9:30:e9:d5:1c:3b:52:50: 2d:d0:63:4b:59:ca:85:d1:a6:56:e4:cb:87:5c:5a:bd:80:0e: 5e:93:fd:3b -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUZFmjM3VwBnOicBH0iUtojVFQLq4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDYyM2JiODc0MzExNmQ4NmIxM2I5YmQ5ZTUzNDAyMzk4 YjdhMWVlMDAeFw0yNTEyMDUxODQyMzFaFw0yNTEyMDYyMTA2MzFaMDMxMTAvBgNV BAMTKDM4NzY5RjgyMTFCQ0MyMkY4NzhEQ0RBNUUyQjIyMDFFMDREMUNFQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCgIyIeYjQH35GxYqF60H7Z9Ix n8jdeB3T9kElHpQhKhBjavOBhL2HE193wkHSyI/Fo/QWzVLBH6gEmWGU4uszbzCy E/Lo0BjNepaJDGTkFh/KH6ywNyJ5HhuJRqPcyW7o0P4t4Tez/mFtJrKzxV6J0a3A mUUjOSybysWIVGZ8JO/iC2Ov5RU/rms7bHzNXe3yVS983zRrH5EbdCfe293zdMEu /9QaGxZ7ObpfqfqkOCmEDm4lPoYixgV+iRWbcUnH6xuGk1p8N7b/YLMUqXpPRev5 BFD1/1cI1Ky9g3k5s6OBPNIe1Lr7upcqlzVcPVhQIOMnRH1rpzv++Gnd8R8DAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUOHafghG8wi+Hjc2l4rIgHgTRzrowHwYDVR0j BBgwFoAUBiO7h0MRbYaxO5vZ5TQCOYt6HuAwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzRkNWMzMDlhZTExYTQ0OWVhODQwN2FjZTFmNzkwMWYwLzEv MDYyM0JCODc0MzExNkQ4NkIxM0I5QkQ5RTUzNDAyMzk4QjdBMUVFMC5jcmwwZAYI KwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS9ERUZBVUxUL0JpTzdoME1SYllheE81dlo1VFFDT1l0Nkh1QS5j ZXIwgZoGCCsGAQUFBwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9ycGtp LXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9jYV80ZDVjMzA5YWUxMWE0NDll YTg0MDdhY2UxZjc5MDFmMC8xLzA2MjNCQjg3NDMxMTZEODZCMTNCOUJEOUU1MzQw MjM5OEI3QTFFRTAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASg AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCW7Ulc0DKD+OAPcKmkw9VojyO92ZX9div7 gaRyqCAnJeSoPe95Vrf+VealcObrevvoBMG7zNxQDHCwcZOsoA54xug+ZcBku0ca mCvFgJc0EChr1HWuHHvuapominkDrvd1rV6WOQf3HsQKLAjpqvewN8HHFhA+8mty HY5VkwAm1fvVz1gXZswlQn8P3brsXzT1VZBQ/7q6lTHm9oiFoXl4/p45dYxS9tt9 hRsG/16cy+SWbSlbjhdQnf4OjarFExaYwpaDm7rj/UhiWdfEO+DVZa7p/DTKElfM KggUcT/4Ajc8yTDp1Rw7UlAt0GNLWcqF0aZW5MuHXFq9gA5ek/07 -----END CERTIFICATE-----Generated at Sat Dec 6 12:30:14 2025 by rpki-client