This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft File: 1D570B984E9C5E382B0A879AA21F6518621F059F.mft (raw, json) Hash identifier: J6C2mYuBaKHzDc3zZi5w4XnQiWZxGpdB2+V9lguAtFs= Subject key identifier: 5B:4F:C2:7B:95:69:37:CF:5B:86:FD:3F:A0:91:97:22:6F:99:D0:87 Authority key identifier: 1D:57:0B:98:4E:9C:5E:38:2B:0A:87:9A:A2:1F:65:18:62:1F:05:9F Certificate issuer: /CN=1D570B984E9C5E382B0A879AA21F6518621F059F Certificate serial: 0CF9B7D49C1AFCCACD05748EF3C3EE3BE61FE2FD Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1D570B984E9C5E382B0A879AA21F6518621F059F.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft Manifest number: 0292 Signing time: Sat 06 Dec 2025 15:19:40 +0000 Manifest this update: Sat 06 Dec 2025 15:14:40 +0000 Manifest next update: Sun 07 Dec 2025 16:30:40 +0000 Files and hashes: 1: 1D570B984E9C5E382B0A879AA21F6518621F059F.crl (hash: v1bxVwBziVbE2/s7Nl8uJCODx+6d60KOsmh+70vxzF0=) 2: 326131313a663263303a666663383a3a2f34382d3438203d3e20323136303535.roa (hash: SZhn4FgWqY4qggdiI6TrYJUIT99auk+OFjrgNv4awjA=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1D570B984E9C5E382B0A879AA21F6518621F059F.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:35:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:f9:b7:d4:9c:1a:fc:ca:cd:05:74:8e:f3:c3:ee:3b:e6:1f:e2:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D570B984E9C5E382B0A879AA21F6518621F059F Validity Not Before: Dec 6 15:14:40 2025 GMT Not After : Dec 7 16:30:40 2025 GMT Subject: CN=5B4FC27B956937CF5B86FD3FA09197226F99D087 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:84:9b:c9:8f:b1:b4:2e:2f:ae:af:22:a3:0b: 75:5f:71:03:26:01:dc:69:66:0e:4a:12:5a:f7:d3: 06:97:99:cd:42:bb:bb:f9:de:c3:32:0c:ef:00:c4: a4:80:74:2f:28:dc:d4:2e:b1:1b:23:3d:aa:68:41: f2:cc:eb:ee:67:d9:fa:42:94:de:6c:ad:30:64:23: 5f:15:36:e7:64:24:e2:7d:9f:e4:fe:8c:4b:85:34: 92:1b:1b:87:97:b3:ac:69:cb:44:0c:b4:25:a5:da: ad:1a:30:00:9e:d5:a3:77:b2:6b:45:db:b4:04:3e: 64:a0:2b:a5:f9:87:04:09:64:f0:3b:04:3e:d4:43: ea:33:7c:a2:36:52:ed:cf:40:f1:51:fc:c0:53:95: 74:25:13:04:3e:b9:99:57:59:86:ad:f2:a8:57:bb: 5a:37:85:a8:6f:ef:7e:79:3d:da:0b:8e:e0:3e:5d: 95:e7:b4:5f:08:fd:00:32:62:16:90:a4:80:37:0a: 5e:fd:51:e2:e8:8a:d5:a4:27:99:20:83:fc:84:08: 3f:c8:f0:00:3f:df:ce:8d:c2:ef:ac:2e:34:f3:52: 25:95:7b:01:66:42:1d:f5:2f:fc:07:03:fa:c4:3c: d4:6d:ee:f4:55:5c:5f:46:9b:04:37:ba:d0:93:6c: c8:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:4F:C2:7B:95:69:37:CF:5B:86:FD:3F:A0:91:97:22:6F:99:D0:87 X509v3 Authority Key Identifier: keyid:1D:57:0B:98:4E:9C:5E:38:2B:0A:87:9A:A2:1F:65:18:62:1F:05:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1D570B984E9C5E382B0A879AA21F6518621F059F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_4d5c309ae11a449ea8407ace1f7901f0/0/1D570B984E9C5E382B0A879AA21F6518621F059F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:ed:8a:80:5d:e0:03:28:1a:07:ff:3b:26:33:92:ac:11:22: 0d:fe:99:54:03:44:de:f7:83:85:cc:32:23:00:d2:f9:bd:45: 2a:7f:3c:98:74:2a:40:d2:4d:97:ac:cf:b5:d8:62:26:e5:07: 95:d2:f5:8c:4f:d8:9a:2e:f4:70:8d:5e:ca:95:0d:73:c4:54: 39:d9:2f:90:c5:b2:60:fe:6f:ac:e2:e5:3e:10:4d:d8:82:62: 1a:71:db:d3:1d:24:a8:c2:aa:ef:ad:b1:3c:4f:85:7e:9a:0b: 2a:a5:23:ba:8f:04:97:9c:87:4a:c6:f9:ef:09:e7:f8:37:3e: 06:53:63:82:de:9a:31:30:da:28:ee:51:12:49:1b:7f:d8:22: f6:1c:12:82:6c:4a:fc:40:d3:e7:aa:3f:b7:7c:b7:92:e2:b2: a3:50:61:21:74:86:52:44:76:6a:e2:fe:29:c0:36:0f:52:12: 41:41:04:39:4f:12:53:cd:e2:a0:c7:6d:e7:0a:e0:34:21:04: c3:1c:a6:91:6d:51:ed:12:d9:7b:32:f2:a6:82:97:e8:af:b7: 71:48:eb:f7:e7:f1:9a:43:02:dc:13:a0:f9:d4:fa:2d:8d:af: 1d:60:86:54:1b:fb:4b:37:e6:74:f1:91:a9:b1:7f:ca:21:f3: 6a:d7:bb:1b -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUDPm31Jwa/MrNBXSO88PuO+Yf4v0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ1NzBCOTg0RTlDNUUzODJCMEE4NzlBQTIxRjY1MTg2 MjFGMDU5RjAeFw0yNTEyMDYxNTE0NDBaFw0yNTEyMDcxNjMwNDBaMDMxMTAvBgNV BAMTKDVCNEZDMjdCOTU2OTM3Q0Y1Qjg2RkQzRkEwOTE5NzIyNkY5OUQwODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0hJvJj7G0Li+uryKjC3VfcQMm AdxpZg5KElr30waXmc1Cu7v53sMyDO8AxKSAdC8o3NQusRsjPapoQfLM6+5n2fpC lN5srTBkI18VNudkJOJ9n+T+jEuFNJIbG4eXs6xpy0QMtCWl2q0aMACe1aN3smtF 27QEPmSgK6X5hwQJZPA7BD7UQ+ozfKI2Uu3PQPFR/MBTlXQlEwQ+uZlXWYat8qhX u1o3hahv7355PdoLjuA+XZXntF8I/QAyYhaQpIA3Cl79UeLoitWkJ5kgg/yECD/I 8AA/386Nwu+sLjTzUiWVewFmQh31L/wHA/rEPNRt7vRVXF9GmwQ3utCTbMidAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUW0/Ce5VpN89bhv0/oJGXIm+Z0IcwHwYDVR0j BBgwFoAUHVcLmE6cXjgrCoeaoh9lGGIfBZ8wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzRkNWMzMDlhZTExYTQ0OWVhODQwN2FjZTFmNzkwMWYwLzAv MUQ1NzBCOTg0RTlDNUUzODJCMEE4NzlBQTIxRjY1MTg2MjFGMDU5Ri5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xRDU3MEI5ODRFOUM1RTM4MkIwQTg3OUFBMjFGNjUx ODYyMUYwNTlGLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzRkNWMz MDlhZTExYTQ0OWVhODQwN2FjZTFmNzkwMWYwLzAvMUQ1NzBCOTg0RTlDNUUzODJC MEE4NzlBQTIxRjY1MTg2MjFGMDU5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGjtioBd4AMoGgf/OyYz kqwRIg3+mVQDRN73g4XMMiMA0vm9RSp/PJh0KkDSTZesz7XYYiblB5XS9YxP2Jou 9HCNXsqVDXPEVDnZL5DFsmD+b6zi5T4QTdiCYhpx29MdJKjCqu+tsTxPhX6aCyql I7qPBJech0rG+e8J5/g3PgZTY4LemjEw2ijuURJJG3/YIvYcEoJsSvxA0+eqP7d8 t5LisqNQYSF0hlJEdmri/inANg9SEkFBBDlPElPN4qDHbecK4DQhBMMcppFtUe0S 2Xsy8qaCl+ivt3FI6/fn8ZpDAtwToPnU+i2Nrx1ghlQb+0s35nTxkamxf8oh82rX uxs= -----END CERTIFICATE-----Generated at Sat Dec 6 18:39:20 2025 by rpki-client