This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft
File: FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft (raw, json)
Hash identifier: ifAs2AM7R03ohflqloEEJWocEOqS/t7hQhjWNWrtFK4=
Subject key identifier: 78:C0:42:5E:CE:D7:62:C6:C4:6F:EB:A9:32:E2:D8:D2:95:98:80:AF
Authority key identifier: FA:7D:8F:1E:1C:10:5F:F7:ED:AF:03:DD:81:98:24:34:17:A5:FA:C3
Certificate issuer: /CN=FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3
Certificate serial: 2648BE02B5FB82C15861294F19B003B08A7488FE
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft
Manifest number: 02BF
Signing time: Fri 09 Jan 2026 00:55:07 +0000
Manifest this update: Fri 09 Jan 2026 00:50:07 +0000
Manifest next update: Sat 10 Jan 2026 01:14:07 +0000
Files and hashes: 1: FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.crl (hash: wiosRLniQ1YYq7i/nFYYuiMdTBLX5HHtrOni4ZXK78Q=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:48:be:02:b5:fb:82:c1:58:61:29:4f:19:b0:03:b0:8a:74:88:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3
Validity
Not Before: Jan 9 00:50:07 2026 GMT
Not After : Jan 10 01:14:07 2026 GMT
Subject: CN=78C0425ECED762C6C46FEBA932E2D8D2959880AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3f:b3:84:30:24:c7:e8:a5:a1:25:a6:08:a5:
fa:72:b0:ff:5d:cd:7f:2e:ba:89:3b:b1:ed:cd:1b:
a2:15:4a:3b:78:69:8b:41:d1:39:f2:1e:61:06:57:
0b:0a:3c:18:dd:db:9f:6e:a3:16:c2:68:de:e0:e0:
b2:0d:c5:af:23:3f:0d:fb:e5:17:62:0d:e7:27:0b:
0e:d4:51:44:ab:a3:1c:34:3b:b3:54:fa:f7:6b:92:
e7:6e:db:33:ae:48:2e:03:21:77:60:e4:3d:33:f7:
ba:cd:71:69:23:5b:cf:c6:58:3d:ef:2c:78:15:0f:
9a:c1:37:72:f2:ec:3f:e2:b8:d2:88:4d:bc:5f:a5:
fd:b7:4c:fb:a7:c1:dc:13:47:c4:b0:be:b6:a8:fd:
f5:b1:d5:99:de:cf:32:30:17:03:bc:db:54:f4:56:
f4:9d:be:54:ba:83:6b:62:48:ed:10:aa:42:5a:98:
8a:80:85:c3:bc:e3:c7:88:e2:19:14:11:c9:ed:a8:
87:83:29:9b:fc:4c:1f:87:45:a8:16:95:4b:dc:9a:
e2:d7:44:8d:ba:b0:46:04:63:49:65:19:68:cf:8c:
1c:94:be:9b:7b:2e:1e:d3:46:57:40:b3:ed:3c:72:
b7:de:69:6a:84:1b:e5:ea:82:70:8f:31:7e:ca:a0:
99:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C0:42:5E:CE:D7:62:C6:C4:6F:EB:A9:32:E2:D8:D2:95:98:80:AF
X509v3 Authority Key Identifier:
keyid:FA:7D:8F:1E:1C:10:5F:F7:ED:AF:03:DD:81:98:24:34:17:A5:FA:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:e9:f5:50:97:cd:26:69:e3:d5:af:fc:16:0e:73:ba:3a:73:
8c:c4:da:2a:dc:ba:0a:40:ef:02:d1:8b:75:bf:71:ee:53:65:
fb:5f:b0:f4:f5:17:aa:39:f5:9e:68:8b:08:8a:6d:64:aa:6f:
3d:a1:07:c3:8a:45:13:0a:7e:c5:6e:14:88:77:68:f0:0b:84:
7a:3a:4e:54:d8:23:ef:ec:c2:44:be:88:77:fb:3b:c8:32:99:
a5:5b:34:b2:47:1a:81:cc:3b:8c:16:b4:5a:5a:7f:4e:b2:34:
3c:fc:c0:ad:3b:2a:4e:ab:d4:9a:f4:35:cd:a8:67:95:26:9e:
06:9d:70:2d:d3:a2:04:41:ad:e8:58:b7:7e:99:12:9b:f3:5a:
dc:81:cb:0b:0f:c0:26:1f:08:46:63:12:f6:b1:22:8c:7f:16:
ba:89:19:f9:8a:54:10:2e:56:04:ef:80:95:3e:a3:ae:a3:75:
99:52:c9:a0:0f:0b:bf:65:80:2a:93:b2:e8:48:9e:c7:ea:a0:
7c:80:d0:d5:ef:40:2e:09:87:93:b5:da:49:4f:48:a5:91:ca:
c5:03:94:30:ff:a8:f1:f7:11:4d:4f:c6:2a:64:bf:b9:84:9e:
bd:24:5a:f8:a7:5e:35:92:4d:9c:c2:d5:d2:2c:4d:33:92:c3:
ba:1c:2d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:27:59 2026 by rpki-client