This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft File: 09F041F60B21B649820D0FEE0D7654D63DDD080D.mft (raw, json) Hash identifier: xRoJxMaFkmxAIXSUiq4KNyo0lwKLeGA/eMtkHtu4TLs= Subject key identifier: D7:56:21:E8:A3:62:D3:8D:95:40:3B:15:C0:7E:4D:2E:05:A8:34:88 Authority key identifier: 09:F0:41:F6:0B:21:B6:49:82:0D:0F:EE:0D:76:54:D6:3D:DD:08:0D Certificate issuer: /CN=09F041F60B21B649820D0FEE0D7654D63DDD080D Certificate serial: 49C2FBA7FB077E96D34F41687E93E0A977CB6DD8 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/09F041F60B21B649820D0FEE0D7654D63DDD080D.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft Manifest number: 0175 Signing time: Mon 15 Dec 2025 09:20:12 +0000 Manifest this update: Mon 15 Dec 2025 09:15:12 +0000 Manifest next update: Tue 16 Dec 2025 10:17:12 +0000 Files and hashes: 1: 09F041F60B21B649820D0FEE0D7654D63DDD080D.crl (hash: KfOtsHxd6fy7Qpx4vjtUZXPA/9s0Tuj+h+cZOlh95O4=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/09F041F60B21B649820D0FEE0D7654D63DDD080D.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 00:38:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:c2:fb:a7:fb:07:7e:96:d3:4f:41:68:7e:93:e0:a9:77:cb:6d:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09F041F60B21B649820D0FEE0D7654D63DDD080D Validity Not Before: Dec 15 09:15:12 2025 GMT Not After : Dec 16 10:17:12 2025 GMT Subject: CN=D75621E8A362D38D95403B15C07E4D2E05A83488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:91:ae:73:cd:26:0c:dd:6d:66:5c:4b:2b:7e: 4a:1d:56:26:a9:34:43:45:52:ab:e0:c3:2f:95:91: 01:1f:6a:e5:c5:77:6f:32:e8:c5:d4:72:ac:a9:2e: ea:ff:8a:7d:22:ac:7f:ac:98:3c:35:5a:4e:57:dd: ad:cd:68:58:87:f6:c4:5b:6d:b5:3b:ce:a1:4e:4c: ce:0e:80:be:f4:06:83:3a:53:46:84:3e:35:01:ef: 4e:29:93:69:ad:9b:11:a2:80:e1:9e:86:ec:1f:12: 75:c6:17:af:69:9f:11:0e:3a:cd:f1:88:c8:3b:0f: ac:a4:76:a0:8f:cf:ab:8d:86:1d:82:52:27:77:0a: 56:bd:10:31:5e:60:46:64:02:77:21:db:d5:57:d8: 5f:f0:72:7f:a6:97:6b:9c:0f:a6:a1:e9:65:50:01: 4c:2e:33:cc:6b:16:6e:24:61:3e:db:e3:4a:90:34: 7e:68:6a:fa:a7:dd:ce:80:8c:23:90:9d:61:16:fa: ea:b2:53:16:ba:7c:3c:cd:97:b7:74:6c:ff:5b:85: 03:88:67:2c:c7:e9:e0:16:8e:fb:00:77:1c:bd:5b: ea:25:52:49:69:33:a9:4b:14:b4:79:4d:51:c9:35: 12:9e:75:8f:ca:10:3d:eb:cd:64:c4:8d:d3:ec:b5: 30:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:56:21:E8:A3:62:D3:8D:95:40:3B:15:C0:7E:4D:2E:05:A8:34:88 X509v3 Authority Key Identifier: keyid:09:F0:41:F6:0B:21:B6:49:82:0D:0F:EE:0D:76:54:D6:3D:DD:08:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/09F041F60B21B649820D0FEE0D7654D63DDD080D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:28:17:29:6f:d3:65:b7:0c:1a:14:4d:e1:26:ab:d4:94:d6: 9d:31:53:e8:e9:5d:15:3e:81:05:8a:6d:f2:59:fa:d8:6a:ea: 86:6c:0f:c6:85:39:f1:6d:7f:9d:a4:ff:53:6b:71:7d:9c:ca: b3:97:b7:c8:63:de:7f:5c:31:8b:ad:b5:12:35:18:6b:59:0c: ee:14:95:cb:48:9c:30:6a:60:5f:38:2a:d5:42:92:78:fd:47: 41:06:ef:43:b6:d6:7e:32:94:af:72:4d:7a:fd:19:6f:cf:d5: 95:4b:74:70:cd:71:9b:46:5a:22:01:62:f5:fe:c2:53:2e:f7: 80:63:44:8a:3a:e8:54:5a:e7:c9:c5:e8:96:8e:06:6b:9c:d7: fb:d2:15:48:e6:0f:c5:e1:80:ca:07:fa:5b:56:0c:97:54:0e: 37:93:47:b0:cb:16:48:09:ed:0b:38:1b:b9:18:1e:0b:94:0e: 0f:aa:8d:0b:e1:1b:44:63:e5:8e:e1:21:b1:46:44:5a:a9:81: ff:62:6e:f5:77:a5:06:16:8d:5d:ea:b7:30:3d:7a:be:03:01: c5:5b:7c:8d:ee:b2:52:80:e5:c8:7d:07:49:3a:56:cb:fc:bd: c2:e9:46:45:9a:dd:bb:86:14:a7:d6:50:80:90:0b:91:1d:18: 4f:b9:5b:87 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUScL7p/sHfpbTT0FofpPgqXfLbdgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlGMDQxRjYwQjIxQjY0OTgyMEQwRkVFMEQ3NjU0RDYz REREMDgwRDAeFw0yNTEyMTUwOTE1MTJaFw0yNTEyMTYxMDE3MTJaMDMxMTAvBgNV BAMTKEQ3NTYyMUU4QTM2MkQzOEQ5NTQwM0IxNUMwN0U0RDJFMDVBODM0ODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjka5zzSYM3W1mXEsrfkodViap NENFUqvgwy+VkQEfauXFd28y6MXUcqypLur/in0irH+smDw1Wk5X3a3NaFiH9sRb bbU7zqFOTM4OgL70BoM6U0aEPjUB704pk2mtmxGigOGehuwfEnXGF69pnxEOOs3x iMg7D6ykdqCPz6uNhh2CUid3Cla9EDFeYEZkAnch29VX2F/wcn+ml2ucD6ah6WVQ AUwuM8xrFm4kYT7b40qQNH5oavqn3c6AjCOQnWEW+uqyUxa6fDzNl7d0bP9bhQOI ZyzH6eAWjvsAdxy9W+olUklpM6lLFLR5TVHJNRKedY/KED3rzWTEjdPstTAzAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU11Yh6KNi042VQDsVwH5NLgWoNIgwHwYDVR0j BBgwFoAUCfBB9gshtkmCDQ/uDXZU1j3dCA0wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzg0OTFkYjgzY2RhNDRjNjFiMDk0MGQwZTNiMGY5ZjZhLzAv MDlGMDQxRjYwQjIxQjY0OTgyMEQwRkVFMEQ3NjU0RDYzREREMDgwRC5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8wOUYwNDFGNjBCMjFCNjQ5ODIwRDBGRUUwRDc2NTRE NjNEREQwODBELmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzg0OTFk YjgzY2RhNDRjNjFiMDk0MGQwZTNiMGY5ZjZhLzAvMDlGMDQxRjYwQjIxQjY0OTgy MEQwRkVFMEQ3NjU0RDYzREREMDgwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAFwoFylv02W3DBoUTeEm q9SU1p0xU+jpXRU+gQWKbfJZ+thq6oZsD8aFOfFtf52k/1NrcX2cyrOXt8hj3n9c MYuttRI1GGtZDO4UlctInDBqYF84KtVCknj9R0EG70O21n4ylK9yTXr9GW/P1ZVL dHDNcZtGWiIBYvX+wlMu94BjRIo66FRa58nF6JaOBmuc1/vSFUjmD8XhgMoH+ltW DJdUDjeTR7DLFkgJ7Qs4G7kYHguUDg+qjQvhG0Rj5Y7hIbFGRFqpgf9ibvV3pQYW jV3qtzA9er4DAcVbfI3uslKA5ch9B0k6Vsv8vcLpRkWa3buGFKfWUICQC5EdGE+5 W4c= -----END CERTIFICATE-----Generated at Mon Dec 15 17:07:32 2025 by rpki-client