This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft File: 970AD94C83244100A97F9186D53DADAB07995EE9.mft (raw, json) Hash identifier: UZ6zvpzuIqV/hoiOGwG+xdNJ58pSvcO0T8iBzdWwvFE= Subject key identifier: 9C:70:4D:7C:1C:40:85:5D:57:23:10:6C:43:A3:AB:1B:C4:20:9C:F8 Authority key identifier: 97:0A:D9:4C:83:24:41:00:A9:7F:91:86:D5:3D:AD:AB:07:99:5E:E9 Certificate issuer: /CN=970AD94C83244100A97F9186D53DADAB07995EE9 Certificate serial: 2951B4ECBF12E66EA0C9F5F0CFC8F5FBC6ED5CC8 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft Manifest number: 0295 Signing time: Fri 05 Dec 2025 15:57:15 +0000 Manifest this update: Fri 05 Dec 2025 15:52:15 +0000 Manifest next update: Sat 06 Dec 2025 16:05:15 +0000 Files and hashes: 1: 326131313a663263303a616361303a3a2f34342d3438203d3e20323132323435.roa (hash: CCNk9XY2QHD/b3jWZi363Jj900j75CnbAukUts4RWyQ=) 2: 970AD94C83244100A97F9186D53DADAB07995EE9.crl (hash: xee1n/HKBaIb7DXVzprGN2i5mANwcbUMTM+aryglcTA=) 3: 326131313a663263303a666666363a3a2f34382d3438203d3e20323132323435.roa (hash: KUWIZJqj2P5+rqMCtyxvRjTojjJdo7mG970P3wqCh/c=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 16:05:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:51:b4:ec:bf:12:e6:6e:a0:c9:f5:f0:cf:c8:f5:fb:c6:ed:5c:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=970AD94C83244100A97F9186D53DADAB07995EE9 Validity Not Before: Dec 5 15:52:15 2025 GMT Not After : Dec 6 16:05:15 2025 GMT Subject: CN=9C704D7C1C40855D5723106C43A3AB1BC4209CF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c4:a8:e5:c9:60:4f:25:f0:92:e8:9e:7c:37: a1:9e:9c:ca:79:24:28:f0:1d:ef:7b:43:e1:94:4e: 73:35:55:e6:cc:7e:a6:ff:b5:a7:59:03:b7:04:a3: 9e:10:de:61:59:ab:5e:b6:25:42:69:49:ac:b5:48: 00:60:32:ce:9a:a8:48:cb:47:a3:a8:56:57:b9:08: 71:b4:cf:47:0e:40:37:06:39:2d:68:75:60:a2:57: 02:8e:1e:39:24:8f:cf:8a:fc:43:f3:51:c6:1b:4b: 28:ee:79:f8:05:64:40:7a:f9:50:1e:95:d5:8a:8a: 6e:90:02:8b:00:f4:d6:27:05:72:24:a6:9c:af:6c: fb:e6:ea:5c:87:40:9d:f1:41:42:f9:3c:34:8c:c4: 97:33:d5:e7:33:33:48:07:d8:8b:98:d9:6e:46:cc: 56:85:1c:9f:fb:f4:aa:0e:b4:b8:1b:e4:f0:ed:ac: b9:6d:93:e9:17:45:be:75:53:3f:0e:ee:5c:fd:aa: 3e:15:1c:d0:78:64:8b:0e:65:4a:93:fe:8f:c7:86: 5d:d9:9a:33:01:c9:b8:2a:cb:ef:7d:41:4b:cd:f3: eb:7c:79:e1:56:6f:82:a9:51:6a:27:48:80:f9:e2: b1:ed:0a:15:01:56:db:89:8f:e9:c1:90:37:aa:68: f6:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:70:4D:7C:1C:40:85:5D:57:23:10:6C:43:A3:AB:1B:C4:20:9C:F8 X509v3 Authority Key Identifier: keyid:97:0A:D9:4C:83:24:41:00:A9:7F:91:86:D5:3D:AD:AB:07:99:5E:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:12:99:91:0d:02:cb:98:b7:5e:78:3e:ba:ae:b1:33:ec:d9: da:e2:c3:7c:1d:e9:98:03:aa:46:b0:f5:e6:72:05:65:fe:f2: b5:2a:33:70:e7:33:9f:0d:70:69:1d:48:1b:b9:bb:f3:eb:5a: 87:cd:d6:0a:ce:fc:53:78:06:5b:88:35:d6:e6:ff:3e:c4:2d: 3d:1d:e7:1d:b9:1e:e4:8e:a3:fc:a7:64:11:d3:67:e8:41:e4: 50:85:66:c1:46:79:07:6b:c7:79:23:29:3d:76:11:ce:9f:1e: 0e:72:27:88:2b:67:bd:10:64:81:b1:cc:a7:dd:30:5b:36:15: 65:1e:67:3d:de:61:88:7a:39:99:dc:da:28:28:40:05:27:10: 6c:44:39:50:b4:cc:3f:d8:80:f6:99:01:09:5e:6f:9d:49:34: 23:4c:9b:73:ab:b6:2e:e2:9b:e6:9d:e3:1f:f4:2e:35:74:58: 83:6f:56:a6:71:c5:2a:8c:23:f5:7b:7a:57:ba:a0:49:49:1d: 1f:20:f4:94:12:1d:7b:57:ab:23:01:7b:dd:6c:ed:b5:31:1d: 80:2e:12:45:6f:16:95:2e:b1:cc:9d:31:bc:44:a1:49:fd:9d: 4b:50:93:c2:da:7f:51:4b:9c:b4:a7:71:04:f5:25:25:c4:1a: 0f:0c:81:dc -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUKVG07L8S5m6gyfXwz8j1+8btXMgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTcwQUQ5NEM4MzI0NDEwMEE5N0Y5MTg2RDUzREFEQUIw Nzk5NUVFOTAeFw0yNTEyMDUxNTUyMTVaFw0yNTEyMDYxNjA1MTVaMDMxMTAvBgNV BAMTKDlDNzA0RDdDMUM0MDg1NUQ1NzIzMTA2QzQzQTNBQjFCQzQyMDlDRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUxKjlyWBPJfCS6J58N6GenMp5 JCjwHe97Q+GUTnM1VebMfqb/tadZA7cEo54Q3mFZq162JUJpSay1SABgMs6aqEjL R6OoVle5CHG0z0cOQDcGOS1odWCiVwKOHjkkj8+K/EPzUcYbSyjuefgFZEB6+VAe ldWKim6QAosA9NYnBXIkppyvbPvm6lyHQJ3xQUL5PDSMxJcz1eczM0gH2IuY2W5G zFaFHJ/79KoOtLgb5PDtrLltk+kXRb51Uz8O7lz9qj4VHNB4ZIsOZUqT/o/Hhl3Z mjMBybgqy+99QUvN8+t8eeFWb4KpUWonSID54rHtChUBVtuJj+nBkDeqaPbLAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUnHBNfBxAhV1XIxBsQ6OrG8QgnPgwHwYDVR0j BBgwFoAUlwrZTIMkQQCpf5GG1T2tqweZXukwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzlkODM5Y2EwYTU1ZTQyYTQ5ZDEwZGUwNzFmNDY1OThiLzAv OTcwQUQ5NEM4MzI0NDEwMEE5N0Y5MTg2RDUzREFEQUIwNzk5NUVFOS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy85NzBBRDk0QzgzMjQ0MTAwQTk3RjkxODZENTNEQURB QjA3OTk1RUU5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzlkODM5 Y2EwYTU1ZTQyYTQ5ZDEwZGUwNzFmNDY1OThiLzAvOTcwQUQ5NEM4MzI0NDEwMEE5 N0Y5MTg2RDUzREFEQUIwNzk5NUVFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAIoSmZENAsuYt154Prqu sTPs2driw3wd6ZgDqkaw9eZyBWX+8rUqM3DnM58NcGkdSBu5u/PrWofN1grO/FN4 BluINdbm/z7ELT0d5x25HuSOo/ynZBHTZ+hB5FCFZsFGeQdrx3kjKT12Ec6fHg5y J4grZ70QZIGxzKfdMFs2FWUeZz3eYYh6OZnc2igoQAUnEGxEOVC0zD/YgPaZAQle b51JNCNMm3Orti7im+ad4x/0LjV0WINvVqZxxSqMI/V7ele6oElJHR8g9JQSHXtX qyMBe91s7bUxHYAuEkVvFpUuscydMbxEoUn9nUtQk8Laf1FLnLSncQT1JSXEGg8M gdw= -----END CERTIFICATE-----Generated at Sat Dec 6 06:40:25 2025 by rpki-client