This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft File: 4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft (raw, json) Hash identifier: dTnp2MgWLjHPrNB0gPF9TxveNKDMTM7eR0+kVhBkW5s= Subject key identifier: E8:19:56:DC:79:21:A0:5D:73:7E:1F:D0:94:00:B1:2E:FD:6B:BD:97 Authority key identifier: 4B:A4:51:1F:4B:81:C5:65:CE:D3:E7:0B:30:20:FB:D0:ED:05:56:2F Certificate issuer: /CN=4BA4511F4B81C565CED3E70B3020FBD0ED05562F Certificate serial: 12ED20078D9709894A54A0FB83760011494F0CBA Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft Manifest number: 029C Signing time: Sat 06 Dec 2025 10:34:07 +0000 Manifest this update: Sat 06 Dec 2025 10:29:07 +0000 Manifest next update: Sun 07 Dec 2025 11:14:07 +0000 Files and hashes: 1: 4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl (hash: oVw718+Fa/XKviOxnREkH2rSVndsNSEzl20VeRf8p0w=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:ed:20:07:8d:97:09:89:4a:54:a0:fb:83:76:00:11:49:4f:0c:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BA4511F4B81C565CED3E70B3020FBD0ED05562F Validity Not Before: Dec 6 10:29:07 2025 GMT Not After : Dec 7 11:14:07 2025 GMT Subject: CN=E81956DC7921A05D737E1FD09400B12EFD6BBD97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:64:50:4e:37:11:aa:2c:4b:98:aa:ed:d7:a4: 0b:83:e7:38:d9:6f:36:a9:32:ba:13:d7:02:fd:12: a7:44:51:c9:42:7e:68:ac:5b:38:1d:bd:0c:5c:a1: 4b:24:f8:bb:21:47:e2:09:2b:8e:45:52:ee:a6:3a: 24:29:1c:fd:97:b0:ab:06:3c:8a:21:bc:26:f2:5c: 08:6b:0d:bd:05:63:b3:93:ac:f1:5e:14:20:18:ea: a0:5f:92:92:3a:68:77:66:45:92:07:6f:ff:fe:64: f5:0b:d2:d1:fc:a0:ef:d0:95:80:b9:9f:da:7a:12: 11:93:1f:48:ff:f2:8c:cf:26:22:be:f1:3f:29:2a: af:da:98:ab:92:0d:03:7b:36:cb:5d:18:ad:c7:25: 6d:c5:01:29:b0:6a:d2:fc:ea:a7:62:79:dd:27:75: d7:8d:54:95:3c:82:f4:46:5b:38:30:78:e8:5d:28: 9f:9a:a8:d3:bc:23:2c:d6:0b:34:75:a6:08:5b:8a: ee:34:fd:24:ec:d9:d7:a1:19:59:e7:0f:3c:df:e7: f3:f7:bc:00:5d:e0:5b:94:91:1f:bb:f2:ad:bc:51: c2:80:49:c9:a0:8e:06:b4:25:8d:dd:cb:a7:77:3c: db:65:a5:97:9b:f7:6a:ed:ea:44:f2:73:75:5d:5e: 5c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:19:56:DC:79:21:A0:5D:73:7E:1F:D0:94:00:B1:2E:FD:6B:BD:97 X509v3 Authority Key Identifier: keyid:4B:A4:51:1F:4B:81:C5:65:CE:D3:E7:0B:30:20:FB:D0:ED:05:56:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:3c:b4:84:fc:18:f8:0d:f5:0c:cd:49:ad:3b:83:f1:e2:52: be:4a:93:a8:e8:c5:10:88:d0:a5:37:a4:a0:5f:06:d9:54:bb: c1:61:67:fb:a2:43:fa:f7:fb:56:8c:81:c1:e7:85:47:e3:63: 30:ea:75:2c:41:e6:18:34:2d:0f:8c:43:9c:cd:c1:a9:d8:5f: 49:14:43:c5:9b:19:16:99:79:f4:79:37:3b:a7:96:d9:bd:bd: 4a:29:e1:22:23:3b:3d:1f:45:ab:c7:ab:b4:f3:fb:cf:63:70: 8f:2e:23:1d:24:be:d2:89:46:79:c9:68:03:1a:9c:d8:0e:95: 31:d8:e7:8e:eb:a6:40:0d:2d:c1:6b:2a:9f:88:11:39:2d:49: a6:95:10:7a:44:e1:3d:ef:aa:96:90:99:87:2b:a9:86:84:ef: f9:33:2f:d5:01:1d:27:07:7f:40:95:35:55:8e:18:dd:3b:b7: 08:c9:87:02:9d:1e:ee:55:f0:8f:4f:5b:96:d1:f6:13:e7:10: d5:f8:b7:ce:15:b8:a3:41:c9:11:9d:c1:ad:de:1f:60:79:63: 94:ae:73:af:55:5d:7f:ee:dd:08:89:37:2f:31:71:69:30:31: bd:5d:1e:1d:e9:55:78:8a:3c:9d:a3:14:db:0d:99:f2:60:43: 15:49:0e:ec -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUEu0gB42XCYlKVKD7g3YAEUlPDLowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJBNDUxMUY0QjgxQzU2NUNFRDNFNzBCMzAyMEZCRDBF RDA1NTYyRjAeFw0yNTEyMDYxMDI5MDdaFw0yNTEyMDcxMTE0MDdaMDMxMTAvBgNV BAMTKEU4MTk1NkRDNzkyMUEwNUQ3MzdFMUZEMDk0MDBCMTJFRkQ2QkJEOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4ZFBONxGqLEuYqu3XpAuD5zjZ bzapMroT1wL9EqdEUclCfmisWzgdvQxcoUsk+LshR+IJK45FUu6mOiQpHP2XsKsG PIohvCbyXAhrDb0FY7OTrPFeFCAY6qBfkpI6aHdmRZIHb//+ZPUL0tH8oO/QlYC5 n9p6EhGTH0j/8ozPJiK+8T8pKq/amKuSDQN7NstdGK3HJW3FASmwatL86qdied0n ddeNVJU8gvRGWzgweOhdKJ+aqNO8IyzWCzR1pghbiu40/STs2dehGVnnDzzf5/P3 vABd4FuUkR+78q28UcKAScmgjga0JY3dy6d3PNtlpZeb92rt6kTyc3VdXlyLAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU6BlW3HkhoF1zfh/QlACxLv1rvZcwHwYDVR0j BBgwFoAUS6RRH0uBxWXO0+cLMCD70O0FVi8wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzk3M2U3YTk4YTcxYjQ5ZmZiYjIyYjc2ZWQ1ZjEyOWUyLzAv NEJBNDUxMUY0QjgxQzU2NUNFRDNFNzBCMzAyMEZCRDBFRDA1NTYyRi5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy80QkE0NTExRjRCODFDNTY1Q0VEM0U3MEIzMDIwRkJE MEVEMDU1NjJGLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzk3M2U3 YTk4YTcxYjQ5ZmZiYjIyYjc2ZWQ1ZjEyOWUyLzAvNEJBNDUxMUY0QjgxQzU2NUNF RDNFNzBCMzAyMEZCRDBFRDA1NTYyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGw8tIT8GPgN9QzNSa07 g/HiUr5Kk6joxRCI0KU3pKBfBtlUu8FhZ/uiQ/r3+1aMgcHnhUfjYzDqdSxB5hg0 LQ+MQ5zNwanYX0kUQ8WbGRaZefR5Nzunltm9vUop4SIjOz0fRavHq7Tz+89jcI8u Ix0kvtKJRnnJaAManNgOlTHY547rpkANLcFrKp+IETktSaaVEHpE4T3vqpaQmYcr qYaE7/kzL9UBHScHf0CVNVWOGN07twjJhwKdHu5V8I9PW5bR9hPnENX4t84VuKNB yRGdwa3eH2B5Y5Suc69VXX/u3QiJNy8xcWkwMb1dHh3pVXiKPJ2jFNsNmfJgQxVJ Duw= -----END CERTIFICATE-----Generated at Sat Dec 6 15:00:36 2025 by rpki-client