This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/4742E76772F118A935D69FD40F69858085C80999.mft File: 4742E76772F118A935D69FD40F69858085C80999.mft (raw, json) Hash identifier: 3snRFJvcPsCVjNx7gK/Ci0xASeBFq6YvzXYcR1sVjRQ= Subject key identifier: B0:57:EB:A2:60:55:C3:C1:24:4C:C0:32:45:6E:EF:5F:66:B4:EF:64 Authority key identifier: 47:42:E7:67:72:F1:18:A9:35:D6:9F:D4:0F:69:85:80:85:C8:09:99 Certificate issuer: /CN=4742E76772F118A935D69FD40F69858085C80999 Certificate serial: 490D8665F44778BBBA8CC564708252C89757D7CA Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4742E76772F118A935D69FD40F69858085C80999.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/4742E76772F118A935D69FD40F69858085C80999.mft Manifest number: 02A5 Signing time: Fri 19 Dec 2025 05:20:33 +0000 Manifest this update: Fri 19 Dec 2025 05:15:31 +0000 Manifest next update: Sat 20 Dec 2025 07:14:31 +0000 Files and hashes: 1: 4742E76772F118A935D69FD40F69858085C80999.crl (hash: TksRuyidhERaU78fYE1xN2rngZvjPQmbXhB/4aF+aYA=) 2: 326131313a663263303a666666613a3a2f34382d3438203d3e20323034303137.roa (hash: gUgzdRxmuJNOQsawEIqvnF9DX0YCEOe/wm39FVRE0Uw=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/4742E76772F118A935D69FD40F69858085C80999.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/4742E76772F118A935D69FD40F69858085C80999.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4742E76772F118A935D69FD40F69858085C80999.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:0d:86:65:f4:47:78:bb:ba:8c:c5:64:70:82:52:c8:97:57:d7:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4742E76772F118A935D69FD40F69858085C80999 Validity Not Before: Dec 19 05:15:31 2025 GMT Not After : Dec 20 07:14:31 2025 GMT Subject: CN=B057EBA26055C3C1244CC032456EEF5F66B4EF64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d2:ff:8a:b8:2a:b0:81:3a:8b:c0:e9:4c:6b: 12:bb:6a:62:b9:37:56:b6:8b:0e:7a:0c:04:84:7b: ed:d7:bb:14:bd:39:3b:80:bf:00:8f:92:61:11:c1: 07:55:1b:69:8f:2a:da:eb:be:23:9b:4b:ee:e8:89: 8f:bd:c1:46:85:36:2e:21:f7:2b:46:4a:4d:a7:24: 93:d8:9b:35:66:b1:0f:77:3c:bc:2d:33:4c:b3:7a: 1f:52:78:fc:cd:12:2c:39:c3:60:87:65:00:8c:f8: f5:1a:01:88:25:4c:d2:6e:c3:1a:74:23:0a:69:6c: 80:81:24:b5:6b:f5:5b:ac:5c:d0:bc:1a:5e:8f:5f: 34:cb:f4:fe:af:01:69:22:9e:e2:2f:15:85:a6:4b: 43:c3:68:b6:15:67:97:21:b9:eb:c7:d5:db:26:9d: 15:36:a6:12:e0:ce:50:33:83:11:cb:54:3e:d9:9d: 33:7a:50:b0:2c:50:c1:7b:92:29:b0:59:f0:ff:05: 9f:31:66:80:b6:9f:6d:67:3a:83:52:90:a7:d0:6b: 3c:cc:16:a7:41:a7:3d:23:3f:69:cc:e2:17:7b:18: bd:29:73:d4:7c:4e:2f:a0:63:09:b9:f4:d1:64:d4: 4c:9a:5f:2a:3e:31:ca:d9:89:a7:66:99:1f:fb:76: da:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:57:EB:A2:60:55:C3:C1:24:4C:C0:32:45:6E:EF:5F:66:B4:EF:64 X509v3 Authority Key Identifier: keyid:47:42:E7:67:72:F1:18:A9:35:D6:9F:D4:0F:69:85:80:85:C8:09:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/4742E76772F118A935D69FD40F69858085C80999.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4742E76772F118A935D69FD40F69858085C80999.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/4742E76772F118A935D69FD40F69858085C80999.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:ff:e3:17:f4:64:64:4e:e5:52:d1:05:8a:b2:77:24:17:13: ff:d2:18:96:16:91:71:b3:73:7a:b0:15:b8:1c:26:d7:1d:63: e3:25:96:ff:04:6b:5f:36:f9:d4:6b:42:76:e7:89:7b:1a:43: b6:64:e8:56:e9:36:47:26:3b:df:77:57:a9:77:81:96:d6:c7: 82:0d:bf:98:e5:36:a8:49:58:79:d2:02:a9:76:3a:e9:37:a7: 42:c3:c2:7f:ca:9b:9c:22:88:e6:ab:c6:f3:61:38:15:10:59: 39:b3:68:b6:b5:02:4a:1b:8f:77:5b:c2:fe:bc:a2:c3:c2:2b: e6:18:e6:d6:3b:83:c1:23:f3:29:4e:82:bc:67:c2:e5:83:c5: 31:91:c2:ae:3b:60:26:6c:ab:9a:1c:ba:e3:00:3e:8a:7b:25: c0:dd:ba:ca:79:a6:e5:c8:d6:bb:e7:3c:9a:2a:14:bc:aa:17: 28:3a:aa:37:5e:86:95:86:3d:53:f3:1c:24:32:b5:2a:50:22: 78:b8:3c:2d:ba:e3:29:ba:96:f8:b7:86:6c:ac:15:9a:86:97: 77:e6:a9:a1:ca:ad:8f:39:32:28:44:73:31:86:a0:93:83:25: f1:34:97:39:5b:14:d5:ee:6b:01:2d:b6:60:b5:8b:69:b7:fa: d0:f1:27:5c -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUSQ2GZfRHeLu6jMVkcIJSyJdX18owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc0MkU3Njc3MkYxMThBOTM1RDY5RkQ0MEY2OTg1ODA4 NUM4MDk5OTAeFw0yNTEyMTkwNTE1MzFaFw0yNTEyMjAwNzE0MzFaMDMxMTAvBgNV BAMTKEIwNTdFQkEyNjA1NUMzQzEyNDRDQzAzMjQ1NkVFRjVGNjZCNEVGNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS0v+KuCqwgTqLwOlMaxK7amK5 N1a2iw56DASEe+3XuxS9OTuAvwCPkmERwQdVG2mPKtrrviObS+7oiY+9wUaFNi4h 9ytGSk2nJJPYmzVmsQ93PLwtM0yzeh9SePzNEiw5w2CHZQCM+PUaAYglTNJuwxp0 IwppbICBJLVr9VusXNC8Gl6PXzTL9P6vAWkinuIvFYWmS0PDaLYVZ5chuevH1dsm nRU2phLgzlAzgxHLVD7ZnTN6ULAsUMF7kimwWfD/BZ8xZoC2n21nOoNSkKfQazzM FqdBpz0jP2nM4hd7GL0pc9R8Ti+gYwm59NFk1EyaXyo+McrZiadmmR/7dtqVAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUsFfromBVw8EkTMAyRW7vX2a072QwHwYDVR0j BBgwFoAUR0LnZ3LxGKk11p/UD2mFgIXICZkwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzYwYTA5MGMyN2MwNjRlMDc4YTdmNmU0NDZhNGZiZjcwLzAv NDc0MkU3Njc3MkYxMThBOTM1RDY5RkQ0MEY2OTg1ODA4NUM4MDk5OS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy80NzQyRTc2NzcyRjExOEE5MzVENjlGRDQwRjY5ODU4 MDg1QzgwOTk5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzYwYTA5 MGMyN2MwNjRlMDc4YTdmNmU0NDZhNGZiZjcwLzAvNDc0MkU3Njc3MkYxMThBOTM1 RDY5RkQ0MEY2OTg1ODA4NUM4MDk5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAA7/4xf0ZGRO5VLRBYqy dyQXE//SGJYWkXGzc3qwFbgcJtcdY+Mllv8Ea182+dRrQnbniXsaQ7Zk6FbpNkcm O993V6l3gZbWx4INv5jlNqhJWHnSAql2Ouk3p0LDwn/Km5wiiOarxvNhOBUQWTmz aLa1Akobj3dbwv68osPCK+YY5tY7g8Ej8ylOgrxnwuWDxTGRwq47YCZsq5ocuuMA Pop7JcDdusp5puXI1rvnPJoqFLyqFyg6qjdehpWGPVPzHCQytSpQIni4PC264ym6 lvi3hmysFZqGl3fmqaHKrY85MihEczGGoJODJfE0lzlbFNXuawEttmC1i2m3+tDx J1w= -----END CERTIFICATE-----Generated at Fri Dec 19 13:26:23 2025 by rpki-client