This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.mft File: 31586760843F668A816117EA02F6F30FE8F9C359.mft (raw, json) Hash identifier: dyLqt0NZsyBGztZzOsYoF9K0TWB65mBQaHTB7McZoxI= Subject key identifier: 82:57:D7:AB:5A:17:7A:C7:CA:AD:C8:0A:80:59:BE:D7:C0:AC:64:36 Authority key identifier: 31:58:67:60:84:3F:66:8A:81:61:17:EA:02:F6:F3:0F:E8:F9:C3:59 Certificate issuer: /CN=31586760843F668A816117EA02F6F30FE8F9C359 Certificate serial: 6A5A250B17900A9A3396A561D69C4B91D549D84A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/31586760843F668A816117EA02F6F30FE8F9C359.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.mft Manifest number: 02D5 Signing time: Sun 25 Jan 2026 00:36:01 +0000 Manifest this update: Sun 25 Jan 2026 00:31:01 +0000 Manifest next update: Mon 26 Jan 2026 03:14:01 +0000 Files and hashes: 1: 326131313a663263303a666638303a3a2f34382d3438203d3e20323134353738.roa (hash: K6ERbHzYMOmGY8zVjajZjctj/rooDOMsKI1zpR886Vs=) 2: 31586760843F668A816117EA02F6F30FE8F9C359.crl (hash: 9wdvFUvd842fsDsGq41PaKdzncx7cxzkOepthPm2HAQ=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/31586760843F668A816117EA02F6F30FE8F9C359.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:14:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:5a:25:0b:17:90:0a:9a:33:96:a5:61:d6:9c:4b:91:d5:49:d8:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31586760843F668A816117EA02F6F30FE8F9C359 Validity Not Before: Jan 25 00:31:01 2026 GMT Not After : Jan 26 03:14:01 2026 GMT Subject: CN=8257D7AB5A177AC7CAADC80A8059BED7C0AC6436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b4:f7:51:5a:bd:86:ba:de:16:09:b0:35:83: f2:cc:d9:c5:ed:1a:d2:2e:b8:95:1c:03:78:2a:73: f4:cf:ef:bf:95:65:83:de:30:46:c2:c8:39:9c:4b: 91:1e:d4:dc:b0:19:c5:7b:4d:4b:8e:c2:76:f9:70: 38:4f:30:b4:18:41:a9:17:8b:f9:74:b9:9c:bb:87: cf:83:3e:55:0f:e1:f2:e5:8e:97:ab:48:4e:c1:cf: d2:92:e3:2e:0d:e4:e6:dd:27:d4:fa:51:1e:c1:db: 4a:cd:b0:a5:d2:5b:c1:11:32:39:6d:01:4f:ac:c6: 4a:d5:a9:e9:83:15:3c:38:04:29:6c:9e:08:ab:da: 7b:4c:cb:89:6d:32:bc:c2:e7:d5:2a:3e:4f:4d:a9: 0d:4d:a0:b9:4d:8b:22:a8:3f:26:27:c2:d5:f1:a3: df:b2:a1:a1:44:14:2e:77:bf:26:8f:ea:44:78:f1: 12:a1:9e:af:f2:4b:4c:f0:1e:83:9a:07:5e:27:18: 92:7a:89:1f:aa:af:c8:f7:54:d8:61:06:32:ab:2c: aa:0a:a7:8a:78:18:44:b1:d3:e8:53:1a:c9:76:14: 5e:7d:25:1c:79:a1:a1:c6:a4:c9:d0:aa:d0:34:b9: ac:e0:d4:96:04:bb:40:5d:a1:f3:3e:f7:e3:35:3c: 5a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:57:D7:AB:5A:17:7A:C7:CA:AD:C8:0A:80:59:BE:D7:C0:AC:64:36 X509v3 Authority Key Identifier: keyid:31:58:67:60:84:3F:66:8A:81:61:17:EA:02:F6:F3:0F:E8:F9:C3:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/31586760843F668A816117EA02F6F30FE8F9C359.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:6d:32:76:19:23:b1:ba:58:b2:f3:3e:95:47:f9:51:61:25: 76:f7:a2:54:90:95:08:e8:90:93:c5:c3:2d:26:47:13:02:cf: 17:38:65:40:40:c1:e9:ee:cd:a5:2a:22:df:fe:19:2e:ff:81: d7:7f:a2:1a:54:a5:ff:a5:45:93:df:9f:57:61:24:25:dd:ee: 3b:43:8c:aa:1f:ad:32:ee:bf:0b:1f:e1:bf:5b:a1:89:41:5f: a3:0d:0c:c2:12:3b:98:d1:a1:9c:77:5c:22:03:21:80:6b:a6: f9:c3:81:43:f8:1a:6d:de:d2:e7:0b:70:a4:2d:6a:ac:33:32: 04:a1:cc:be:ae:20:b9:3a:ac:3e:46:7e:9a:52:d7:ab:d0:6a: 99:4d:2c:c7:3e:b9:b9:22:6a:cf:1d:89:e1:d1:4f:5d:17:bc: d5:96:16:46:d7:94:55:e6:51:1e:05:ab:e2:c9:03:7b:cb:85: e3:a1:39:ab:d7:34:93:4f:2c:6c:b2:4b:d8:26:f8:84:66:7b: ee:86:69:ff:cf:a7:1e:39:f1:25:2d:d8:97:28:37:fd:e7:94: 25:03:87:c0:d0:6c:41:9c:f7:1d:18:65:86:fb:02:92:13:c4: 16:a3:a9:58:3d:d2:22:c4:23:7d:8f:2a:c3:91:c6:99:97:f5: 24:35:cf:1d -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUalolCxeQCpozlqVh1pxLkdVJ2EowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE1ODY3NjA4NDNGNjY4QTgxNjExN0VBMDJGNkYzMEZF OEY5QzM1OTAeFw0yNjAxMjUwMDMxMDFaFw0yNjAxMjYwMzE0MDFaMDMxMTAvBgNV BAMTKDgyNTdEN0FCNUExNzdBQzdDQUFEQzgwQTgwNTlCRUQ3QzBBQzY0MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJtPdRWr2Gut4WCbA1g/LM2cXt GtIuuJUcA3gqc/TP77+VZYPeMEbCyDmcS5Ee1NywGcV7TUuOwnb5cDhPMLQYQakX i/l0uZy7h8+DPlUP4fLljperSE7Bz9KS4y4N5ObdJ9T6UR7B20rNsKXSW8ERMjlt AU+sxkrVqemDFTw4BClsngir2ntMy4ltMrzC59UqPk9NqQ1NoLlNiyKoPyYnwtXx o9+yoaFEFC53vyaP6kR48RKhnq/yS0zwHoOaB14nGJJ6iR+qr8j3VNhhBjKrLKoK p4p4GESx0+hTGsl2FF59JRx5oaHGpMnQqtA0uazg1JYEu0BdofM+9+M1PFpVAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUglfXq1oXesfKrcgKgFm+18CsZDYwHwYDVR0j BBgwFoAUMVhnYIQ/ZoqBYRfqAvbzD+j5w1kwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzY3YzVkNGFkNDMzZTRjZmM5MDg2ZWExZjMzZjJkMjc2LzAv MzE1ODY3NjA4NDNGNjY4QTgxNjExN0VBMDJGNkYzMEZFOEY5QzM1OS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8zMTU4Njc2MDg0M0Y2NjhBODE2MTE3RUEwMkY2RjMw RkU4RjlDMzU5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzY3YzVk NGFkNDMzZTRjZmM5MDg2ZWExZjMzZjJkMjc2LzAvMzE1ODY3NjA4NDNGNjY4QTgx NjExN0VBMDJGNkYzMEZFOEY5QzM1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADttMnYZI7G6WLLzPpVH +VFhJXb3olSQlQjokJPFwy0mRxMCzxc4ZUBAwenuzaUqIt/+GS7/gdd/ohpUpf+l RZPfn1dhJCXd7jtDjKofrTLuvwsf4b9boYlBX6MNDMISO5jRoZx3XCIDIYBrpvnD gUP4Gm3e0ucLcKQtaqwzMgShzL6uILk6rD5GfppS16vQaplNLMc+ubkias8dieHR T10XvNWWFkbXlFXmUR4Fq+LJA3vLheOhOavXNJNPLGyyS9gm+IRme+6Gaf/Ppx45 8SUt2JcoN/3nlCUDh8DQbEGc9x0YZYb7ApITxBajqVg90iLEI32PKsORxpmX9SQ1 zx0= -----END CERTIFICATE-----Generated at Sun Jan 25 18:58:42 2026 by rpki-client