This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft File: AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft (raw, json) Hash identifier: Mmaithw+HKP663Ey/LrWyqQ3PAxFFHPR9z9bblGiGnI= Subject key identifier: 2A:39:B4:D6:50:E1:59:8D:1B:9D:11:1F:58:30:78:D9:A9:61:42:D6 Authority key identifier: AF:5A:EE:5A:C3:83:5D:AD:FF:52:DC:E6:BE:76:F9:83:2B:C3:D4:39 Certificate issuer: /CN=AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439 Certificate serial: 23F363CE8AB8E5426D7A2B060EFAC80306039B5E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft Manifest number: 02A2 Signing time: Wed 17 Dec 2025 03:04:32 +0000 Manifest this update: Wed 17 Dec 2025 02:59:32 +0000 Manifest next update: Thu 18 Dec 2025 05:34:32 +0000 Files and hashes: 1: 326131313a663263303a666663633a3a2f34382d3438203d3e20323135373638.roa (hash: 40KX5Azg+QOWUNYOrdl6IsWrdX+iJJgcObJYGtl3Q6w=) 2: AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl (hash: o/tYpXXi1bP0rAM151nQY2ZZTJEaequ0J9dzTr9Iuso=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 05:34:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:f3:63:ce:8a:b8:e5:42:6d:7a:2b:06:0e:fa:c8:03:06:03:9b:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439 Validity Not Before: Dec 17 02:59:32 2025 GMT Not After : Dec 18 05:34:32 2025 GMT Subject: CN=2A39B4D650E1598D1B9D111F583078D9A96142D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6c:ea:71:9a:8d:2f:fb:0a:9f:77:f0:5b:e6: 2f:9a:ac:62:88:e5:24:6b:33:08:88:4c:bb:b7:81: 3d:37:9f:18:15:3e:ba:6a:3b:71:98:45:dc:75:c9: 06:04:98:8a:4d:c5:50:0b:a0:9f:77:7d:33:a2:cc: 3c:72:f3:3f:e7:59:a9:c9:b5:fc:6f:e9:8a:66:b2: bd:ce:7d:06:77:ab:40:c5:0f:24:af:7f:df:1c:1f: 4a:a0:43:47:55:52:96:6a:99:59:a8:56:a6:e6:c0: 60:5e:ad:d6:22:bf:95:d5:e5:8c:dc:70:88:1a:c3: 31:bf:36:88:08:1b:00:b5:a2:57:cb:35:db:31:21: fa:b6:fa:44:13:f5:ab:14:09:42:77:82:ee:c1:30: c5:23:1d:42:09:69:9e:0f:6d:9e:0c:3f:98:d6:65: cc:cf:30:8c:24:ce:b1:54:15:48:96:60:8e:10:55: 34:48:3b:bd:ca:c5:b5:bb:63:1b:d6:14:00:02:67: 39:0e:7d:2a:7a:86:82:4e:e3:2a:ad:15:0f:c1:fa: 3f:af:e7:b5:98:17:63:fe:91:79:3d:5b:07:44:ae: e1:85:0d:0a:ee:35:b3:a9:80:a7:08:e0:0d:63:91: 6e:0f:44:43:31:94:41:aa:6e:13:8b:6c:d5:f6:bc: 69:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:39:B4:D6:50:E1:59:8D:1B:9D:11:1F:58:30:78:D9:A9:61:42:D6 X509v3 Authority Key Identifier: keyid:AF:5A:EE:5A:C3:83:5D:AD:FF:52:DC:E6:BE:76:F9:83:2B:C3:D4:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:80:05:4a:8c:5c:e0:f3:97:ef:c8:20:44:55:9e:2b:c2:ab: 82:bf:92:44:b0:94:95:48:d0:01:ff:b4:39:83:2d:67:86:fc: 86:1e:e7:4b:ac:4a:3f:76:14:8b:41:88:7e:62:66:23:a4:f6: 39:4a:0e:74:20:c4:db:d5:b9:c4:c0:46:96:fc:61:59:4c:e8: 01:ae:d5:5c:58:0a:e5:cf:8f:53:96:2e:ca:5e:db:17:b2:ae: 18:f8:1d:73:e4:66:9b:09:b3:3b:3b:04:06:59:03:e6:05:c1: c5:26:0f:9d:5a:8f:e0:ed:77:ca:82:3a:e6:5d:1f:dd:1d:6c: 92:36:f9:34:f2:b7:2e:c7:5b:23:4d:7d:ca:5c:4a:03:f9:93: 9e:cd:0d:01:b5:25:a9:66:f9:26:48:8b:ee:40:7a:5a:e1:12: 6b:b8:c2:2b:89:b5:47:aa:92:65:c4:1a:62:34:d3:ec:65:71: e3:6e:64:4a:d6:0c:26:81:50:2e:3b:c9:71:26:fc:1c:6c:f2: 10:8a:51:41:71:3b:78:8e:70:86:a4:78:e2:e5:25:62:14:32: a1:05:a6:06:8d:b7:ff:40:53:c4:7f:1d:c2:b5:c2:5e:33:7b: 8c:bc:14:34:27:35:0c:87:d1:0d:f9:04:52:d8:05:88:23:2b: fb:d1:66:1d -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUI/Njzoq45UJteisGDvrIAwYDm14wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY1QUVFNUFDMzgzNURBREZGNTJEQ0U2QkU3NkY5ODMy QkMzRDQzOTAeFw0yNTEyMTcwMjU5MzJaFw0yNTEyMTgwNTM0MzJaMDMxMTAvBgNV BAMTKDJBMzlCNEQ2NTBFMTU5OEQxQjlEMTExRjU4MzA3OEQ5QTk2MTQyRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClbOpxmo0v+wqfd/Bb5i+arGKI 5SRrMwiITLu3gT03nxgVPrpqO3GYRdx1yQYEmIpNxVALoJ93fTOizDxy8z/nWanJ tfxv6Ypmsr3OfQZ3q0DFDySvf98cH0qgQ0dVUpZqmVmoVqbmwGBerdYiv5XV5Yzc cIgawzG/NogIGwC1olfLNdsxIfq2+kQT9asUCUJ3gu7BMMUjHUIJaZ4PbZ4MP5jW ZczPMIwkzrFUFUiWYI4QVTRIO73KxbW7YxvWFAACZzkOfSp6hoJO4yqtFQ/B+j+v 57WYF2P+kXk9WwdEruGFDQruNbOpgKcI4A1jkW4PREMxlEGqbhOLbNX2vGnDAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUKjm01lDhWY0bnREfWDB42alhQtYwHwYDVR0j BBgwFoAUr1ruWsODXa3/Utzmvnb5gyvD1DkwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2E4NDA1ZWI1M2RlNDQ2YTk5NGQyMWYzYzI3ZWEzZjk4LzAv QUY1QUVFNUFDMzgzNURBREZGNTJEQ0U2QkU3NkY5ODMyQkMzRDQzOS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9BRjVBRUU1QUMzODM1REFERkY1MkRDRTZCRTc2Rjk4 MzJCQzNENDM5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2E4NDA1 ZWI1M2RlNDQ2YTk5NGQyMWYzYzI3ZWEzZjk4LzAvQUY1QUVFNUFDMzgzNURBREZG NTJEQ0U2QkU3NkY5ODMyQkMzRDQzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAI+ABUqMXODzl+/IIERV nivCq4K/kkSwlJVI0AH/tDmDLWeG/IYe50usSj92FItBiH5iZiOk9jlKDnQgxNvV ucTARpb8YVlM6AGu1VxYCuXPj1OWLspe2xeyrhj4HXPkZpsJszs7BAZZA+YFwcUm D51aj+Dtd8qCOuZdH90dbJI2+TTyty7HWyNNfcpcSgP5k57NDQG1Jalm+SZIi+5A elrhEmu4wiuJtUeqkmXEGmI00+xlceNuZErWDCaBUC47yXEm/Bxs8hCKUUFxO3iO cIakeOLlJWIUMqEFpgaNt/9AU8R/HcK1wl4ze4y8FDQnNQyH0Q35BFLYBYgjK/vR Zh0= -----END CERTIFICATE-----Generated at Wed Dec 17 22:01:34 2025 by rpki-client