This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft File: 89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft (raw, json) Hash identifier: 6aq3esMKu41po6LyDAw9yKc1xiewya+BODT91W53ODY= Subject key identifier: 15:87:93:C7:77:F0:E2:B5:2D:2A:17:CD:28:93:6E:89:58:09:4C:46 Authority key identifier: 89:AA:97:7A:3B:C5:B6:B7:AC:46:29:55:D7:5A:2A:30:28:7E:25:77 Certificate issuer: /CN=89aa977a3bc5b6b7ac462955d75a2a30287e2577 Certificate serial: 67426E6F75CBC43D63FA883E586CEF5D639BB9B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iaqXejvFtresRilV11oqMCh-JXc.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft Manifest number: 0295 Signing time: Fri 05 Dec 2025 20:52:46 +0000 Manifest this update: Fri 05 Dec 2025 20:47:46 +0000 Manifest next update: Sat 06 Dec 2025 20:56:46 +0000 Files and hashes: 1: 89AA977A3BC5B6B7AC462955D75A2A30287E2577.crl (hash: Y/gDQNlzZkFbbxNFu31m9GBHDUOIdpAUgDLBXOytc5Y=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft rsync://rpki.ripe.net/repository/DEFAULT/iaqXejvFtresRilV11oqMCh-JXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:56:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:42:6e:6f:75:cb:c4:3d:63:fa:88:3e:58:6c:ef:5d:63:9b:b9:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89aa977a3bc5b6b7ac462955d75a2a30287e2577 Validity Not Before: Dec 5 20:47:46 2025 GMT Not After : Dec 6 20:56:46 2025 GMT Subject: CN=158793C777F0E2B52D2A17CD28936E8958094C46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a0:5b:77:53:8f:8c:8d:ad:31:dd:13:48:26: 93:37:10:6c:3e:54:d4:d8:54:14:34:c4:a4:95:0c: 64:de:f8:8e:2a:ba:7c:be:87:e2:26:f1:eb:8b:a1: 27:be:03:8b:25:21:25:32:e5:93:0f:f6:a8:f1:8e: 8c:9c:3a:15:b9:65:db:93:85:1d:32:09:a8:aa:fd: 59:5b:ab:94:02:1f:8a:a5:90:c4:9c:4c:2e:66:31: 18:05:b6:37:9f:a8:cb:b0:ff:33:2c:3e:d4:6b:3c: 57:28:50:14:db:ce:b0:6f:94:b9:30:01:71:73:42: 7d:27:d9:af:6f:e3:65:28:e1:df:09:9b:53:4f:c6: 11:4a:52:98:09:0e:05:4f:38:3c:8a:9e:60:8a:8d: a5:9a:4f:e0:05:c1:c8:43:f5:45:a3:dd:ee:09:0e: 7d:12:b3:2a:44:24:36:82:2d:65:ff:88:cd:58:1f: b5:8d:af:8c:49:fe:02:56:f5:22:85:72:7c:f6:d6: 00:07:7f:d9:2d:e9:8a:09:6a:e2:bb:a2:2e:e4:c9: dc:24:ab:aa:f5:aa:a6:98:bc:18:8e:cb:68:4c:f9: cc:bf:af:62:e3:cf:87:f9:8b:16:ad:6e:14:83:f5: 32:72:94:50:4e:16:ab:5f:80:cc:05:a2:d7:3d:b8: 5b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:87:93:C7:77:F0:E2:B5:2D:2A:17:CD:28:93:6E:89:58:09:4C:46 X509v3 Authority Key Identifier: keyid:89:AA:97:7A:3B:C5:B6:B7:AC:46:29:55:D7:5A:2A:30:28:7E:25:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iaqXejvFtresRilV11oqMCh-JXc.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:3f:ff:e6:9b:c2:8c:be:d5:cc:a9:01:3e:3c:94:e0:84:c9: a7:84:9d:9f:68:d3:de:b4:28:27:ad:17:ed:9d:3f:1b:a7:af: 84:d3:7b:d2:cf:16:12:79:c4:90:cb:b6:df:c2:54:d5:a3:7c: a8:4d:76:ce:6c:86:d5:0a:3e:56:fd:04:4e:da:50:6f:75:60: 61:ba:2e:23:75:33:15:68:56:c8:1b:93:fb:51:55:6e:50:bb: db:6c:e1:61:31:f5:82:a5:99:a9:ee:07:16:9f:21:d3:27:91: 34:94:53:6b:54:c9:ba:4b:da:ac:39:cd:55:ec:ff:17:01:8c: 18:c2:6a:8f:fd:d6:79:ed:4b:58:36:ef:c2:86:c1:e8:21:94: 19:d7:93:67:9d:00:d9:b2:a7:6f:9e:d8:a5:55:ba:a3:e6:53: 31:fd:8d:f3:f5:3c:0f:77:34:5f:06:c2:81:86:42:d1:79:42: d1:10:85:fb:ef:c4:69:77:98:38:80:6d:ac:c6:d8:94:b7:00: 36:c1:a4:44:24:b8:d5:61:05:52:fd:f7:83:4f:0d:70:9a:60: c5:c3:49:24:59:db:4a:c3:9a:dc:d0:d3:58:2f:9b:d6:c1:a1: 58:e2:39:22:a4:4d:e2:43:0c:5b:68:bb:b8:0e:ee:d1:46:f2: c1:8c:eb:a0 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUZ0Jub3XLxD1j+og+WGzvXWObubUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODlhYTk3N2EzYmM1YjZiN2FjNDYyOTU1ZDc1YTJhMzAy ODdlMjU3NzAeFw0yNTEyMDUyMDQ3NDZaFw0yNTEyMDYyMDU2NDZaMDMxMTAvBgNV BAMTKDE1ODc5M0M3NzdGMEUyQjUyRDJBMTdDRDI4OTM2RTg5NTgwOTRDNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzoFt3U4+Mja0x3RNIJpM3EGw+ VNTYVBQ0xKSVDGTe+I4quny+h+Im8euLoSe+A4slISUy5ZMP9qjxjoycOhW5ZduT hR0yCaiq/Vlbq5QCH4qlkMScTC5mMRgFtjefqMuw/zMsPtRrPFcoUBTbzrBvlLkw AXFzQn0n2a9v42Uo4d8Jm1NPxhFKUpgJDgVPODyKnmCKjaWaT+AFwchD9UWj3e4J Dn0SsypEJDaCLWX/iM1YH7WNr4xJ/gJW9SKFcnz21gAHf9kt6YoJauK7oi7kydwk q6r1qqaYvBiOy2hM+cy/r2Ljz4f5ixatbhSD9TJylFBOFqtfgMwFotc9uFvFAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUFYeTx3fw4rUtKhfNKJNuiVgJTEYwHwYDVR0j BBgwFoAUiaqXejvFtresRilV11oqMCh+JXcwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzU0NDhlNmFhMjYwNjQxYTE5N2I4MjUxYWMwYzNlNjMwLzEv ODlBQTk3N0EzQkM1QjZCN0FDNDYyOTU1RDc1QTJBMzAyODdFMjU3Ny5jcmwwZAYI KwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQv cmVwb3NpdG9yeS9ERUZBVUxUL2lhcVhlanZGdHJlc1JpbFYxMW9xTUNoLUpYYy5j ZXIwgZoGCCsGAQUFBwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9ycGtp LXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9jYV81NDQ4ZTZhYTI2MDY0MWEx OTdiODI1MWFjMGMzZTYzMC8xLzg5QUE5NzdBM0JDNUI2QjdBQzQ2Mjk1NUQ3NUEy QTMwMjg3RTI1NzcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASg AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBHP//mm8KMvtXMqQE+PJTghMmnhJ2faNPe tCgnrRftnT8bp6+E03vSzxYSecSQy7bfwlTVo3yoTXbObIbVCj5W/QRO2lBvdWBh ui4jdTMVaFbIG5P7UVVuULvbbOFhMfWCpZmp7gcWnyHTJ5E0lFNrVMm6S9qsOc1V 7P8XAYwYwmqP/dZ57UtYNu/ChsHoIZQZ15NnnQDZsqdvntilVbqj5lMx/Y3z9TwP dzRfBsKBhkLReULREIX778Rpd5g4gG2sxtiUtwA2waREJLjVYQVS/feDTw1wmmDF w0kkWdtKw5rc0NNYL5vWwaFY4jkipE3iQwxbaLu4Du7RRvLBjOug -----END CERTIFICATE-----Generated at Sat Dec 6 11:15:01 2025 by rpki-client