This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft File: FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft (raw, json) Hash identifier: neCi86+jdRWqBVjIcvYuYhVT4jruc0WoepgVsu5DM44= Subject key identifier: FD:AE:07:28:0A:D5:3C:30:37:4C:DC:75:F9:3D:20:DF:C7:55:67:C3 Authority key identifier: FA:7D:8F:1E:1C:10:5F:F7:ED:AF:03:DD:81:98:24:34:17:A5:FA:C3 Certificate issuer: /CN=FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3 Certificate serial: 1840182396CAD23E27ABB2726DFAA857FBABA80E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft Manifest number: 0292 Signing time: Sat 06 Dec 2025 08:23:33 +0000 Manifest this update: Sat 06 Dec 2025 08:18:33 +0000 Manifest next update: Sun 07 Dec 2025 09:21:33 +0000 Files and hashes: 1: FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.crl (hash: f7f1dwagW0YqmRdWjWeXgry9bQsp/ZD/n8mTqV7McvY=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:35:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:40:18:23:96:ca:d2:3e:27:ab:b2:72:6d:fa:a8:57:fb:ab:a8:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3 Validity Not Before: Dec 6 08:18:33 2025 GMT Not After : Dec 7 09:21:33 2025 GMT Subject: CN=FDAE07280AD53C30374CDC75F93D20DFC75567C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f7:ab:4e:e1:d5:c1:54:09:a3:1a:6e:8f:e0: 8c:a4:89:d4:82:01:de:fe:53:68:9a:87:48:bd:7d: 23:b3:a7:c7:5a:a2:85:18:0a:48:e3:b8:ee:bf:67: de:63:45:3b:3c:9d:40:37:88:38:67:88:7f:56:fc: 2e:3f:f2:49:ec:78:ad:0a:76:54:26:fa:43:db:41: 1b:68:40:c1:db:70:fb:87:79:b8:0c:bc:32:e3:fc: 85:87:1f:63:32:65:57:4b:e3:8f:1d:0e:42:3b:93: 30:65:64:43:26:0e:87:4b:26:c1:b6:ba:41:32:2f: cc:bf:6a:09:a6:0d:22:76:5e:30:1e:b8:af:8d:09: 52:1f:d6:4b:0a:32:70:8a:11:a0:0d:21:50:1e:0b: 39:20:50:4b:4f:20:c5:39:be:ec:cd:9b:1d:6d:d9: fe:0f:96:1c:8c:e9:86:55:1a:29:5f:a0:e9:79:74: 45:1e:28:61:b9:40:2d:52:7e:fe:46:e9:a0:a3:5f: 3b:a6:33:92:1d:1b:4d:97:cf:9f:33:d9:47:87:f2: da:4f:63:98:da:54:16:5c:94:3a:d7:74:f5:b4:50: 1d:4e:ca:f0:e8:8e:cb:62:70:75:1b:b4:56:d1:43: 3b:70:31:df:cf:c4:9a:07:78:76:e2:86:37:20:7b: 20:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:AE:07:28:0A:D5:3C:30:37:4C:DC:75:F9:3D:20:DF:C7:55:67:C3 X509v3 Authority Key Identifier: keyid:FA:7D:8F:1E:1C:10:5F:F7:ED:AF:03:DD:81:98:24:34:17:A5:FA:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:90:25:38:c9:a1:d9:1b:d5:77:2d:7d:36:26:c8:5d:27:00: c7:db:27:93:74:0d:19:7d:e7:51:f3:8e:49:58:4a:07:57:24: 14:08:bc:0f:4c:10:fa:bf:be:d6:4b:73:c7:0f:a8:02:b2:d9: 33:b7:c9:61:9f:bb:8c:38:aa:a6:9a:34:0a:5e:ef:2f:fd:61: c6:45:5c:bc:f1:31:c5:0e:f3:32:d2:55:91:da:c5:66:18:bf: a1:8f:4d:70:c7:0c:ff:36:eb:66:88:b0:c1:29:8e:49:3a:3e: 0d:2b:3e:d7:9d:7d:b2:96:ac:9f:09:ac:e6:f5:1b:ac:b5:c5: 6d:a6:22:b4:7c:d3:b6:2b:73:ab:cf:79:25:fc:41:c8:18:ce: f6:98:f3:07:cb:81:75:24:61:f2:8c:ff:1c:26:9c:3c:c2:dc: 7c:f4:0c:d2:70:23:03:a8:2e:fc:eb:4d:65:02:4e:06:e3:81: 34:fe:78:e4:6f:ee:1d:43:8b:b8:b1:3c:ff:bd:92:88:f8:43: 12:e9:2b:0a:d4:31:69:93:5b:31:34:86:75:2f:05:41:50:17: 93:1d:b1:87:52:fb:4c:ea:5d:69:a8:de:b1:1c:68:0b:86:8b: a4:60:1f:89:a6:d6:84:e5:4b:b2:af:b1:83:0d:36:5a:4f:bc: 11:93:a7:12 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUGEAYI5bK0j4nq7JybfqoV/urqA4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE3RDhGMUUxQzEwNUZGN0VEQUYwM0REODE5ODI0MzQx N0E1RkFDMzAeFw0yNTEyMDYwODE4MzNaFw0yNTEyMDcwOTIxMzNaMDMxMTAvBgNV BAMTKEZEQUUwNzI4MEFENTNDMzAzNzRDREM3NUY5M0QyMERGQzc1NTY3QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB96tO4dXBVAmjGm6P4IykidSC Ad7+U2iah0i9fSOzp8daooUYCkjjuO6/Z95jRTs8nUA3iDhniH9W/C4/8knseK0K dlQm+kPbQRtoQMHbcPuHebgMvDLj/IWHH2MyZVdL448dDkI7kzBlZEMmDodLJsG2 ukEyL8y/agmmDSJ2XjAeuK+NCVIf1ksKMnCKEaANIVAeCzkgUEtPIMU5vuzNmx1t 2f4PlhyM6YZVGilfoOl5dEUeKGG5QC1Sfv5G6aCjXzumM5IdG02Xz58z2UeH8tpP Y5jaVBZclDrXdPW0UB1OyvDojsticHUbtFbRQztwMd/PxJoHeHbihjcgeyBFAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU/a4HKArVPDA3TNx1+T0g38dVZ8MwHwYDVR0j BBgwFoAU+n2PHhwQX/ftrwPdgZgkNBel+sMwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzY3ZTFmMjgyM2IwYjQ4MmVhZTE5YTc3NWI5ZjgxOGZjLzAv RkE3RDhGMUUxQzEwNUZGN0VEQUYwM0REODE5ODI0MzQxN0E1RkFDMy5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9GQTdEOEYxRTFDMTA1RkY3RURBRjAzREQ4MTk4MjQz NDE3QTVGQUMzLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzY3ZTFm MjgyM2IwYjQ4MmVhZTE5YTc3NWI5ZjgxOGZjLzAvRkE3RDhGMUUxQzEwNUZGN0VE QUYwM0REODE5ODI0MzQxN0E1RkFDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAH6QJTjJodkb1XctfTYm yF0nAMfbJ5N0DRl951HzjklYSgdXJBQIvA9MEPq/vtZLc8cPqAKy2TO3yWGfu4w4 qqaaNApe7y/9YcZFXLzxMcUO8zLSVZHaxWYYv6GPTXDHDP8262aIsMEpjkk6Pg0r PtedfbKWrJ8JrOb1G6y1xW2mIrR807Yrc6vPeSX8QcgYzvaY8wfLgXUkYfKM/xwm nDzC3Hz0DNJwIwOoLvzrTWUCTgbjgTT+eORv7h1Di7ixPP+9koj4QxLpKwrUMWmT WzE0hnUvBUFQF5MdsYdS+0zqXWmo3rEcaAuGi6RgH4mm1oTlS7KvsYMNNlpPvBGT pxI= -----END CERTIFICATE-----Generated at Sat Dec 6 17:06:07 2025 by rpki-client