This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.mft File: 067DBC6BCF0F9582DF78366389AEAF5965565EF5.mft (raw, json) Hash identifier: KnxmEaaqmBupDCgKsaK+uKqA89DVbDgMYNx403vrvyU= Subject key identifier: 82:36:9A:9D:5A:29:F7:A2:87:89:9C:77:21:26:DB:57:56:8F:94:81 Authority key identifier: 06:7D:BC:6B:CF:0F:95:82:DF:78:36:63:89:AE:AF:59:65:56:5E:F5 Certificate issuer: /CN=067DBC6BCF0F9582DF78366389AEAF5965565EF5 Certificate serial: 6FBAE2AB26057651C229E6A9B360874E23F24395 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/067DBC6BCF0F9582DF78366389AEAF5965565EF5.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.mft Manifest number: 02D8 Signing time: Sun 25 Jan 2026 12:44:56 +0000 Manifest this update: Sun 25 Jan 2026 12:39:56 +0000 Manifest next update: Mon 26 Jan 2026 15:39:56 +0000 Files and hashes: 1: 067DBC6BCF0F9582DF78366389AEAF5965565EF5.crl (hash: dsMNGsSmNETrFEUv3sx/4/Q9w5ZnUR+AGWQInLShCQo=) 2: 326131313a663263303a666663343a3a2f34382d3438203d3e20323136333733.roa (hash: iTb04aO1BMGaSLDC3asTwY2ZRYrbTl7Ocrr3rHizQyw=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/067DBC6BCF0F9582DF78366389AEAF5965565EF5.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:ba:e2:ab:26:05:76:51:c2:29:e6:a9:b3:60:87:4e:23:f2:43:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=067DBC6BCF0F9582DF78366389AEAF5965565EF5 Validity Not Before: Jan 25 12:39:56 2026 GMT Not After : Jan 26 15:39:56 2026 GMT Subject: CN=82369A9D5A29F7A287899C772126DB57568F9481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ea:21:e0:db:78:9d:c6:3c:d2:f1:f6:a6:e8: ab:34:44:69:d9:e2:66:39:c5:13:c7:a7:da:47:03: 6e:95:00:9a:5f:f9:ad:5f:17:b3:0e:bb:0c:3d:0f: e3:fe:19:f8:ef:71:1c:6e:7a:d0:4e:5b:b9:ef:a8: 7a:60:a9:18:4c:0d:1e:26:26:9e:f1:9c:53:b8:fb: 6c:38:4d:b3:ae:67:c4:99:f4:d7:62:3b:f8:dc:35: 56:fa:65:0c:0b:db:e1:d9:ad:52:28:d9:cc:19:1e: 8c:82:d5:a9:1c:ec:e0:b1:ec:44:14:c1:f1:f4:21: 46:ec:49:7d:99:bd:60:30:75:6d:65:e2:69:32:b3: 38:b5:3b:b5:73:90:14:a5:ae:b8:b2:2d:31:9d:e6: 3c:ce:c2:27:39:8b:b1:01:ee:a5:ca:45:92:6f:56: bb:8d:1a:85:7c:ee:d6:16:3d:14:bf:a7:c7:f0:ff: 77:1a:90:a2:07:0d:80:87:c7:3c:4d:38:97:8b:25: d3:04:ba:40:85:1c:2a:54:e8:b4:44:33:76:f8:5e: 23:de:d8:ad:1e:9e:20:14:78:0d:62:65:ff:f8:ac: 34:8d:6f:78:27:d0:63:dd:34:f2:e9:35:07:a8:c9: 7c:49:27:0e:06:3c:15:15:ce:92:6c:0a:cf:87:7b: 88:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:36:9A:9D:5A:29:F7:A2:87:89:9C:77:21:26:DB:57:56:8F:94:81 X509v3 Authority Key Identifier: keyid:06:7D:BC:6B:CF:0F:95:82:DF:78:36:63:89:AE:AF:59:65:56:5E:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/067DBC6BCF0F9582DF78366389AEAF5965565EF5.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:95:42:0f:de:43:43:65:b8:5b:5e:a5:b8:e6:09:1d:a8:02: 5b:56:dd:d2:0d:73:ef:f0:df:ab:c2:8f:c8:f8:e5:4e:07:42: 85:59:b1:3e:72:6e:06:c9:8a:96:ee:f3:fd:65:ad:42:d5:85: d8:1d:4c:09:0b:9c:43:93:a9:f3:e9:28:45:7e:06:a0:86:3d: 3b:0e:c7:c4:cd:52:ed:44:d6:75:ae:fc:36:da:14:98:e5:80: 62:5a:eb:e0:33:a3:7b:39:34:57:0d:8e:b4:d5:49:0d:ac:6f: af:f7:b6:62:c8:d6:80:23:8e:56:e9:62:82:1b:99:87:95:79: f9:47:a5:88:70:08:ee:3b:be:b1:42:2a:38:10:62:4e:65:84: 8b:78:ee:f6:d8:60:2e:78:17:a5:3a:5c:3f:6f:6e:5a:cc:15: b2:fd:a5:30:bd:5b:26:8b:82:fc:dd:4c:66:a9:e2:3f:d5:61: 5f:e8:21:ce:ce:bb:92:ce:be:62:23:05:bf:b4:a7:e8:bf:fe: 13:d6:02:cf:7e:76:ea:e2:dc:61:55:8a:03:89:3a:c9:d8:5d: 07:9f:90:57:a1:d5:85:b1:41:4f:1a:de:a4:cd:5d:4c:5c:c7: 2d:d1:85:49:63:18:98:a6:26:73:a2:a8:26:99:76:72:ed:bd: c3:74:e0:d4 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUb7riqyYFdlHCKeaps2CHTiPyQ5UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY3REJDNkJDRjBGOTU4MkRGNzgzNjYzODlBRUFGNTk2 NTU2NUVGNTAeFw0yNjAxMjUxMjM5NTZaFw0yNjAxMjYxNTM5NTZaMDMxMTAvBgNV BAMTKDgyMzY5QTlENUEyOUY3QTI4Nzg5OUM3NzIxMjZEQjU3NTY4Rjk0ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC6iHg23idxjzS8fam6Ks0RGnZ 4mY5xRPHp9pHA26VAJpf+a1fF7MOuww9D+P+GfjvcRxuetBOW7nvqHpgqRhMDR4m Jp7xnFO4+2w4TbOuZ8SZ9NdiO/jcNVb6ZQwL2+HZrVIo2cwZHoyC1akc7OCx7EQU wfH0IUbsSX2ZvWAwdW1l4mkyszi1O7VzkBSlrriyLTGd5jzOwic5i7EB7qXKRZJv VruNGoV87tYWPRS/p8fw/3cakKIHDYCHxzxNOJeLJdMEukCFHCpU6LREM3b4XiPe 2K0eniAUeA1iZf/4rDSNb3gn0GPdNPLpNQeoyXxJJw4GPBUVzpJsCs+He4ivAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUgjaanVop96KHiZx3ISbbV1aPlIEwHwYDVR0j BBgwFoAUBn28a88PlYLfeDZjia6vWWVWXvUwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzAxNGI5MjA4YjU0NjRmZjFhZWFjMWZjODI5YWQwMzQzLzAv MDY3REJDNkJDRjBGOTU4MkRGNzgzNjYzODlBRUFGNTk2NTU2NUVGNS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8wNjdEQkM2QkNGMEY5NTgyREY3ODM2NjM4OUFFQUY1 OTY1NTY1RUY1LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzAxNGI5 MjA4YjU0NjRmZjFhZWFjMWZjODI5YWQwMzQzLzAvMDY3REJDNkJDRjBGOTU4MkRG NzgzNjYzODlBRUFGNTk2NTU2NUVGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAD6VQg/eQ0NluFtepbjm CR2oAltW3dINc+/w36vCj8j45U4HQoVZsT5ybgbJipbu8/1lrULVhdgdTAkLnEOT qfPpKEV+BqCGPTsOx8TNUu1E1nWu/DbaFJjlgGJa6+Azo3s5NFcNjrTVSQ2sb6/3 tmLI1oAjjlbpYoIbmYeVeflHpYhwCO47vrFCKjgQYk5lhIt47vbYYC54F6U6XD9v blrMFbL9pTC9WyaLgvzdTGap4j/VYV/oIc7Ou5LOvmIjBb+0p+i//hPWAs9+duri 3GFVigOJOsnYXQefkFeh1YWxQU8a3qTNXUxcxy3RhUljGJimJnOiqCaZdnLtvcN0 4NQ= -----END CERTIFICATE-----Generated at Sun Jan 25 17:09:24 2026 by rpki-client