This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.mft File: C2724A29EF989A4340933B8130B402DD4627A501.mft (raw, json) Hash identifier: DJxqVg3pawPKHo/VV2Uc025XKVKvSp424MFZjF9RHo8= Subject key identifier: 88:B3:AA:52:A5:52:CC:16:F8:42:AF:65:3D:86:C4:52:86:5F:FF:20 Authority key identifier: C2:72:4A:29:EF:98:9A:43:40:93:3B:81:30:B4:02:DD:46:27:A5:01 Certificate issuer: /CN=C2724A29EF989A4340933B8130B402DD4627A501 Certificate serial: 42866CB6C6AD38BEA1EF0817DAE360F37E59D9A2 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/C2724A29EF989A4340933B8130B402DD4627A501.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.mft Manifest number: 02A0 Signing time: Wed 17 Dec 2025 05:14:50 +0000 Manifest this update: Wed 17 Dec 2025 05:09:50 +0000 Manifest next update: Thu 18 Dec 2025 07:57:50 +0000 Files and hashes: 1: 326131313a663263303a666663333a3a2f34382d3438203d3e20313938383035.roa (hash: hqgaxXhgaM7AiSsPcNwqghRTi61TSIKXFax/zJU7ecI=) 2: C2724A29EF989A4340933B8130B402DD4627A501.crl (hash: i9N6mIqa2yBKSzwqUIa/4WY1bx/0bbgLQlvD/g+55Lg=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/C2724A29EF989A4340933B8130B402DD4627A501.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:57:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:86:6c:b6:c6:ad:38:be:a1:ef:08:17:da:e3:60:f3:7e:59:d9:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2724A29EF989A4340933B8130B402DD4627A501 Validity Not Before: Dec 17 05:09:50 2025 GMT Not After : Dec 18 07:57:50 2025 GMT Subject: CN=88B3AA52A552CC16F842AF653D86C452865FFF20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:24:30:84:1a:3b:7a:87:4d:d7:99:39:11:09: c1:61:b7:16:36:ed:2f:4b:a2:a2:87:6e:a4:17:fe: 30:96:4a:8c:4f:eb:33:6f:da:04:e6:0b:8d:8c:7a: 11:73:97:5d:21:f0:7f:2c:f5:9a:98:ba:2c:e1:63: 63:ce:a7:a4:2f:79:16:19:d2:4e:d4:e2:78:ce:19: 40:f5:74:fa:c9:13:16:9f:86:5d:58:31:b9:f4:26: c4:44:ed:06:43:51:1a:2b:b0:2f:a0:8d:ff:13:2e: b9:6c:81:a4:2a:35:72:65:3e:bd:41:95:f5:5b:ee: 03:8f:2f:f7:85:b3:85:4f:93:ef:0c:9e:66:6c:40: 55:58:8d:b1:1e:ed:0f:c5:e7:48:7b:25:7d:51:0f: 60:55:d4:15:be:ce:2b:07:cd:24:6e:0a:18:63:60: 81:f8:ca:1a:a3:cf:32:b9:f1:7f:23:a3:56:4e:54: 2c:a2:20:b2:72:bf:f0:74:9f:69:c9:4e:ba:16:dd: 43:99:8d:e3:40:8b:ab:2c:d2:39:09:53:d4:7d:95: 9a:18:c8:0e:42:67:01:aa:25:cb:72:3f:51:d2:a6: 93:08:48:75:03:e2:48:26:dd:04:eb:bc:21:17:7e: 4b:0d:92:ae:7b:6e:94:c3:54:c1:4d:34:43:44:9d: b4:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:B3:AA:52:A5:52:CC:16:F8:42:AF:65:3D:86:C4:52:86:5F:FF:20 X509v3 Authority Key Identifier: keyid:C2:72:4A:29:EF:98:9A:43:40:93:3B:81:30:B4:02:DD:46:27:A5:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/C2724A29EF989A4340933B8130B402DD4627A501.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:37:82:d5:7e:11:fd:62:5e:a7:09:8c:96:4d:20:b0:b6:8d: 21:60:33:d3:4c:30:ca:0a:2a:e2:a8:7c:73:c1:f3:3e:cc:06: e6:ab:05:32:29:25:dc:88:f9:85:d2:d6:a1:f0:b6:f7:3b:18: 85:72:23:a2:44:44:fc:21:70:4f:a7:f0:63:94:29:55:bc:28: 91:65:24:3f:68:d9:c7:ab:d5:32:f3:5d:f7:18:52:70:29:c0: 4c:20:f2:ca:ef:15:39:39:92:96:eb:01:11:63:6f:60:f3:80: 63:19:7c:d1:d0:91:43:dd:08:52:69:80:73:94:78:0d:06:89: 04:a7:97:f7:fd:a9:6f:af:87:e9:68:5f:4d:35:97:54:99:b3: 76:09:15:3d:fd:33:b5:b6:0d:53:7e:3b:d9:04:07:83:eb:65: 3c:f5:5a:83:1d:cc:29:c5:71:4d:ad:f0:90:34:61:3a:5f:22: 77:b1:97:f7:f1:c1:cc:cf:44:df:ef:42:ea:4b:e2:93:c1:00: b5:b8:8c:ec:6d:34:3f:e9:ea:8d:6a:e1:e8:4d:f2:80:91:ab: 4b:db:2a:89:de:e7:7d:a7:f4:fb:4d:d0:6d:e9:31:9c:00:52: 8e:0b:9e:48:27:e8:01:fd:f9:8e:da:ec:e4:7e:ee:de:bd:fe: 39:b5:77:e6 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUQoZstsatOL6h7wgX2uNg835Z2aIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI3MjRBMjlFRjk4OUE0MzQwOTMzQjgxMzBCNDAyREQ0 NjI3QTUwMTAeFw0yNTEyMTcwNTA5NTBaFw0yNTEyMTgwNzU3NTBaMDMxMTAvBgNV BAMTKDg4QjNBQTUyQTU1MkNDMTZGODQyQUY2NTNEODZDNDUyODY1RkZGMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmJDCEGjt6h03XmTkRCcFhtxY2 7S9LoqKHbqQX/jCWSoxP6zNv2gTmC42MehFzl10h8H8s9ZqYuizhY2POp6QveRYZ 0k7U4njOGUD1dPrJExafhl1YMbn0JsRE7QZDURorsC+gjf8TLrlsgaQqNXJlPr1B lfVb7gOPL/eFs4VPk+8MnmZsQFVYjbEe7Q/F50h7JX1RD2BV1BW+zisHzSRuChhj YIH4yhqjzzK58X8jo1ZOVCyiILJyv/B0n2nJTroW3UOZjeNAi6ss0jkJU9R9lZoY yA5CZwGqJctyP1HSppMISHUD4kgm3QTrvCEXfksNkq57bpTDVMFNNENEnbS9AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUiLOqUqVSzBb4Qq9lPYbEUoZf/yAwHwYDVR0j BBgwFoAUwnJKKe+YmkNAkzuBMLQC3UYnpQEwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzhiODNlNjMxMjc5ZjRjNjlhNTNmYWIyNTBiYmU2OWRiLzAv QzI3MjRBMjlFRjk4OUE0MzQwOTMzQjgxMzBCNDAyREQ0NjI3QTUwMS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9DMjcyNEEyOUVGOTg5QTQzNDA5MzNCODEzMEI0MDJE RDQ2MjdBNTAxLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzhiODNl NjMxMjc5ZjRjNjlhNTNmYWIyNTBiYmU2OWRiLzAvQzI3MjRBMjlFRjk4OUE0MzQw OTMzQjgxMzBCNDAyREQ0NjI3QTUwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAIM3gtV+Ef1iXqcJjJZN ILC2jSFgM9NMMMoKKuKofHPB8z7MBuarBTIpJdyI+YXS1qHwtvc7GIVyI6JERPwh cE+n8GOUKVW8KJFlJD9o2cer1TLzXfcYUnApwEwg8srvFTk5kpbrARFjb2DzgGMZ fNHQkUPdCFJpgHOUeA0GiQSnl/f9qW+vh+loX001l1SZs3YJFT39M7W2DVN+O9kE B4PrZTz1WoMdzCnFcU2t8JA0YTpfInexl/fxwczPRN/vQupL4pPBALW4jOxtND/p 6o1q4ehN8oCRq0vbKone532n9PtN0G3pMZwAUo4Lnkgn6AH9+Y7a7OR+7t69/jm1 d+Y= -----END CERTIFICATE-----Generated at Wed Dec 17 13:43:58 2025 by rpki-client