This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft File: 2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft (raw, json) Hash identifier: ynRFZttSNp4lAZM8qIPKF8uHdABQlvM8CjTkLm+opMI= Subject key identifier: 08:85:E5:A9:A6:8C:FF:31:D5:49:7F:A1:65:0C:6F:B6:25:6F:40:93 Authority key identifier: 2B:3B:97:33:4D:A0:69:78:18:5D:AC:76:A2:F3:EA:35:85:E8:23:1E Certificate issuer: /CN=2B3B97334DA06978185DAC76A2F3EA3585E8231E Certificate serial: 59565E4FE978F5E432F1D7F6B8D561057700BAB5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/2B3B97334DA06978185DAC76A2F3EA3585E8231E.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft Manifest number: 1D Signing time: Fri 05 Dec 2025 14:32:04 +0000 Manifest this update: Fri 05 Dec 2025 14:27:04 +0000 Manifest next update: Sat 06 Dec 2025 16:02:04 +0000 Files and hashes: 1: 326131313a663263303a666665303a3a2f34382d3438203d3e20323134373439.roa (hash: 1GvfKtWMgom1LeK1xMf1awTIi3U4xQIJrbQco2SMjvs=) 2: 2B3B97334DA06978185DAC76A2F3EA3585E8231E.crl (hash: cVzayfWzy866dHWukcP2KksNQwpuavOd1+gr9HbSE6Y=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/2B3B97334DA06978185DAC76A2F3EA3585E8231E.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 16:02:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:56:5e:4f:e9:78:f5:e4:32:f1:d7:f6:b8:d5:61:05:77:00:ba:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B3B97334DA06978185DAC76A2F3EA3585E8231E Validity Not Before: Dec 5 14:27:04 2025 GMT Not After : Dec 6 16:02:04 2025 GMT Subject: CN=0885E5A9A68CFF31D5497FA1650C6FB6256F4093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:93:98:95:3b:de:6a:61:3b:97:2c:09:3d:72: 50:8e:5e:bd:55:71:34:b9:55:4e:b0:8b:16:1e:99: 7b:00:a3:c2:38:42:d6:c7:bf:68:cc:d9:c1:b1:ff: 4c:57:f3:7d:13:bc:e9:7f:87:e0:33:d9:61:c3:7b: 91:11:65:19:e4:26:65:da:40:68:48:47:a5:d5:31: c6:74:b0:a0:57:ee:88:4e:2a:54:71:3d:47:12:f0: 75:f0:42:14:35:73:bc:6f:54:68:60:24:94:fe:84: 3c:8a:b9:de:79:5d:08:ee:fc:5d:c6:72:8e:b6:57: b2:48:f2:23:e5:4b:49:4b:e0:05:4f:60:ba:f6:67: 1a:53:d1:3c:f2:f5:a5:c4:16:6f:a0:10:70:c1:e5: 1a:8e:46:cb:78:18:e6:61:0a:99:5c:94:17:2b:25: f8:d0:e3:53:d4:63:12:b9:95:3c:06:86:f3:92:76: 80:ba:ce:e4:10:0d:2d:39:27:75:cf:03:27:02:78: 65:bf:56:04:bb:15:7f:c2:28:87:58:ab:06:7d:26: f2:30:1a:4f:5d:70:10:9a:0e:cb:d5:fb:33:37:64: 2b:af:0d:87:e8:43:77:9c:34:92:ce:b6:d1:2e:8d: f0:cb:94:7d:40:62:13:83:62:a6:14:04:14:02:f8: 8b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:85:E5:A9:A6:8C:FF:31:D5:49:7F:A1:65:0C:6F:B6:25:6F:40:93 X509v3 Authority Key Identifier: keyid:2B:3B:97:33:4D:A0:69:78:18:5D:AC:76:A2:F3:EA:35:85:E8:23:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/2B3B97334DA06978185DAC76A2F3EA3585E8231E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_f114c1ea7788452cbf38be854ea8359d/0/2B3B97334DA06978185DAC76A2F3EA3585E8231E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:56:8a:c0:cf:6d:3b:51:04:f4:91:e3:89:4f:79:fa:86:02: f5:77:70:5f:0d:74:d9:39:03:b4:e3:bf:80:4c:de:ee:70:4b: 33:57:41:32:b7:c0:f2:aa:7b:ab:bc:f8:49:bb:1b:41:a6:10: 4d:06:7b:5b:08:db:14:5d:51:8e:6d:b1:49:13:a5:2e:56:71: 10:a5:6b:5f:26:95:3e:b0:ca:ec:fe:09:0e:0f:da:0e:b9:29: 7c:2c:63:96:50:d4:ca:08:09:19:68:ea:27:7c:0c:9b:a9:5a: a1:f5:1c:0e:b9:fe:f9:3d:91:9d:75:b6:47:ee:0e:bc:12:55: 80:af:6f:0d:a7:ea:13:b6:73:80:8b:f9:10:f4:74:af:ec:7d: 48:bc:2a:94:5d:a5:ea:ca:e0:26:bb:34:53:8a:9e:d3:66:74: b0:2b:cd:be:b8:96:59:8e:2b:af:f9:21:d6:f2:8a:72:47:de: 2c:f4:cc:4e:ea:e8:ea:3b:b5:28:f4:fb:b9:d7:37:9f:fd:d7: 7c:f3:b8:01:be:2b:14:a8:08:36:e3:72:cf:85:c0:20:16:37: 1c:71:21:2a:25:62:dd:ee:b0:b5:3a:5a:ed:9a:c4:62:cd:c4: 2e:cb:46:8f:65:b1:67:57:78:e1:e7:83:2b:da:73:07:35:96: 00:a9:07:8e -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUWVZeT+l49eQy8df2uNVhBXcAurUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkIzQjk3MzM0REEwNjk3ODE4NURBQzc2QTJGM0VBMzU4 NUU4MjMxRTAeFw0yNTEyMDUxNDI3MDRaFw0yNTEyMDYxNjAyMDRaMDMxMTAvBgNV BAMTKDA4ODVFNUE5QTY4Q0ZGMzFENTQ5N0ZBMTY1MEM2RkI2MjU2RjQwOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCek5iVO95qYTuXLAk9clCOXr1V cTS5VU6wixYemXsAo8I4QtbHv2jM2cGx/0xX830TvOl/h+Az2WHDe5ERZRnkJmXa QGhIR6XVMcZ0sKBX7ohOKlRxPUcS8HXwQhQ1c7xvVGhgJJT+hDyKud55XQju/F3G co62V7JI8iPlS0lL4AVPYLr2ZxpT0Tzy9aXEFm+gEHDB5RqORst4GOZhCplclBcr JfjQ41PUYxK5lTwGhvOSdoC6zuQQDS05J3XPAycCeGW/VgS7FX/CKIdYqwZ9JvIw Gk9dcBCaDsvV+zM3ZCuvDYfoQ3ecNJLOttEujfDLlH1AYhODYqYUBBQC+ItxAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUCIXlqaaM/zHVSX+hZQxvtiVvQJMwHwYDVR0j BBgwFoAUKzuXM02gaXgYXax2ovPqNYXoIx4wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2YxMTRjMWVhNzc4ODQ1MmNiZjM4YmU4NTRlYTgzNTlkLzAv MkIzQjk3MzM0REEwNjk3ODE4NURBQzc2QTJGM0VBMzU4NUU4MjMxRS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8yQjNCOTczMzREQTA2OTc4MTg1REFDNzZBMkYzRUEz NTg1RTgyMzFFLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2YxMTRj MWVhNzc4ODQ1MmNiZjM4YmU4NTRlYTgzNTlkLzAvMkIzQjk3MzM0REEwNjk3ODE4 NURBQzc2QTJGM0VBMzU4NUU4MjMxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHhWisDPbTtRBPSR44lP efqGAvV3cF8NdNk5A7Tjv4BM3u5wSzNXQTK3wPKqe6u8+Em7G0GmEE0Ge1sI2xRd UY5tsUkTpS5WcRCla18mlT6wyuz+CQ4P2g65KXwsY5ZQ1MoICRlo6id8DJupWqH1 HA65/vk9kZ11tkfuDrwSVYCvbw2n6hO2c4CL+RD0dK/sfUi8KpRdperK4Ca7NFOK ntNmdLArzb64llmOK6/5IdbyinJH3iz0zE7q6Oo7tSj0+7nXN5/913zzuAG+KxSo CDbjcs+FwCAWNxxxISolYt3usLU6Wu2axGLNxC7LRo9lsWdXeOHngyvacwc1lgCp B44= -----END CERTIFICATE-----Generated at Sat Dec 6 07:41:46 2025 by rpki-client